last executing test programs: 16m49.064395822s ago: executing program 1 (id=2876): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f000001a900)={0x0, 0x0, &(0x7f000001a940)}, &(0x7f000001a980)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f000001a9c0)={0x1000, 0x0, 0xfffffff9, 0x81, r1}, 0x10) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) open(&(0x7f0000019180)='./file0\x00', 0x181c42, 0x81) 16m47.876839545s ago: executing program 1 (id=2879): r0 = syz_open_dev$dri(&(0x7f00000004c0), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000500)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000600), 0x94700, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x6, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000280)=[0x0, 0x0], 0x2, r3}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000480)={r1, r3, 0x0, 0x14db, 0x1, 0x5, 0x3, 0x7, 0x8, 0xfffffff8, 0x4, 0x5}) 16m47.329862229s ago: executing program 1 (id=2880): openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x200, 0x8}, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80), 0x400000000000041, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002c80), 0x40000, 0x0) readv(r0, &(0x7f0000002cc0)=[{&(0x7f0000002d00)=""/87, 0x57}], 0x1) sched_setaffinity(0x0, 0x0, 0x0) socket(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000003f00)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000004000)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) (fail_nth: 2) 16m44.450904489s ago: executing program 1 (id=2887): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f00000002c0)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x103042, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000240)={0x3, 0x9, 0x7ff, 0x4, 0x7f, "3f8606007198d7898ddf1425dc624dd84d9929", 0xad5a, 0x1}) write(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000600)={0xfc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16m43.856610131s ago: executing program 1 (id=2891): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setns(0xc9, 0x0) r3 = socket(0x8, 0x5, 0x5) ioctl$sock_SIOCOUTQNSD(r3, 0x40106183, &(0x7f0000000140)) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r1, 0x10, 0xd9, &(0x7f00000010c0)=""/217) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc0145b0e, &(0x7f0000000400)={0x100000, 0x1, 0xffffff7f, 0x0, 0x10000003, 0xfffffffd}) syz_usb_control_io$lan78xx(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x8, 0x61, {0x61, 0x7, "737d44edca4ee82178c028065ef0b2921349737f86a254ee571d3fbf2eabcb8de2a748d1dc36b102a86ed3b5f7828fc4343258491b9a005e970661ee8fe943ca15b0fc509ebcdda5de113f81f3a592366b34ff91465ffd32320d996e133cf4"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000d80)={0x20, 0x15, 0x6c, "d9c5c3eca3b231ed34f575f51814f091e91d9dd7be26f9fd594642ce186391a9c0f58fc174c0bab70ff1fb3b3b480f176ac445a372d094a758a6246e01ea4febc919c48c95183877e3fcee51ef8ff66300f3ce51cf9ee7c263522a863055b045eb21ed7faacb654f5f1a901c"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0x56}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000300)={0xc0, 0xa2, 0x2f, "04b33da848ec88f733b0904f10d906b5f63a94365380508477e270b92450acecce48a1082466736df4566d0215f0a9"}}) 16m43.524636545s ago: executing program 1 (id=2894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffdfffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007b00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x2000012, 0xe, 0x40, &(0x7f0000000640)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb}, 0x3e) 16m43.108895221s ago: executing program 32 (id=2894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffdfffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007b00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x2000012, 0xe, 0x40, &(0x7f0000000640)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb}, 0x3e) 9m32.350011062s ago: executing program 2 (id=3897): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() syz_emit_ethernet(0x2a, &(0x7f0000000bc0)=ANY=[@ANYBLOB="ffffffffffa8aaaaaaaaaaaa08060001080006040001aaaaaaaaaaaaffffffff0180c20000005f000001"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000c40)={0x14}, 0x14) capset(0x0, &(0x7f00000003c0)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}}, 0x14}, 0x1, 0x1000000, 0x0, 0xc000}, 0x4000000) fgetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='security.selinux\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x400000, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="05000000c30400000010000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100000000000000000016f2d5bea2784d005b17"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x408c1) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x6, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) 9m27.485548101s ago: executing program 2 (id=3913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000cc000000ce000000070000000800000003000085030000000f00000000000000030000001000000004000000504400000d000000040000000000000003000000000000070000000006000000000000070000000007000000060000050400000010000000020000000a0000000f0000000000000001800000070000000300000000ffffff0600000004000000070000000e00000000000000560600000a00000004000000000800000300000000000012030000000a00000002000085050000000b00000001000000010000000f0000000500000006000000002e0000615f00"], &(0x7f0000001f00)=""/154, 0xeb, 0x9a, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000001d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000001dc0), 0x8, 0x10, &(0x7f0000001e00), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r2, 0x702, 0x64, 0x0, &(0x7f0000001ec0)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x60800, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x4, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x8, 0x10, &(0x7f0000000580), 0x10}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r6 = mq_open(&(0x7f0000002080)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) mq_timedsend(r6, 0x0, 0xfffffffffffffefd, 0x7, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r5, &(0x7f0000000680), &(0x7f00000006c0)=@tcp6=r0}, 0x20) recvfrom(r0, &(0x7f0000000700)=""/4080, 0xff0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_REUSE_PORT(r3, 0x84, 0x24, &(0x7f0000000680), &(0x7f0000002000)=0x4) 9m26.264002986s ago: executing program 2 (id=3915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="bdb3277c943c1a34328903866bc45e7a0774fa5ecfb3dc57fc5e", 0x1a, 0x4000884, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x5000, 0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x2, 0x25000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x60042, 0x1) r5 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f0000000800)='//+9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) close(r4) r6 = socket(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) write$cgroup_pid(r4, 0x0, 0x0) 9m24.235269205s ago: executing program 2 (id=3918): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="d8000000120081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 9m24.100074737s ago: executing program 2 (id=3920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0900000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000824df71402008048b91b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/acpi/devices/PNP0C0F:00/uid\x00', 0x0, 0x0) read(r1, &(0x7f0000000440)=""/266, 0x10a) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82c03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) write(r2, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000000cc0)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000019cc0)={r4}, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000019d00)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000019d40)="d7") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000019d80)={0x0, 0x0, &(0x7f0000019dc0)={&(0x7f0000019e00)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x100, 0x0, 0x2, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000003, 0x800000001}, {0x0, 0x2, 0x6, 0x8000}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x0, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x9011}, 0x890) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0xb, &(0x7f00000003c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m23.541283687s ago: executing program 2 (id=3922): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xd7c6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x79}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004d40)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001dd40)={0x0, 0xffffffffffffffd0, 0x0, 0x1, 0x0, 0x0, 0x44820}, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f000001de00)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x101, 0x24440) 9m7.355505632s ago: executing program 33 (id=3922): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xd7c6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x79}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004d40)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001dd40)={0x0, 0xffffffffffffffd0, 0x0, 0x1, 0x0, 0x0, 0x44820}, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f000001de00)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x101, 0x24440) 16.640507747s ago: executing program 3 (id=5441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46220000"], 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 16.004980695s ago: executing program 0 (id=5442): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000100)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000240)='n', 0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000020000000000000000005d8cad4070f4b79d2c9212348eab40d5ea0db45c4eb5e1db4fffe04583d92c7ca2371a2a61439f74145e4ca35dc275e6dfe66f3cd8b56d3e7a09207fc9462cde5e226357d7fb5605c19babe8a90d659d0b89e6f690db6344d310c5c225d46b5f88ee6dd67c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000072000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r5}, 0xc) write$binfmt_script(r3, &(0x7f0000000580), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv(r3, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x35, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x10122, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000400)={0x9d0000, 0x1, 0xfffffffd, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x98f90d, 0x60, '\x00', @p_u32=&(0x7f0000000480)=0x8}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x62181) 12.742673564s ago: executing program 6 (id=5450): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r1 = socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "add3f79e21516beba73438d5168a0754f6d0f6d1c7f04adc89c6223990973fbda59e477a600aca0c108601d8a16244ebf3d311d99db244b2f973dc671ac920f5", 0x21}, 0x48, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019380)=0x7) statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000193c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000019400)={0x0, 0x0, &(0x7f0000019440)={&(0x7f0000019480)={0x30, r6, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000033, r0, 0x0) pipe(&(0x7f00000194c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a0001) write(r7, &(0x7f0000019540), 0x11000) r8 = fsopen(&(0x7f0000000340)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close(r8) 11.702991809s ago: executing program 6 (id=5451): openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000a00)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0x3440b, 0x26}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="ad6430ec5c73a6e584597bc7ebab03df", 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000070000a464357177330772"], 0x48}, 0x1, 0x0, 0x0, 0x200440c3}, 0x0) inotify_init() openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c3040, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x1c1341, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newtfilter={0x94, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r2, {0xc, 0x1}, {0x0, 0x9}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x58, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x10}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xe}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x4}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 11.434577805s ago: executing program 3 (id=5452): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='configfs\x00', 0x802008, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) getpid() read$msr(r1, &(0x7f0000000800)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000019800), 0x42, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) memfd_create(&(0x7f0000019880)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 10.256845741s ago: executing program 5 (id=5455): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4c840) socket$packet(0x11, 0x3, 0x300) syz_usb_control_io(r0, &(0x7f00000018c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x78, 0x7f, "fcc42d63", "3cf8d6fe"}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x60, 0x50, 0x9, 0x4, 0x8, 0x10}}}, &(0x7f0000001300)={0x84, &(0x7f0000000e80)={0x0, 0xa, 0xaf, "3b46e0895097cf7b9dcbdcf5d71f25235fa4f4f781e4d4c3cc87a592f31057b62a0950b199d3116f141eb90f2236c1fe86f535c578acc095aae348a9478aa80da8f54f3d8abba8d749c3ad1ac976cc5c9e52c0132e07df83c46f099df49d40abc235c16a3f47dfc67ff13b22ae117c6ea6dd020629baf11786e44fed533744aa2abdd10d22a7f867350355b9886e8ee4c8e37697f120dcf2c7a1838f2a37b7a492439db9ff6868756a28faf7bc0314"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001000)={0x20, 0x0, 0x8, {0x160, 0x2, [0x0]}}, &(0x7f0000001040)={0x40, 0x7, 0x2}, &(0x7f0000001080)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0xb, 0x2, "e811"}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0x2258}, &(0x7f0000001140)={0x40, 0x13, 0x6, @random="12e20c527d84"}, &(0x7f0000001180)={0x40, 0x17, 0x6}, &(0x7f00000011c0)={0x40, 0x19, 0x2, 'c3'}, &(0x7f0000001200)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001240)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001280)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000012c0)={0x40, 0x21, 0x1, 0x3}}) 9.881430643s ago: executing program 3 (id=5456): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt(r0, 0x0, 0x489, &(0x7f0000000040)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x87) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f00000200000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x70, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002"}}]}]}, 0x70}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$packet(0x11, 0x2, 0x300) 9.348322133s ago: executing program 0 (id=5457): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r1 = socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "add3f79e21516beba73438d5168a0754f6d0f6d1c7f04adc89c6223990973fbda59e477a600aca0c108601d8a16244ebf3d311d99db244b2f973dc671ac920f5", 0x21}, 0x48, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019380)=0x7) statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000193c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000019400)={0x0, 0x0, &(0x7f0000019440)={&(0x7f0000019480)={0x30, r6, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000033, r0, 0x0) pipe(&(0x7f00000194c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a0001) write(r7, &(0x7f0000019540), 0x11000) r8 = fsopen(&(0x7f0000000340)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close(r8) 8.287917411s ago: executing program 0 (id=5458): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r0 = socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019380)=0x7) statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000193c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000019400)={0x0, 0x0, &(0x7f0000019440)={&(0x7f0000019480)={0x30, r4, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) 8.198309505s ago: executing program 6 (id=5459): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0) 7.22327326s ago: executing program 6 (id=5460): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40200) semop(0x0, &(0x7f00000000c0)=[{0x1, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000180)=[{0x2, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)=[0x6, 0x7fff]) unshare(0x40400) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) 6.916511998s ago: executing program 5 (id=5462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46220000"], 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 6.129974136s ago: executing program 4 (id=5464): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x60042, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000d00)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f35383a310890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) r2 = socket(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$cgroup_pid(r0, 0x0, 0x0) 5.97026543s ago: executing program 4 (id=5465): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x9, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x1f, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 5.860535131s ago: executing program 3 (id=5466): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='configfs\x00', 0x802008, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) getpid() read$msr(r1, &(0x7f0000000800)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000019800), 0x42, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) memfd_create(&(0x7f0000019880)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.726674241s ago: executing program 3 (id=5467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x44050) 4.673521305s ago: executing program 5 (id=5468): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDSKBLED(r1, 0x4b65, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rxrpc/locals\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000780)={0x2020}, 0x2020) r6 = syz_open_dev$dvb_dvr(&(0x7f00000027c0), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r6, 0x6f2d, 0x1d6000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000002800)=""/4096, 0x1000) 4.535860058s ago: executing program 4 (id=5469): openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000a00)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0x3440b, 0x26}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="ad6430ec5c73a6e584597bc7ebab03df", 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000070000a464357177330772"], 0x48}, 0x1, 0x0, 0x0, 0x200440c3}, 0x0) inotify_init() openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c3040, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x1c1341, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newtfilter={0x94, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r2, {0xc, 0x1}, {0x0, 0x9}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x58, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x10}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xe}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x4}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 4.000574679s ago: executing program 4 (id=5470): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt(r0, 0x0, 0x489, &(0x7f0000000040), 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) r5 = socket$inet6(0xa, 0x3, 0x87) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f00000200000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x70, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002"}}]}]}, 0x70}}, 0x0) 2.819939738s ago: executing program 4 (id=5471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c00078008000640f6ffff00050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000000c0)='pvfs2\x00', 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) listns(&(0x7f0000000c80)={0x20, 0x0, 0x1, 0x10000000}, &(0x7f00000001c0)=[0x0], 0x1, 0x0) ioctl(r2, 0x400452c8, &(0x7f0000000280)="000000000000000000000000000000000000000001") openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/rfcomm0\x00', 0x802, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_create_resource$futex(&(0x7f0000000480)=0x2) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) futex$unlock_pi_list32(r5, 0x687, 0x7, &(0x7f0000000580)={r6, r7+10000000}, &(0x7f00000005c0)=0x722, 0x3ff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x9, 0x250, 0xb, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0x80], 'macvlan0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x80, 0x1, 0x51}, 0x6000000, 0x208, 0x250, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x5, 0x8], 0x6, 0x17, 0x5, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xb3, 0x9, 0x9, 'snmp\x00', {0x2}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0xc, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000c40)=[0xffffffffffffffff], 0x1) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x128}, 0x20000800) recvmsg$unix(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000e80)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000ec0)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e25, 0xb3, @mcast2, 0x2}, 0x1c) 2.720199317s ago: executing program 3 (id=5472): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4c840) socket$packet(0x11, 0x3, 0x300) syz_usb_control_io(r0, &(0x7f00000018c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x78, 0x7f, "fcc42d63", "3cf8d6fe"}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x60, 0x50, 0x9, 0x4, 0x8, 0x10}}}, &(0x7f0000001300)={0x84, &(0x7f0000000e80)={0x0, 0xa, 0xaf, "3b46e0895097cf7b9dcbdcf5d71f25235fa4f4f781e4d4c3cc87a592f31057b62a0950b199d3116f141eb90f2236c1fe86f535c578acc095aae348a9478aa80da8f54f3d8abba8d749c3ad1ac976cc5c9e52c0132e07df83c46f099df49d40abc235c16a3f47dfc67ff13b22ae117c6ea6dd020629baf11786e44fed533744aa2abdd10d22a7f867350355b9886e8ee4c8e37697f120dcf2c7a1838f2a37b7a492439db9ff6868756a28faf7bc0314"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001000)={0x20, 0x0, 0x8, {0x160, 0x2, [0x0]}}, &(0x7f0000001040)={0x40, 0x7, 0x2}, &(0x7f0000001080)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0xb, 0x2, "e811"}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0x2258}, &(0x7f0000001140)={0x40, 0x13, 0x6, @random="12e20c527d84"}, &(0x7f0000001180)={0x40, 0x17, 0x6}, &(0x7f00000011c0)={0x40, 0x19, 0x2, 'c3'}, &(0x7f0000001200)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001240)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001280)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000012c0)={0x40, 0x21, 0x1, 0x3}}) 2.565427386s ago: executing program 6 (id=5473): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rxrpc/locals\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000780)={0x2020}, 0x2020) r5 = syz_open_dev$dvb_dvr(&(0x7f00000027c0), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0x1d6000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000002800)=""/4096, 0x1000) 2.553163842s ago: executing program 0 (id=5474): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x100, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010103, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@private=0xa010102, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0xa58, 0x0, 0x200000000}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@sa_dir={0x5, 0x21, 0x2}, @iptfs_drop_time={0x8, 0x24, 0x5}]}, 0x100}}, 0x200080d4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x161) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000600)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000640)=0xc) pwritev(r1, &(0x7f0000000680)=[{&(0x7f00000006c0)}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="00214500072800000000400600000a0000010a000082005000500000000100000001501003e800000006", 0x2a}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x7, 0x0, 0x0, @loopback, @empty, 0x0, 0x80, 0x0, 0x3}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r4, &(0x7f0000000780)={0x9c, 0x29, 0x2, {0x8, [{{0x1, 0x3, 0x5}, 0x4, 0x5, 0x8, './config'}, {{0x90, 0x1, 0x3}, 0x7fffffffffffffff, 0x0, 0x1b, './config/nullb/nullb1/power'}, {{0x80, 0x4, 0x4}, 0xdff8c08000000000, 0x5d, 0x6, './proc'}, {{0x2, 0x1}, 0x2, 0x10, 0x8, './config'}]}}, 0x9c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x2010, r2, 0xdabc1000) write(r5, &(0x7f0000000240)='1', 0x1) 2.420805844s ago: executing program 0 (id=5475): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rxrpc/locals\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000780)={0x2020}, 0x2020) r5 = syz_open_dev$dvb_dvr(&(0x7f00000027c0), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0x1d6000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000002800)=""/4096, 0x1000) 1.487348852s ago: executing program 5 (id=5476): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x60042, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000d00)={0xfc, {"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", 0x1000}}, 0x1006) r2 = socket(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$cgroup_pid(r0, 0x0, 0x0) 1.486402316s ago: executing program 6 (id=5477): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x208000) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000000c0)) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) 1.372025722s ago: executing program 4 (id=5478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46220000"], 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 1.295980932s ago: executing program 5 (id=5479): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r1 = socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "add3f79e21516beba73438d5168a0754f6d0f6d1c7f04adc89c6223990973fbda59e477a600aca0c108601d8a16244ebf3d311d99db244b2f973dc671ac920f5", 0x21}, 0x48, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019380)=0x7) statx(0xffffffffffffff9c, 0x0, 0x3fe, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000193c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000019400)={0x0, 0x0, &(0x7f0000019440)={&(0x7f0000019480)={0x30, r6, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000033, r0, 0x0) pipe(&(0x7f00000194c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000019500)={{0x0, 0x2, 0x3}}) write(r7, &(0x7f0000019540), 0x11000) r8 = fsopen(&(0x7f0000000340)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close(r8) 1.122874701s ago: executing program 0 (id=5480): syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x2, "42fce3753785050006be000000000000000000560000000000000800", 0xffffffffffffffff}) close(0x3) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r6 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000500)={'vcan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) r8 = io_uring_setup(0x1, &(0x7f0000000580)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r8, 0x20, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000680)={&(0x7f00000006c0), 0x1000}, &(0x7f0000000700)={&(0x7f0000000740), 0x1000, 0x1}}, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r9, 0x100000000) 0s ago: executing program 5 (id=5481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c00078008000640f6ffff00050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000000c0)='pvfs2\x00', 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) listns(&(0x7f0000000c80)={0x20, 0x0, 0x1, 0x10000000}, &(0x7f00000001c0)=[0x0], 0x1, 0x0) ioctl(r2, 0x400452c8, &(0x7f0000000280)="000000000000000000000000000000000000000001") openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/rfcomm0\x00', 0x802, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_create_resource$futex(&(0x7f0000000480)=0x2) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) futex$unlock_pi_list32(r5, 0x687, 0x7, &(0x7f0000000580)={r6, r7+10000000}, &(0x7f00000005c0)=0x722, 0x3ff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x9, 0x250, 0xb, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0x80], 'macvlan0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x80, 0x1, 0x51}, 0x6000000, 0x208, 0x250, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x5, 0x8], 0x6, 0x17, 0x5, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xb3, 0x9, 0x9, 'snmp\x00', {0x2}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0xc, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000c40)=[0xffffffffffffffff], 0x1) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x128}, 0x20000800) recvmsg$unix(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000e80)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000ec0)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e25, 0xb3, @mcast2, 0x2}, 0x1c) kernel console output (not intermixed with test programs): t_rt: `--rt-type 0' required before `--rt-0-*' [ 1785.300642][T23146] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1785.589284][T23146] usb 4-1: Using ep0 maxpacket: 32 [ 1785.846451][T23146] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1785.846911][ T30] audit: type=1400 audit(2000001495.594:2316): avc: denied { create } for pid=24559 comm="syz.4.4792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1785.846958][ T30] audit: type=1400 audit(2000001495.594:2317): avc: denied { ioctl } for pid=24559 comm="syz.4.4792" path="socket:[94096]" dev="sockfs" ino=94096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1785.925788][T23146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.925808][T23146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.925829][T23146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.943068][T23146] usb 4-1: config 0 descriptor?? [ 1786.398524][ T30] audit: type=1400 audit(2000001496.408:2318): avc: denied { ioctl } for pid=24564 comm="syz.4.4794" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=94899 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1787.449756][T23146] usbhid 4-1:0.0: can't add hid device: -71 [ 1787.450117][T23146] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1787.572353][T23146] usb 4-1: USB disconnect, device number 126 [ 1788.163936][ T30] audit: type=1400 audit(2000001498.055:2319): avc: denied { mount } for pid=24575 comm="syz.6.4786" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1788.189149][ T30] audit: type=1400 audit(2000001498.083:2320): avc: denied { search } for pid=24575 comm="syz.6.4786" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1788.189197][ T30] audit: type=1400 audit(2000001498.083:2321): avc: denied { search } for pid=24575 comm="syz.6.4786" name="target" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1788.189233][ T30] audit: type=1400 audit(2000001498.083:2322): avc: denied { write } for pid=24575 comm="syz.6.4786" name="dbroot" dev="configfs" ino=94913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1788.189283][ T30] audit: type=1400 audit(2000001498.083:2323): avc: denied { open } for pid=24575 comm="syz.6.4786" path="/142/my_configfs/target/dbroot" dev="configfs" ino=94913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1788.512273][ T30] audit: type=1400 audit(2000001498.373:2324): avc: denied { read } for pid=24577 comm="syz.0.4798" name="dvr0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1788.512434][ T30] audit: type=1400 audit(2000001498.373:2325): avc: denied { open } for pid=24577 comm="syz.0.4798" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1788.512504][ T30] audit: type=1400 audit(2000001498.383:2326): avc: denied { ioctl } for pid=24577 comm="syz.0.4798" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=927 ioctlcmd=0x6f2d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1788.795001][ T30] audit: type=1400 audit(2000001498.616:2327): avc: denied { read } for pid=24584 comm="syz.3.4797" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1788.795150][ T30] audit: type=1400 audit(2000001498.616:2328): avc: denied { open } for pid=24584 comm="syz.3.4797" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1789.836423][T17098] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1790.013707][T17098] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1790.019308][T17098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.019326][T17098] usb 4-1: Product: syz [ 1790.019335][T17098] usb 4-1: Manufacturer: syz [ 1790.019343][T17098] usb 4-1: SerialNumber: syz [ 1790.057985][T17098] usb 4-1: config 0 descriptor?? [ 1790.081262][T17098] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1790.102350][T17098] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1790.105027][T17098] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1790.105071][T17098] usb 4-1: media controller created [ 1790.145397][T17098] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1790.203120][T24595] FAULT_INJECTION: forcing a failure. [ 1790.203120][T24595] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.203151][T24595] CPU: 0 UID: 0 PID: 24595 Comm: syz.6.4801 Tainted: G L syzkaller #0 PREEMPT(full) [ 1790.203177][T24595] Tainted: [L]=SOFTLOCKUP [ 1790.203184][T24595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1790.203195][T24595] Call Trace: [ 1790.203201][T24595] [ 1790.203208][T24595] dump_stack_lvl+0x100/0x190 [ 1790.203241][T24595] should_fail_ex.cold+0x5/0xa [ 1790.203267][T24595] should_failslab+0xc2/0x120 [ 1790.203301][T24595] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1790.203325][T24595] ? __alloc_skb+0x5b7/0x710 [ 1790.203344][T24595] ? __alloc_skb+0x140/0x710 [ 1790.203366][T24595] __alloc_skb+0x140/0x710 [ 1790.203383][T24595] ? __alloc_skb+0x5b7/0x710 [ 1790.203401][T24595] ? __pfx___alloc_skb+0x10/0x10 [ 1790.203426][T24595] netlink_alloc_large_skb+0x69/0x150 [ 1790.203458][T24595] netlink_sendmsg+0x680/0xda0 [ 1790.203481][T24595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1790.203503][T24595] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1790.203533][T24595] ____sys_sendmsg+0xa4d/0xbe0 [ 1790.203555][T24595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1790.203576][T24595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1790.203607][T24595] ? lock_acquire+0x1d1/0x380 [ 1790.203627][T24595] ? get_pid_task+0x2a/0x250 [ 1790.203656][T24595] ___sys_sendmsg+0x190/0x1e0 [ 1790.203684][T24595] ? __pfx____sys_sendmsg+0x10/0x10 [ 1790.203708][T24595] ? get_pid_task+0x106/0x250 [ 1790.203744][T24595] ? find_held_lock+0x2b/0x80 [ 1790.203788][T24595] __sys_sendmsg+0x160/0x210 [ 1790.203808][T24595] ? __pfx___sys_sendmsg+0x10/0x10 [ 1790.203841][T24595] do_syscall_64+0x123/0x790 [ 1790.203871][T24595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.203890][T24595] RIP: 0033:0x7f17faf9e559 [ 1790.203906][T24595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.203924][T24595] RSP: 002b:00007f17fbdf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1790.203945][T24595] RAX: ffffffffffffffda RBX: 00007f17fb225fa0 RCX: 00007f17faf9e559 [ 1790.203958][T24595] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1790.203970][T24595] RBP: 00007f17fbdf0090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.203982][T24595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.203994][T24595] R13: 00007f17fb226038 R14: 00007f17fb225fa0 R15: 00007ffcf109c4d8 [ 1790.204022][T24595] [ 1790.463892][T17098] DVB: Unable to find symbol mt352_attach() [ 1790.580368][T17098] DVB: Unable to find symbol nxt6000_attach() [ 1790.580385][T17098] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1790.585147][T17098] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input55 [ 1790.621026][T17098] dvb-usb: schedule remote query interval to 1000 msecs. [ 1790.621046][T17098] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1790.621062][T17098] dvb-usb: bulk message failed: -22 (7/0) [ 1790.621076][T17098] dvb-usb: bulk message failed: -22 (7/0) [ 1791.757743][T21321] dvb-usb: bulk message failed: -22 (7/0) [ 1791.757768][T21321] dvb-usb: error while querying for an remote control event. [ 1793.525195][T17098] dvb-usb: bulk message failed: -22 (7/0) [ 1793.525214][T17098] dvb-usb: error while querying for an remote control event. [ 1793.541702][T17098] usb 4-1: USB disconnect, device number 127 [ 1793.705554][T17098] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1793.726792][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1793.726809][ T30] audit: type=1400 audit(2000001503.268:2337): avc: denied { execute } for pid=24623 comm="syz.6.4807" name="file2" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1793.733069][ T30] audit: type=1400 audit(2000001503.268:2338): avc: denied { execute_no_trans } for pid=24623 comm="syz.6.4807" path="/146/file2" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1793.752406][ T30] audit: type=1400 audit(2000001503.277:2339): avc: denied { create } for pid=24623 comm="syz.6.4807" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1793.756954][ T30] audit: type=1400 audit(2000001503.296:2340): avc: denied { unlink } for pid=24623 comm="syz.6.4807" name="file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1793.919415][ T30] audit: type=1400 audit(2000001503.446:2341): avc: denied { read } for pid=24623 comm="syz.6.4807" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1793.919463][ T30] audit: type=1400 audit(2000001503.446:2342): avc: denied { open } for pid=24623 comm="syz.6.4807" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1794.442732][ T30] audit: type=1400 audit(2000001503.932:2343): avc: denied { create } for pid=24623 comm="syz.6.4807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1794.470625][ T30] audit: type=1400 audit(2000001503.960:2344): avc: denied { ioctl } for pid=24623 comm="syz.6.4807" path="socket:[94997]" dev="sockfs" ino=94997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1795.213142][T24638] netlink: 'syz.3.4810': attribute type 21 has an invalid length. [ 1795.226097][ T30] audit: type=1400 audit(2000001504.662:2345): avc: denied { write } for pid=24636 comm="syz.3.4810" name="video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1795.252972][T24640] openvswitch: netlink: Missing key (keys=c0, expected=2000) [ 1795.294359][T24642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.294581][T24642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.595648][ T30] audit: type=1400 audit(2000001505.009:2346): avc: denied { write } for pid=24639 comm="syz.4.4811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1796.916613][T24658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.916822][T24658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.045016][T24662] FAULT_INJECTION: forcing a failure. [ 1797.045016][T24662] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.045053][T24662] CPU: 1 UID: 0 PID: 24662 Comm: syz.6.4819 Tainted: G L syzkaller #0 PREEMPT(full) [ 1797.045081][T24662] Tainted: [L]=SOFTLOCKUP [ 1797.045090][T24662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1797.045103][T24662] Call Trace: [ 1797.045110][T24662] [ 1797.045119][T24662] dump_stack_lvl+0x100/0x190 [ 1797.045153][T24662] should_fail_ex.cold+0x5/0xa [ 1797.045185][T24662] should_failslab+0xc2/0x120 [ 1797.045215][T24662] __kmalloc_cache_noprof+0x91/0x6d0 [ 1797.045241][T24662] ? proc_thread_self_get_link+0x1a6/0x210 [ 1797.045271][T24662] proc_thread_self_get_link+0x1a6/0x210 [ 1797.045296][T24662] pick_link+0xac2/0x13c0 [ 1797.045319][T24662] ? selinux_inode_permission+0x14a/0x1130 [ 1797.045344][T24662] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1797.045371][T24662] step_into_slowpath+0x9ba/0xf90 [ 1797.045403][T24662] ? __pfx_step_into_slowpath+0x10/0x10 [ 1797.045434][T24662] ? lookup_fast+0x2da/0x600 [ 1797.045456][T24662] ? inode_permission+0x374/0x620 [ 1797.045482][T24662] link_path_walk+0xf28/0x1cc0 [ 1797.045518][T24662] path_openat+0x1ac/0x2450 [ 1797.045552][T24662] ? __pfx_path_openat+0x10/0x10 [ 1797.045590][T24662] do_file_open+0x20e/0x430 [ 1797.045621][T24662] ? __pfx_do_file_open+0x10/0x10 [ 1797.045671][T24662] ? _raw_spin_unlock+0x28/0x50 [ 1797.045704][T24662] ? alloc_fd+0x471/0x7a0 [ 1797.045743][T24662] do_sys_openat2+0x10f/0x1e0 [ 1797.045763][T24662] ? __pfx_do_sys_openat2+0x10/0x10 [ 1797.045784][T24662] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1797.045825][T24662] __x64_sys_openat+0x12d/0x210 [ 1797.045847][T24662] ? __pfx___x64_sys_openat+0x10/0x10 [ 1797.045880][T24662] do_syscall_64+0x123/0x790 [ 1797.045914][T24662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.045935][T24662] RIP: 0033:0x7f17faf5ed8e [ 1797.045952][T24662] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1797.045975][T24662] RSP: 002b:00007f17fbdefec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1797.045996][T24662] RAX: ffffffffffffffda RBX: 00007f17fbdf06c0 RCX: 00007f17faf5ed8e [ 1797.046010][T24662] RDX: 0000000000000002 RSI: 00007f17fbdeff90 RDI: ffffffffffffff9c [ 1797.046023][T24662] RBP: 00007f17fb035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1797.046035][T24662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1797.046047][T24662] R13: 00007f17fb226038 R14: 00007f17fb225fa0 R15: 00007ffcf109c4d8 [ 1797.046076][T24662] [ 1797.584979][T24667] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1797.774988][T24672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1797.775000][T24672] IPv6: NLM_F_CREATE should be set when creating new route [ 1797.866053][T24678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.866314][T24678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.618078][T24685] ip_tables: iptables: counters copy to user failed while replacing table [ 1801.226706][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1801.226724][ T30] audit: type=1400 audit(2000001510.287:2353): avc: denied { write } for pid=24697 comm="syz.6.4830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1801.258557][ T30] audit: type=1400 audit(2000001510.297:2354): avc: denied { setopt } for pid=24697 comm="syz.6.4830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1801.440758][ T30] audit: type=1400 audit(2000001510.484:2355): avc: denied { bind } for pid=24702 comm="syz.3.4833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1801.440934][ T30] audit: type=1400 audit(2000001510.484:2356): avc: denied { name_bind } for pid=24702 comm="syz.3.4833" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1801.441902][ T30] audit: type=1400 audit(2000001510.484:2357): avc: denied { node_bind } for pid=24702 comm="syz.3.4833" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1802.470394][T24709] FAULT_INJECTION: forcing a failure. [ 1802.470394][T24709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1802.470466][T24709] CPU: 0 UID: 0 PID: 24709 Comm: syz.0.4832 Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.470494][T24709] Tainted: [L]=SOFTLOCKUP [ 1802.470502][T24709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1802.470513][T24709] Call Trace: [ 1802.470520][T24709] [ 1802.470529][T24709] dump_stack_lvl+0x100/0x190 [ 1802.470563][T24709] should_fail_ex.cold+0x5/0xa [ 1802.470591][T24709] _copy_from_user+0x2e/0xd0 [ 1802.470620][T24709] kstrtouint_from_user+0xd6/0x1d0 [ 1802.470648][T24709] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1802.470675][T24709] ? __pfx___schedule+0x10/0x10 [ 1802.470708][T24709] proc_fail_nth_write+0x83/0x220 [ 1802.470738][T24709] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1802.470768][T24709] ? preempt_schedule_thunk+0x16/0x40 [ 1802.470798][T24709] vfs_write+0x2aa/0x1050 [ 1802.470823][T24709] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1802.470851][T24709] ? lock_acquire+0x1d1/0x380 [ 1802.470873][T24709] ? __fget_files+0x34/0x3d0 [ 1802.470900][T24709] ? __pfx_vfs_write+0x10/0x10 [ 1802.470922][T24709] ? find_held_lock+0x2b/0x80 [ 1802.470950][T24709] ? __fget_files+0x215/0x3d0 [ 1802.470984][T24709] ? __fget_files+0x21f/0x3d0 [ 1802.471020][T24709] ksys_write+0x12a/0x250 [ 1802.471043][T24709] ? __pfx_ksys_write+0x10/0x10 [ 1802.471075][T24709] do_syscall_64+0x123/0x790 [ 1802.471106][T24709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.471125][T24709] RIP: 0033:0x7efcb275ed8e [ 1802.471141][T24709] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1802.471159][T24709] RSP: 002b:00007efcb09d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1802.471177][T24709] RAX: ffffffffffffffda RBX: 00007efcb09d56c0 RCX: 00007efcb275ed8e [ 1802.471189][T24709] RDX: 0000000000000001 RSI: 00007efcb09d50a0 RDI: 0000000000000004 [ 1802.471201][T24709] RBP: 00007efcb09d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1802.471213][T24709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.471225][T24709] R13: 00007efcb2a26128 R14: 00007efcb2a26090 R15: 00007ffdbb0da8c8 [ 1802.471253][T24709] [ 1802.927188][ T30] audit: type=1400 audit(2000001511.869:2358): avc: denied { write } for pid=24710 comm="syz.5.4834" path="socket:[96281]" dev="sockfs" ino=96281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1802.961876][ T30] audit: type=1400 audit(2000001511.906:2359): avc: denied { append } for pid=24712 comm="syz.6.4835" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1803.204143][ T30] audit: type=1400 audit(2000001512.131:2360): avc: denied { create } for pid=24717 comm="syz.0.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1803.443774][ T30] audit: type=1400 audit(2000001512.215:2361): avc: denied { read } for pid=24717 comm="syz.0.4837" dev="sockfs" ino=96291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1805.757065][T24727] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4838'. [ 1806.822207][ T30] audit: type=1400 audit(2000001514.854:2362): avc: denied { write } for pid=24728 comm="syz.0.4839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1807.144502][T24739] No such timeout policy "syz1" [ 1807.723389][T24742] ip_tables: iptables: counters copy to user failed while replacing table [ 1807.800694][ T30] audit: type=1400 audit(2000001516.436:2363): avc: denied { ioctl } for pid=24741 comm="syz.6.4843" path="socket:[95631]" dev="sockfs" ino=95631 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1807.831951][T24744] syzkaller1: entered promiscuous mode [ 1807.831965][T24744] syzkaller1: entered allmulticast mode [ 1807.869875][T24742] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4843'. [ 1807.880533][ T30] audit: type=1400 audit(2000001516.511:2364): avc: denied { accept } for pid=24740 comm="syz.4.4829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1808.862276][T21614] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1809.022395][T21614] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1809.023367][T21614] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.023410][T21614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.061283][T21614] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1809.175640][T24756] ip6gre1: entered promiscuous mode [ 1809.175663][T24756] ip6gre1: entered allmulticast mode [ 1809.181917][T20305] IPVS: starting estimator thread 0... [ 1809.197737][T24756] tipc: Enabling of bearer rejected, already enabled [ 1810.145535][T21614] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1810.145560][T21614] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1810.145856][T21614] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1810.145873][T21614] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1810.147360][T24757] IPVS: using max 79 ests per chain, 189600 per kthread [ 1810.152343][T21614] usb 4-1: USB disconnect, device number 2 [ 1810.324898][T18203] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1810.593609][ T30] audit: type=1400 audit(2000001518.991:2365): avc: denied { sqpoll } for pid=24765 comm="syz.4.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1810.647925][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1811.037112][T24776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.037485][T24776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.633196][T21614] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1814.491909][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1814.876869][ T30] audit: type=1400 audit(2000001523.062:2366): avc: denied { setopt } for pid=24792 comm="syz.5.4850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1814.879137][T24793] tipc: Enabling of bearer rejected, already enabled [ 1815.692877][ T30] audit: type=1400 audit(2000001523.820:2367): avc: denied { map } for pid=24799 comm="syz.4.4856" path="socket:[96538]" dev="sockfs" ino=96538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1815.692923][ T30] audit: type=1400 audit(2000001523.820:2368): avc: denied { read } for pid=24799 comm="syz.4.4856" path="socket:[96538]" dev="sockfs" ino=96538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1816.039344][ T30] audit: type=1400 audit(2000001524.148:2369): avc: denied { map } for pid=24803 comm="syz.3.4857" path="/proc/1232" dev="proc" ino=96553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1816.039615][ T30] audit: type=1400 audit(2000001524.148:2370): avc: denied { execute } for pid=24803 comm="syz.3.4857" path="/proc/1232" dev="proc" ino=96553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1816.040701][ T30] audit: type=1400 audit(2000001524.148:2371): avc: denied { mounton } for pid=24803 comm="syz.3.4857" path="/362/file0" dev="tmpfs" ino=2018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1816.114981][ T30] audit: type=1400 audit(2000001524.213:2372): avc: denied { mount } for pid=24803 comm="syz.3.4857" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1816.151392][T24807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.151809][T24807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.175096][ T30] audit: type=1400 audit(2000001524.270:2373): avc: denied { create } for pid=24808 comm="syz.0.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1816.175142][ T30] audit: type=1400 audit(2000001524.270:2374): avc: denied { write } for pid=24808 comm="syz.0.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1816.185628][T24809] FAULT_INJECTION: forcing a failure. [ 1816.185628][T24809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1816.185659][T24809] CPU: 0 UID: 0 PID: 24809 Comm: syz.0.4858 Tainted: G L syzkaller #0 PREEMPT(full) [ 1816.185683][T24809] Tainted: [L]=SOFTLOCKUP [ 1816.185689][T24809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1816.185700][T24809] Call Trace: [ 1816.185706][T24809] [ 1816.185713][T24809] dump_stack_lvl+0x100/0x190 [ 1816.185742][T24809] should_fail_ex.cold+0x5/0xa [ 1816.185769][T24809] _copy_from_user+0x2e/0xd0 [ 1816.185795][T24809] __sys_bpf+0x2f5/0x4a30 [ 1816.185823][T24809] ? __pfx___sys_bpf+0x10/0x10 [ 1816.185840][T24809] ? find_held_lock+0x2b/0x80 [ 1816.185865][T24809] ? futex_wake+0x4ea/0x5e0 [ 1816.185901][T24809] ? rcu_read_lock_any_held+0x6a/0x90 [ 1816.185918][T24809] ? vfs_write+0x15d/0x1050 [ 1816.185955][T24809] ? __x64_sys_futex+0x34f/0x4d0 [ 1816.185979][T24809] ? __x64_sys_futex+0x358/0x4d0 [ 1816.186007][T24809] ? xfd_validate_state+0x129/0x190 [ 1816.186029][T24809] ? __x64_sys_bpf+0xce/0x140 [ 1816.186047][T24809] __x64_sys_bpf+0xce/0x140 [ 1816.186067][T24809] ? do_syscall_64+0xae/0x790 [ 1816.186093][T24809] do_syscall_64+0x123/0x790 [ 1816.186119][T24809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.186137][T24809] RIP: 0033:0x7efcb279e559 [ 1816.186152][T24809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1816.186168][T24809] RSP: 002b:00007efcb09f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1816.186186][T24809] RAX: ffffffffffffffda RBX: 00007efcb2a25fa0 RCX: 00007efcb279e559 [ 1816.186198][T24809] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 1816.186209][T24809] RBP: 00007efcb2835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1816.186220][T24809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1816.186230][T24809] R13: 00007efcb2a26038 R14: 00007efcb2a25fa0 R15: 00007ffdbb0da8c8 [ 1816.186255][T24809] [ 1816.195395][ T30] audit: type=1400 audit(2000001524.270:2375): avc: denied { setopt } for pid=24808 comm="syz.0.4858" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1819.436616][T24822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.438718][T24822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.003627][T24831] ip_tables: iptables: counters copy to user failed while replacing table [ 1820.564408][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1820.564423][ T30] audit: type=1400 audit(2000001527.845:2378): avc: denied { write } for pid=24827 comm="syz.3.4866" name="ip6_mr_vif" dev="proc" ino=4026534020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1820.717752][T24837] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.4868'. [ 1821.555608][T24843] tipc: Enabling of bearer rejected, already enabled [ 1822.966892][ T30] audit: type=1400 audit(2000001530.175:2379): avc: denied { accept } for pid=24845 comm="syz.6.4872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1822.966941][ T30] audit: type=1400 audit(2000001530.175:2380): avc: denied { write } for pid=24845 comm="syz.6.4872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1823.505498][ T30] audit: type=1400 audit(2000001531.130:2381): avc: denied { write } for pid=24864 comm="syz.3.4869" path="socket:[96743]" dev="sockfs" ino=96743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1823.638128][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1823.875483][ T30] audit: type=1400 audit(2000001531.485:2382): avc: denied { read write } for pid=24872 comm="syz.6.4875" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1823.876847][ T30] audit: type=1400 audit(2000001531.485:2383): avc: denied { open } for pid=24872 comm="syz.6.4875" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1823.947038][T24875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.947554][T24875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.404878][ T30] audit: type=1400 audit(2000001531.972:2384): avc: denied { read } for pid=24888 comm="syz.3.4885" name="usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1824.406533][ T30] audit: type=1400 audit(2000001531.972:2385): avc: denied { open } for pid=24888 comm="syz.3.4885" path="/dev/usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1825.418557][T24904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4888'. [ 1825.422502][ T30] audit: type=1400 audit(2000001532.917:2386): avc: denied { create } for pid=24895 comm="syz.4.4888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1825.932548][T24913] tipc: Enabling of bearer rejected, already enabled [ 1825.967773][ T30] audit: type=1400 audit(2000001533.441:2387): avc: denied { read write } for pid=24910 comm="syz.3.4892" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1825.968319][ T30] audit: type=1400 audit(2000001533.441:2388): avc: denied { open } for pid=24910 comm="syz.3.4892" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1825.974214][ T30] audit: type=1400 audit(2000001533.441:2389): avc: denied { mount } for pid=24910 comm="syz.3.4892" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1825.976794][ T30] audit: type=1400 audit(2000001533.441:2390): avc: denied { mounton } for pid=24910 comm="syz.3.4892" path="/368/mnt" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1825.989840][T24915] jffs2: notice: (24915) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1826.271578][T24923] debugfs: '!' already exists in 'ieee80211' [ 1826.632051][ T30] audit: type=1400 audit(2000001534.059:2391): avc: denied { getopt } for pid=24929 comm="syz.4.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1826.634726][T24932] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1827.425770][T24937] ip_tables: iptables: counters copy to user failed while replacing table [ 1827.756358][ T30] audit: type=1400 audit(2000001535.117:2392): avc: denied { unmount } for pid=16677 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1828.254025][T21614] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1828.487684][T24953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.490854][T24953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.512445][T24953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.514841][T24953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.025833][T21614] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 1829.026830][T21614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1829.026863][T21614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.029248][T21614] usb 4-1: config 0 descriptor?? [ 1829.067409][T24935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1829.067762][T24935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.261771][T24943] FAULT_INJECTION: forcing a failure. [ 1829.261771][T24943] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.261793][T24943] CPU: 0 UID: 0 PID: 24943 Comm: syz.3.4901 Tainted: G L syzkaller #0 PREEMPT(full) [ 1829.261809][T24943] Tainted: [L]=SOFTLOCKUP [ 1829.261813][T24943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1829.261820][T24943] Call Trace: [ 1829.261824][T24943] [ 1829.261831][T24943] dump_stack_lvl+0x100/0x190 [ 1829.261851][T24943] should_fail_ex.cold+0x5/0xa [ 1829.261868][T24943] should_failslab+0xc2/0x120 [ 1829.261885][T24943] __kmalloc_noprof+0xfc/0x840 [ 1829.261900][T24943] ? tomoyo_encode2+0xfb/0x3c0 [ 1829.261920][T24943] tomoyo_encode2+0xfb/0x3c0 [ 1829.261940][T24943] tomoyo_encode+0x29/0x50 [ 1829.261957][T24943] tomoyo_realpath_from_path+0x18c/0x690 [ 1829.261971][T24943] tomoyo_path_number_perm+0x23c/0x580 [ 1829.261987][T24943] ? tomoyo_path_number_perm+0x22e/0x580 [ 1829.262003][T24943] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1829.262024][T24943] ? __lock_acquire+0x5c0/0x1f40 [ 1829.262046][T24943] ? __fget_files+0x34/0x3d0 [ 1829.262062][T24943] ? find_held_lock+0x2b/0x80 [ 1829.262079][T24943] ? hook_file_ioctl_common+0x140/0x440 [ 1829.262095][T24943] ? __fget_files+0x21f/0x3d0 [ 1829.262113][T24943] security_file_ioctl+0xd3/0x230 [ 1829.262130][T24943] __x64_sys_ioctl+0xb7/0x210 [ 1829.262145][T24943] do_syscall_64+0x123/0x790 [ 1829.262163][T24943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.262175][T24943] RIP: 0033:0x7ff267b9e559 [ 1829.262185][T24943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.262197][T24943] RSP: 002b:00007ff268b33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.262209][T24943] RAX: ffffffffffffffda RBX: 00007ff267e25fa0 RCX: 00007ff267b9e559 [ 1829.262216][T24943] RDX: 0000200000000440 RSI: 0000000080044dfd RDI: 0000000000000005 [ 1829.262228][T24943] RBP: 00007ff268b33090 R08: 0000000000000000 R09: 0000000000000000 [ 1829.262234][T24943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1829.262241][T24943] R13: 00007ff267e26038 R14: 00007ff267e25fa0 R15: 00007ffd23f533f8 [ 1829.262257][T24943] [ 1829.262279][T24943] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1829.636869][T24956] tipc: Enabling of bearer rejected, failed to enable media [ 1829.640373][ T30] audit: type=1400 audit(2000001536.876:2393): avc: denied { map } for pid=24942 comm="syz.3.4901" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1829.641370][ T30] audit: type=1400 audit(2000001536.876:2394): avc: denied { execute } for pid=24942 comm="syz.3.4901" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1829.751773][ T30] audit: type=1400 audit(2000001536.970:2395): avc: denied { ioctl } for pid=24942 comm="syz.3.4901" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1829.910632][ T30] audit: type=1400 audit(2000001537.129:2396): avc: denied { ioctl } for pid=24942 comm="syz.3.4901" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1832.489053][ T30] audit: type=1400 audit(2000001539.543:2397): avc: denied { read write } for pid=24978 comm="syz.6.4906" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1832.489551][ T30] audit: type=1400 audit(2000001539.543:2398): avc: denied { open } for pid=24978 comm="syz.6.4906" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1832.550974][ T30] audit: type=1400 audit(2000001539.600:2399): avc: denied { ioctl } for pid=24978 comm="syz.6.4906" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1833.046011][T24980] ip_tables: iptables: counters copy to user failed while replacing table [ 1833.810419][T21614] usb 4-1: string descriptor 0 read error: -71 [ 1833.837374][T21614] usbhid 4-1:0.0: can't add hid device: -71 [ 1833.837463][T21614] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1833.924166][T21614] usb 4-1: USB disconnect, device number 3 [ 1835.124841][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1835.125052][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1835.439460][T24994] tipc: Enabling of bearer rejected, failed to enable media [ 1835.957562][T25003] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1838.498550][ T30] audit: type=1400 audit(2000001545.009:2400): avc: denied { bind } for pid=25028 comm="syz.0.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1838.498604][ T30] audit: type=1400 audit(2000001545.009:2401): avc: denied { write } for pid=25028 comm="syz.0.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1839.002992][T25033] netlink: 'syz.4.4927': attribute type 3 has an invalid length. [ 1839.264761][T25031] ip6gre1: left promiscuous mode [ 1839.264784][T25031] ip6gre1: left allmulticast mode [ 1839.272222][ T30] audit: type=1400 audit(2000001545.842:2402): avc: denied { audit_write } for pid=25028 comm="syz.0.4926" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1839.486521][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.486623][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1839.517615][ T30] audit: type=1400 audit(2000001546.123:2403): avc: denied { egress } for pid=5736 comm="kworker/1:3" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1839.517663][ T30] audit: type=1400 audit(2000001546.123:2404): avc: denied { sendto } for pid=5736 comm="kworker/1:3" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1839.604643][T10719] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1839.606385][T10720] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1839.606512][T10720] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1839.606623][T10720] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1839.656637][T23146] lo speed is unknown, defaulting to 1000 [ 1840.733985][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1845.455016][T25085] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1847.749516][T25112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4942'. [ 1852.885945][ T30] audit: type=1400 audit(2000001558.636:2405): avc: denied { mount } for pid=25146 comm="syz.4.4958" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1853.987052][T25162] tipc: Enabling of bearer rejected, already enabled [ 1857.240586][T25184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1860.221594][ T30] audit: type=1400 audit(2000001565.496:2406): avc: denied { recv } for pid=25093 comm="kvm-pit/568" saddr=10.128.0.169 src=47316 daddr=10.128.0.69 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1860.562024][ T30] audit: type=1400 audit(2000001565.814:2407): avc: denied { block_suspend } for pid=25207 comm="syz.3.4973" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1865.352076][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.674471][ T30] audit: type=1400 audit(2000001571.532:2408): avc: denied { create } for pid=25250 comm="syz.6.4976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1867.793089][ T30] audit: type=1400 audit(2000001572.581:2409): avc: denied { ioctl } for pid=25250 comm="syz.6.4976" path="socket:[97956]" dev="sockfs" ino=97956 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1870.557979][ T30] audit: type=1400 audit(2000001575.164:2410): avc: denied { search } for pid=5263 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1870.558028][ T30] audit: type=1400 audit(2000001575.164:2411): avc: denied { search } for pid=5263 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1870.558065][ T30] audit: type=1400 audit(2000001575.164:2412): avc: denied { search } for pid=5263 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1870.558102][ T30] audit: type=1400 audit(2000001575.173:2413): avc: denied { read } for pid=5263 comm="dhcpcd" name="n80" dev="tmpfs" ino=7224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1870.558143][ T30] audit: type=1400 audit(2000001575.173:2414): avc: denied { open } for pid=5263 comm="dhcpcd" path="/run/udev/data/n80" dev="tmpfs" ino=7224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1870.560793][ T30] audit: type=1400 audit(2000001575.173:2415): avc: denied { getattr } for pid=5263 comm="dhcpcd" path="/run/udev/data/n80" dev="tmpfs" ino=7224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1871.068788][ T30] audit: type=1400 audit(2000001575.641:2416): avc: denied { search } for pid=25281 comm="dhcpcd-run-hook" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 1871.069683][ T30] audit: type=1400 audit(2000001575.650:2417): avc: denied { search } for pid=25281 comm="dhcpcd-run-hook" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 1873.465058][T25301] ip_tables: iptables: counters copy to user failed while replacing table [ 1874.239712][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1874.239726][ T30] audit: type=1400 audit(2000001578.617:2422): avc: denied { write } for pid=25282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1874.255247][ T30] audit: type=1400 audit(2000001578.617:2423): avc: denied { add_name } for pid=25282 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1874.255287][ T30] audit: type=1400 audit(2000001578.636:2424): avc: denied { create } for pid=25282 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1874.255319][ T30] audit: type=1400 audit(2000001578.636:2425): avc: denied { write } for pid=25282 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=7228 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1874.271921][ T30] audit: type=1400 audit(2000001578.645:2426): avc: denied { append } for pid=25282 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=7228 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1874.896822][ T30] audit: type=1400 audit(2000001579.235:2427): avc: denied { write } for pid=25316 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1874.898530][ T30] audit: type=1400 audit(2000001579.235:2428): avc: denied { remove_name } for pid=25316 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=7228 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1874.904417][ T30] audit: type=1400 audit(2000001579.235:2429): avc: denied { unlink } for pid=25316 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=7228 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1874.925641][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1876.357676][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1876.373954][T25318] zswap: compressor  not available [ 1880.241573][ T30] audit: type=1400 audit(2000001584.233:2430): avc: denied { write } for pid=25328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1880.618352][ T30] audit: type=1400 audit(2000001584.579:2431): avc: denied { write } for pid=25359 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1881.507999][T25367] ip_tables: iptables: counters copy to user failed while replacing table [ 1887.123418][T25397] tipc: Enabling of bearer rejected, already enabled [ 1887.854397][T25403] ip_tables: iptables: counters copy to user failed while replacing table [ 1890.400972][T25414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.403990][T25414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1891.354806][T25096] syz.6.4928 (25096) used greatest stack depth: 18272 bytes left [ 1893.029025][ T30] audit: type=1400 audit(2000001596.203:2432): avc: denied { map } for pid=25418 comm="syz.3.5014" path="/395/proc/1345/task/1349/fail-nth" dev="proc" ino=98238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1897.046666][T25450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.047039][T25450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.961394][T25458] rxe_eth0 speed is unknown, defaulting to 1000 [ 1898.999209][ T30] audit: type=1400 audit(2000001601.790:2433): avc: denied { bind } for pid=25457 comm="syz.5.5027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1900.658605][T25458] lo speed is unknown, defaulting to 1000 [ 1903.435849][T25485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5034'. [ 1903.853944][T25492] zswap: compressor  not available [ 1904.984256][T25504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5045'. [ 1905.799477][T25506] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5046'. [ 1906.884292][T25521] FAULT_INJECTION: forcing a failure. [ 1906.884292][T25521] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.884323][T25521] CPU: 1 UID: 0 PID: 25521 Comm: syz.0.5036 Tainted: G L syzkaller #0 PREEMPT(full) [ 1906.884349][T25521] Tainted: [L]=SOFTLOCKUP [ 1906.884369][T25521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1906.884381][T25521] Call Trace: [ 1906.884388][T25521] [ 1906.884396][T25521] dump_stack_lvl+0x100/0x190 [ 1906.884432][T25521] should_fail_ex.cold+0x5/0xa [ 1906.884461][T25521] should_failslab+0xc2/0x120 [ 1906.884491][T25521] __kmalloc_cache_noprof+0x91/0x6d0 [ 1906.884514][T25521] ? arch_stack_walk+0xa6/0xf0 [ 1906.884539][T25521] ? kvm_arch_vcpu_ioctl+0x11a5/0x3a10 [ 1906.884574][T25521] kvm_arch_vcpu_ioctl+0x11a5/0x3a10 [ 1906.884603][T25521] ? tomoyo_path_number_perm+0x46d/0x580 [ 1906.884632][T25521] ? stack_trace_save+0x8e/0xc0 [ 1906.884653][T25521] ? __pfx_stack_trace_save+0x10/0x10 [ 1906.884674][T25521] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1906.884700][T25521] ? stack_depot_save_flags+0x27/0x9f0 [ 1906.884721][T25521] ? __lock_acquire+0x5c0/0x1f40 [ 1906.884820][T25521] ? tomoyo_path_number_perm+0x46d/0x580 [ 1906.884844][T25521] ? kasan_save_stack+0x3f/0x50 [ 1906.884870][T25521] ? __lock_acquire+0x5c0/0x1f40 [ 1906.884896][T25521] ? lock_acquire+0x1d1/0x380 [ 1906.884912][T25521] ? kvm_vcpu_ioctl+0x322/0x1700 [ 1906.884937][T25521] ? rcu_is_watching+0x13/0xc0 [ 1906.884959][T25521] ? trace_contention_end+0x126/0x160 [ 1906.884978][T25521] ? __mutex_lock+0x26c/0x1bd0 [ 1906.885000][T25521] ? kvm_vcpu_ioctl+0x322/0x1700 [ 1906.885025][T25521] ? __pfx___mutex_lock+0x10/0x10 [ 1906.885045][T25521] ? kasan_quarantine_put+0x104/0x240 [ 1906.885063][T25521] ? lockdep_hardirqs_on+0x7d/0x110 [ 1906.885086][T25521] ? tomoyo_path_number_perm+0x28f/0x580 [ 1906.885122][T25521] ? tomoyo_path_number_perm+0x188/0x580 [ 1906.885145][T25521] ? kvm_vcpu_ioctl+0x8a0/0x1700 [ 1906.885164][T25521] kvm_vcpu_ioctl+0x8a0/0x1700 [ 1906.885187][T25521] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1906.885208][T25521] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1906.885229][T25521] ? do_vfs_ioctl+0x226/0x13e0 [ 1906.885248][T25521] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1906.885264][T25521] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1906.885288][T25521] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1906.885313][T25521] ? __fget_files+0x34/0x3d0 [ 1906.885344][T25521] ? selinux_file_ioctl+0x13b/0x290 [ 1906.885364][T25521] ? selinux_file_ioctl+0xb6/0x290 [ 1906.885387][T25521] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1906.885409][T25521] __x64_sys_ioctl+0x18e/0x210 [ 1906.885429][T25521] do_syscall_64+0x123/0x790 [ 1906.885453][T25521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.885468][T25521] RIP: 0033:0x7efcb279e559 [ 1906.885482][T25521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.885498][T25521] RSP: 002b:00007efcb09f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1906.885516][T25521] RAX: ffffffffffffffda RBX: 00007efcb2a25fa0 RCX: 00007efcb279e559 [ 1906.885527][T25521] RDX: 0000200000000000 RSI: 000000008140aecc RDI: 0000000000000005 [ 1906.885539][T25521] RBP: 00007efcb09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.885549][T25521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.885560][T25521] R13: 00007efcb2a26038 R14: 00007efcb2a25fa0 R15: 00007ffdbb0da8c8 [ 1906.885586][T25521] [ 1906.920643][T25523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5050'. [ 1909.629051][T25543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.632167][T25543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.648836][T25543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.651459][T25543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.326291][T25568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5058'. [ 1915.012598][ T30] audit: type=1400 audit(2000001616.456:2434): avc: denied { watch_mount watch_reads } for pid=25576 comm="syz.3.5065" path="/403" dev="tmpfs" ino=2239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1915.403480][ T30] audit: type=1400 audit(2000001617.139:2435): avc: denied { create } for pid=25582 comm="syz.6.5067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1916.274254][ T30] audit: type=1400 audit(2000001617.953:2436): avc: denied { shutdown } for pid=25572 comm="syz.5.5059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1917.068698][T25604] syz_tun: entered allmulticast mode [ 1917.069876][ T30] audit: type=1400 audit(2000001618.702:2437): avc: denied { mount } for pid=25603 comm="syz.5.5072" name="/" dev="ramfs" ino=99597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1919.764695][ T30] audit: type=1400 audit(2000001621.219:2438): avc: denied { ioctl } for pid=25617 comm="syz.3.5066" path="socket:[99698]" dev="sockfs" ino=99698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1919.814529][T17996] Bluetooth: hci0: Frame reassembly failed (-84) [ 1919.815232][ T30] audit: type=1400 audit(2000001621.276:2439): avc: denied { read } for pid=25617 comm="syz.3.5066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1920.584781][ T30] audit: type=1400 audit(2000001621.987:2440): avc: denied { read write } for pid=25620 comm="syz.6.5078" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1920.584833][ T30] audit: type=1400 audit(2000001621.987:2441): avc: denied { open } for pid=25620 comm="syz.6.5078" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1921.603161][T25647] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 1921.603190][T25647] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 1921.736889][ T30] audit: type=1400 audit(2000001623.072:2442): avc: denied { write } for pid=25633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1922.001098][T25657] tipc: Enabling of bearer rejected, already enabled [ 1922.015554][ T30] audit: type=1400 audit(2000001623.335:2443): avc: denied { write } for pid=25654 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1922.018547][T25659] overlayfs: failed to clone upperpath [ 1922.025060][T21491] Bluetooth: hci0: command 0x1003 tx timeout [ 1922.025166][T18467] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1922.109368][ T30] audit: type=1400 audit(2000001623.409:2444): avc: denied { shutdown } for pid=25656 comm="syz.4.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1922.132645][T25659] sctp: [Deprecated]: syz.4.5079 (pid 25659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1922.132645][T25659] Use struct sctp_sack_info instead [ 1922.134158][T25659] overlayfs: failed to clone lowerpath [ 1922.177864][ T30] audit: type=1400 audit(2000001623.484:2445): avc: denied { unlink } for pid=25658 comm="syz.0.5082" name="#30" dev="tmpfs" ino=2435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1922.178476][T25660] overlayfs: conflicting lowerdir path [ 1922.188973][T25661] overlayfs: conflicting lowerdir path [ 1923.541518][ T30] audit: type=1400 audit(2000001624.757:2446): avc: denied { write } for pid=25665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1923.629012][T25697] jffs2: notice: (25697) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1923.734838][T25704] FAULT_INJECTION: forcing a failure. [ 1923.734838][T25704] name failslab, interval 1, probability 0, space 0, times 0 [ 1923.734870][T25704] CPU: 0 UID: 0 PID: 25704 Comm: syz.6.5092 Tainted: G L syzkaller #0 PREEMPT(full) [ 1923.734898][T25704] Tainted: [L]=SOFTLOCKUP [ 1923.734905][T25704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1923.734916][T25704] Call Trace: [ 1923.734923][T25704] [ 1923.734931][T25704] dump_stack_lvl+0x100/0x190 [ 1923.734964][T25704] should_fail_ex.cold+0x5/0xa [ 1923.734991][T25704] should_failslab+0xc2/0x120 [ 1923.735019][T25704] __kmalloc_cache_noprof+0x91/0x6d0 [ 1923.735041][T25704] ? nfnetlink_rcv_batch+0x780/0x2880 [ 1923.735071][T25704] nfnetlink_rcv_batch+0x780/0x2880 [ 1923.735109][T25704] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1923.735131][T25704] ? stack_trace_save+0x8e/0xc0 [ 1923.735156][T25704] ? lock_acquire+0x1d1/0x380 [ 1923.735178][T25704] ? avc_has_perm_noaudit+0x56/0x470 [ 1923.735210][T25704] ? avc_has_perm_noaudit+0x145/0x470 [ 1923.735258][T25704] ? __nla_parse+0x40/0x60 [ 1923.735285][T25704] nfnetlink_rcv+0x3bd/0x440 [ 1923.735308][T25704] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1923.735337][T25704] netlink_unicast+0x65f/0x950 [ 1923.735360][T25704] ? __pfx_netlink_unicast+0x10/0x10 [ 1923.735386][T25704] netlink_sendmsg+0x8b0/0xda0 [ 1923.735409][T25704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1923.735429][T25704] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1923.735458][T25704] ____sys_sendmsg+0xa4d/0xbe0 [ 1923.735480][T25704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1923.735500][T25704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1923.735530][T25704] ? lock_acquire+0x1d1/0x380 [ 1923.735551][T25704] ? get_pid_task+0x2a/0x250 [ 1923.735579][T25704] ___sys_sendmsg+0x190/0x1e0 [ 1923.735605][T25704] ? __pfx____sys_sendmsg+0x10/0x10 [ 1923.735631][T25704] ? get_pid_task+0x106/0x250 [ 1923.735667][T25704] ? find_held_lock+0x2b/0x80 [ 1923.735713][T25704] __sys_sendmsg+0x160/0x210 [ 1923.735733][T25704] ? __pfx___sys_sendmsg+0x10/0x10 [ 1923.735767][T25704] do_syscall_64+0x123/0x790 [ 1923.735796][T25704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.735815][T25704] RIP: 0033:0x7f17faf9e559 [ 1923.735836][T25704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1923.735853][T25704] RSP: 002b:00007f17fbdf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1923.735872][T25704] RAX: ffffffffffffffda RBX: 00007f17fb225fa0 RCX: 00007f17faf9e559 [ 1923.735883][T25704] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1923.735894][T25704] RBP: 00007f17fbdf0090 R08: 0000000000000000 R09: 0000000000000000 [ 1923.735905][T25704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1923.735915][T25704] R13: 00007f17fb226038 R14: 00007f17fb225fa0 R15: 00007ffcf109c4d8 [ 1923.735942][T25704] [ 1923.743871][ T30] audit: type=1400 audit(2000001624.944:2447): avc: denied { watch } for pid=25706 comm="syz.0.5094" path="/433" dev="tmpfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1923.852730][ T30] audit: type=1400 audit(2000001625.047:2448): avc: denied { watch } for pid=25706 comm="syz.0.5094" path="/433" dev="tmpfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1923.852780][ T30] audit: type=1400 audit(2000001625.047:2449): avc: denied { watch_sb } for pid=25706 comm="syz.0.5094" path="/433" dev="tmpfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1928.627894][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1928.627914][ T30] audit: type=1400 audit(2000001629.511:2460): avc: denied { write } for pid=25720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1929.907317][ T30] audit: type=1400 audit(2000001630.709:2461): avc: denied { write } for pid=25758 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1929.994034][ T30] audit: type=1400 audit(2000001630.794:2462): avc: denied { unmount } for pid=16677 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1931.291913][T25772] overlay: Unknown parameter 'mask' [ 1931.432373][T25775] overlay: Unknown parameter 'mask' [ 1932.624304][ T30] audit: type=1400 audit(2000001633.255:2463): avc: denied { write } for pid=25766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1933.458676][ T30] audit: type=1400 audit(2000001634.041:2464): avc: denied { write } for pid=25792 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1936.034550][T25822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1936.036997][T25822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.052079][T25822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1936.063377][T25822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.074726][T25822] openvswitch: netlink: Message has 8 unknown bytes. [ 1936.074753][T25822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1936.337752][T25831] tipc: Enabling of bearer rejected, already enabled [ 1939.561351][T25857] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1939.848586][T25866] FAULT_INJECTION: forcing a failure. [ 1939.848586][T25866] name failslab, interval 1, probability 0, space 0, times 0 [ 1939.848623][T25866] CPU: 0 UID: 0 PID: 25866 Comm: syz.0.5126 Tainted: G L syzkaller #0 PREEMPT(full) [ 1939.848651][T25866] Tainted: [L]=SOFTLOCKUP [ 1939.848658][T25866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1939.848671][T25866] Call Trace: [ 1939.848680][T25866] [ 1939.848689][T25866] dump_stack_lvl+0x100/0x190 [ 1939.848725][T25866] should_fail_ex.cold+0x5/0xa [ 1939.848754][T25866] should_failslab+0xc2/0x120 [ 1939.848784][T25866] __kmalloc_cache_noprof+0x91/0x6d0 [ 1939.848808][T25866] ? sw_sync_debugfs_open+0x177/0x3d0 [ 1939.848836][T25866] sw_sync_debugfs_open+0x177/0x3d0 [ 1939.848856][T25866] ? __debugfs_file_get+0x1fc/0x860 [ 1939.848891][T25866] ? __pfx_sw_sync_debugfs_open+0x10/0x10 [ 1939.848914][T25866] ? __pfx_selinux_file_open+0x10/0x10 [ 1939.848947][T25866] ? lockdown_is_locked_down+0x3d/0x140 [ 1939.848975][T25866] ? bpf_lsm_locked_down+0x9/0x10 [ 1939.848999][T25866] ? __pfx_sw_sync_debugfs_open+0x10/0x10 [ 1939.849022][T25866] open_proxy_open+0x220/0x330 [ 1939.849047][T25866] do_dentry_open+0x6ab/0x14d0 [ 1939.849072][T25866] ? __pfx_open_proxy_open+0x10/0x10 [ 1939.849105][T25866] vfs_open+0x82/0x3f0 [ 1939.849139][T25866] path_openat+0x1a23/0x2450 [ 1939.849173][T25866] ? __pfx_path_openat+0x10/0x10 [ 1939.849210][T25866] do_file_open+0x20e/0x430 [ 1939.849241][T25866] ? __pfx_do_file_open+0x10/0x10 [ 1939.849290][T25866] ? _raw_spin_unlock+0x28/0x50 [ 1939.849330][T25866] ? alloc_fd+0x471/0x7a0 [ 1939.849368][T25866] do_sys_openat2+0x10f/0x1e0 [ 1939.849388][T25866] ? __pfx_do_sys_openat2+0x10/0x10 [ 1939.849408][T25866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1939.849447][T25866] __x64_sys_openat+0x12d/0x210 [ 1939.849466][T25866] ? __pfx___x64_sys_openat+0x10/0x10 [ 1939.849485][T25866] ? ksys_write+0x1ac/0x250 [ 1939.849517][T25866] do_syscall_64+0x123/0x790 [ 1939.849546][T25866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.849566][T25866] RIP: 0033:0x7efcb279e559 [ 1939.849583][T25866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1939.849601][T25866] RSP: 002b:00007efcb09f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1939.849622][T25866] RAX: ffffffffffffffda RBX: 00007efcb2a25fa0 RCX: 00007efcb279e559 [ 1939.849636][T25866] RDX: 00000000000c8c00 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1939.849649][T25866] RBP: 00007efcb2835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1939.849662][T25866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1939.849675][T25866] R13: 00007efcb2a26038 R14: 00007efcb2a25fa0 R15: 00007ffdbb0da8c8 [ 1939.849703][T25866] [ 1942.252472][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1943.458958][T21321] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1943.619728][T21321] usb 4-1: Using ep0 maxpacket: 8 [ 1943.620212][T21321] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1943.621132][T21321] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1943.621172][T21321] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1943.621186][T21321] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1943.621200][T21321] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 3 [ 1943.621213][T21321] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1943.621235][T21321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.852389][T21321] usb 4-1: GET_CAPABILITIES returned 0 [ 1943.852433][T21321] usbtmc 4-1:16.0: can't read capabilities [ 1944.065081][T25889] FAULT_INJECTION: forcing a failure. [ 1944.065081][T25889] name failslab, interval 1, probability 0, space 0, times 0 [ 1944.065117][T25889] CPU: 0 UID: 0 PID: 25889 Comm: syz.3.5136 Tainted: G L syzkaller #0 PREEMPT(full) [ 1944.065142][T25889] Tainted: [L]=SOFTLOCKUP [ 1944.065149][T25889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1944.065160][T25889] Call Trace: [ 1944.065167][T25889] [ 1944.065175][T25889] dump_stack_lvl+0x100/0x190 [ 1944.065209][T25889] should_fail_ex.cold+0x5/0xa [ 1944.065244][T25889] should_failslab+0xc2/0x120 [ 1944.065273][T25889] __kmalloc_noprof+0xfc/0x840 [ 1944.065295][T25889] ? rcu_is_watching+0x13/0xc0 [ 1944.065324][T25889] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1944.065349][T25889] tomoyo_realpath_from_path+0xb6/0x690 [ 1944.065374][T25889] tomoyo_path_number_perm+0x23c/0x580 [ 1944.065399][T25889] ? tomoyo_path_number_perm+0x22e/0x580 [ 1944.065426][T25889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1944.065462][T25889] ? __lock_acquire+0x5c0/0x1f40 [ 1944.065497][T25889] ? __fget_files+0x34/0x3d0 [ 1944.065524][T25889] ? find_held_lock+0x2b/0x80 [ 1944.065551][T25889] ? hook_file_ioctl_common+0x140/0x440 [ 1944.065577][T25889] ? __fget_files+0x21f/0x3d0 [ 1944.065607][T25889] security_file_ioctl+0xd3/0x230 [ 1944.065635][T25889] __x64_sys_ioctl+0xb7/0x210 [ 1944.065661][T25889] do_syscall_64+0x123/0x790 [ 1944.065693][T25889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1944.065713][T25889] RIP: 0033:0x7ff267b9e559 [ 1944.065729][T25889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1944.065745][T25889] RSP: 002b:00007ff268b33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1944.065764][T25889] RAX: ffffffffffffffda RBX: 00007ff267e25fa0 RCX: 00007ff267b9e559 [ 1944.065777][T25889] RDX: 0000200000000400 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 1944.065788][T25889] RBP: 00007ff268b33090 R08: 0000000000000000 R09: 0000000000000000 [ 1944.065800][T25889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1944.065812][T25889] R13: 00007ff267e26038 R14: 00007ff267e25fa0 R15: 00007ffd23f533f8 [ 1944.065840][T25889] [ 1944.070502][T25889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1944.070741][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.070781][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.070816][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.070849][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.070882][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.070915][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.071118][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.071152][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.071186][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.071221][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.071260][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.071442][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.071472][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.071502][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.071531][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.071560][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1944.074824][T18203] usb 4-1: USB disconnect, device number 4 [ 1947.422694][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1950.964548][T25964] tipc: Enabling of bearer rejected, already enabled [ 1951.314966][T25972] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1952.015989][ T30] audit: type=1400 audit(2000001651.402:2465): avc: denied { relabelfrom } for pid=25985 comm="syz.3.5146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1952.016149][ T30] audit: type=1400 audit(2000001651.402:2466): avc: denied { relabelto } for pid=25985 comm="syz.3.5146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1953.542231][T26003] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1958.231002][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5172'. [ 1959.521092][T26064] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1959.598054][T26067] tipc: Enabling of bearer rejected, already enabled [ 1964.484863][T26122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.495298][T26122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.544599][T26129] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1967.698481][T26145] tipc: Enabling of bearer rejected, already enabled [ 1969.187914][ T5807] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1969.364129][ T5807] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 1969.368236][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1969.368284][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.416198][ T5807] usb 4-1: config 0 descriptor?? [ 1970.378777][T26158] ip_tables: iptables: counters copy to user failed while replacing table [ 1970.478748][ T5807] hid_parser_main: 4 callbacks suppressed [ 1970.478773][ T5807] wacom 0003:056A:0303.001E: unknown main item tag 0x2 [ 1970.478900][ T5807] wacom 0003:056A:0303.001E: unknown main item tag 0x0 [ 1970.478922][ T5807] wacom 0003:056A:0303.001E: unknown main item tag 0x0 [ 1970.478943][ T5807] wacom 0003:056A:0303.001E: unknown main item tag 0x0 [ 1970.478963][ T5807] wacom 0003:056A:0303.001E: unknown main item tag 0x0 [ 1970.532282][ T5807] usb 4-1: USB disconnect, device number 5 [ 1970.865405][ T30] audit: type=1400 audit(2000001669.044:2467): avc: denied { append } for pid=26162 comm="syz.0.5202" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1971.031036][T26166] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1971.497353][T26177] FAULT_INJECTION: forcing a failure. [ 1971.497353][T26177] name failslab, interval 1, probability 0, space 0, times 0 [ 1971.497400][T26177] CPU: 0 UID: 0 PID: 26177 Comm: syz.6.5204 Tainted: G L syzkaller #0 PREEMPT(full) [ 1971.497425][T26177] Tainted: [L]=SOFTLOCKUP [ 1971.497431][T26177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1971.497441][T26177] Call Trace: [ 1971.497448][T26177] [ 1971.497454][T26177] dump_stack_lvl+0x100/0x190 [ 1971.497479][T26177] should_fail_ex.cold+0x5/0xa [ 1971.497496][T26177] should_failslab+0xc2/0x120 [ 1971.497513][T26177] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1971.497531][T26177] ? alloc_vmap_area+0x1814/0x2bb0 [ 1971.497549][T26177] alloc_vmap_area+0x1814/0x2bb0 [ 1971.497569][T26177] ? kasan_save_track+0x14/0x30 [ 1971.497583][T26177] ? __kasan_kmalloc+0xaa/0xb0 [ 1971.497598][T26177] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1971.497618][T26177] ? __get_vm_area_node+0x124/0x350 [ 1971.497637][T26177] __get_vm_area_node+0x1ed/0x350 [ 1971.497655][T26177] __vmalloc_node_range_noprof+0x268/0x1420 [ 1971.497673][T26177] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1971.497691][T26177] ? preempt_schedule_irq+0x79/0x90 [ 1971.497710][T26177] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1971.497725][T26177] ? lock_acquire+0x1d1/0x380 [ 1971.497739][T26177] ? find_held_lock+0x2b/0x80 [ 1971.497756][T26177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1971.497772][T26177] ? avc_has_perm_noaudit+0x11e/0x470 [ 1971.497791][T26177] ? avc_has_perm_noaudit+0x145/0x470 [ 1971.497812][T26177] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1971.497835][T26177] __vmalloc_node_noprof+0xad/0xf0 [ 1971.497853][T26177] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1971.497880][T26177] __vmalloc_noprof+0xa3/0x120 [ 1971.497905][T26177] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1971.497930][T26177] ? rcu_is_watching+0x13/0xc0 [ 1971.497946][T26177] ? cap_capable+0x107/0x430 [ 1971.497958][T26177] ? __schedule+0x126b/0x6920 [ 1971.497973][T26177] bpf_prog_alloc_no_stats+0x59/0x690 [ 1971.497988][T26177] ? security_capable+0x80/0x260 [ 1971.498003][T26177] bpf_prog_alloc+0x3b/0x200 [ 1971.498017][T26177] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1971.498033][T26177] bpf_prog_load+0x49e/0x2ab0 [ 1971.498053][T26177] ? __pfx_bpf_prog_load+0x10/0x10 [ 1971.498082][T26177] __sys_bpf+0x1f46/0x4a30 [ 1971.498094][T26177] ? rcu_is_watching+0x13/0xc0 [ 1971.498114][T26177] ? __pfx___sys_bpf+0x10/0x10 [ 1971.498128][T26177] ? pick_task_fair+0x136/0x1e10 [ 1971.498144][T26177] ? __schedule+0x3150/0x6920 [ 1971.498158][T26177] ? sparse_index_alloc+0x70/0xc0 [ 1971.498172][T26177] ? kvm_sched_clock_read+0x11/0x20 [ 1971.498186][T26177] ? sched_clock+0x3a/0x60 [ 1971.498200][T26177] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1971.498215][T26177] ? find_held_lock+0x2b/0x80 [ 1971.498231][T26177] ? __schedule+0x315b/0x6920 [ 1971.498245][T26177] ? __schedule+0x315b/0x6920 [ 1971.498259][T26177] ? rcu_is_watching+0x13/0xc0 [ 1971.498275][T26177] ? trace_sched_exit_tp+0x120/0x160 [ 1971.498300][T26177] ? __pfx___schedule+0x10/0x10 [ 1971.498318][T26177] ? __x64_sys_bpf+0xce/0x140 [ 1971.498330][T26177] __x64_sys_bpf+0xce/0x140 [ 1971.498343][T26177] ? do_syscall_64+0xae/0x790 [ 1971.498359][T26177] do_syscall_64+0x123/0x790 [ 1971.498377][T26177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.498389][T26177] RIP: 0033:0x7f17faf9e559 [ 1971.498399][T26177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1971.498410][T26177] RSP: 002b:00007f17fbdcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1971.498422][T26177] RAX: ffffffffffffffda RBX: 00007f17fb226090 RCX: 00007f17faf9e559 [ 1971.498429][T26177] RDX: 0000000000000048 RSI: 0000200000019500 RDI: 0000000000000005 [ 1971.498436][T26177] RBP: 00007f17fbdcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1971.498443][T26177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1971.498450][T26177] R13: 00007f17fb226128 R14: 00007f17fb226090 R15: 00007ffcf109c4d8 [ 1971.498465][T26177] [ 1972.464437][T26190] 9p: Bad value for 'wfdno' [ 1973.186077][T26197] tipc: Enabling of bearer rejected, already enabled [ 1974.483754][T26205] ip_tables: iptables: counters copy to user failed while replacing table [ 1978.972533][T26233] xt_NFQUEUE: number of total queues is 0 [ 1980.037532][T26247] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1980.037551][T26247] audit: out of memory in audit_log_start [ 1981.037077][T26252] ip_tables: iptables: counters copy to user failed while replacing table [ 1983.459764][T26280] FAULT_INJECTION: forcing a failure. [ 1983.459764][T26280] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.459798][T26280] CPU: 0 UID: 0 PID: 26280 Comm: syz.0.5234 Tainted: G L syzkaller #0 PREEMPT(full) [ 1983.459823][T26280] Tainted: [L]=SOFTLOCKUP [ 1983.459830][T26280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1983.459842][T26280] Call Trace: [ 1983.459849][T26280] [ 1983.459857][T26280] dump_stack_lvl+0x100/0x190 [ 1983.459889][T26280] should_fail_ex.cold+0x5/0xa [ 1983.459916][T26280] should_failslab+0xc2/0x120 [ 1983.459943][T26280] __kmalloc_noprof+0xfc/0x840 [ 1983.459966][T26280] ? rcu_is_watching+0x13/0xc0 [ 1983.459992][T26280] ? tomoyo_encode2+0xfb/0x3c0 [ 1983.460025][T26280] tomoyo_encode2+0xfb/0x3c0 [ 1983.460057][T26280] tomoyo_encode+0x29/0x50 [ 1983.460083][T26280] tomoyo_realpath_from_path+0x18c/0x690 [ 1983.460109][T26280] tomoyo_check_open_permission+0x2af/0x3c0 [ 1983.460135][T26280] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1983.460169][T26280] ? hook_file_open+0x248/0x8e0 [ 1983.460215][T26280] tomoyo_file_open+0x6b/0x90 [ 1983.460237][T26280] security_file_open+0xb5/0x1e0 [ 1983.460257][T26280] do_dentry_open+0x588/0x14d0 [ 1983.460289][T26280] vfs_open+0x82/0x3f0 [ 1983.460321][T26280] path_openat+0x1a23/0x2450 [ 1983.460356][T26280] ? __pfx_path_openat+0x10/0x10 [ 1983.460391][T26280] do_file_open+0x20e/0x430 [ 1983.460421][T26280] ? __pfx_do_file_open+0x10/0x10 [ 1983.460464][T26280] ? __pfx_kfree_link+0x10/0x10 [ 1983.460497][T26280] ? _raw_spin_unlock+0x28/0x50 [ 1983.460520][T26280] ? alloc_fd+0x471/0x7a0 [ 1983.460555][T26280] do_sys_openat2+0x10f/0x1e0 [ 1983.460573][T26280] ? __pfx_do_sys_openat2+0x10/0x10 [ 1983.460592][T26280] ? fd_install+0xa2/0x580 [ 1983.460625][T26280] __x64_sys_openat+0x12d/0x210 [ 1983.460644][T26280] ? __pfx___x64_sys_openat+0x10/0x10 [ 1983.460673][T26280] do_syscall_64+0x123/0x790 [ 1983.460703][T26280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.460721][T26280] RIP: 0033:0x7efcb275ed8e [ 1983.460736][T26280] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1983.460754][T26280] RSP: 002b:00007efcb09f5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1983.460772][T26280] RAX: ffffffffffffffda RBX: 00007efcb09f66c0 RCX: 00007efcb275ed8e [ 1983.460784][T26280] RDX: 0000000000000002 RSI: 00007efcb28353b2 RDI: ffffffffffffff9c [ 1983.460796][T26280] RBP: 00007efcb2835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1983.460807][T26280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1983.460819][T26280] R13: 00007efcb2a26038 R14: 00007efcb2a25fa0 R15: 00007ffdbb0da8c8 [ 1983.460846][T26280] [ 1983.460873][T26280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1983.460994][T26280] FAULT_INJECTION: forcing a failure. [ 1983.460994][T26280] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.461016][T26280] CPU: 0 UID: 0 PID: 26280 Comm: syz.0.5234 Tainted: G L syzkaller #0 PREEMPT(full) [ 1983.461039][T26280] Tainted: [L]=SOFTLOCKUP [ 1983.461046][T26280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1983.461056][T26280] Call Trace: [ 1983.461062][T26280] [ 1983.461070][T26280] dump_stack_lvl+0x100/0x190 [ 1983.461102][T26280] should_fail_ex.cold+0x5/0xa [ 1983.461128][T26280] should_failslab+0xc2/0x120 [ 1983.461156][T26280] __kmalloc_cache_noprof+0x91/0x6d0 [ 1983.461177][T26280] ? sget_fc+0xb19/0x1f70 [ 1983.461205][T26280] sget_fc+0xb19/0x1f70 [ 1983.461232][T26280] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1983.461260][T26280] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1983.461282][T26280] ? __pfx_sget_fc+0x10/0x10 [ 1983.461309][T26280] ? rcu_is_watching+0x13/0xc0 [ 1983.461336][T26280] ? cap_capable+0x107/0x430 [ 1983.461362][T26280] ? __pfx_bpf_fill_super+0x10/0x10 [ 1983.461381][T26280] get_tree_nodev+0x28/0x190 [ 1983.461406][T26280] vfs_get_tree+0x92/0x320 [ 1983.461426][T26280] vfs_cmd_create+0xd7/0x2a0 [ 1983.461456][T26280] __do_sys_fsconfig+0x55a/0xcb0 [ 1983.461481][T26280] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1983.461503][T26280] ? fput+0x7c/0x100 [ 1983.461543][T26280] do_syscall_64+0x123/0x790 [ 1983.461573][T26280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.461591][T26280] RIP: 0033:0x7efcb279e559 [ 1983.461606][T26280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1983.461623][T26280] RSP: 002b:00007efcb09f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1983.461640][T26280] RAX: ffffffffffffffda RBX: 00007efcb2a25fa0 RCX: 00007efcb279e559 [ 1983.461652][T26280] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1983.461663][T26280] RBP: 00007efcb09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1983.461674][T26280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.461685][T26280] R13: 00007efcb2a26038 R14: 00007efcb2a25fa0 R15: 00007ffdbb0da8c8 [ 1983.461713][T26280] [ 1984.388806][T26285] ip_tables: iptables: counters copy to user failed while replacing table [ 1985.112653][ T30] audit: type=1400 audit(2000001682.380:2468): avc: denied { read } for pid=26287 comm="syz.3.5237" name="idVendor" dev="configfs" ino=102874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1985.214337][ T30] audit: type=1400 audit(2000001682.474:2469): avc: denied { write } for pid=26287 comm="syz.3.5237" name="functions" dev="configfs" ino=11383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1985.240701][ T30] audit: type=1400 audit(2000001682.502:2470): avc: denied { add_name } for pid=26287 comm="syz.3.5237" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1985.259510][ T30] audit: type=1400 audit(2000001682.502:2471): avc: denied { create } for pid=26287 comm="syz.3.5237" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1986.380635][T26305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.380998][T26305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1987.486699][ T30] audit: type=1400 audit(2000001683.644:2472): avc: denied { write } for pid=26303 comm="syz.0.5238" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1987.997414][T26311] syzkaller0: entered promiscuous mode [ 1987.997436][T26311] syzkaller0: entered allmulticast mode [ 1990.179923][ T30] audit: type=1400 audit(2000001687.125:2473): avc: denied { mount } for pid=26329 comm="syz.5.5252" name="/" dev="hugetlbfs" ino=101949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1990.701684][ T30] audit: type=1400 audit(2000001687.612:2474): avc: denied { setopt } for pid=26338 comm="syz.5.5256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1990.761393][ T30] audit: type=1400 audit(2000001687.678:2475): avc: denied { write } for pid=26338 comm="syz.5.5256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1991.555176][T26348] tipc: Enabling of bearer rejected, failed to enable media [ 1993.353321][T26365] FAULT_INJECTION: forcing a failure. [ 1993.353321][T26365] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1993.353355][T26365] CPU: 0 UID: 0 PID: 26365 Comm: syz.3.5251 Tainted: G L syzkaller #0 PREEMPT(full) [ 1993.353381][T26365] Tainted: [L]=SOFTLOCKUP [ 1993.353388][T26365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1993.353399][T26365] Call Trace: [ 1993.353406][T26365] [ 1993.353413][T26365] dump_stack_lvl+0x100/0x190 [ 1993.353444][T26365] should_fail_ex.cold+0x5/0xa [ 1993.353470][T26365] get_futex_key+0xf62/0x13e0 [ 1993.353498][T26365] ? __pfx_get_futex_key+0x10/0x10 [ 1993.353525][T26365] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1993.353558][T26365] futex_wake+0xf4/0x5e0 [ 1993.353581][T26365] ? __pfx_futex_wake+0x10/0x10 [ 1993.353606][T26365] ? lock_acquire+0x1d1/0x380 [ 1993.353627][T26365] ? detach_task_ctx_data+0x83/0x490 [ 1993.353653][T26365] do_futex+0x2b2/0x440 [ 1993.353682][T26365] ? __pfx_do_futex+0x10/0x10 [ 1993.353707][T26365] ? __might_fault+0xc5/0x140 [ 1993.353733][T26365] mm_exit_exec_release+0x256/0x2f0 [ 1993.353757][T26365] do_exit+0x707/0x2a60 [ 1993.353792][T26365] ? __pfx_do_exit+0x10/0x10 [ 1993.353816][T26365] ? do_raw_spin_lock+0x128/0x260 [ 1993.353840][T26365] ? find_held_lock+0x2b/0x80 [ 1993.353866][T26365] ? get_signal+0x7e0/0x21e0 [ 1993.353890][T26365] do_group_exit+0xd5/0x2a0 [ 1993.353917][T26365] get_signal+0x1ec7/0x21e0 [ 1993.353948][T26365] ? __pfx_get_signal+0x10/0x10 [ 1993.353970][T26365] ? do_futex+0x190/0x440 [ 1993.354000][T26365] arch_do_signal_or_restart+0x91/0x7e0 [ 1993.354030][T26365] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1993.354073][T26365] exit_to_user_mode_loop+0x139/0x700 [ 1993.354098][T26365] ? rcu_is_watching+0x13/0xc0 [ 1993.354126][T26365] do_syscall_64+0x661/0x790 [ 1993.354157][T26365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.354177][T26365] RIP: 0033:0x7ff267b9e559 [ 1993.354193][T26365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1993.354211][T26365] RSP: 002b:00007ff268af10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1993.354231][T26365] RAX: fffffffffffffe00 RBX: 00007ff267e26188 RCX: 00007ff267b9e559 [ 1993.354244][T26365] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff267e26188 [ 1993.354256][T26365] RBP: 00007ff267e26180 R08: 0000000000000000 R09: 0000000000000000 [ 1993.354267][T26365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1993.354278][T26365] R13: 00007ff267e26218 R14: 00007ffd23f53310 R15: 00007ffd23f533f8 [ 1993.354305][T26365] [ 1994.387731][T26376] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1999.080722][T26418] FAULT_INJECTION: forcing a failure. [ 1999.080722][T26418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1999.080754][T26418] CPU: 1 UID: 0 PID: 26418 Comm: syz.0.5277 Tainted: G L syzkaller #0 PREEMPT(full) [ 1999.080779][T26418] Tainted: [L]=SOFTLOCKUP [ 1999.080787][T26418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1999.080797][T26418] Call Trace: [ 1999.080804][T26418] [ 1999.080812][T26418] dump_stack_lvl+0x100/0x190 [ 1999.080844][T26418] should_fail_ex.cold+0x5/0xa [ 1999.080871][T26418] _copy_to_user+0x32/0xd0 [ 1999.080900][T26418] simple_read_from_buffer+0xcb/0x170 [ 1999.080931][T26418] proc_fail_nth_read+0x1af/0x230 [ 1999.080959][T26418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1999.080989][T26418] ? rw_verify_area+0xce/0x6d0 [ 1999.081009][T26418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1999.081034][T26418] vfs_read+0x1e4/0xb40 [ 1999.081055][T26418] ? lock_acquire+0x1d1/0x380 [ 1999.081073][T26418] ? __fget_files+0x34/0x3d0 [ 1999.081097][T26418] ? __pfx_vfs_read+0x10/0x10 [ 1999.081116][T26418] ? find_held_lock+0x2b/0x80 [ 1999.081141][T26418] ? __fget_files+0x215/0x3d0 [ 1999.081170][T26418] ? __fget_files+0x21f/0x3d0 [ 1999.081210][T26418] ksys_read+0x12a/0x250 [ 1999.081232][T26418] ? __pfx_ksys_read+0x10/0x10 [ 1999.081263][T26418] do_syscall_64+0x123/0x790 [ 1999.081293][T26418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1999.081312][T26418] RIP: 0033:0x7efcb275ed8e [ 1999.081327][T26418] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1999.081347][T26418] RSP: 002b:00007efcb09f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1999.081366][T26418] RAX: ffffffffffffffda RBX: 00007efcb09f66c0 RCX: 00007efcb275ed8e [ 1999.081378][T26418] RDX: 000000000000000f RSI: 00007efcb09f60a0 RDI: 0000000000000005 [ 1999.081389][T26418] RBP: 00007efcb09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1999.081399][T26418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1999.081410][T26418] R13: 00007efcb2a26038 R14: 00007efcb2a25fa0 R15: 00007ffdbb0da8c8 [ 1999.081437][T26418] [ 1999.388648][T26426] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 2000.004413][ T30] audit: type=1400 audit(2000001696.325:2476): avc: denied { append } for pid=26435 comm="syz.3.5275" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2000.115889][ T30] audit: type=1400 audit(2000001696.428:2477): avc: denied { bind } for pid=26437 comm="syz.4.5283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2000.356995][ T30] audit: type=1400 audit(2000001696.653:2478): avc: denied { write } for pid=26435 comm="syz.3.5275" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2000.358473][ T30] audit: type=1400 audit(2000001696.653:2479): avc: denied { open } for pid=26435 comm="syz.3.5275" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2000.549218][ T30] audit: type=1400 audit(2000001696.831:2480): avc: denied { create } for pid=26463 comm="syz.5.5289" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2000.576053][T26464] fuse: fd is not a fuse device [ 2000.577107][ T30] audit: type=1400 audit(2000001696.849:2481): avc: denied { mounton } for pid=26463 comm="syz.5.5289" path="/512/file0" dev="tmpfs" ino=2873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2000.585953][ T30] audit: type=1400 audit(2000001696.868:2482): avc: denied { read } for pid=26465 comm="syz.6.5290" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2000.596363][T26471] fuse: fd is not a fuse device [ 2000.974193][T26484] 9p: Bad value for 'rfdno' [ 2001.087251][ T30] audit: type=1400 audit(2000001697.336:2483): avc: denied { write } for pid=26490 comm="syz.5.5296" lport=33494 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2001.089030][ T30] audit: type=1400 audit(2000001697.336:2484): avc: denied { setopt } for pid=26490 comm="syz.5.5296" lport=33494 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2001.155480][T26491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.155691][T26491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.294143][T26500] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 2001.305911][ T30] audit: type=1400 audit(2000001697.533:2485): avc: denied { listen } for pid=26501 comm="syz.3.5299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2001.307284][T26502] netlink: 'syz.3.5299': attribute type 2 has an invalid length. [ 2001.575082][T26515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.575448][T26515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2002.202085][T26526] IPVS: Scheduler module ip_vs_sip not found [ 2002.229279][T26529] 9p: Bad value for 'rfdno' [ 2002.390711][T26536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5308'. [ 2003.567045][T26537] syzkaller0: entered promiscuous mode [ 2003.567060][T26537] syzkaller0: entered allmulticast mode [ 2004.304240][T26559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=26559 comm=syz.6.5315 [ 2004.368108][T26520] FAULT_INJECTION: forcing a failure. [ 2004.368108][T26520] name failslab, interval 1, probability 0, space 0, times 0 [ 2004.368150][T26520] CPU: 0 UID: 0 PID: 26520 Comm: syz.0.5302 Tainted: G L syzkaller #0 PREEMPT(full) [ 2004.368177][T26520] Tainted: [L]=SOFTLOCKUP [ 2004.368185][T26520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2004.368197][T26520] Call Trace: [ 2004.368204][T26520] [ 2004.368213][T26520] dump_stack_lvl+0x100/0x190 [ 2004.368247][T26520] should_fail_ex.cold+0x5/0xa [ 2004.368277][T26520] should_failslab+0xc2/0x120 [ 2004.368306][T26520] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 2004.368335][T26520] ? bpf_fs_alloc_inode+0x26/0x130 [ 2004.368382][T26520] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 2004.368416][T26520] bpf_fs_alloc_inode+0x26/0x130 [ 2004.368446][T26520] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 2004.368476][T26520] alloc_inode+0x68/0x250 [ 2004.368501][T26520] new_inode+0x22/0x1c0 [ 2004.368527][T26520] bpf_get_inode+0x7b/0xf0 [ 2004.368550][T26520] bpf_mkobj_ops+0xa0/0x2a0 [ 2004.368573][T26520] bpf_fill_super+0x5e1/0x960 [ 2004.368596][T26520] ? __pfx_bpf_fill_super+0x10/0x10 [ 2004.368620][T26520] ? rcu_is_watching+0x13/0xc0 [ 2004.368646][T26520] ? cap_capable+0x107/0x430 [ 2004.368673][T26520] ? __pfx_bpf_fill_super+0x10/0x10 [ 2004.368692][T26520] get_tree_nodev+0xdd/0x190 [ 2004.368721][T26520] vfs_get_tree+0x92/0x320 [ 2004.368744][T26520] vfs_cmd_create+0xd7/0x2a0 [ 2004.368771][T26520] __do_sys_fsconfig+0x55a/0xcb0 [ 2004.368800][T26520] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 2004.368839][T26520] do_syscall_64+0x123/0x790 [ 2004.368874][T26520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2004.368894][T26520] RIP: 0033:0x7efcb279e559 [ 2004.368912][T26520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2004.368932][T26520] RSP: 002b:00007efcb09d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 2004.368954][T26520] RAX: ffffffffffffffda RBX: 00007efcb2a26090 RCX: 00007efcb279e559 [ 2004.368968][T26520] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 2004.368980][T26520] RBP: 00007efcb2835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 2004.368992][T26520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2004.369004][T26520] R13: 00007efcb2a26128 R14: 00007efcb2a26090 R15: 00007ffdbb0da8c8 [ 2004.369034][T26520] [ 2004.514403][T26562] netlink: 'syz.6.5316': attribute type 23 has an invalid length. [ 2004.752750][T26564] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5317'. [ 2007.402684][T26579] 9p: Bad value for 'rfdno' [ 2007.591147][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2010.087683][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2010.087701][ T30] audit: type=1400 audit(2000001705.750:2492): avc: denied { accept } for pid=26593 comm="syz.6.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2010.118865][ T30] audit: type=1400 audit(2000001705.787:2493): avc: denied { connect } for pid=26593 comm="syz.6.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2010.474368][T21321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2010.784345][T21321] usb 4-1: Using ep0 maxpacket: 32 [ 2010.785305][T21321] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2010.786180][T21321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.787534][T21321] usb 4-1: config 0 descriptor?? [ 2011.728954][T21321] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2011.744966][T21321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2011.756861][T21321] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2011.756904][T21321] usb 4-1: media controller created [ 2011.826906][T21321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2012.075069][T26622] CUSE: unknown device info "" [ 2012.075084][T26622] CUSE: unknown device info "" [ 2012.075091][T26622] CUSE: unknown device info "" [ 2012.075098][T26622] CUSE: unknown device info "" [ 2012.075105][T26622] CUSE: unknown device info "ÿ" [ 2012.075112][T26622] CUSE: zero length info key specified [ 2012.076024][ T30] audit: type=1400 audit(2000001707.612:2494): avc: denied { write } for pid=26621 comm="syz.6.5334" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2012.469648][T21321] az6027: usb out operation failed. (-71) [ 2012.469666][T21321] stb0899_attach: Driver disabled by Kconfig [ 2012.469675][T21321] az6027: no front-end attached [ 2012.469675][T21321] [ 2012.471318][T21321] az6027: usb out operation failed. (-71) [ 2012.471334][T21321] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2012.482589][T21321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 2012.497090][ T30] audit: type=1400 audit(2000001708.015:2495): avc: denied { search } for pid=4952 comm="acpid" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 2012.498648][T21321] dvb-usb: schedule remote query interval to 400 msecs. [ 2012.498664][T21321] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2012.508824][T21321] usb 4-1: USB disconnect, device number 6 [ 2012.516354][ T30] audit: type=1400 audit(2000001708.033:2496): avc: denied { search } for pid=4952 comm="acpid" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 2012.656371][ T30] audit: type=1400 audit(2000001708.164:2497): avc: denied { search } for pid=4952 comm="acpid" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 2012.742234][T21321] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2012.999871][T26642] syzkaller0: entered promiscuous mode [ 2012.999893][T26642] syzkaller0: entered allmulticast mode [ 2013.440713][T26648] FAULT_INJECTION: forcing a failure. [ 2013.440713][T26648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2013.440753][T26648] CPU: 1 UID: 0 PID: 26648 Comm: syz.6.5340 Tainted: G L syzkaller #0 PREEMPT(full) [ 2013.440779][T26648] Tainted: [L]=SOFTLOCKUP [ 2013.440787][T26648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2013.440798][T26648] Call Trace: [ 2013.440805][T26648] [ 2013.440814][T26648] dump_stack_lvl+0x100/0x190 [ 2013.440846][T26648] should_fail_ex.cold+0x5/0xa [ 2013.440877][T26648] _copy_from_user+0x2e/0xd0 [ 2013.440906][T26648] snd_pcm_oss_write2+0x1c2/0x400 [ 2013.440933][T26648] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 2013.440957][T26648] ? snd_pcm_oss_write+0x436/0xa30 [ 2013.440985][T26648] snd_pcm_oss_write+0x729/0xa30 [ 2013.441010][T26648] ? security_file_permission+0x76/0x210 [ 2013.441045][T26648] vfs_write+0x2aa/0x1050 [ 2013.441071][T26648] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 2013.441094][T26648] ? lock_acquire+0x1d1/0x380 [ 2013.441115][T26648] ? __fget_files+0x34/0x3d0 [ 2013.441142][T26648] ? __pfx_vfs_write+0x10/0x10 [ 2013.441162][T26648] ? find_held_lock+0x2b/0x80 [ 2013.441189][T26648] ? __fget_files+0x215/0x3d0 [ 2013.441214][T26648] ? __fget_files+0x215/0x3d0 [ 2013.441244][T26648] ? __fget_files+0x21f/0x3d0 [ 2013.441277][T26648] ksys_write+0x12a/0x250 [ 2013.441300][T26648] ? __pfx_ksys_write+0x10/0x10 [ 2013.441331][T26648] do_syscall_64+0x123/0x790 [ 2013.441364][T26648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2013.441384][T26648] RIP: 0033:0x7f17faf9e559 [ 2013.441400][T26648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2013.441418][T26648] RSP: 002b:00007f17fbdcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2013.441436][T26648] RAX: ffffffffffffffda RBX: 00007f17fb226090 RCX: 00007f17faf9e559 [ 2013.441448][T26648] RDX: 00000000ffffffd9 RSI: 00002000000005c0 RDI: 0000000000000005 [ 2013.441460][T26648] RBP: 00007f17fbdcf090 R08: 0000000000000000 R09: 0000000000000000 [ 2013.441472][T26648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2013.441490][T26648] R13: 00007f17fb226128 R14: 00007f17fb226090 R15: 00007ffcf109c4d8 [ 2013.441518][T26648] [ 2014.627628][ T30] audit: type=1400 audit(2000001709.999:2498): avc: denied { listen } for pid=26649 comm="syz.6.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2014.653133][ T30] audit: type=1400 audit(2000001710.036:2499): avc: denied { setopt } for pid=26649 comm="syz.6.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2014.791339][ T30] audit: type=1400 audit(2000001710.167:2500): avc: denied { read } for pid=26651 comm="syz.0.5342" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2014.793952][ T30] audit: type=1400 audit(2000001710.167:2501): avc: denied { open } for pid=26651 comm="syz.0.5342" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2014.980345][T26658] syzkaller0: entered promiscuous mode [ 2014.980366][T26658] syzkaller0: entered allmulticast mode [ 2015.658601][T26645] ubi0: attaching mtd0 [ 2015.709673][T26645] ubi0: scanning is finished [ 2015.710250][T26645] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 2016.840247][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2016.840260][ T30] audit: type=1400 audit(2000001712.077:2503): avc: denied { getopt } for pid=26671 comm="syz.4.5346" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2016.843647][T26645] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 2016.883203][T26672] SELinux: DCCP has been removed, pid=26672 comm=syz.4.5346 [ 2018.213216][T26696] FAULT_INJECTION: forcing a failure. [ 2018.213216][T26696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2018.213239][T26696] CPU: 1 UID: 0 PID: 26696 Comm: syz.3.5355 Tainted: G L syzkaller #0 PREEMPT(full) [ 2018.213254][T26696] Tainted: [L]=SOFTLOCKUP [ 2018.213258][T26696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2018.213265][T26696] Call Trace: [ 2018.213269][T26696] [ 2018.213274][T26696] dump_stack_lvl+0x100/0x190 [ 2018.213293][T26696] should_fail_ex.cold+0x5/0xa [ 2018.213310][T26696] _copy_from_user+0x2e/0xd0 [ 2018.213327][T26696] move_addr_to_kernel+0x65/0x170 [ 2018.213344][T26696] __sys_sendto+0x1b8/0x4e0 [ 2018.213358][T26696] ? __pfx___sys_sendto+0x10/0x10 [ 2018.213380][T26696] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2018.213403][T26696] ? ksys_write+0x1ac/0x250 [ 2018.213418][T26696] ? __pfx_ksys_write+0x10/0x10 [ 2018.213433][T26696] __x64_sys_sendto+0xe0/0x1c0 [ 2018.213444][T26696] ? do_syscall_64+0xae/0x790 [ 2018.213459][T26696] ? lockdep_hardirqs_on+0x7d/0x110 [ 2018.213475][T26696] do_syscall_64+0x123/0x790 [ 2018.213492][T26696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2018.213504][T26696] RIP: 0033:0x7ff267b9e559 [ 2018.213514][T26696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2018.213525][T26696] RSP: 002b:00007ff268b33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2018.213536][T26696] RAX: ffffffffffffffda RBX: 00007ff267e25fa0 RCX: 00007ff267b9e559 [ 2018.213543][T26696] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000003 [ 2018.213550][T26696] RBP: 00007ff268b33090 R08: 0000200000000540 R09: 0000000000000013 [ 2018.213557][T26696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2018.213564][T26696] R13: 00007ff267e26038 R14: 00007ff267e25fa0 R15: 00007ffd23f533f8 [ 2018.213579][T26696] [ 2019.121619][ T30] audit: type=1326 audit(2000001714.210:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26706 comm="syz.0.5349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcb279e559 code=0x0 [ 2020.210444][ T30] audit: type=1400 audit(2000001715.231:2505): avc: denied { read write } for pid=26706 comm="syz.0.5349" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2020.210511][ T30] audit: type=1400 audit(2000001715.231:2506): avc: denied { open } for pid=26706 comm="syz.0.5349" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2020.604623][T26722] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 2020.651324][T26724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.651693][T26724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2022.772177][T26751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5369'. [ 2025.556011][T26778] xt_l2tp: unknown flags: 17 [ 2026.192026][ T30] audit: type=1400 audit(2000001720.827:2507): avc: denied { ioctl } for pid=26785 comm="syz.3.5371" path="socket:[103971]" dev="sockfs" ino=103971 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2026.195689][ T30] audit: type=1400 audit(2000001720.837:2508): avc: denied { bind } for pid=26785 comm="syz.3.5371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2028.768130][T26801] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 2029.027398][T26808] 9pnet_fd: Insufficient options for proto=fd [ 2029.335380][T26816] FAULT_INJECTION: forcing a failure. [ 2029.335380][T26816] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.335403][T26816] CPU: 1 UID: 0 PID: 26816 Comm: syz.0.5387 Tainted: G L syzkaller #0 PREEMPT(full) [ 2029.335418][T26816] Tainted: [L]=SOFTLOCKUP [ 2029.335422][T26816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2029.335429][T26816] Call Trace: [ 2029.335434][T26816] [ 2029.335439][T26816] dump_stack_lvl+0x100/0x190 [ 2029.335459][T26816] should_fail_ex.cold+0x5/0xa [ 2029.335476][T26816] should_failslab+0xc2/0x120 [ 2029.335493][T26816] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 2029.335509][T26816] ? __alloc_skb+0x140/0x710 [ 2029.335523][T26816] __alloc_skb+0x140/0x710 [ 2029.335533][T26816] ? __alloc_skb+0x5b7/0x710 [ 2029.335543][T26816] ? __pfx___alloc_skb+0x10/0x10 [ 2029.335552][T26816] ? rcu_is_watching+0x13/0xc0 [ 2029.335571][T26816] ? trace_contention_end+0x126/0x160 [ 2029.335589][T26816] rtmsg_ifa+0x16a/0x270 [ 2029.335603][T26816] ? __pfx_rtmsg_ifa+0x10/0x10 [ 2029.335621][T26816] __inet_del_ifa+0x3cb/0xf40 [ 2029.335639][T26816] devinet_ioctl+0x154c/0x1f10 [ 2029.335657][T26816] ? __pfx_devinet_ioctl+0x10/0x10 [ 2029.335671][T26816] ? _copy_from_user+0x59/0xd0 [ 2029.335690][T26816] inet_ioctl+0x3aa/0x3f0 [ 2029.335706][T26816] ? __pfx_inet_ioctl+0x10/0x10 [ 2029.335729][T26816] ? tomoyo_path_number_perm+0x188/0x580 [ 2029.335749][T26816] sock_do_ioctl+0x118/0x280 [ 2029.335767][T26816] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2029.335781][T26816] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2029.335799][T26816] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2029.335811][T26816] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 2029.335835][T26816] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2029.335866][T26816] sock_ioctl+0x599/0x6b0 [ 2029.335890][T26816] ? __pfx_sock_ioctl+0x10/0x10 [ 2029.335920][T26816] ? selinux_file_ioctl+0x13b/0x290 [ 2029.335944][T26816] ? selinux_file_ioctl+0xb6/0x290 [ 2029.335967][T26816] ? __pfx_sock_ioctl+0x10/0x10 [ 2029.335983][T26816] __x64_sys_ioctl+0x18e/0x210 [ 2029.335998][T26816] do_syscall_64+0x123/0x790 [ 2029.336016][T26816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.336028][T26816] RIP: 0033:0x7efcb279e559 [ 2029.336038][T26816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2029.336050][T26816] RSP: 002b:00007efcb09d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2029.336061][T26816] RAX: ffffffffffffffda RBX: 00007efcb2a26090 RCX: 00007efcb279e559 [ 2029.336068][T26816] RDX: 000020000001a540 RSI: 000000000000891c RDI: 0000000000000008 [ 2029.336075][T26816] RBP: 00007efcb09d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2029.336081][T26816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2029.336088][T26816] R13: 00007efcb2a26128 R14: 00007efcb2a26090 R15: 00007ffdbb0da8c8 [ 2029.336103][T26816] [ 2034.057790][T26844] 9pnet_fd: Insufficient options for proto=fd [ 2034.386810][T26852] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 2034.942699][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2035.277511][T26860] FAULT_INJECTION: forcing a failure. [ 2035.277511][T26860] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.277535][T26860] CPU: 1 UID: 0 PID: 26860 Comm: syz.3.5400 Tainted: G L syzkaller #0 PREEMPT(full) [ 2035.277554][T26860] Tainted: [L]=SOFTLOCKUP [ 2035.277559][T26860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2035.277566][T26860] Call Trace: [ 2035.277571][T26860] [ 2035.277576][T26860] dump_stack_lvl+0x100/0x190 [ 2035.277598][T26860] should_fail_ex.cold+0x5/0xa [ 2035.277616][T26860] should_failslab+0xc2/0x120 [ 2035.277636][T26860] kmem_cache_alloc_noprof+0x92/0x6a0 [ 2035.277651][T26860] ? __proc_create+0xc1/0x8f0 [ 2035.277667][T26860] ? __proc_create+0x247/0x8f0 [ 2035.277683][T26860] __proc_create+0x247/0x8f0 [ 2035.277697][T26860] ? __pfx___proc_create+0x10/0x10 [ 2035.277713][T26860] ? _raw_write_unlock+0x28/0x50 [ 2035.277729][T26860] ? proc_register+0x56d/0x910 [ 2035.277745][T26860] proc_create_reg+0x75/0x170 [ 2035.277761][T26860] proc_create_net_data+0x8e/0x1c0 [ 2035.277776][T26860] ? __pfx_proc_create_net_data+0x10/0x10 [ 2035.277795][T26860] ? __pfx_inet_init_net+0x10/0x10 [ 2035.277811][T26860] ? __pfx_tcp4_proc_init_net+0x10/0x10 [ 2035.277827][T26860] tcp4_proc_init_net+0x57/0x80 [ 2035.277841][T26860] ops_init+0x1e2/0x5f0 [ 2035.277856][T26860] setup_net+0x118/0x3a0 [ 2035.277869][T26860] ? __pfx_setup_net+0x10/0x10 [ 2035.277886][T26860] copy_net_ns+0x345/0x7a0 [ 2035.277901][T26860] create_new_namespaces+0x3ea/0xac0 [ 2035.277920][T26860] unshare_nsproxy_namespaces+0xf2/0x220 [ 2035.277936][T26860] ksys_unshare+0x4a2/0xb30 [ 2035.277951][T26860] ? __pfx_ksys_unshare+0x10/0x10 [ 2035.277972][T26860] __x64_sys_unshare+0x31/0x40 [ 2035.277986][T26860] do_syscall_64+0x123/0x790 [ 2035.278004][T26860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2035.278016][T26860] RIP: 0033:0x7ff267b9e559 [ 2035.278030][T26860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2035.278043][T26860] RSP: 002b:00007ff268b33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2035.278055][T26860] RAX: ffffffffffffffda RBX: 00007ff267e25fa0 RCX: 00007ff267b9e559 [ 2035.278063][T26860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2035.278070][T26860] RBP: 00007ff267c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 2035.278077][T26860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2035.278083][T26860] R13: 00007ff267e26038 R14: 00007ff267e25fa0 R15: 00007ffd23f533f8 [ 2035.278099][T26860] [ 2035.742341][T26826] Set syz1 is full, maxelem 65536 reached [ 2035.783707][T26868] sl0: compressed packet ignored [ 2037.237828][T17996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2037.237849][T17996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.651509][ T30] audit: type=1400 audit(2000001731.553:2509): avc: denied { write } for pid=26883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2038.009411][ T30] audit: type=1400 audit(2000001731.833:2510): avc: denied { write } for pid=26911 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2038.857970][ T30] audit: type=1400 audit(2000001732.685:2511): avc: denied { write } for pid=26924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2039.544682][ T30] audit: type=1400 audit(2000001733.321:2512): avc: denied { write } for pid=26950 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2039.697675][T21614] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2039.847994][T26956] zswap: compressor  not available [ 2039.859582][T21614] usb 4-1: Using ep0 maxpacket: 32 [ 2039.860205][T21614] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2039.861161][T21614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.864683][T21614] usb 4-1: config 0 descriptor?? [ 2040.089686][T21614] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2040.099834][T21614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2040.102283][T21614] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2040.102335][T21614] usb 4-1: media controller created [ 2040.120744][ T30] audit: type=1400 audit(2000001733.855:2513): avc: denied { write } for pid=26957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.130562][T21614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2040.316799][ T30] audit: type=1400 audit(2000001734.042:2514): avc: denied { write } for pid=26977 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2040.444486][ T30] audit: type=1400 audit(2000001734.164:2515): avc: denied { mount } for pid=26983 comm="syz.4.5425" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2040.460158][T26984] dummy0: entered promiscuous mode [ 2040.752450][T21614] az6027: usb out operation failed. (-71) [ 2040.752468][T21614] stb0899_attach: Driver disabled by Kconfig [ 2040.752478][T21614] az6027: no front-end attached [ 2040.752478][T21614] [ 2040.753280][T21614] az6027: usb out operation failed. (-71) [ 2040.753293][T21614] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2040.760519][T21614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input58 [ 2040.763764][T21614] dvb-usb: schedule remote query interval to 400 msecs. [ 2040.763780][T21614] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2040.764173][ T30] audit: type=1400 audit(2000001734.463:2516): avc: denied { search } for pid=4952 comm="acpid" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 2040.769132][T21614] usb 4-1: USB disconnect, device number 7 [ 2040.793268][ T30] audit: type=1400 audit(2000001734.491:2517): avc: denied { read } for pid=26990 comm="syz.0.5427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2040.880232][ T30] audit: type=1400 audit(2000001734.576:2518): avc: denied { search } for pid=4952 comm="acpid" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 2042.316636][T27010] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5429'. [ 2042.316704][T27010] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5429'. [ 2042.316747][T27010] netlink: 'syz.5.5429': attribute type 5 has an invalid length. [ 2042.316773][T27010] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5429'. [ 2042.411347][T21614] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2042.870679][T27029] Invalid option length (1004290) for dns_resolver key [ 2044.869174][T23146] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2045.030214][T23146] usb 4-1: Using ep0 maxpacket: 16 [ 2045.030683][T23146] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 2045.031836][T23146] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2045.031874][T23146] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2045.031899][T23146] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2045.031920][T23146] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2045.031945][T23146] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2045.031974][T23146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.039038][T23146] usb 4-1: config 0 descriptor?? [ 2045.466613][T27072] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 2045.608785][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2045.608802][ T30] audit: type=1400 audit(2000001739.002:2522): avc: denied { write } for pid=27047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2045.649104][T23146] logitech-djreceiver 0003:046D:C53A.001F: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 2047.573163][T11015] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 2047.576866][T27087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5447'. [ 2047.597196][T27087] fuse: fd is not a fuse device [ 2047.718824][ T30] audit: type=1400 audit(2000001740.977:2523): avc: denied { write } for pid=27089 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2049.167756][T27091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.189597][T23146] usb 4-1: USB disconnect, device number 8 [ 2049.203403][T27091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2051.195172][T27123] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 2054.448689][T27145] 9p: Bad value for 'rfdno' [ 2055.590487][ T30] audit: type=1400 audit(2000001748.333:2524): avc: denied { firmware_load } for pid=27146 comm="syz.4.5465" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 2057.094612][T27167] tipc: Enabling of bearer rejected, failed to enable media [ 2057.254020][ T30] audit: type=1400 audit(2000001749.831:2525): avc: denied { watch_sb watch_reads } for pid=27166 comm="syz.6.5460" path="/282/file0" dev="tmpfs" ino=1605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2057.903710][T27178] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 2058.351263][T11015] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2058.938872][T11015] usb 4-1: Using ep0 maxpacket: 32 [ 2058.939920][T11015] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2058.959485][T11015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.976777][T11015] usb 4-1: config 0 descriptor?? [ 2059.103296][T27200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2059.106201][T27200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2059.296424][T11015] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2059.327273][T11015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2059.329924][T11015] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2059.329968][T11015] usb 4-1: media controller created [ 2060.014968][T11015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2060.687278][T11015] az6027: usb out operation failed. (-71) [ 2060.687302][T11015] stb0899_attach: Driver disabled by Kconfig [ 2060.687312][T11015] az6027: no front-end attached [ 2060.687312][T11015] [ 2060.687612][T11015] az6027: usb out operation failed. (-71) [ 2060.687625][T11015] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2061.172248][T11015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input59 [ 2061.188772][T25947] rpcbind: server 127.0.0.1 not responding, timed out [ 2061.198692][ T30] audit: type=1400 audit(2000001753.593:2526): avc: denied { search } for pid=4952 comm="acpid" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 2061.224583][T11015] dvb-usb: schedule remote query interval to 400 msecs. [ 2061.224602][T11015] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2061.253365][T11015] usb 4-1: USB disconnect, device number 9 [ 2061.257392][ T30] audit: type=1400 audit(2000001753.640:2527): avc: denied { search } for pid=4952 comm="acpid" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 2061.321542][ T30] audit: type=1400 audit(2000001753.705:2528): avc: denied { search } for pid=4952 comm="acpid" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 2061.593879][T11015] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2061.782249][T27230] misc userio: Invalid payload size [ 2065.562834][ T30] audit: type=1400 audit(2000001757.215:2529): avc: denied { remount } for pid=27251 comm="syz.4.5488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2065.749252][ T30] audit: type=1400 audit(2000001757.851:2530): avc: denied { write } for pid=27216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2066.966123][ T30] audit: type=1400 audit(2000001758.993:2531): avc: denied { write } for pid=27265 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2067.517640][T27273] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 2068.249705][T27284] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 2068.466465][ T30] audit: type=1400 audit(2000001760.397:2532): avc: denied { write } for pid=27268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2068.747752][ T30] audit: type=1400 audit(2000001760.650:2533): avc: denied { write } for pid=27288 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2073.238439][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2138.886868][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2204.534436][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2225.732262][ T32] INFO: task kworker/1:1:29 blocked for more than 143 seconds. [ 2225.732287][ T32] Tainted: G L syzkaller #0 [ 2225.732297][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2225.732305][ T32] task:kworker/1:1 state:D stack:20520 pid:29 tgid:29 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2225.732355][ T32] Workqueue: usb_hub_wq hub_event [ 2225.732380][ T32] Call Trace: [ 2225.732386][ T32] [ 2225.732397][ T32] __schedule+0x1259/0x6920 [ 2225.732438][ T32] ? __pfx___schedule+0x10/0x10 [ 2225.732460][ T32] ? find_held_lock+0x2b/0x80 [ 2225.732487][ T32] ? schedule+0x225/0x2c0 [ 2225.732512][ T32] schedule+0xdd/0x2c0 [ 2225.732535][ T32] usb_kill_urb+0x253/0x320 [ 2225.732562][ T32] ? __pfx_usb_kill_urb+0x10/0x10 [ 2225.732590][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2225.732619][ T32] usb_start_wait_urb+0x2c3/0x580 [ 2225.732651][ T32] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2225.732687][ T32] ? __asan_memset+0x23/0x50 [ 2225.732715][ T32] usb_control_msg+0x328/0x4b0 [ 2225.732734][ T32] ? __pfx_usb_control_msg+0x10/0x10 [ 2225.732762][ T32] ? ksm_scan_thread+0x3db0/0x6fd0 [ 2225.732788][ T32] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 2225.732828][ T32] hub_port_init+0x642/0x37f0 [ 2225.732858][ T32] hub_event+0x2ead/0x4420 [ 2225.732905][ T32] ? __pfx_hub_event+0x10/0x10 [ 2225.732924][ T32] ? lock_sequence+0x30/0x110 [ 2225.732953][ T32] ? lock_acquire+0x1d1/0x380 [ 2225.732973][ T32] ? process_one_work+0xa2c/0x1b10 [ 2225.732994][ T32] ? process_one_work+0x906/0x1b10 [ 2225.733011][ T32] ? process_one_work+0x906/0x1b10 [ 2225.733033][ T32] process_one_work+0xac7/0x1b10 [ 2225.733063][ T32] ? __pfx_process_one_work+0x10/0x10 [ 2225.733092][ T32] ? lock_acquire+0x1d1/0x380 [ 2225.733121][ T32] ? __pfx_hub_event+0x10/0x10 [ 2225.733144][ T32] worker_thread+0x5ef/0xe50 [ 2225.733168][ T32] ? kthread+0x13a/0x450 [ 2225.733183][ T32] ? __pfx_worker_thread+0x10/0x10 [ 2225.733193][ T32] kthread+0x373/0x450 [ 2225.733209][ T32] ? __pfx_kthread+0x10/0x10 [ 2225.733226][ T32] ret_from_fork+0x730/0xd60 [ 2225.733241][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2225.733255][ T32] ? __switch_to+0x800/0x10f0 [ 2225.733271][ T32] ? __pfx_kthread+0x10/0x10 [ 2225.733288][ T32] ret_from_fork_asm+0x1a/0x30 [ 2225.733309][ T32] [ 2225.733409][ T32] [ 2225.733409][ T32] Showing all locks held in the system: [ 2225.733416][ T32] locks held by kworker/1:1/29: 5, on CPU#1: [ 2225.733425][ T32] #0: ffff888022ef1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 2225.733452][ T32] #1: ffffc90000a47d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 2225.733477][ T32] #2: ffff88802db3d1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 2225.733503][ T32] #3: ffff88802dce1568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 2225.733529][ T32] #4: ffff88802e59fd60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 2225.733555][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 2225.733563][ T32] #0: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2225.733612][ T32] locks held by getty/5355: 2, on CPU#0: [ 2225.733620][ T32] #0: ffff88803a5980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2225.733661][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 2225.733701][ T32] [ 2225.733704][ T32] ============================================= [ 2225.733704][ T32] [ 2225.733709][ T32] NMI backtrace for cpu 1 [ 2225.733718][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2225.733733][ T32] Tainted: [L]=SOFTLOCKUP [ 2225.733740][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2225.733746][ T32] Call Trace: [ 2225.733751][ T32] [ 2225.733755][ T32] dump_stack_lvl+0x100/0x190 [ 2225.733772][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2225.733791][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2225.733805][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 2225.733831][ T32] sys_info+0x141/0x190 [ 2225.733843][ T32] watchdog+0xcb1/0x1030 [ 2225.733863][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2225.733886][ T32] ? __pfx_watchdog+0x10/0x10 [ 2225.733902][ T32] ? __kthread_parkme+0x18f/0x230 [ 2225.733918][ T32] ? kthread+0x13a/0x450 [ 2225.733932][ T32] ? __pfx_watchdog+0x10/0x10 [ 2225.733945][ T32] kthread+0x373/0x450 [ 2225.733960][ T32] ? __pfx_kthread+0x10/0x10 [ 2225.733977][ T32] ret_from_fork+0x730/0xd60 [ 2225.733990][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2225.734003][ T32] ? __switch_to+0x800/0x10f0 [ 2225.734019][ T32] ? __pfx_kthread+0x10/0x10 [ 2225.734036][ T32] ret_from_fork_asm+0x1a/0x30 [ 2225.734054][ T32] [ 2225.734070][ T32] Sending NMI from CPU 1 to CPUs 0: [ 2225.734092][ C0] NMI backtrace for cpu 0 [ 2225.734105][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2225.734124][ C0] Tainted: [L]=SOFTLOCKUP [ 2225.734129][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2225.734137][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2225.734158][ C0] Code: 97 96 02 e9 d3 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 38 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2225.734172][ C0] RSP: 0018:ffffffff8fa07cf0 EFLAGS: 00000246 [ 2225.734184][ C0] RAX: 0000000006d4a565 RBX: ffffffff8fa91580 RCX: ffffffff8bd482f5 [ 2225.734194][ C0] RDX: 0000000000000001 RSI: ffffffff8e3e3b01 RDI: ffffffff8c625680 [ 2225.734204][ C0] RBP: fffffbfff1f522b0 R08: 0000000000000001 R09: ffffed10170467bd [ 2225.734213][ C0] R10: ffff8880b8233deb R11: 0000000000000001 R12: 0000000000000000 [ 2225.734222][ C0] R13: 0000000000000000 R14: 1ffffffff1f40fa2 R15: dffffc0000000000 [ 2225.734232][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 2225.734247][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2225.734257][ C0] CR2: 000055eddfdb6660 CR3: 000000000fb96000 CR4: 00000000003526f0 [ 2225.734266][ C0] Call Trace: [ 2225.734271][ C0] [ 2225.734276][ C0] default_idle+0x9/0x10 [ 2225.734288][ C0] default_idle_call+0x6c/0xb0 [ 2225.734301][ C0] do_idle+0x3ae/0x5b0 [ 2225.734357][ C0] ? __pfx_do_idle+0x10/0x10 [ 2225.734374][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 2225.734395][ C0] cpu_startup_entry+0x4f/0x60 [ 2225.734413][ C0] rest_init+0x2d3/0x2e0 [ 2225.734427][ C0] ? __pfx_rest_init+0x10/0x10 [ 2225.734441][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 2225.734458][ C0] ? lock_acquire+0x1d1/0x380 [ 2225.734475][ C0] ? __pfx_kernel_init+0x10/0x10 [ 2225.734490][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 2225.734508][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 2225.734527][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 2225.734544][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2225.734563][ C0] start_kernel+0x48e/0x490 [ 2225.734581][ C0] x86_64_start_reservations+0x24/0x30 [ 2225.734598][ C0] x86_64_start_kernel+0x12b/0x130 [ 2225.734616][ C0] common_startup_64+0x13e/0x158 [ 2225.734638][ C0] [ 2225.735096][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 2226.440733][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2226.451391][ T32] Tainted: [L]=SOFTLOCKUP [ 2226.455692][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2226.465727][ T32] Call Trace: [ 2226.468986][ T32] [ 2226.471901][ T32] dump_stack_lvl+0x100/0x190 [ 2226.476570][ T32] vpanic+0x553/0x970 [ 2226.480534][ T32] ? __pfx_vpanic+0x10/0x10 [ 2226.485023][ T32] panic+0xd1/0xe0 [ 2226.488732][ T32] ? __pfx_panic+0x10/0x10 [ 2226.493153][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 2226.499294][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 2226.505431][ T32] ? watchdog.cold+0x1ec/0x234 [ 2226.510188][ T32] watchdog.cold+0x1fd/0x234 [ 2226.514764][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2226.520560][ T32] ? __pfx_watchdog+0x10/0x10 [ 2226.525226][ T32] ? __kthread_parkme+0x18f/0x230 [ 2226.530238][ T32] ? kthread+0x13a/0x450 [ 2226.534469][ T32] ? __pfx_watchdog+0x10/0x10 [ 2226.539156][ T32] kthread+0x373/0x450 [ 2226.543213][ T32] ? __pfx_kthread+0x10/0x10 [ 2226.547790][ T32] ret_from_fork+0x730/0xd60 [ 2226.552370][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2226.557466][ T32] ? __switch_to+0x800/0x10f0 [ 2226.562130][ T32] ? __pfx_kthread+0x10/0x10 [ 2226.566708][ T32] ret_from_fork_asm+0x1a/0x30 [ 2226.571466][ T32] [ 2226.574662][ T32] Kernel Offset: disabled [ 2226.578961][ T32] Rebooting in 86400 seconds..