last executing test programs: 26m5.078669042s ago: executing program 3 (id=203): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="2400000000000000000000000700000044144ed3ffffffffffffffff6401010200000007000000001c00003c"], 0x88}, 0x4004804) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x8, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x0, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000007, 0x1, 0xc, 0x5, 0x10009, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x63, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7ffff7ff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x1008007, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 26m4.072243632s ago: executing program 3 (id=207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x64, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x396}, {0x6, 0x16, 0xa}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004094}, 0x24008040) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff71dd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000045}, 0xc0c0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x5, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x0, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0x7f, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x6, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0x8, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x800, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x13, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x3ff, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x7b04, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0x9, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9606, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x2f, 0x20, 0x7, 0x10, 0x50, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7800, 0x9, 0x6}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x108, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0xe8, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc, 0x0, 0x0, 0x64}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x4c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x108}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000cc0)={@dev, @rand_addr, 0x0}, &(0x7f0000000d00)=0xc) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x2, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000d40)={'gre0\x00', 0x0, 0x8, 0x7800, 0x8000, 0x0, {{0x18, 0x4, 0x0, 0x6, 0x60, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@rr={0x7, 0x1b, 0x7d, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @local]}, @timestamp={0x44, 0x20, 0x1b, 0x0, 0xe, [0x38c, 0x1, 0x3, 0xfffffff1, 0x63236511, 0xfffffff7, 0xfffffff9]}, @lsrr={0x83, 0xf, 0x46, [@private=0xa010102, @local, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e00)={0x2b0, r4, 0x104, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x84}, 0x48080) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendto$inet6(r2, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r2, 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x2, 0x1, 0xf9, 0xdd, 0x11, 0xa7, 0xe, 0x2, 0xb, 0xb5, 0xbb, 0x2, 0x68}, 0xe) 26m3.824379396s ago: executing program 3 (id=210): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) syz_clone3(0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f0000000000)={0x0, 0x26}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac2(r6, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x34, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x34}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) preadv2(r1, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000400)=""/130, 0x82}], 0x3, 0x9, 0x6, 0x16) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 26m2.667016865s ago: executing program 2 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCDISCONN(r3, 0x7439) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 26m2.463676181s ago: executing program 2 (id=215): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0x48010) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockopt$inet_int(r7, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', r5, 0x0, 0x5, 0xfc, 0x3, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0xa0, 0xf, 0xfffffbff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf2513000000040001801c00018008000300020000000800030002000000080003000200000024000180080003000200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="4400018008000100", @ANYRES32, @ANYBLOB="140002006d61637674617030000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006772657461703000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0c1401900800030002000000301400020062e70061647a300000000000b1681761433e1cf3ee4fdbd872a1656613562dceea8b44a89b461972b97c7337cf6879152c1c3c204048f9ad258e1dcea8808cea31b76b6b64fb8635cbcc20e9d5b3d5cca96a01", @ANYRES32=r5, @ANYBLOB="08000300000000000800030001000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000022000000000300000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000e0a010200000000000000000a0000020900010073797a31000000000900020073797a3100000000100003"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') close_range(r9, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required, @ioring_restriction_register_op={0x0, 0x16}, @ioring_restriction_sqe_flags_allowed={0x2, 0x24}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1d}, @ioring_restriction_sqe_op={0x1, 0x15}, @ioring_restriction_sqe_op={0x1, 0x16}, @ioring_restriction_sqe_flags_allowed={0x2, 0x3}, @ioring_restriction_sqe_op={0x1, 0x13}, @ioring_restriction_sqe_flags_allowed={0x2, 0x13}], 0x9) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) 26m2.250952511s ago: executing program 2 (id=217): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,', @ANYRESDEC]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x20, 0x12, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 2) 26m1.809327899s ago: executing program 2 (id=221): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) fstat(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) inotify_init() mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='ubifs\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000440)={'\x00', 0x9, 0x6, 0x5, 0x0, 0x0, 0xffffffffffffffff}) 26m1.06105089s ago: executing program 2 (id=222): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x80, 0x4002, 0x0, 0x1}, 'syz1\x00', 0x51}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) socket(0x23, 0x80805, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000080)) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 25m56.529081204s ago: executing program 3 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/vhci\x00', 0x8802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @private0, 0x5}, 0x1c, 0x0}}], 0x1, 0x40088d5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 25m56.32396235s ago: executing program 3 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0xfffffffffffffff8, 0x28, [0xd, 0x2, 0x3, 0xfd], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 25m54.998637272s ago: executing program 3 (id=228): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0x48010) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockopt$inet_int(r7, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', r5, 0x0, 0x5, 0xfc, 0x3, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0xa0, 0xf, 0xfffffbff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf2513000000040001801c00018008000300020000000800030002000000080003000200000024000180080003000200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="4400018008000100", @ANYRES32, @ANYBLOB="140002006d61637674617030000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006772657461703000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0c1401900800030002000000301400020062e70061647a300000000000b1681761433e1cf3ee4fdbd872a1656613562dceea8b44a89b461972b97c7337cf6879152c1c3c204048f9ad258e1dcea8808cea31b76b6b64fb8635cbcc20e9d5b3d5cca96a01", @ANYRES32=r5, @ANYBLOB="08000300000000000800030001000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000022000000000300000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000e0a010200000000000000000a0000020900010073797a31000000000900020073797a3100000000100003"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') close_range(r9, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required, @ioring_restriction_register_op={0x0, 0x16}, @ioring_restriction_sqe_flags_allowed={0x2, 0x24}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1d}, @ioring_restriction_sqe_op={0x1, 0x15}, @ioring_restriction_sqe_op={0x1, 0x16}, @ioring_restriction_sqe_flags_allowed={0x2, 0x3}, @ioring_restriction_sqe_op={0x1, 0x13}, @ioring_restriction_sqe_flags_allowed={0x2, 0x13}], 0x9) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) 25m54.737605059s ago: executing program 32 (id=228): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0x48010) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockopt$inet_int(r7, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', r5, 0x0, 0x5, 0xfc, 0x3, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0xa0, 0xf, 0xfffffbff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf2513000000040001801c00018008000300020000000800030002000000080003000200000024000180080003000200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="4400018008000100", @ANYRES32, @ANYBLOB="140002006d61637674617030000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006772657461703000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0c1401900800030002000000301400020062e70061647a300000000000b1681761433e1cf3ee4fdbd872a1656613562dceea8b44a89b461972b97c7337cf6879152c1c3c204048f9ad258e1dcea8808cea31b76b6b64fb8635cbcc20e9d5b3d5cca96a01", @ANYRES32=r5, @ANYBLOB="08000300000000000800030001000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000022000000000300000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000e0a010200000000000000000a0000020900010073797a31000000000900020073797a3100000000100003"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') close_range(r9, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required, @ioring_restriction_register_op={0x0, 0x16}, @ioring_restriction_sqe_flags_allowed={0x2, 0x24}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1d}, @ioring_restriction_sqe_op={0x1, 0x15}, @ioring_restriction_sqe_op={0x1, 0x16}, @ioring_restriction_sqe_flags_allowed={0x2, 0x3}, @ioring_restriction_sqe_op={0x1, 0x13}, @ioring_restriction_sqe_flags_allowed={0x2, 0x13}], 0x9) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) 25m54.315272733s ago: executing program 2 (id=231): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e00060000", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x3, 0x0) getsockopt(r2, 0x5, 0x10000, &(0x7f00000005c0)=""/131, &(0x7f0000000680)=0x83) read$msr(r4, &(0x7f00000196c0)=""/102386, 0x3e) r5 = add_key(&(0x7f0000000380)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000001c0)="f793875b63", 0x5, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x26) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0)={0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xff, 0x81, 0x7, 0x7fffffff, 0xd, "a19961dc211f7b858c2e7ce1748d8b10688df6", 0xfffffffb, 0xffff}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r8, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) 25m37.150094618s ago: executing program 33 (id=231): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e00060000", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x3, 0x0) getsockopt(r2, 0x5, 0x10000, &(0x7f00000005c0)=""/131, &(0x7f0000000680)=0x83) read$msr(r4, &(0x7f00000196c0)=""/102386, 0x3e) r5 = add_key(&(0x7f0000000380)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000001c0)="f793875b63", 0x5, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x26) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0)={0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xff, 0x81, 0x7, 0x7fffffff, 0xd, "a19961dc211f7b858c2e7ce1748d8b10688df6", 0xfffffffb, 0xffff}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r8, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) 25m28.087287871s ago: executing program 0 (id=261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 25m21.956167627s ago: executing program 0 (id=267): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, r1, {0xffe0, 0x6}, {0xfff2, 0x10}, {0xd, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x404c454) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f", 0x2}], 0x1}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) socket$inet(0x2, 0x1, 0x0) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) fchdir(r8) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x2c4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="32f3000016000152000000"], 0x18}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, r10, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7, 0x80066}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xfe9d128487f77a00}, 0xc2010) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0x810c9365, 0x0) 25m20.55171071s ago: executing program 0 (id=270): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r3, 0x3400000, 0xb, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x10103) 25m19.325677154s ago: executing program 0 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/vhci\x00', 0x8802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 25m19.071714445s ago: executing program 0 (id=275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 25m17.993942367s ago: executing program 0 (id=277): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet(0x2, 0xa, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f0000000440)='[\v\xdbX\xaeV\xbe\xef\x1b[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x81\xff\xff\xff\xff\xff\xff\xffS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xcb\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x9e\xd2qEU\xc0\xbc\xab\x1f+u\x8d#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&M\x00\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\xbdnC\xec#i]\xbf\xa2\x00\x00\x00\x00\x00\x00\x00\x03\xd9\xf6\x88\xf2\xde\xe4\x1ap\xa2\xe7a\r\xcf\x9b\x90n{@kl!\xf3$\x8a+_\x8f)8Y\xb6\xc3\x8d:q\x8d6\xe4\xd5}0\x84\xc1\x02\xb7$\n\xd5\x90\xb5\xb7\xd5*e\xb4\x10\x16\x05\x01\x18\x84\x8c\xe9b\xc1\xe6\n\x86l\xe7\xbd\xe6\xa7^\x18p\xe2t\xe1\xd8\x97r,\xefw=\xa7Vcg\x98\a\x7f\xe1\xe6z\x8e\xab{\xed\xcc\x01\xe8wO\xf9\xe0\x94\xe3E_\x9d\xe9mB\x06\xdc)\x85\xd3A\xa4\x19\x03\x8f\x98E \xc7\x88\xc4\xa6\xe6\x13_\x14bZ\xe3\x81@\xf1\xd2\x05\x93\xe2W*\xe0\xb4X\xec\xa1\xb9\xea\xd4\x16\xb9\x95\xda\x9baP\x90\xe1\xcf\x1d\xa744\x92$\xdd\xe5\x92D<\x01\xa8\x89,\xf6\xd8\x99\n\xe5i,\xc4vem\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\b|\x7f\xe3\xc4*Z 4\xe8S$\x04\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?o\x04\xaaim\xae\xfe\xd2f\xa3\x96\xd7\xb4c)r{\r#\xdd\x90\r\x00\x00\xec\xd4\xff\x9f\x136zR-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00\x9fJ\x8d\xa0&\xf9\xce\xb7j\x18\xec7(\x94}4\xf1\xfe\x86\x9e\xa9\xca8\xbc\xb9\xd8,Q;\x8a\xc2\xbf\x04\xa3Q\x1c\xfb\x00'/935, 0x7) fallocate(r0, 0x0, 0xb, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r3 = socket$inet6(0xa, 0x3, 0x87) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f00000200000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x70, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002"}}]}]}, 0x70}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) 22m58.667571462s ago: executing program 4 (id=658): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xba4e7a40265e5c7b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8b, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xf8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x2e, 0x5, 0x81}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 22m57.105648764s ago: executing program 4 (id=668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000340)={r1}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000780)={r2, &(0x7f00000003c0)='/dev/snd/midiC#D#\x00', 0x70100, &(0x7f0000000440)={@align=0x401, {0xfffd, 0x4bcf, 0xba, 0x2}}, 0xcd, &(0x7f0000000480), &(0x7f0000000500)=0x8}) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000600)='./sys/class/fcloop/ctl/add_target_port\x00', &(0x7f0000000080)='proc\x00', 0x102048, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r7, 0x80047437, 0x10004000000006) write(r1, &(0x7f0000000540)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) 22m55.445635399s ago: executing program 4 (id=671): r0 = socket$inet(0x2, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r3, 0xffff800000000002, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000300)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)={@link_local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, [@hopopts={0x3a}]}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000027000103a7bd7002fadbdf2513000000abfa858b54daa7e9535fb5df6b3a44f9c4650efc980c32149dd4d652648f9672e48dc3"], 0x14}}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 22m54.453043836s ago: executing program 4 (id=674): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="ffffffff00"/15, @ANYRES32], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_pauseparam={0x1, 0x1, 0x4, 0x7ff}}) r5 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x5, 0x6, '\x00', 0xf9}, {0x6, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xbc, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x38, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x2, 0x3, '\x00', 0x10}, {0x9, 0x22, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}}) write(r0, &(0x7f0000000140)='1', 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r6, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) 22m53.053032527s ago: executing program 4 (id=675): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) mount$fuse(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0), 0x900000, &(0x7f0000000680)=ANY=[]) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) 22m37.751958313s ago: executing program 35 (id=675): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) mount$fuse(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0), 0x900000, &(0x7f0000000680)=ANY=[]) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) 20m36.112128876s ago: executing program 8 (id=1212): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x6a76) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f0000154000/0x1000)=nil, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000805}, 0xc31fe084736598c) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r2, &(0x7f0000000040)='c', 0x1) 20m35.806450515s ago: executing program 8 (id=1216): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) epoll_create1(0x0) epoll_create1(0x80000) syz_usb_connect(0x3, 0x3c, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff009440f00a116700000102000109022a00010100c0000904000003ff000000032403070581020002000705020200020007058303"], 0x0) 20m32.137069155s ago: executing program 8 (id=1232): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) setitimer(0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x1, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x1, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0x6, 0x6a, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x8001, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x5, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0xb0a, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1c, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffc, 0x3, 0x4, 0xf, 0x8, 0x0, 0x981, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x1000, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x413, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x8001, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x1, 0x80, 0x9, 0x8006, 0x10000, 0x2, 0x7, 0x400004, 0x5, 0x6d7c, 0x3, 0x8, 0x3, 0x7, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x402, 0x4, 0xea, 0x9, 0x3ff, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x4], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x32, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = eventfd2(0x9, 0x80800) io_setup(0xf, &(0x7f00000008c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x0, 0x19, 0x10, 0x3, 0xc, 0x200, 0x694, 0x3, 0xe}, 0x0) io_submit(r4, 0x1, &(0x7f0000000dc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x80, r2, 0x0, 0x0, 0x80, 0x0, 0x1, r3}]) ioctl$UI_DEV_DESTROY(r0, 0x5502) r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_timedsend(r6, 0x0, 0x0, 0x5, 0x0) r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) mq_timedreceive(r6, &(0x7f0000000400)=""/215, 0xd7, 0x0, 0x0) 20m28.515912863s ago: executing program 8 (id=1245): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd28, 0x255fdbfd, {0x0, 0x0, 0x0, r1, {0xfff2, 0x2}, {0x0, 0xfff3}, {0xfff1, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) (fail_nth: 2) 20m27.723077181s ago: executing program 8 (id=1247): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x44}, 0x28) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x6}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000029500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r1 = getpid() r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000080)={0x1, 0x3, {0x31, 0x24, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17}) 20m24.73449385s ago: executing program 8 (id=1260): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x8040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) migrate_pages(0x0, 0x200, 0x0, &(0x7f00000000c0)=0x3) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="410607"], 0x3d) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10) 20m9.554902563s ago: executing program 36 (id=1260): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x8040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) migrate_pages(0x0, 0x200, 0x0, &(0x7f00000000c0)=0x3) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="410607"], 0x3d) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10) 35.758090533s ago: executing program 9 (id=4612): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r4, &(0x7f0000001240)="62f5ff6ccf3d2ec97f0e4bc8a900d2e75067a5109d749cdf1ba00926335fdca4d2df9c6093533dbe86131af765f8be39df30e3e4f257006bf1826c92170c0a", 0x3f) 35.317110082s ago: executing program 9 (id=4615): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)='S\x00', 0x2}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 33.381837235s ago: executing program 9 (id=4622): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) 16.601262446s ago: executing program 6 (id=4659): r0 = syz_clone(0x11, 0x0, 0x5a, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x200000}, {@loopback, 0x15, 0x0, 0x1, 0x1}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 13.540916931s ago: executing program 6 (id=4664): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) chmod(&(0x7f0000000000)='./config/cluster/ocfs2/heartbeat/dead_threshold\x00', 0x121) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/dead_threshold\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_SETRSUBD(r2, 0x6410) ioctl$COMEDI_UNLOCK(r2, 0x6406) r3 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80000) sendto$x25(r3, 0x0, 0x0, 0x81, &(0x7f0000000680), 0x12) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140)) (async) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r4, r9, &(0x7f0000000200)={0x0, 0x1460, 0x1, 0x3, 0xb6}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e1e, 0x60, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x4, 0x2009, 0x102, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e86, 0x400, 0x2, 0x21b, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r8, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x1, &(0x7f0000000480), 0x4) (async) setsockopt$inet6_tcp_int(r10, 0x6, 0x1, &(0x7f0000000480), 0x4) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000002c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002f0009239a619791368fc1de03002abd700000000000040000000700118031f9e000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002f0009239a619791368fc1de03002abd700000000000040000000700118031f9e000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") (async) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.423149278s ago: executing program 7 (id=4666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x54}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) (fail_nth: 4) 12.176937852s ago: executing program 7 (id=4667): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x4008804) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x100, "3a8e0300d614000001000100000040004000000000000016c713b41e2a3600", 0x4745504a}) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001"], 0x108}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000003c0)="cb14a75975a03cec0f394becef235a0ad8511193fd97c0b2c72548ace47f57e26acf621b754279a985053dc9a8d92f50615375359658bcceffb70b3382e01f6bbb7babdbd9ea84a6ff717139c95f238e53604def2f9f38e85923dd66f96810268045a9e1eacfce076b2bdfd591768db3091a4ddb58e4a272adc06e772c08e8938248251c", 0x84}, {&(0x7f0000000540)="a5a5ce506250d64dd8a596", 0xb}, {&(0x7f0000000900)="9fe3fb3110cb2b3690a3c50b149bf53c80fa843459d5cefda85dc5e59349e5d1c3054210fcd6aee3418dcb6c1625b95edf028cedcab26f176f262ebef9a77d351ab6a185233e92b7e41408bf3565d6a7a508d0fcd3c2f698100a193a8abd208d4c9e6be78818b2f9caa49a53d38d4327e0b3c923b58d5287fc379c454e91e824e8eb4b6618512a18aba405aab234a83abdab6ab7370d2c63b4e4d20528bbe1d870da51c098e78c13e26c16606552bd9c8aa577a67ff91771835d1b7ea61ef3a5f835bf1f3adb0bd946c1a2a001f1d968a67025029904b1936cce58437c4671cb8585", 0xe2}, {&(0x7f0000000a00)="125e87b56cd4b88f205e7ddd9b5a3aaeeb7af01b7ff19b9e7c6179d805a0b311060f1d2edf4667f6cc31a6550383ae19f2a757dc47", 0x35}, {&(0x7f0000000a40)="c3d129a482d6d1776fcbdcd3c6f7cf091fb19ccc57dcaf689268653a43d1cb4c0ad6a56f6c087071ebe1f3a2664e3a070d220158eb769283796d2f71766988cfbd56ab5dda073852352d21484df8d5c0f6358b1013263efa527073bcde71f8aa00008234b3a3d77d38", 0x69}, {&(0x7f0000000ac0)="1fecad926b50f0ea7fb99729b081b9fff1001b0a31d0c21a3e7354ce7348edbc57d658cceacc3f23f6a5182ac60399f64926ff07c3da5578d926f09b80b01da908292f26009394e1e545f96b26cb2f34509af4b195ef712959374a4a45e830ea4e3927a698bbb3452e0bf7f0febb37b705ce272ec4b7b739ac9a1145e16d5b0f863b6c4679564bfe7e0511254bd06f40bc32a6b4e6fcd0df3e5ca68b80ec0f6802c86b", 0xa3}, {&(0x7f0000000b80)="a0f7acee01b04c00416986d0111ce578963e3e049d1edfbf714dcec519f169eb0bb11412d6c1d43bb7407b0be421edefc2e5541c865eafb0fdd336817e23c5fad6a5e20e610e2133d57f0d338c1fa5c8f89152232314a836b200874a871e635ee085c0a06d8aed503120d2dee6540fa16aa78c04dcd6bc6765cd08b03680e1d875caeb3a4616c50c59f8d5916116ed7818de8fde2d30ddc0ce3d909df98c4aeaba0941fddb7eee07ac55464d77", 0xad}], 0x7}}, {{&(0x7f0000000cc0)=@rc={0x1f, @none, 0x9}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d40)="4c295acfac1c94116f5877a89d15bd5461e388712c8d96efa3df7c129ea4ce653379ec61415cb053190b5c53f0b82a05e28b3a1e4e81be9e3fed31241631e35c34988e4ea3410540f5ab3d1359ded4b6ae3e3f60327a6356329878b38898cfdbf03e6a649652e2c31051c823ddd1f16a9786e202b1539445c56802367906068c45f934eb41f4ee9e597bb386d0d9fd069b76dd3dacd04294506d028cb57c0e71f6d2539791f409ce4c8d3111596be0f2976f0de5f37711f9561d1e885643ecd8db379080f3d68c3650d2248d7b44e654a7f0ab51574b78882c04cdd880a1507dacae8947fa8dcc1f6eac197a1400"/250, 0xfa}, {&(0x7f0000000e40)="cc41f4e0e211ff0ffb38c4750dcb4f3e68d455047ef91ceaea8fe8dfe3a16465f5eb15214bafc7952333ae1a69e31508e7cacd6df65441da1b83a1ee9abb7afdf9e15a2be21fcf0033c6b70966b8605966cbd80ec987ff78fd794f8a3b946dfea717e8ecdd6dcb5d6231e15022cf478cbb7c666e25e9329c03ccaabe95f6f3df622cabb1ddec9ee0421663ee6fad413226c92c97e8ad237483220f8eb766166e8e0d64db37ef95e64a477c", 0xab}], 0x2, &(0x7f0000000f40)=[{0x68, 0x3a, 0x4c, "0b206b75ed5c3fbceb44007dffbae35e64f2e69522206ea3532fd2e33af64d73a47d370741bf0f5db5b345edad31185e3432aeae196562db7ccaf7204409db5027e181b7545104f735a7ab586d51e00e1aa3676470"}, {0xb0, 0x101, 0x2, "00159b3175311d47180ad6e5566fe7d624d6ffa4f0fb5c3a874c2b0ec4c8a5240161dff72ab1539885c459b7e10f4b1c185e1fdda168cf4446591b3a079a4e2e7f24029fa52f35936118016899331c0c0ee8a801e43283bbfc78cb754e9959f351d4c0cc356eeb5a21afe05a862b8e4d56e6b51be9e6ac0a670e36ebfc3a1f9ee056511f94c4721683fec52537516479c417bbcbcbbff42fd55216"}, {0xb8, 0xff, 0x8, "87caa5ccccba74867b99194c0993b93b50de9ba9208296e241100cac8242c4d8ffbaa650a505826729ff5e50a91e833e9386b94349f7a8338b06accce4040cacb4b5db3f18289b39b59477dedcdd5e90284a23588ec79bb427badf1220730f485707788b8f1bc0017dd2c4ba886cde1e4e0c54d799fead718dbfbafab151438b44a24de6d8a477874cf4aaf1dae18148a75e0122ccbee784017df73592735fc54d351138263b2d"}, {0x98, 0x101, 0x1, "1eacf4eecc496649276fd11dc47b3de4bc8da26b3ea3e23e56b5278ea6349c614611ee45807196e6e08e6493f155bafc6ee656eabc0980ed2b3eee91c74c24b04eddc94f524f39ca670c17c23083bfab85edb1fb8d61ba3343460b3af2a4a6237e66c30a9e89ad1ab30b465afd6e34c38326709af1f0050a2584d3e88eb2a6dbad216e"}, {0xe8, 0x101, 0xfa3c, "4d2930b7d62813412163393b4d03ba88ea82fe48534cec68060f9c8f449a6f0b18440506093168c5abcbbb62fffaf7cb456837c0731fdd5d6a098bdeeb5aa3a51eee2c60ff5cf0a77ecab1d0c4bc902845d2d35b99d599ac5637c9781754d6e18b11d8fad7cfcecbdf398116bfa9e0b3979c8d25a7ff0c2bb114bf4bed696d594282f393bc45c284aebcfd2c8843e308beee8262685535d7db7a81468843e77d5e700e2222da662a26e780cdf9f0092aed0a588a6239b5808c57effa608041bc5cc671513682bd856384e2377f1d199fd6c172c7c3cf"}, {0x1010, 0x29, 0x2, "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"}, {0x68, 0x117, 0x6, "25c596a385e8480a6b92cd8c2ce7f48c7ff7fc6371cce321848b5426c33d392e9ccd88fc21ea559db5f13fea4c7ce5bf9ca9dfe43a4c0746030a54f641042c612a4444c38ae52f55cb8fc67d46d6db28f7b5d2e2392704"}, {0x38, 0x1, 0x8, "34e13a60d43b7b9501af37ac89927106caaeec37dc68688bfee3e9da90caab912a1c9db0e8"}], 0x1400}}], 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r8, 0x4b30, 0x80000001) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x2}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x3a2, 0x40180) preadv(r10, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) 11.129921101s ago: executing program 7 (id=4668): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x5, {0x2, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xfffffffc, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x9842, 0x180) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000240)=ANY=[], 0xfff5) 9.917115626s ago: executing program 6 (id=4670): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd37c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.861946823s ago: executing program 1 (id=4671): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x9, 0xd, 0x0, 0xfffffffc, 0x83, "db8fd2e79000"}) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000002c0)={0x696, 0xf3, 0xffefffff, 0x4000005, 0x5, "09000000379100000001ac45b57d00"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYRES32], 0xec}, 0x1, 0x0, 0x0, 0x810}, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000000640)=""/4096, 0x1000}, {0x0}], 0x2, 0x1, 0x4) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000001c0)={0x0, 0x8, 0x19, 0x3d50, 0x8, "00ef001600000472c4cefe00000000000067fd"}) r6 = syz_open_pts(r3, 0x101000) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0x1) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x5c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 9.851777121s ago: executing program 5 (id=4672): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = io_uring_setup(0x2a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x3c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb-serial/drivers/moschip7720/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='0525 a', 0x6) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x7, 0x0, [{0x40000094, 0x0, 0x100}, {0xb6c, 0x0, 0x3}, {0xb29, 0x0, 0x80000001}, {0x8af, 0x0, 0x2}, {0x3ad}, {0xb43, 0x0, 0x4}, {0x89d, 0x0, 0x3}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r3, &(0x7f0000000840)={0x2020}, 0x2020) (fail_nth: 1) 8.716935717s ago: executing program 5 (id=4673): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) close(r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x840, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(0x0, 0x8, 0x200000) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0xed, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='./config\x00', 0x80003, 0x0) write(r4, &(0x7f0000000340)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 8.68589636s ago: executing program 1 (id=4674): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) getrandom(&(0x7f0000000100)=""/43, 0x2b, 0x2) setresgid(0xee00, 0x0, 0xffffffffffffffff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x49940, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRESDEC, @ANYRES32=r3, @ANYRES8, @ANYRES8, @ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mbind(&(0x7f000011e000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040), 0x4bd5ded7, 0x1) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0xfff, 0x7}, 0x50) read$midi(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$msr(r1, 0x0, 0x0) 7.399300037s ago: executing program 7 (id=4675): listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1, 0x14, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x19, 0x0, &(0x7f0000000100)) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r8, 0x1, 0x4070bd2f, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}}, 0x8) 7.244522989s ago: executing program 5 (id=4676): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = syz_usb_connect(0x0, 0x47, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r5, &(0x7f00000061c0)='dir', 0x3) syz_usb_ep_write(r1, 0x3, 0x4, &(0x7f0000000080)="69b5113d") ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="030000000018"}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.902167328s ago: executing program 7 (id=4677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x64, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x396}, {0x6, 0x16, 0xa}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004094}, 0x24008040) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff71dd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000045}, 0xc0c0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x5, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x0, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0x7f, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x6, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0x8, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x800, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x13, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x3ff, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x7b04, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0x9, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9606, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x2f, 0x20, 0x7, 0x10, 0x50, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7800, 0x9, 0x6}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x134, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc, 0x0, 0x0, 0x64}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0xfffffe85}, @AF_BRIDGE={0x4}]}]}, 0x134}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000cc0)={@dev, @rand_addr, 0x0}, &(0x7f0000000d00)=0xc) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x2, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000d40)={'gre0\x00', 0x0, 0x8, 0x7800, 0x8000, 0x0, {{0x18, 0x4, 0x0, 0x6, 0x60, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@rr={0x7, 0x1b, 0x7d, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @local]}, @timestamp={0x44, 0x20, 0x1b, 0x0, 0xe, [0x38c, 0x1, 0x3, 0xfffffff1, 0x63236511, 0xfffffff7, 0xfffffff9]}, @lsrr={0x83, 0xf, 0x46, [@private=0xa010102, @local, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e00)={0x22c, r4, 0x104, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x84}, 0x48080) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendto$inet6(r2, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r2, 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x2, 0x1, 0xf9, 0xdd, 0x11, 0xa7, 0xe, 0x2, 0xb, 0xb5, 0xbb, 0x2, 0x68}, 0xe) 5.180985556s ago: executing program 6 (id=4678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) io_setup(0x7, &(0x7f0000000280)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r4, 0x0, &(0x7f0000000500)) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r8, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r8, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x4000000) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendto$inet(r5, &(0x7f0000000000)="d3637fa96d9e0af1503413759aec99c2", 0x10, 0x81, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000088}, 0x8000) 4.632424417s ago: executing program 5 (id=4679): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@delqdisc={0x34, 0x26, 0x1, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f20c50620001000000010902200001010080320904000002080650000705010200020007058202000200"], 0x0) 4.273705566s ago: executing program 1 (id=4680): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1a, 0xa, 0xfffffffc) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf2a78}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2404d844}, 0x4000020) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x9, 0x0, 0x0, 0x400c041}, 0x4000) 4.193737663s ago: executing program 6 (id=4681): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0xff, 0x0}}}}, @ip_retopts={{0x10}}], 0x30}, 0x4) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd37c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.945061856s ago: executing program 1 (id=4682): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x4, &(0x7f0000003880)={0x0, 0x2d, 0x2, @thr={&(0x7f0000000000)="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", &(0x7f0000002880)="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"}}, &(0x7f00000038c0)) r0 = io_uring_setup(0x2a6a, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x3c}) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x35, 0x0, 0x66, 0x30, 0x33, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10003b}, 0x48, r1) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778a99aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x38, 0x30, 0x35, 0x30, 0x30, 0x61, 0x30, 0x35, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x32, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x32, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x181) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800401, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 3.944334443s ago: executing program 9 (id=4625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/xfrm_stat\x00') read$eventfd(r4, &(0x7f0000000080), 0x51) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000100)={@private2, @rand_addr=0x64010100, 0x1b, 0x1c}}) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, 0x0, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc) 1.626985626s ago: executing program 9 (id=4683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) 1.608773908s ago: executing program 1 (id=4684): r0 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r0, &(0x7f0000000600)={&(0x7f0000000100)=@x25={0x9, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000640)=""/218, 0xda}], 0x4, &(0x7f0000000080)=""/26, 0x1a}, 0x10000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) accept(r0, &(0x7f00000003c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0x80) io_setup(0x200, &(0x7f0000000000)=0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @any, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x8, 0x0, 0x2}) io_submit(r2, 0xfdef, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x1, 0x4, r1, &(0x7f0000000040)="1d", 0x1}]) 1.345292204s ago: executing program 5 (id=4685): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) close(r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x840, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x200000) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='./config\x00', 0x80003, 0x0) write(r4, &(0x7f0000000340)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 1.290728309s ago: executing program 7 (id=4686): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$inet6(0xa, 0x2, 0x0) syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_RMID(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000) 858.708414ms ago: executing program 9 (id=4687): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = syz_usb_connect(0x0, 0x47, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r5, &(0x7f00000061c0)='dir', 0x3) syz_usb_ep_write(r1, 0x3, 0x4, &(0x7f0000000080)="69b5113d") ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="030000000018"}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 356.842651ms ago: executing program 6 (id=4688): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20083, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x3) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000000c0)="de9fcdc24b72a8790a02b7f030ccd7461aed42f9f890a07b08ec1687cce4c46639898b87b980a96248bc3068258664f0608fa2fdcb43c714b37d7ee06b5c5b1c013f437d1dbca1a4be9668022398820c7d49cfbbd8ac1ef8620017933734cde749129e3202687b0cd902f5b9768722e9e118efeeb01fadb92632d7e37ece7b93724ce743bfbcc084f0653894efbb43aedfdac930471cd70b1dfa89373971578c20a125dc1f039c497aa8b1870ef12afc3b6b0e226c35", 0xb6}, {&(0x7f0000000180)="388417c6975d84df7fc3114e0b6e69866167b7548024235f3bdd3c1e2380", 0x1e}, {&(0x7f00000001c0)="6ae5ba6ab8a8c2b47aa68a81831082d6e2be6b22ae6da1525d6f71ef9473250884b5c645cd639e2a5f697ec7238f23ce59a61d13d511f52ba2cb0556034cdbaf43876595713c53b51f9c7db587280939d858f9f4bd92bf4112678bc2c2370c5c8ae00ce77e3d22a05b3bce1485f82508c57c134580b8df5bdfaeb5fc3d7a003e7e793a6b0ff47184159c001b7f8335cbf8e1cfbec85f6a9e4c1ac8ca6a7e8227738bf7a4c94bd64bd8a23c775ec172a22cc4", 0xb2}, {&(0x7f0000000280)="bda1235985411294a714ee999200275dd025405f712edee2607405dbe17dfef143f17b3f80198208a828f6986261a20b40e653e9070d87bf1704f00786b6a65ac69104db036bfefe62dda6c0fb69e570de0db627d3ac97f5aff1b79fa4dae790a8c0024bb34c6fd2a681094af4cf9b904ab5ad2bec6d87044a79accb493e5e7d5041d2d0a92fda6663744a834266d49cc6ddb74ac9f03a70aed4ef66098566f1260356e9b9819a7b30ca728880695090b0b37af4b725e5121d61d81310c22548ab7815b3f3af21c70d12b29eadfb84fb5f57ac1e2a205e75487db82fae4512b12ae1b47e0e2da1", 0xe7}, {&(0x7f0000000380)="4c53c5c5932501e8f525069a722db23ab39098125b952adb7949a3e5048c113ef082982136b9e9fce4a07642e3b6523e7df1bd2b8334da1af4fb381d4dd745618b9812164be63b568fad42e8948ee2aa1eb00ee9848bed59d5419927bb40e549dcd38555313acd1379479bbf2c83efc7", 0x70}, {&(0x7f0000000400)="b7ac934fb8d7e66eef84a313aa7beed9163274b049e5df6bb7e8b94c4f339059e6f998ccb5c4cf97220e9d2383fdc391e09be35ccf04e31eb59d43ecc5dc01d7c38af8fc02baf369ed70dcc9613fd421743d0fb3da7dfc733a05aafd07ad30f4a218bd310210ea66a7b9583826e58eda568f88e6d5d87e31bbd2b0ebdb6c59bbc0d196f18afa78238124aa50f8c0409543b74e05e00050fcc4b4c9a0c148a54dba8326e443fa5cb1c95ca9390ec594", 0xaf}, {&(0x7f00000004c0)="98b7ca37b417b76afcb11a046d96dda1ef9944db9355727f5db791bcf72b283a77a65f3091fb539cd00d115a6d67d1deaa50d9a3aa760c521211091ea9a7b3b3d0623831787e11867cb28876a1ae233cefdbf06cfe89ad54d497dd61a93bd7157db98f1848154dd2e41818855c6cd80776662c8865f8edbf90e143e795f2fcf13a7e1f9ecbdc1fe225a1138a8479383b", 0x90}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="5fdb12048574895de686a53d312fddeb2b0da650fd2ad2853144381d5712d09950e2194d2e417d3beeac02f1aa65106d6e14b1ed1dbd90fa645d20e3eb13188f659b6612a0aa032bc40fc31aa653", 0x4e}], 0x9, &(0x7f00000016c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0x40000080) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r1, &(0x7f0000001800)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001940)={@fallback=r0, 0x24, 0x0, 0x2, &(0x7f0000001840)=[0x0], 0x1, 0x0, &(0x7f0000001880)=[0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x16, 0xfffffff9, 0x200, 0x2, 0x600, r0, 0x10001, '\x00', 0x0, r0, 0x5, 0x5, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001980)={@map=r4, r0, 0x2c, 0x0, 0x0, @void, @value=r0, @void, @void, r3}, 0x20) getpeername$packet(r0, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001a80)=0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r5, r2, 0x2, 0x4, 0x3}, 0x50) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x24, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x44805) timer_create(0x6, &(0x7f0000001c80)={0x0, 0xe, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000001cc0)=0x0) timer_settime(r8, 0x1, &(0x7f0000001d00)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000001d40)) syz_emit_vhci(&(0x7f0000001d80)=@HCI_VENDOR_PKT, 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e00)={0x28c, 0x12, 0x2, 0x70bd2d, 0x25dfdbfc, {0x3a, 0x0, 0xc, 0xa, {0x4e22, 0x4e23, [0x6, 0x5, 0xab17, 0x7f], [0x1, 0x2, 0x4, 0x7], r5, [0x8, 0x54]}, 0x60000, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x47, 0x1, "92c9b916d6ce3c85effcfac2e51519f13b33b03909881201bb4deef4368966125a46cfacb1d70f7c34e722a113b8ce5791c3b25012b4dcd74a13950c14abb981e88e27"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "8d57ffdfa5f85dd7fb4549cf7a95592ef5235549a0e26347257e58"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "97762840d8caa8cc68ee62c6066ad1e28ab3dc07b4f66afd5fbfe1f1fd65e9ea15222b786fd42cd22ea7dd63d6b581cc973c543c6fded108e25080c6dba60ec4b570a7ddcd40e27a6d75b88d9b5eb960d428b519a21ebd00e541904fc2bcac54b802a09cd8eef5cbf3c8d5326daa0ad868246ece96302b701cd1f2a12193fcbe91c76be6d5ef546fc2158d4f463fe5a9494e8e3baf719abfa94fb105c5c299dcc7ec50537e8445cddbfab1f9b96568c728895c683b69cac28ba9234e59cd5f1b6ee9d28345c503d8049fdd4c287a"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40}, 0x804) syz_emit_vhci(&(0x7f0000002140)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9, 0x5}}}, 0x7) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000002580)={0x2, 0x1, 0x1c, 0x1e, 0xcc, &(0x7f0000002180)="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"}) r9 = syz_open_dev$sndpcmp(&(0x7f00000025c0), 0x5, 0x400) fcntl$setown(r9, 0x8, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) r10 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xe) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r10, 0x40106e80, &(0x7f0000002600)={0x3ff, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_netfilter(r0, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x38, 0xe, 0x3, 0x201, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0xa}, [@typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@loopback}, @typed={0xc, 0x97, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x4d}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000c0c1}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) write$binfmt_register(r0, &(0x7f0000002780)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x48, 0x3a, '/^\\(\xf9:', 0x3a, '/\\~,', 0x3a, './file0', 0x3a, [0x46, 0x4f, 0x46, 0x4f, 0x46, 0x4f, 0x46]}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6a}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0xf, 0x6}, {0x9, 0x6}], "07cde1e0f81e6f25"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x104}, 0x10000040) 119.601909ms ago: executing program 1 (id=4689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$fscrypt_v1(0x0, &(0x7f0000000580)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r3) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000300)={0x0, 0x0, "ed45369eabdc9fb446626261b959effa"}) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x3008804, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write$char_usb(r6, &(0x7f0000000800)='(', 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3, &(0x7f0000000040)=0x1, 0x4) 0s ago: executing program 5 (id=4690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) io_setup(0x7, &(0x7f0000000280)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[0x0]) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r8, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r8, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x4000000) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendto$inet(r5, &(0x7f0000000000)="d3637fa96d9e0af1503413759aec99c2", 0x10, 0x81, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000088}, 0x8000) kernel console output (not intermixed with test programs): 1576.417869][ T31] audit: type=1326 audit(2000000635.620:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23476 comm="syz.1.4390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee0d9e159 code=0x7ffc0000 [ 1576.418238][ T31] audit: type=1326 audit(2000000635.620:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23476 comm="syz.1.4390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee0d9e159 code=0x7ffc0000 [ 1576.418421][ T31] audit: type=1326 audit(2000000635.620:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23476 comm="syz.1.4390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ee0d9e159 code=0x7ffc0000 [ 1576.418723][ T31] audit: type=1326 audit(2000000635.620:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23476 comm="syz.1.4390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee0d9e159 code=0x7ffc0000 [ 1576.423886][T23481] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4390'. [ 1576.510272][T19868] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1576.640200][T19868] usb 8-1: device descriptor read/64, error -71 [ 1576.641896][T23481] netlink: 'syz.1.4390': attribute type 1 has an invalid length. [ 1576.749366][T19868] usb usb8-port1: attempt power cycle [ 1576.782883][T23481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1576.883296][T23483] bond3: (slave bridge1): making interface the new active one [ 1576.892366][T23483] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1577.088228][T19868] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1578.069222][T19868] usb 8-1: device descriptor read/8, error -71 [ 1578.335712][T19868] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1578.395312][T19868] usb 8-1: device descriptor read/8, error -71 [ 1578.502697][T19868] usb usb8-port1: unable to enumerate USB device [ 1584.142310][T23552] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1584.142424][T23552] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1584.525001][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4407'. [ 1584.971597][T23567] netlink: 'syz.5.4411': attribute type 21 has an invalid length. [ 1584.971791][T23567] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4411'. [ 1584.972698][T23567] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4411'. [ 1585.210359][ T31] kauditd_printk_skb: 140 callbacks suppressed [ 1585.210420][ T31] audit: type=1400 audit(2000000644.340:5711): avc: denied { override_creds } for pid=23564 comm="syz.5.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1585.961907][ T31] audit: type=1400 audit(2000000645.160:5712): avc: denied { ioctl } for pid=23572 comm="syz.5.4413" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1586.040683][ T31] audit: type=1400 audit(2000000645.240:5713): avc: denied { recv } for pid=5247 comm="dbus-daemon" saddr=10.128.0.169 src=30006 daddr=10.128.10.32 dest=33990 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1586.067200][ T31] audit: type=1400 audit(2000000645.240:5714): avc: denied { read write } for pid=11612 comm="syz-executor" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1586.079411][ T31] audit: type=1400 audit(2000000645.280:5715): avc: denied { open } for pid=17109 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1586.079687][ T31] audit: type=1400 audit(2000000645.280:5716): avc: denied { ioctl } for pid=17109 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1586.168486][ T31] audit: type=1400 audit(2000000645.370:5717): avc: denied { read } for pid=23579 comm="syz.1.4414" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1586.270761][ T31] audit: type=1400 audit(2000000645.370:5718): avc: denied { open } for pid=23579 comm="syz.1.4414" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1586.270824][ T31] audit: type=1400 audit(2000000645.370:5719): avc: denied { create } for pid=23576 comm="syz.5.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1586.270857][ T31] audit: type=1400 audit(2000000645.370:5720): avc: denied { ioctl } for pid=23579 comm="syz.1.4414" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1586.348169][T23585] loop8: detected capacity change from 0 to 16384 [ 1587.132295][T23578] EXT4-fs (nbd7): unable to read superblock [ 1587.190976][T23590] loop8: detected capacity change from 16384 to 16383 [ 1587.218917][T23590] I/O error, dev loop8, sector 1792 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 1587.242572][T23585] I/O error, dev loop8, sector 8704 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1587.247135][T23585] I/O error, dev loop8, sector 8960 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1587.247575][T23585] I/O error, dev loop8, sector 8704 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1587.247807][T23585] Buffer I/O error on dev loop8, logical block 1088, async page read [ 1587.247858][T23585] I/O error, dev loop8, sector 8712 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1587.290838][T23590] Buffer I/O error on dev loop8, logical block 224, lost async page write [ 1587.299526][T23590] Buffer I/O error on dev loop8, logical block 225, lost async page write [ 1587.309130][T23590] Buffer I/O error on dev loop8, logical block 226, lost async page write [ 1587.323673][T23585] Buffer I/O error on dev loop8, logical block 1089, async page read [ 1587.323748][T23585] I/O error, dev loop8, sector 8720 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1587.323769][T23585] Buffer I/O error on dev loop8, logical block 1090, async page read [ 1587.323796][T23585] I/O error, dev loop8, sector 8728 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1587.323815][T23585] Buffer I/O error on dev loop8, logical block 1091, async page read [ 1587.323840][T23585] I/O error, dev loop8, sector 8736 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1587.323858][T23585] Buffer I/O error on dev loop8, logical block 1092, async page read [ 1587.323884][T23585] I/O error, dev loop8, sector 8744 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1587.323902][T23585] Buffer I/O error on dev loop8, logical block 1093, async page read [ 1587.323927][T23585] I/O error, dev loop8, sector 8752 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1587.323945][T23585] Buffer I/O error on dev loop8, logical block 1094, async page read [ 1587.534954][T23599] erspan0: entered promiscuous mode [ 1587.543290][T23599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4419'. [ 1587.649621][T23590] ldm_validate_partition_table(): Disk read failed. [ 1587.649790][T23590] Dev loop8: unable to read RDB block 0 [ 1587.650002][T23590] loop8: unable to read partition table [ 1587.661322][T23598] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4420'. [ 1587.678155][T23590] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 1588.007492][T19868] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1588.218834][T19868] usb 6-1: Using ep0 maxpacket: 16 [ 1588.224799][T19868] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1588.237824][T19868] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1588.237863][T19868] usb 6-1: config 0 has no interface number 0 [ 1588.237907][T19868] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1588.252695][T19868] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1588.252725][T19868] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1588.293000][T19868] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1588.301647][T19868] usb 6-1: Product: syz [ 1588.301670][T19868] usb 6-1: SerialNumber: syz [ 1590.571759][ T30] usb 6-1: USB disconnect, device number 34 [ 1590.637703][ T31] kauditd_printk_skb: 44 callbacks suppressed [ 1590.637738][ T31] audit: type=1400 audit(2000000649.840:5765): avc: denied { accept } for pid=23622 comm="syz.7.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1590.696327][ T31] audit: type=1400 audit(2000000649.890:5766): avc: denied { create } for pid=23624 comm="syz.9.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1590.704270][ T31] audit: type=1400 audit(2000000649.890:5767): avc: denied { create } for pid=23624 comm="syz.9.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1590.715305][ T31] audit: type=1400 audit(2000000649.890:5768): avc: denied { create } for pid=23624 comm="syz.9.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1590.715938][ T31] audit: type=1400 audit(2000000649.890:5769): avc: denied { setopt } for pid=23624 comm="syz.9.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1590.716404][ T31] audit: type=1400 audit(2000000649.920:5770): avc: denied { ioctl } for pid=23624 comm="syz.9.4427" path="socket:[111954]" dev="sockfs" ino=111954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1590.797942][ T31] audit: type=1400 audit(2000000649.980:5771): avc: denied { write } for pid=23624 comm="syz.9.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1591.156529][ T5599] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1591.316805][ T5599] usb 6-1: Using ep0 maxpacket: 16 [ 1591.320267][ T5599] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1591.326507][ T5599] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1591.331799][ T5599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.331820][ T5599] usb 6-1: Product: syz [ 1591.331833][ T5599] usb 6-1: Manufacturer: syz [ 1591.331845][ T5599] usb 6-1: SerialNumber: syz [ 1591.521077][T23634] EXT4-fs (nbd9): unable to read superblock [ 1591.562182][ T31] audit: type=1400 audit(2000000650.760:5772): avc: denied { mount } for pid=23638 comm="syz.1.4431" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1591.704614][ T31] audit: type=1400 audit(2000000650.900:5773): avc: denied { unmount } for pid=16801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1591.735571][T23649] FAULT_INJECTION: forcing a failure. [ 1591.735571][T23649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1591.749765][T23649] CPU: 0 UID: 0 PID: 23649 Comm: syz.9.4433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1591.749794][T23649] Tainted: [L]=SOFTLOCKUP [ 1591.749802][T23649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1591.749812][T23649] Call Trace: [ 1591.749819][T23649] [ 1591.749827][T23649] dump_stack_lvl+0x100/0x190 [ 1591.749859][T23649] should_fail_ex.cold+0x5/0xa [ 1591.749886][T23649] _copy_from_user+0x2e/0xd0 [ 1591.749913][T23649] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1591.749937][T23649] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1591.749964][T23649] do_sock_getsockopt+0x530/0x6e0 [ 1591.749989][T23649] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1591.750013][T23649] ? __fget_files+0x34/0x3d0 [ 1591.750033][T23649] ? find_held_lock+0x2b/0x80 [ 1591.750063][T23649] ? __fget_files+0x21f/0x3d0 [ 1591.750088][T23649] __sys_getsockopt+0x148/0x260 [ 1591.750121][T23649] ? __x64_sys_getsockopt+0xbd/0x160 [ 1591.750147][T23649] __x64_sys_getsockopt+0xbd/0x160 [ 1591.750177][T23649] ? do_syscall_64+0xae/0x790 [ 1591.750198][T23649] ? lockdep_hardirqs_on+0x7d/0x110 [ 1591.750216][T23649] do_syscall_64+0x123/0x790 [ 1591.750238][T23649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.750257][T23649] RIP: 0033:0x7f7d1db9e159 [ 1591.750273][T23649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.750289][T23649] RSP: 002b:00007f7d1ea5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1591.750309][T23649] RAX: ffffffffffffffda RBX: 00007f7d1de25fa0 RCX: 00007f7d1db9e159 [ 1591.750321][T23649] RDX: 0000000000000066 RSI: 0000000000000084 RDI: 0000000000000003 [ 1591.750332][T23649] RBP: 00007f7d1ea5c090 R08: 0000200000000180 R09: 0000000000000000 [ 1591.750344][T23649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.750355][T23649] R13: 00007f7d1de26038 R14: 00007f7d1de25fa0 R15: 00007ffff549c1d8 [ 1591.750379][T23649] [ 1592.667843][T11938] usb 10-1: new low-speed USB device number 77 using dummy_hcd [ 1593.475687][T11938] usb 10-1: New USB device found, idVendor=0489, idProduct=e167, bcdDevice=57.e5 [ 1593.639829][T11938] usb 10-1: config 1 has an invalid interface number: 103 but max is 0 [ 1593.639861][T11938] usb 10-1: config 1 has no interface number 0 [ 1593.639906][T11938] usb 10-1: config 1 interface 103 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1593.639942][T11938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.503895][ T30] usb 6-1: USB disconnect, device number 35 [ 1595.542886][ T31] audit: type=1400 audit(2000000654.740:5774): avc: denied { append } for pid=23662 comm="syz.1.4437" name="cec0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1595.551726][T23663] FAULT_INJECTION: forcing a failure. [ 1595.551726][T23663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1595.551754][T23663] CPU: 0 UID: 0 PID: 23663 Comm: syz.1.4437 Tainted: G L syzkaller #0 PREEMPT(full) [ 1595.551776][T23663] Tainted: [L]=SOFTLOCKUP [ 1595.551782][T23663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1595.551792][T23663] Call Trace: [ 1595.551798][T23663] [ 1595.551804][T23663] dump_stack_lvl+0x100/0x190 [ 1595.551832][T23663] should_fail_ex.cold+0x5/0xa [ 1595.551856][T23663] _copy_to_user+0x32/0xd0 [ 1595.551883][T23663] simple_read_from_buffer+0xcb/0x170 [ 1595.551904][T23663] proc_fail_nth_read+0x1af/0x230 [ 1595.551927][T23663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1595.551947][T23663] ? rw_verify_area+0xce/0x6d0 [ 1595.551969][T23663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1595.551988][T23663] vfs_read+0x1e4/0xb40 [ 1595.552012][T23663] ? lock_acquire+0x1d1/0x380 [ 1595.552028][T23663] ? __fget_files+0x34/0x3d0 [ 1595.552046][T23663] ? __pfx_vfs_read+0x10/0x10 [ 1595.552067][T23663] ? find_held_lock+0x2b/0x80 [ 1595.552088][T23663] ? __fget_files+0x215/0x3d0 [ 1595.552110][T23663] ? __fget_files+0x21f/0x3d0 [ 1595.552133][T23663] ksys_read+0x12a/0x250 [ 1595.552148][T23663] ? __pfx_ksys_read+0x10/0x10 [ 1595.552169][T23663] do_syscall_64+0x123/0x790 [ 1595.552190][T23663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.552207][T23663] RIP: 0033:0x7f2ee0d5e98e [ 1595.552221][T23663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1595.552236][T23663] RSP: 002b:00007f2edeff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1595.552253][T23663] RAX: ffffffffffffffda RBX: 00007f2edeff66c0 RCX: 00007f2ee0d5e98e [ 1595.552263][T23663] RDX: 000000000000000f RSI: 00007f2edeff60a0 RDI: 0000000000000005 [ 1595.552273][T23663] RBP: 00007f2edeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.552283][T23663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1595.552292][T23663] R13: 00007f2ee1026038 R14: 00007f2ee1025fa0 R15: 00007ffcf2c05f08 [ 1595.552314][T23663] [ 1595.571143][T23655] Process accounting resumed [ 1595.573199][T11938] usb 10-1: USB disconnect, device number 77 [ 1595.716630][ T31] audit: type=1400 audit(2000000654.910:5775): avc: denied { read write } for pid=23665 comm="syz.5.4439" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1595.716673][ T31] audit: type=1400 audit(2000000654.910:5776): avc: denied { open } for pid=23665 comm="syz.5.4439" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1595.717377][ T31] audit: type=1400 audit(2000000654.920:5777): avc: denied { create } for pid=23666 comm="syz.7.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1595.737029][ T31] audit: type=1400 audit(2000000654.940:5778): avc: denied { allowed } for pid=23665 comm="syz.5.4439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1595.909583][ T31] audit: type=1400 audit(2000000654.980:5779): avc: denied { create } for pid=23665 comm="syz.5.4439" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1595.945504][T23667] FAULT_INJECTION: forcing a failure. [ 1595.945504][T23667] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.945552][T23667] CPU: 0 UID: 0 PID: 23667 Comm: syz.5.4439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1595.945577][T23667] Tainted: [L]=SOFTLOCKUP [ 1595.945583][T23667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1595.945592][T23667] Call Trace: [ 1595.945598][T23667] [ 1595.945604][T23667] dump_stack_lvl+0x100/0x190 [ 1595.945632][T23667] should_fail_ex.cold+0x5/0xa [ 1595.945654][T23667] should_failslab+0xc2/0x120 [ 1595.945674][T23667] __kmalloc_noprof+0xfc/0x840 [ 1595.945691][T23667] ? io_cache_alloc_new+0x45/0xe0 [ 1595.945716][T23667] io_cache_alloc_new+0x45/0xe0 [ 1595.945735][T23667] __io_prep_rw+0x21d/0xfb0 [ 1595.945758][T23667] ? __pfx___io_prep_rw+0x10/0x10 [ 1595.945779][T23667] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1595.945803][T23667] ? io_write+0x82d/0x1680 [ 1595.945826][T23667] ? __fget_files+0x21f/0x3d0 [ 1595.945849][T23667] io_prep_rw+0x76/0x2c0 [ 1595.945870][T23667] ? __pfx_io_prep_rw+0x10/0x10 [ 1595.945891][T23667] ? io_issue_sqe+0xbd/0x1540 [ 1595.945919][T23667] io_submit_sqes+0xa03/0x2480 [ 1595.945955][T23667] __do_sys_io_uring_enter+0xa88/0x1b10 [ 1595.945973][T23667] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1595.945994][T23667] ? __fget_files+0x21f/0x3d0 [ 1595.946011][T23667] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1595.946031][T23667] ? fput+0x7c/0x100 [ 1595.946050][T23667] ? ksys_write+0x1ac/0x250 [ 1595.946065][T23667] ? __pfx_ksys_write+0x10/0x10 [ 1595.946086][T23667] do_syscall_64+0x123/0x790 [ 1595.946106][T23667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.946123][T23667] RIP: 0033:0x7f9836b9e159 [ 1595.946136][T23667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.946152][T23667] RSP: 002b:00007f9837b3c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1595.946169][T23667] RAX: ffffffffffffffda RBX: 00007f9836e25fa0 RCX: 00007f9836b9e159 [ 1595.946180][T23667] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1595.946190][T23667] RBP: 00007f9837b3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.946200][T23667] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 1595.946211][T23667] R13: 00007f9836e26038 R14: 00007f9836e25fa0 R15: 00007ffdb5de7a78 [ 1595.946235][T23667] [ 1596.501971][ T31] audit: type=1400 audit(2000000655.700:5780): avc: denied { create } for pid=23678 comm="syz.9.4440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1596.847485][ T31] audit: type=1400 audit(2000000656.040:5781): avc: denied { map } for pid=23678 comm="syz.9.4440" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=111019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1596.852263][ T31] audit: type=1400 audit(2000000656.040:5782): avc: denied { read write } for pid=23678 comm="syz.9.4440" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=111019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1596.894430][ T31] audit: type=1400 audit(2000000656.090:5783): avc: denied { perfmon } for pid=23678 comm="syz.9.4440" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1596.915594][ T31] audit: type=1400 audit(2000000656.110:5784): avc: denied { prog_run } for pid=23678 comm="syz.9.4440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1597.227798][T23682] lo speed is unknown, defaulting to 1000 [ 1597.231178][T23682] lo speed is unknown, defaulting to 1000 [ 1597.284432][T23682] lo speed is unknown, defaulting to 1000 [ 1597.487586][T23682] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1597.487726][T23682] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1597.487855][T23682] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1597.609303][T23682] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1597.936773][ T5599] lo speed is unknown, defaulting to 1000 [ 1598.088103][T23682] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1598.649927][T23691] jffs2: notice: (23691) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 1599.080130][T23704] atomic_op ffff88802b42a1e0 conn xmit_atomic 0000000000000000 [ 1599.470515][T23682] lo speed is unknown, defaulting to 1000 [ 1599.493543][T23682] lo speed is unknown, defaulting to 1000 [ 1599.517392][T23682] lo speed is unknown, defaulting to 1000 [ 1599.534943][T23682] lo speed is unknown, defaulting to 1000 [ 1599.544309][T23682] lo speed is unknown, defaulting to 1000 [ 1599.551050][T23682] lo speed is unknown, defaulting to 1000 [ 1599.557682][T23682] lo speed is unknown, defaulting to 1000 [ 1599.564256][T23682] lo speed is unknown, defaulting to 1000 [ 1599.572032][T23682] lo speed is unknown, defaulting to 1000 [ 1599.592922][T17004] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1599.603893][T17004] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1599.748369][T23683] smc: removing ib device syz0 [ 1600.038275][T23683] smbdirect: ib_dev[syz0] removed [ 1600.046856][T17004] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1600.198057][T17004] usb 8-1: Using ep0 maxpacket: 16 [ 1600.198722][T17004] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1600.199559][T17004] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1600.201247][T17004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.201276][T17004] usb 8-1: Product: syz [ 1600.201289][T17004] usb 8-1: Manufacturer: syz [ 1600.201301][T17004] usb 8-1: SerialNumber: syz [ 1600.450141][T23720] FAULT_INJECTION: forcing a failure. [ 1600.450141][T23720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.463622][T23720] CPU: 1 UID: 0 PID: 23720 Comm: syz.1.4451 Tainted: G L syzkaller #0 PREEMPT(full) [ 1600.463652][T23720] Tainted: [L]=SOFTLOCKUP [ 1600.463659][T23720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1600.463670][T23720] Call Trace: [ 1600.463677][T23720] [ 1600.463684][T23720] dump_stack_lvl+0x100/0x190 [ 1600.463713][T23720] should_fail_ex.cold+0x5/0xa [ 1600.463734][T23720] _copy_to_user+0x32/0xd0 [ 1600.463757][T23720] simple_read_from_buffer+0xcb/0x170 [ 1600.463775][T23720] proc_fail_nth_read+0x1af/0x230 [ 1600.463793][T23720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1600.463810][T23720] ? rw_verify_area+0xce/0x6d0 [ 1600.463830][T23720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1600.463846][T23720] vfs_read+0x1e4/0xb40 [ 1600.463868][T23720] ? lock_acquire+0x1d1/0x380 [ 1600.463882][T23720] ? __fget_files+0x34/0x3d0 [ 1600.463899][T23720] ? __pfx_vfs_read+0x10/0x10 [ 1600.463923][T23720] ? find_held_lock+0x2b/0x80 [ 1600.463943][T23720] ? __fget_files+0x215/0x3d0 [ 1600.463962][T23720] ? __fget_files+0x21f/0x3d0 [ 1600.463983][T23720] ksys_read+0x12a/0x250 [ 1600.463996][T23720] ? __pfx_ksys_read+0x10/0x10 [ 1600.464014][T23720] do_syscall_64+0x123/0x790 [ 1600.464033][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.464048][T23720] RIP: 0033:0x7f2ee0d5e98e [ 1600.464061][T23720] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1600.464074][T23720] RSP: 002b:00007f2edeff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1600.464090][T23720] RAX: ffffffffffffffda RBX: 00007f2edeff66c0 RCX: 00007f2ee0d5e98e [ 1600.464100][T23720] RDX: 000000000000000f RSI: 00007f2edeff60a0 RDI: 0000000000000004 [ 1600.464108][T23720] RBP: 00007f2edeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.464117][T23720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1600.464125][T23720] R13: 00007f2ee1026038 R14: 00007f2ee1025fa0 R15: 00007ffcf2c05f08 [ 1600.464145][T23720] [ 1601.733833][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 1601.733890][ T31] audit: type=1400 audit(2000000660.930:5813): avc: denied { map_read map_write } for pid=23727 comm="syz.1.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1601.850389][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 1601.870149][ T31] audit: type=1400 audit(2000000661.070:5814): avc: denied { nlmsg_write } for pid=23730 comm="syz.6.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1601.891917][ T31] audit: type=1400 audit(2000000661.080:5815): avc: denied { mount } for pid=23730 comm="syz.6.4454" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1602.899333][ T5707] usb 8-1: USB disconnect, device number 97 [ 1604.096349][T23735] EXT4-fs (nbd1): unable to read superblock [ 1604.153870][T23748] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4460'. [ 1604.153905][T23748] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4460'. [ 1604.224185][T23752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4460'. [ 1604.285398][ T31] audit: type=1400 audit(2000000663.430:5816): avc: denied { write } for pid=23747 comm="syz.5.4460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1604.285461][ T31] audit: type=1400 audit(2000000663.430:5817): avc: denied { connect } for pid=23747 comm="syz.5.4460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1604.285495][ T31] audit: type=1400 audit(2000000663.430:5818): avc: denied { name_connect } for pid=23747 comm="syz.5.4460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1604.373104][ T31] audit: type=1400 audit(2000000663.570:5819): avc: denied { shutdown } for pid=23747 comm="syz.5.4460" lport=57141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1604.406554][ T5707] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1604.547209][ T31] audit: type=1400 audit(2000000663.670:5820): avc: denied { mount } for pid=23749 comm="syz.6.4461" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1604.547898][ T31] audit: type=1400 audit(2000000663.680:5821): avc: denied { search } for pid=23749 comm="syz.6.4461" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1604.548364][ T31] audit: type=1400 audit(2000000663.680:5822): avc: denied { search } for pid=23749 comm="syz.6.4461" name="usb_gadget" dev="configfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1604.798853][ T5707] usb 8-1: Using ep0 maxpacket: 8 [ 1604.804525][ T5707] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1604.814345][ T5707] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1604.814379][ T5707] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.465372][ T5724] usb 8-1: USB disconnect, device number 98 [ 1607.603285][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 1607.603316][ T31] audit: type=1400 audit(2000000666.800:5830): avc: denied { ioctl } for pid=23772 comm="syz.7.4467" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1607.603350][ T31] audit: type=1400 audit(2000000666.800:5831): avc: denied { set_context_mgr } for pid=23772 comm="syz.7.4467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1607.636322][ T31] audit: type=1400 audit(2000000666.830:5832): avc: denied { map } for pid=23772 comm="syz.7.4467" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1607.656961][ T31] audit: type=1400 audit(2000000666.850:5833): avc: denied { call } for pid=23772 comm="syz.7.4467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1607.999833][ T30] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1608.010374][ T30] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1608.872906][T23778] Cannot find add_set index 0 as target [ 1609.933438][ T31] audit: type=1400 audit(2000000669.130:5834): avc: denied { bind } for pid=23800 comm="syz.1.4473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1609.953597][ T31] audit: type=1400 audit(2000000669.130:5835): avc: denied { read write } for pid=23800 comm="syz.1.4473" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1609.953634][ T31] audit: type=1400 audit(2000000669.130:5836): avc: denied { open } for pid=23800 comm="syz.1.4473" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1610.007447][T17004] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1610.167382][T17004] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1610.169952][T17004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.169972][T17004] usb 6-1: Product: syz [ 1610.169984][T17004] usb 6-1: Manufacturer: syz [ 1610.169997][T17004] usb 6-1: SerialNumber: syz [ 1610.282310][ T31] audit: type=1400 audit(2000000669.480:5837): avc: denied { mount } for pid=23803 comm="syz.7.4474" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1610.345266][T23804] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1610.537473][ T31] audit: type=1400 audit(2000000669.740:5838): avc: denied { unmount } for pid=19697 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1611.888320][T23818] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4478'. [ 1611.888350][T23818] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4478'. [ 1612.035467][T23821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4478'. [ 1612.169251][T23813] EXT4-fs (nbd9): unable to read superblock [ 1612.262919][ T31] audit: type=1400 audit(2000000671.460:5839): avc: denied { write } for pid=23822 comm="syz.6.4479" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1613.165140][ T30] usb 6-1: USB disconnect, device number 36 [ 1613.223511][ T31] audit: type=1400 audit(2000000672.420:5840): avc: denied { read write } for pid=23835 comm="syz.6.4482" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1613.251032][ T31] audit: type=1400 audit(2000000672.450:5841): avc: denied { open } for pid=23835 comm="syz.6.4482" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1613.299906][T11938] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1613.321217][ T31] audit: type=1400 audit(2000000672.520:5842): avc: denied { read } for pid=23838 comm="syz.5.4483" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1613.349256][ T31] audit: type=1400 audit(2000000672.550:5843): avc: denied { open } for pid=23838 comm="syz.5.4483" path="/324/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1613.434423][T11938] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1613.474588][ T31] audit: type=1400 audit(2000000672.660:5844): avc: denied { ioctl } for pid=23838 comm="syz.5.4483" path="/324/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1613.474661][ T31] audit: type=1400 audit(2000000672.660:5845): avc: denied { create } for pid=23840 comm="syz.7.4484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1613.474693][ T31] audit: type=1400 audit(2000000672.660:5846): avc: denied { setopt } for pid=23840 comm="syz.7.4484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1613.532954][ T31] audit: type=1400 audit(2000000672.730:5847): avc: denied { create } for pid=23838 comm="syz.5.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1613.552433][ T31] audit: type=1400 audit(2000000672.750:5848): avc: denied { ioctl } for pid=23835 comm="syz.6.4482" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1613.594649][ T31] audit: type=1400 audit(2000000672.790:5849): avc: denied { ioctl } for pid=23838 comm="syz.5.4483" path="socket:[111444]" dev="sockfs" ino=111444 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1613.827349][T23850] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1613.827437][T23850] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1614.107642][T23852] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4486'. [ 1614.426885][T23851] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1616.807398][T23867] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1616.807458][T23867] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1616.942871][T23868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4490'. [ 1618.777139][ T5724] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1618.963537][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 1619.082196][ T5724] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1619.118207][ T5724] usb 6-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 592 [ 1619.118266][ T5724] usb 6-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 8 [ 1619.118377][ T5724] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1619.210645][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.210763][ T5724] usb 6-1: Product: syz [ 1619.210908][ T5724] usb 6-1: Manufacturer: syz [ 1619.211046][ T5724] usb 6-1: SerialNumber: syz [ 1621.524267][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1621.530517][ T31] audit: type=1326 audit(2000000680.110:5854): auid=4294967295 uid=3305727 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23873 comm="syz.7.4493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa35fd9e159 code=0x0 [ 1622.639685][ T30] usb 6-1: USB disconnect, device number 37 [ 1622.754791][T23889] FAULT_INJECTION: forcing a failure. [ 1622.754791][T23889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1622.772608][T23889] CPU: 0 UID: 0 PID: 23889 Comm: syz.1.4497 Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.772638][T23889] Tainted: [L]=SOFTLOCKUP [ 1622.772644][T23889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1622.772655][T23889] Call Trace: [ 1622.772661][T23889] [ 1622.772668][T23889] dump_stack_lvl+0x100/0x190 [ 1622.772698][T23889] should_fail_ex.cold+0x5/0xa [ 1622.772721][T23889] _copy_to_user+0x32/0xd0 [ 1622.772749][T23889] simple_read_from_buffer+0xcb/0x170 [ 1622.772773][T23889] proc_fail_nth_read+0x1af/0x230 [ 1622.772793][T23889] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1622.772814][T23889] ? rw_verify_area+0xce/0x6d0 [ 1622.772837][T23889] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1622.772856][T23889] vfs_read+0x1e4/0xb40 [ 1622.772882][T23889] ? lock_acquire+0x1d1/0x380 [ 1622.772900][T23889] ? __fget_files+0x34/0x3d0 [ 1622.772918][T23889] ? __pfx_vfs_read+0x10/0x10 [ 1622.772942][T23889] ? find_held_lock+0x2b/0x80 [ 1622.772974][T23889] ? __fget_files+0x215/0x3d0 [ 1622.773000][T23889] ? __fget_files+0x21f/0x3d0 [ 1622.773026][T23889] ksys_read+0x12a/0x250 [ 1622.773041][T23889] ? __pfx_ksys_read+0x10/0x10 [ 1622.773064][T23889] do_syscall_64+0x123/0x790 [ 1622.773087][T23889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.773105][T23889] RIP: 0033:0x7f2ee0d5e98e [ 1622.773121][T23889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1622.773138][T23889] RSP: 002b:00007f2edeff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1622.773156][T23889] RAX: ffffffffffffffda RBX: 00007f2edeff66c0 RCX: 00007f2ee0d5e98e [ 1622.773168][T23889] RDX: 000000000000000f RSI: 00007f2edeff60a0 RDI: 0000000000000004 [ 1622.773179][T23889] RBP: 00007f2edeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.773190][T23889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.773201][T23889] R13: 00007f2ee1026038 R14: 00007f2ee1025fa0 R15: 00007ffcf2c05f08 [ 1622.773226][T23889] [ 1623.536993][ T30] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1624.085184][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 1624.085915][ T30] usb 2-1: New USB device found, idVendor=054c, idProduct=c300, bcdDevice=66.d2 [ 1624.086229][ T30] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 1624.089834][ T30] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1624.089876][ T30] usb 2-1: can't read configurations, error -61 [ 1624.230932][ T30] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1625.408364][ T31] audit: type=1326 audit(2000000683.990:5855): auid=4294967295 uid=3305727 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.5.4505" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9836b9e159 code=0x0 [ 1625.498575][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 1625.499356][ T30] usb 2-1: New USB device found, idVendor=054c, idProduct=c300, bcdDevice=66.d2 [ 1625.499386][ T30] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 1625.501053][ T30] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1625.501078][ T30] usb 2-1: can't read configurations, error -61 [ 1625.501364][ T30] usb usb2-port1: attempt power cycle [ 1625.702717][T23922] Process accounting paused [ 1625.836770][ T30] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1625.867644][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 1625.868218][ T30] usb 2-1: New USB device found, idVendor=054c, idProduct=c300, bcdDevice=66.d2 [ 1625.868266][ T30] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 1625.869952][ T30] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1625.869987][ T30] usb 2-1: can't read configurations, error -61 [ 1625.879853][ T5599] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1625.977887][ T31] audit: type=1400 audit(2000000685.180:5856): avc: denied { bind } for pid=23927 comm="syz.9.4510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1626.037075][ T30] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1626.116608][ T5599] usb 8-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 1626.236452][ T5599] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.245790][ T5599] usb 8-1: Product: 祳z [ 1626.254255][ T5599] usb 8-1: Manufacturer: 祳z [ 1626.254362][ T5599] usb 8-1: SerialNumber: 祳z [ 1626.436158][ T30] usb 2-1: device descriptor read/8, error -71 [ 1626.549079][ T30] usb usb2-port1: unable to enumerate USB device [ 1626.677096][ T31] audit: type=1400 audit(2000000685.880:5857): avc: denied { write } for pid=23933 comm="syz.1.4511" path="socket:[114086]" dev="sockfs" ino=114086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1626.703850][T23934] Bluetooth: MGMT ver 1.23 [ 1626.778409][ T31] audit: type=1400 audit(2000000685.980:5858): avc: denied { bind } for pid=23933 comm="syz.1.4511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1626.904518][ T31] audit: type=1400 audit(2000000686.100:5859): avc: denied { setopt } for pid=23933 comm="syz.1.4511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1627.161783][T23928] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.024168][T23950] FAULT_INJECTION: forcing a failure. [ 1628.024168][T23950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.024207][T23950] CPU: 0 UID: 0 PID: 23950 Comm: syz.5.4513 Tainted: G L syzkaller #0 PREEMPT(full) [ 1628.024232][T23950] Tainted: [L]=SOFTLOCKUP [ 1628.024238][T23950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1628.024247][T23950] Call Trace: [ 1628.024251][T23950] [ 1628.024256][T23950] dump_stack_lvl+0x100/0x190 [ 1628.024277][T23950] should_fail_ex.cold+0x5/0xa [ 1628.024293][T23950] _copy_from_iter+0x1f4/0x1690 [ 1628.024312][T23950] ? __asan_memset+0x23/0x50 [ 1628.024329][T23950] ? __pfx__copy_from_iter+0x10/0x10 [ 1628.024346][T23950] ? __pfx___alloc_skb+0x10/0x10 [ 1628.024374][T23950] netlink_sendmsg+0x808/0xda0 [ 1628.024394][T23950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.024411][T23950] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1628.024430][T23950] ____sys_sendmsg+0xa4d/0xbe0 [ 1628.024444][T23950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.024461][T23950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1628.024477][T23950] ? lock_acquire+0x1d1/0x380 [ 1628.024489][T23950] ? get_pid_task+0x2a/0x250 [ 1628.024504][T23950] ___sys_sendmsg+0x190/0x1e0 [ 1628.024519][T23950] ? __pfx____sys_sendmsg+0x10/0x10 [ 1628.024533][T23950] ? get_pid_task+0x106/0x250 [ 1628.024553][T23950] ? find_held_lock+0x2b/0x80 [ 1628.024576][T23950] __sys_sendmsg+0x160/0x210 [ 1628.024587][T23950] ? __pfx___sys_sendmsg+0x10/0x10 [ 1628.024604][T23950] do_syscall_64+0x123/0x790 [ 1628.024619][T23950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.024630][T23950] RIP: 0033:0x7f9836b9e159 [ 1628.024640][T23950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.024651][T23950] RSP: 002b:00007f9837b1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1628.024662][T23950] RAX: ffffffffffffffda RBX: 00007f9836e26090 RCX: 00007f9836b9e159 [ 1628.024669][T23950] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 1628.024676][T23950] RBP: 00007f9837b1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.024682][T23950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1628.024689][T23950] R13: 00007f9836e26128 R14: 00007f9836e26090 R15: 00007ffdb5de7a78 [ 1628.024702][T23950] [ 1628.331033][T23956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4515'. [ 1628.379469][ T31] audit: type=1400 audit(2000000687.580:5860): avc: denied { create } for pid=23935 comm="syz.6.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1628.403590][T23947] bridge1: entered promiscuous mode [ 1628.403616][T23947] bridge1: entered allmulticast mode [ 1628.482034][ T31] audit: type=1400 audit(2000000687.680:5861): avc: denied { getopt } for pid=23935 comm="syz.6.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1628.510259][ T31] audit: type=1400 audit(2000000687.710:5862): avc: denied { connect } for pid=23935 comm="syz.6.4512" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1628.510864][ T31] audit: type=1400 audit(2000000687.710:5863): avc: denied { setopt } for pid=23935 comm="syz.6.4512" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1628.601469][T23928] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.646160][ T5707] usb 8-1: USB disconnect, device number 99 [ 1628.727732][T23928] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.756137][ T31] audit: type=1400 audit(2000000687.950:5864): avc: denied { create } for pid=23961 comm="syz.7.4516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1628.991007][ T31] audit: type=1400 audit(2000000688.150:5865): avc: denied { bind } for pid=23961 comm="syz.7.4516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1630.049154][ T31] audit: type=1326 audit(2000000689.250:5866): auid=4294967295 uid=3305727 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23963 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9836b9e159 code=0x0 [ 1632.001594][T23928] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.206671][ T5599] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1632.767925][ T5599] usb 6-1: New USB device found, idVendor=0c70, idProduct=c50b, bcdDevice= 0.98 [ 1632.768916][ T5599] usb 6-1: config 2 has an invalid descriptor of length 32, skipping remainder of the config [ 1632.768935][ T5599] usb 6-1: config 2 has no interfaces? [ 1632.768956][ T5599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.860309][T19569] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.882522][T13105] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.885666][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.885795][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.987179][ T31] audit: type=1400 audit(2000000692.190:5867): avc: denied { setattr } for pid=23990 comm="syz.9.4525" name="NETLINK" dev="sockfs" ino=113007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1633.998064][T23999] EXT4-fs (nbd1): unable to read superblock [ 1634.522390][ T5599] usb 6-1: USB disconnect, device number 38 [ 1635.732835][ T31] audit: type=1326 audit(2000000694.300:5868): auid=4294967295 uid=3305727 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24013 comm="syz.7.4529" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa35fd9e159 code=0x0 [ 1637.648449][ T31] audit: type=1400 audit(2000000696.850:5869): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1637.648510][ T31] audit: type=1400 audit(2000000696.850:5870): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1638.070836][ T31] audit: type=1400 audit(2000000697.270:5871): avc: denied { cmd } for pid=24036 comm="syz.1.4536" path="socket:[113135]" dev="sockfs" ino=113135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1638.339101][ T31] audit: type=1400 audit(2000000697.540:5872): avc: denied { bind } for pid=24043 comm="syz.7.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1638.521618][ T31] audit: type=1400 audit(2000000697.720:5873): avc: denied { create } for pid=24043 comm="syz.7.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1639.819788][ T31] audit: type=1400 audit(2000000698.030:5874): avc: denied { bind } for pid=24043 comm="syz.7.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1641.883934][ T31] audit: type=1400 audit(2000000701.080:5875): avc: denied { bind } for pid=24060 comm="syz.6.4541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1641.883996][ T31] audit: type=1400 audit(2000000701.080:5876): avc: denied { name_bind } for pid=24060 comm="syz.6.4541" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1641.884043][ T31] audit: type=1400 audit(2000000701.080:5877): avc: denied { node_bind } for pid=24060 comm="syz.6.4541" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1641.904105][ T31] audit: type=1400 audit(2000000701.080:5878): avc: denied { name_connect } for pid=24060 comm="syz.6.4541" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1641.904155][ T31] audit: type=1400 audit(2000000701.090:5879): avc: denied { create } for pid=24060 comm="syz.6.4541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1641.904189][ T31] audit: type=1400 audit(2000000701.090:5880): avc: denied { bind } for pid=24060 comm="syz.6.4541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1643.293700][T24066] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4542'. [ 1643.293834][T24066] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4542'. [ 1643.819445][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4542'. [ 1645.064893][T24085] syzkaller0: entered promiscuous mode [ 1645.070575][T24085] syzkaller0: entered allmulticast mode [ 1645.078391][T24085] FAULT_INJECTION: forcing a failure. [ 1645.078391][T24085] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.096985][T24085] CPU: 1 UID: 0 PID: 24085 Comm: syz.1.4548 Tainted: G L syzkaller #0 PREEMPT(full) [ 1645.097016][T24085] Tainted: [L]=SOFTLOCKUP [ 1645.097024][T24085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1645.097035][T24085] Call Trace: [ 1645.097041][T24085] [ 1645.097049][T24085] dump_stack_lvl+0x100/0x190 [ 1645.097080][T24085] should_fail_ex.cold+0x5/0xa [ 1645.097106][T24085] should_failslab+0xc2/0x120 [ 1645.097128][T24085] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1645.097147][T24085] ? __alloc_skb+0x5b7/0x710 [ 1645.097174][T24085] ? __alloc_skb+0x140/0x710 [ 1645.097203][T24085] __alloc_skb+0x140/0x710 [ 1645.097228][T24085] ? __alloc_skb+0x5b7/0x710 [ 1645.097254][T24085] ? __pfx___alloc_skb+0x10/0x10 [ 1645.097285][T24085] ? process_measurement+0x4c8/0x2350 [ 1645.097319][T24085] alloc_skb_with_frags+0xdd/0x760 [ 1645.097339][T24085] ? __might_fault+0xc5/0x140 [ 1645.097364][T24085] ? __might_fault+0xc5/0x140 [ 1645.097392][T24085] sock_alloc_send_pskb+0x801/0x980 [ 1645.097420][T24085] ? _copy_from_iter+0x270/0x1690 [ 1645.097452][T24085] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1645.097479][T24085] ? find_held_lock+0x2b/0x80 [ 1645.097503][T24085] ? dev_get_by_index+0x180/0x380 [ 1645.097530][T24085] ? dev_get_by_index+0x180/0x380 [ 1645.097564][T24085] packet_sendmsg+0x1ed7/0x4f00 [ 1645.097605][T24085] ? sock_has_perm+0x25a/0x2f0 [ 1645.097630][T24085] ? __pfx_sock_has_perm+0x10/0x10 [ 1645.097660][T24085] ? __pfx_packet_sendmsg+0x10/0x10 [ 1645.097694][T24085] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1645.097724][T24085] ____sys_sendmsg+0xa4d/0xbe0 [ 1645.097745][T24085] ? __pfx_packet_sendmsg+0x10/0x10 [ 1645.097775][T24085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.097803][T24085] ? lock_acquire+0x1d1/0x380 [ 1645.097820][T24085] ? get_pid_task+0x2a/0x250 [ 1645.097847][T24085] ___sys_sendmsg+0x190/0x1e0 [ 1645.097875][T24085] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.097899][T24085] ? get_pid_task+0x106/0x250 [ 1645.097932][T24085] ? find_held_lock+0x2b/0x80 [ 1645.097971][T24085] __sys_sendmsg+0x160/0x210 [ 1645.097989][T24085] ? __pfx___sys_sendmsg+0x10/0x10 [ 1645.098021][T24085] do_syscall_64+0x123/0x790 [ 1645.098045][T24085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.098063][T24085] RIP: 0033:0x7f2ee0d9e159 [ 1645.098080][T24085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1645.098097][T24085] RSP: 002b:00007f2edeff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.098115][T24085] RAX: ffffffffffffffda RBX: 00007f2ee1025fa0 RCX: 00007f2ee0d9e159 [ 1645.098128][T24085] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1645.098140][T24085] RBP: 00007f2edeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1645.098151][T24085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.098162][T24085] R13: 00007f2ee1026038 R14: 00007f2ee1025fa0 R15: 00007ffcf2c05f08 [ 1645.098187][T24085] [ 1646.192444][T24095] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4550'. [ 1646.192484][T24095] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4550'. [ 1646.270212][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4550'. [ 1647.210758][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 1647.210805][ T31] audit: type=1400 audit(2000000706.080:5891): avc: denied { ioctl } for pid=24088 comm="syz.7.4549" path="/dev/sg0" dev="devtmpfs" ino=1048 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1647.210852][ T31] audit: type=1400 audit(2000000706.090:5892): avc: denied { read } for pid=24088 comm="syz.7.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1648.651441][T24119] FAULT_INJECTION: forcing a failure. [ 1648.651441][T24119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.651597][T24119] CPU: 0 UID: 0 PID: 24119 Comm: syz.7.4556 Tainted: G L syzkaller #0 PREEMPT(full) [ 1648.651618][T24119] Tainted: [L]=SOFTLOCKUP [ 1648.651625][T24119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1648.651634][T24119] Call Trace: [ 1648.651640][T24119] [ 1648.651647][T24119] dump_stack_lvl+0x100/0x190 [ 1648.651675][T24119] should_fail_ex.cold+0x5/0xa [ 1648.651698][T24119] _copy_from_iter+0x1f4/0x1690 [ 1648.651725][T24119] ? __asan_memset+0x23/0x50 [ 1648.651751][T24119] ? __pfx__copy_from_iter+0x10/0x10 [ 1648.651774][T24119] ? __pfx___alloc_skb+0x10/0x10 [ 1648.651814][T24119] netlink_sendmsg+0x808/0xda0 [ 1648.651841][T24119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1648.651866][T24119] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1648.651893][T24119] ____sys_sendmsg+0xa4d/0xbe0 [ 1648.651911][T24119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1648.651936][T24119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1648.651957][T24119] ? do_raw_spin_unlock+0x145/0x1e0 [ 1648.651978][T24119] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1648.651999][T24119] ___sys_sendmsg+0x190/0x1e0 [ 1648.652020][T24119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1648.652050][T24119] ? find_held_lock+0x2b/0x80 [ 1648.652085][T24119] __sys_sendmsg+0x160/0x210 [ 1648.652101][T24119] ? __pfx___sys_sendmsg+0x10/0x10 [ 1648.652128][T24119] do_syscall_64+0x123/0x790 [ 1648.652148][T24119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.652166][T24119] RIP: 0033:0x7fa35fd9e159 [ 1648.652180][T24119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.652195][T24119] RSP: 002b:00007fa360bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1648.652212][T24119] RAX: ffffffffffffffda RBX: 00007fa360025fa0 RCX: 00007fa35fd9e159 [ 1648.652223][T24119] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1648.652233][T24119] RBP: 00007fa360bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.652243][T24119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.652253][T24119] R13: 00007fa360026038 R14: 00007fa360025fa0 R15: 00007ffc46310ed8 [ 1648.652275][T24119] [ 1650.411994][T24122] comedi comedi1: 8255: I/O base address not correctly aligned [ 1652.019382][ T31] audit: type=1400 audit(2000000711.220:5893): avc: denied { read write } for pid=24137 comm="syz.6.4559" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1652.021944][ T31] audit: type=1400 audit(2000000711.220:5894): avc: denied { open } for pid=24137 comm="syz.6.4559" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1652.030867][ T31] audit: type=1400 audit(2000000711.220:5895): avc: denied { ioctl } for pid=24137 comm="syz.6.4559" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1654.252361][ T31] audit: type=1400 audit(2000000713.450:5896): avc: denied { read write } for pid=24148 comm="syz.6.4564" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1654.252726][ T31] audit: type=1400 audit(2000000713.450:5897): avc: denied { open } for pid=24148 comm="syz.6.4564" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1654.269110][ T31] audit: type=1400 audit(2000000713.450:5898): avc: denied { ioctl } for pid=24148 comm="syz.6.4564" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x64b7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1656.866049][T24156] Process accounting resumed [ 1656.934010][ T31] audit: type=1400 audit(2000000716.130:5899): avc: denied { map } for pid=24176 comm="syz.6.4571" path="socket:[113450]" dev="sockfs" ino=113450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1656.957671][ T31] audit: type=1400 audit(2000000716.130:5900): avc: denied { read } for pid=24176 comm="syz.6.4571" path="socket:[113450]" dev="sockfs" ino=113450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1657.914550][ T31] audit: type=1400 audit(2000000717.110:5901): avc: denied { create } for pid=24185 comm="syz.5.4575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1657.914613][ T31] audit: type=1400 audit(2000000717.110:5902): avc: denied { ioctl } for pid=24185 comm="syz.5.4575" path="socket:[115197]" dev="sockfs" ino=115197 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1657.914665][ T31] audit: type=1400 audit(2000000717.110:5903): avc: denied { write } for pid=24185 comm="syz.5.4575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1657.980709][T22759] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1659.273082][ T31] audit: type=1326 audit(2000000717.590:5904): auid=4294967295 uid=3305727 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24188 comm="syz.9.4576" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d1db9e159 code=0x0 [ 1659.274008][T22759] usb 8-1: Using ep0 maxpacket: 16 [ 1659.311238][T22759] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1659.321963][T24177] bridge_slave_0: left allmulticast mode [ 1659.322008][T24177] bridge_slave_0: left promiscuous mode [ 1659.325483][T24177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.405271][T22759] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.405310][T22759] usb 8-1: Product: syz [ 1659.405339][T22759] usb 8-1: Manufacturer: syz [ 1659.405357][T22759] usb 8-1: SerialNumber: syz [ 1659.458664][T24177] bridge_slave_1: left allmulticast mode [ 1659.458708][T24177] bridge_slave_1: left promiscuous mode [ 1659.458858][T24177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.520927][T24177] bond0: (slave bond_slave_0): Releasing backup interface [ 1659.552366][T24177] bond0: (slave bond_slave_1): Releasing backup interface [ 1659.612904][T24177] team0: Port device team_slave_0 removed [ 1659.629816][T24177] team0: Port device team_slave_1 removed [ 1659.637747][T24177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.645361][T24177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.662143][T24177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.671046][T24177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.683341][T24177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1659.820756][T24206] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4579'. [ 1659.830151][T24206] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4579'. [ 1659.893350][T24201] syzkaller0: entered promiscuous mode [ 1659.893375][T24201] syzkaller0: entered allmulticast mode [ 1659.916898][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4579'. [ 1659.942936][T22759] usb 8-1: USB disconnect, device number 100 [ 1660.312429][ T31] audit: type=1400 audit(2000000719.510:5905): avc: denied { ioctl } for pid=24218 comm="syz.5.4582" path="socket:[113474]" dev="sockfs" ino=113474 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1661.244617][ T31] audit: type=1400 audit(2000000720.440:5906): avc: denied { execute } for pid=24225 comm="syz.7.4584" name="file0" dev="tmpfs" ino=1355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1661.262508][ T31] audit: type=1400 audit(2000000720.440:5907): avc: denied { execute_no_trans } for pid=24225 comm="syz.7.4584" path="/232/file0" dev="tmpfs" ino=1355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1661.263007][T24232] Invalid argument reading file caps for ./file0 [ 1661.488992][T24241] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1661.520027][T24241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4572'. [ 1663.369373][T24250] fuse: Bad value for 'fd' [ 1663.467446][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 1663.484854][ T31] audit: type=1400 audit(2000000722.320:5908): avc: denied { create } for pid=24247 comm="syz.6.4589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1663.484919][ T31] audit: type=1400 audit(2000000722.430:5909): avc: denied { connect } for pid=24247 comm="syz.6.4589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1663.484957][ T31] audit: type=1400 audit(2000000722.460:5910): avc: denied { write } for pid=24247 comm="syz.6.4589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1663.485011][ T31] audit: type=1400 audit(2000000722.570:5911): avc: denied { mounton } for pid=24247 comm="syz.6.4589" path="/238/file0" dev="tmpfs" ino=1363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1663.578256][ T31] audit: type=1400 audit(2000000722.700:5912): avc: denied { write } for pid=24247 comm="syz.6.4589" name="ifname" dev="configfs" ino=115286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1663.578302][ T31] audit: type=1400 audit(2000000722.700:5913): avc: denied { open } for pid=24247 comm="syz.6.4589" path="/238/cfg/usb_gadget/g1/functions/eem.usb0/ifname" dev="configfs" ino=115286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1664.483128][T24269] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4592'. [ 1664.770736][ T31] audit: type=1400 audit(2000000723.970:5914): avc: denied { write } for pid=24278 comm="syz.1.4597" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1665.249880][T24289] tipc: Started in network mode [ 1665.255834][T24289] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1665.263289][T24289] tipc: Enabled bearer , priority 0 [ 1665.512826][T24296] FAULT_INJECTION: forcing a failure. [ 1665.512826][T24296] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.512866][T24296] CPU: 0 UID: 0 PID: 24296 Comm: syz.7.4602 Tainted: G L syzkaller #0 PREEMPT(full) [ 1665.512891][T24296] Tainted: [L]=SOFTLOCKUP [ 1665.512897][T24296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1665.512907][T24296] Call Trace: [ 1665.512913][T24296] [ 1665.512921][T24296] dump_stack_lvl+0x100/0x190 [ 1665.512948][T24296] should_fail_ex.cold+0x5/0xa [ 1665.512970][T24296] should_failslab+0xc2/0x120 [ 1665.512990][T24296] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1665.513007][T24296] ? __alloc_skb+0x5b7/0x710 [ 1665.513031][T24296] ? __alloc_skb+0x140/0x710 [ 1665.513057][T24296] __alloc_skb+0x140/0x710 [ 1665.513078][T24296] ? __alloc_skb+0x5b7/0x710 [ 1665.513101][T24296] ? __pfx___alloc_skb+0x10/0x10 [ 1665.513130][T24296] netlink_alloc_large_skb+0x69/0x150 [ 1665.513156][T24296] netlink_sendmsg+0x680/0xda0 [ 1665.513188][T24296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1665.513214][T24296] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1665.513241][T24296] ____sys_sendmsg+0xa4d/0xbe0 [ 1665.513259][T24296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1665.513283][T24296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1665.513307][T24296] ? lock_acquire+0x1d1/0x380 [ 1665.513323][T24296] ? get_pid_task+0x2a/0x250 [ 1665.513346][T24296] ___sys_sendmsg+0x190/0x1e0 [ 1665.513368][T24296] ? __pfx____sys_sendmsg+0x10/0x10 [ 1665.513388][T24296] ? get_pid_task+0x106/0x250 [ 1665.513416][T24296] ? find_held_lock+0x2b/0x80 [ 1665.513451][T24296] __sys_sendmsg+0x160/0x210 [ 1665.513467][T24296] ? __pfx___sys_sendmsg+0x10/0x10 [ 1665.513495][T24296] do_syscall_64+0x123/0x790 [ 1665.513516][T24296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.513532][T24296] RIP: 0033:0x7fa35fd9e159 [ 1665.513546][T24296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1665.513561][T24296] RSP: 002b:00007fa360bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1665.513577][T24296] RAX: ffffffffffffffda RBX: 00007fa360025fa0 RCX: 00007fa35fd9e159 [ 1665.513588][T24296] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1665.513597][T24296] RBP: 00007fa360bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1665.513607][T24296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.513617][T24296] R13: 00007fa360026038 R14: 00007fa360025fa0 R15: 00007ffc46310ed8 [ 1665.513638][T24296] [ 1666.101530][ T31] audit: type=1400 audit(2000000725.300:5915): avc: denied { wake_alarm } for pid=24301 comm="syz.1.4603" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1666.124455][ T31] audit: type=1400 audit(2000000725.320:5916): avc: denied { ioctl } for pid=24301 comm="syz.1.4603" path="socket:[115447]" dev="sockfs" ino=115447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1666.183016][T24299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1666.196113][T24300] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1666.271186][T24307] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1666.280658][T24307] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1666.352826][T24306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1666.382195][T22759] tipc: Node number set to 43690 [ 1666.501464][ T31] audit: type=1400 audit(2000000725.700:5917): avc: denied { connect } for pid=24298 comm="syz.7.4604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1666.501753][ T31] audit: type=1400 audit(2000000725.700:5918): avc: denied { write } for pid=24298 comm="syz.7.4604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1666.686227][T24314] EXT4-fs (nbd9): unable to read superblock [ 1667.197258][ T31] audit: type=1400 audit(2000000726.390:5919): avc: denied { bind } for pid=24317 comm="syz.5.4608" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1667.415479][T24326] FAULT_INJECTION: forcing a failure. [ 1667.415479][T24326] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.443697][T24326] CPU: 0 UID: 0 PID: 24326 Comm: syz.1.4611 Tainted: G L syzkaller #0 PREEMPT(full) [ 1667.443721][T24326] Tainted: [L]=SOFTLOCKUP [ 1667.443726][T24326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1667.443732][T24326] Call Trace: [ 1667.443736][T24326] [ 1667.443741][T24326] dump_stack_lvl+0x100/0x190 [ 1667.443763][T24326] should_fail_ex.cold+0x5/0xa [ 1667.443777][T24326] ? __netlink_lookup+0x652/0x900 [ 1667.443798][T24326] should_failslab+0xc2/0x120 [ 1667.443818][T24326] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1667.443837][T24326] ? skb_clone+0x190/0x400 [ 1667.443857][T24326] skb_clone+0x190/0x400 [ 1667.443873][T24326] netlink_deliver_tap+0xaed/0xcc0 [ 1667.443901][T24326] netlink_unicast+0x62b/0x850 [ 1667.443929][T24326] ? __pfx_netlink_unicast+0x10/0x10 [ 1667.443955][T24326] netlink_sendmsg+0x8b0/0xda0 [ 1667.443974][T24326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1667.443992][T24326] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1667.444011][T24326] ____sys_sendmsg+0xa4d/0xbe0 [ 1667.444024][T24326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1667.444041][T24326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1667.444058][T24326] ? lock_acquire+0x1d1/0x380 [ 1667.444069][T24326] ? get_pid_task+0x2a/0x250 [ 1667.444085][T24326] ___sys_sendmsg+0x190/0x1e0 [ 1667.444101][T24326] ? __pfx____sys_sendmsg+0x10/0x10 [ 1667.444115][T24326] ? get_pid_task+0x106/0x250 [ 1667.444134][T24326] ? find_held_lock+0x2b/0x80 [ 1667.444159][T24326] __sys_sendmsg+0x160/0x210 [ 1667.444170][T24326] ? __pfx___sys_sendmsg+0x10/0x10 [ 1667.444188][T24326] do_syscall_64+0x123/0x790 [ 1667.444204][T24326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.444217][T24326] RIP: 0033:0x7f2ee0d9e159 [ 1667.444227][T24326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.444238][T24326] RSP: 002b:00007f2edeff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1667.444249][T24326] RAX: ffffffffffffffda RBX: 00007f2ee1025fa0 RCX: 00007f2ee0d9e159 [ 1667.444256][T24326] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 1667.444263][T24326] RBP: 00007f2edeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.444269][T24326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1667.444276][T24326] R13: 00007f2ee1026038 R14: 00007f2ee1025fa0 R15: 00007ffcf2c05f08 [ 1667.444290][T24326] [ 1667.479965][T24326] netlink: 'syz.1.4611': attribute type 5 has an invalid length. [ 1667.479981][T24326] netlink: 'syz.1.4611': attribute type 9 has an invalid length. [ 1667.479992][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4611'. [ 1669.023193][ T31] audit: type=1400 audit(2000000728.220:5920): avc: denied { create } for pid=24351 comm="syz.1.4618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1669.024510][ T31] audit: type=1400 audit(2000000728.220:5921): avc: denied { connect } for pid=24351 comm="syz.1.4618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1669.094875][ T31] audit: type=1400 audit(2000000728.290:5922): avc: denied { setopt } for pid=24351 comm="syz.1.4618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1669.132196][T24355] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4619'. [ 1669.142470][T24355] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4619'. [ 1669.744830][T24355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4619'. [ 1670.166586][T22759] usb 8-1: new full-speed USB device number 101 using dummy_hcd [ 1670.615083][T24370] EXT4-fs (nbd5): unable to read superblock [ 1670.747980][T22759] usb 8-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1670.748954][T22759] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1670.748978][T22759] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1670.748999][T22759] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1670.749022][T22759] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.648217][ T4917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1671.666242][ T4917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1671.674930][ T4917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1671.690566][ T4917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1671.698877][ T4917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1671.737997][ T31] audit: type=1400 audit(2000000730.930:5923): avc: denied { mounton } for pid=24381 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1672.115004][T24394] FAULT_INJECTION: forcing a failure. [ 1672.115004][T24394] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.115052][T24394] CPU: 0 UID: 0 PID: 24394 Comm: syz.5.4629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1672.115076][T24394] Tainted: [L]=SOFTLOCKUP [ 1672.115082][T24394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1672.115090][T24394] Call Trace: [ 1672.115096][T24394] [ 1672.115102][T24394] dump_stack_lvl+0x100/0x190 [ 1672.115129][T24394] should_fail_ex.cold+0x5/0xa [ 1672.115152][T24394] should_failslab+0xc2/0x120 [ 1672.115172][T24394] __kmalloc_cache_noprof+0x91/0x6d0 [ 1672.115196][T24394] ? input_allocate_device+0xc5/0x350 [ 1672.115219][T24394] input_allocate_device+0xc5/0x350 [ 1672.115239][T24394] uinput_ioctl_handler.isra.0+0x3c8/0x1d20 [ 1672.115264][T24394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1672.115287][T24394] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1672.115313][T24394] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1672.115337][T24394] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1672.115364][T24394] ? __fget_files+0x34/0x3d0 [ 1672.115392][T24394] ? selinux_file_ioctl+0x13b/0x290 [ 1672.115414][T24394] ? selinux_file_ioctl+0xb6/0x290 [ 1672.115439][T24394] ? __pfx_uinput_ioctl+0x10/0x10 [ 1672.115463][T24394] __x64_sys_ioctl+0x18e/0x210 [ 1672.115489][T24394] do_syscall_64+0x123/0x790 [ 1672.115510][T24394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.115527][T24394] RIP: 0033:0x7f9836b9e159 [ 1672.115541][T24394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.115556][T24394] RSP: 002b:00007f9837b3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1672.115572][T24394] RAX: ffffffffffffffda RBX: 00007f9836e25fa0 RCX: 00007f9836b9e159 [ 1672.115583][T24394] RDX: 000000000000000e RSI: 0000000040045566 RDI: 0000000000000003 [ 1672.115593][T24394] RBP: 00007f9837b3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1672.115602][T24394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.115612][T24394] R13: 00007f9836e26038 R14: 00007f9836e25fa0 R15: 00007ffdb5de7a78 [ 1672.115634][T24394] [ 1672.184020][T24396] tipc: Started in network mode [ 1672.184044][T24396] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1672.184149][T24396] tipc: Enabled bearer , priority 0 [ 1672.436499][T11938] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1673.007188][T11938] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1673.008093][T11938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1673.008116][T11938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1673.009778][T11938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.009795][T11938] usb 2-1: Product: syz [ 1673.009808][T11938] usb 2-1: Manufacturer: syz [ 1673.009819][T11938] usb 2-1: SerialNumber: syz [ 1673.223535][ T31] audit: type=1400 audit(2000000732.420:5924): avc: denied { ioctl } for pid=24405 comm="syz.6.4632" path="/newroot/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1673.336680][T17991] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.435225][T11938] tipc: Node number set to 43690 [ 1673.513664][T24381] lo speed is unknown, defaulting to 1000 [ 1673.562087][T24412] FAULT_INJECTION: forcing a failure. [ 1673.562087][T24412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1673.576084][T24412] CPU: 1 UID: 0 PID: 24412 Comm: syz.5.4633 Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.576106][T24412] Tainted: [L]=SOFTLOCKUP [ 1673.576110][T24412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1673.576117][T24412] Call Trace: [ 1673.576122][T24412] [ 1673.576127][T24412] dump_stack_lvl+0x100/0x190 [ 1673.576147][T24412] should_fail_ex.cold+0x5/0xa [ 1673.576161][T24412] ? prepare_alloc_pages+0x16d/0x5b0 [ 1673.576175][T24412] should_fail_alloc_page+0xeb/0x140 [ 1673.576190][T24412] prepare_alloc_pages+0x1f0/0x5b0 [ 1673.576205][T24412] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1673.576237][T24412] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1673.576258][T24412] ? prepare_alloc_pages+0x1f0/0x5b0 [ 1673.576272][T24412] ? rcu_is_watching+0x13/0xc0 [ 1673.576287][T24412] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 1673.576306][T24412] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1673.576324][T24412] ? find_held_lock+0x2b/0x80 [ 1673.576339][T24412] ? is_bpf_text_address+0x8a/0x1a0 [ 1673.576353][T24412] ? is_bpf_text_address+0x8a/0x1a0 [ 1673.576366][T24412] ? bpf_ksym_find+0x128/0x1c0 [ 1673.576382][T24412] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1673.576408][T24412] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1673.576433][T24412] ? is_bpf_text_address+0x94/0x1a0 [ 1673.576456][T24412] ? __kernel_text_address+0xd/0x30 [ 1673.576498][T24412] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 1673.576523][T24412] ? find_held_lock+0x2b/0x80 [ 1673.576547][T24412] ? policy_nodemask+0xed/0x4f0 [ 1673.576570][T24412] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1673.576610][T24412] __kasan_populate_vmalloc+0xf0/0x210 [ 1673.576634][T24412] alloc_vmap_area+0x95d/0x2bb0 [ 1673.576661][T24412] ? kasan_save_track+0x14/0x30 [ 1673.576680][T24412] ? __kasan_kmalloc+0xaa/0xb0 [ 1673.576699][T24412] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1673.576719][T24412] ? __get_vm_area_node+0x124/0x350 [ 1673.576740][T24412] __get_vm_area_node+0x1ed/0x350 [ 1673.576764][T24412] __vmalloc_node_range_noprof+0x268/0x1420 [ 1673.576788][T24412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1673.576811][T24412] ? up_write+0x2dc/0x5b0 [ 1673.576834][T24412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1673.576855][T24412] ? lock_acquire+0x1d1/0x380 [ 1673.576874][T24412] ? find_held_lock+0x2b/0x80 [ 1673.576896][T24412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1673.576918][T24412] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1673.576943][T24412] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1673.576965][T24412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1673.576985][T24412] __vmalloc_node_noprof+0xad/0xf0 [ 1673.577005][T24412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1673.577029][T24412] __vmalloc_noprof+0xa3/0x120 [ 1673.577051][T24412] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1673.577075][T24412] ? rcu_is_watching+0x13/0xc0 [ 1673.577098][T24412] ? cap_capable+0x107/0x430 [ 1673.577122][T24412] bpf_prog_alloc_no_stats+0x59/0x690 [ 1673.577143][T24412] ? security_capable+0x80/0x260 [ 1673.577168][T24412] bpf_prog_alloc+0x3b/0x200 [ 1673.577187][T24412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1673.577208][T24412] bpf_prog_load+0x49e/0x2a80 [ 1673.577241][T24412] ? __pfx_bpf_prog_load+0x10/0x10 [ 1673.577282][T24412] __sys_bpf+0x1f46/0x4a30 [ 1673.577304][T24412] ? __pfx___sys_bpf+0x10/0x10 [ 1673.577320][T24412] ? find_held_lock+0x2b/0x80 [ 1673.577342][T24412] ? get_pid_task+0xfc/0x250 [ 1673.577360][T24412] ? get_pid_task+0xfc/0x250 [ 1673.577378][T24412] ? find_held_lock+0x2b/0x80 [ 1673.577396][T24412] ? rcu_read_lock_any_held+0x6a/0x90 [ 1673.577411][T24412] ? find_held_lock+0x2b/0x80 [ 1673.577425][T24412] ? ksys_write+0x190/0x250 [ 1673.577435][T24412] ? ksys_write+0x190/0x250 [ 1673.577445][T24412] ? lock_acquire+0x1d1/0x380 [ 1673.577464][T24412] ? fput+0x7c/0x100 [ 1673.577477][T24412] ? ksys_write+0x1ac/0x250 [ 1673.577489][T24412] ? __x64_sys_bpf+0xce/0x140 [ 1673.577498][T24412] __x64_sys_bpf+0xce/0x140 [ 1673.577509][T24412] ? do_syscall_64+0xae/0x790 [ 1673.577523][T24412] do_syscall_64+0x123/0x790 [ 1673.577536][T24412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.577548][T24412] RIP: 0033:0x7f9836b9e159 [ 1673.577558][T24412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.577569][T24412] RSP: 002b:00007f9837b3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1673.577581][T24412] RAX: ffffffffffffffda RBX: 00007f9836e25fa0 RCX: 00007f9836b9e159 [ 1673.577588][T24412] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1673.577595][T24412] RBP: 00007f9837b3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.577601][T24412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1673.577608][T24412] R13: 00007f9836e26038 R14: 00007f9836e25fa0 R15: 00007ffdb5de7a78 [ 1673.577622][T24412] [ 1673.590706][T24412] warn_alloc: 1 callbacks suppressed [ 1673.590721][T24412] syz.5.4633: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1673.590778][T24412] CPU: 1 UID: 0 PID: 24412 Comm: syz.5.4633 Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.590803][T24412] Tainted: [L]=SOFTLOCKUP [ 1673.590810][T24412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1673.590821][T24412] Call Trace: [ 1673.590829][T24412] [ 1673.590836][T24412] dump_stack_lvl+0x100/0x190 [ 1673.590866][T24412] warn_alloc.cold+0x9e/0xb2 [ 1673.590886][T24412] ? __pfx_warn_alloc+0x10/0x10 [ 1673.590910][T24412] ? lockdep_hardirqs_on+0x7d/0x110 [ 1673.590933][T24412] ? __get_vm_area_node+0x2f0/0x350 [ 1673.590956][T24412] ? __get_vm_area_node+0x22b/0x350 [ 1673.590982][T24412] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 1673.591007][T24412] ? up_write+0x2dc/0x5b0 [ 1673.591030][T24412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1673.591052][T24412] ? lock_acquire+0x1d1/0x380 [ 1673.591072][T24412] ? find_held_lock+0x2b/0x80 [ 1673.591094][T24412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1673.591116][T24412] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1673.591142][T24412] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1673.591165][T24412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1673.591187][T24412] __vmalloc_node_noprof+0xad/0xf0 [ 1673.591209][T24412] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1673.591239][T24412] __vmalloc_noprof+0xa3/0x120 [ 1673.591261][T24412] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1673.591284][T24412] ? rcu_is_watching+0x13/0xc0 [ 1673.591307][T24412] ? cap_capable+0x107/0x430 [ 1673.591333][T24412] bpf_prog_alloc_no_stats+0x59/0x690 [ 1673.591353][T24412] ? security_capable+0x80/0x260 [ 1673.591378][T24412] bpf_prog_alloc+0x3b/0x200 [ 1673.591397][T24412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1673.591419][T24412] bpf_prog_load+0x49e/0x2a80 [ 1673.591447][T24412] ? __pfx_bpf_prog_load+0x10/0x10 [ 1673.591489][T24412] __sys_bpf+0x1f46/0x4a30 [ 1673.591514][T24412] ? __pfx___sys_bpf+0x10/0x10 [ 1673.591531][T24412] ? find_held_lock+0x2b/0x80 [ 1673.591555][T24412] ? get_pid_task+0xfc/0x250 [ 1673.591578][T24412] ? get_pid_task+0xfc/0x250 [ 1673.591609][T24412] ? find_held_lock+0x2b/0x80 [ 1673.591639][T24412] ? rcu_read_lock_any_held+0x6a/0x90 [ 1673.591663][T24412] ? find_held_lock+0x2b/0x80 [ 1673.591686][T24412] ? ksys_write+0x190/0x250 [ 1673.591703][T24412] ? ksys_write+0x190/0x250 [ 1673.591719][T24412] ? lock_acquire+0x1d1/0x380 [ 1673.591752][T24412] ? fput+0x7c/0x100 [ 1673.591772][T24412] ? ksys_write+0x1ac/0x250 [ 1673.591790][T24412] ? __x64_sys_bpf+0xce/0x140 [ 1673.591805][T24412] __x64_sys_bpf+0xce/0x140 [ 1673.591821][T24412] ? do_syscall_64+0xae/0x790 [ 1673.591843][T24412] do_syscall_64+0x123/0x790 [ 1673.591865][T24412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.591883][T24412] RIP: 0033:0x7f9836b9e159 [ 1673.591899][T24412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.591919][T24412] RSP: 002b:00007f9837b3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1673.591937][T24412] RAX: ffffffffffffffda RBX: 00007f9836e25fa0 RCX: 00007f9836b9e159 [ 1673.591949][T24412] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1673.591960][T24412] RBP: 00007f9837b3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.591970][T24412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1673.591981][T24412] R13: 00007f9836e26038 R14: 00007f9836e25fa0 R15: 00007ffdb5de7a78 [ 1673.592005][T24412] [ 1673.592021][T24412] Mem-Info: [ 1673.592029][T24412] active_anon:39005 inactive_anon:1068 isolated_anon:0 [ 1673.592029][T24412] active_file:11139 inactive_file:24333 isolated_file:0 [ 1673.592029][T24412] unevictable:1024 dirty:861 writeback:0 [ 1673.592029][T24412] slab_reclaimable:10871 slab_unreclaimable:119443 [ 1673.592029][T24412] mapped:58069 shmem:30558 pagetables:1953 [ 1673.592029][T24412] sec_pagetables:0 bounce:0 [ 1673.592029][T24412] kernel_misc_reclaimable:0 [ 1673.592029][T24412] free:1231081 free_pcp:12461 free_cma:0 [ 1673.592072][T24412] Node 0 active_anon:156020kB inactive_anon:4272kB active_file:44556kB inactive_file:97200kB unevictable:2048kB isolated(anon):0kB isolated(file):0kB mapped:232276kB dirty:3440kB writeback:0kB shmem:120184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16680kB pagetables:7696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1673.763528][T24412] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:2048kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1673.763573][T24412] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1673.763617][T24412] lowmem_reserve[]: 0 2470 2471 2471 2471 [ 1673.763645][T24412] Node 0 DMA32 free:972364kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:153420kB inactive_anon:4272kB active_file:44556kB inactive_file:97200kB unevictable:2048kB writepending:3440kB zspages:0kB present:3129332kB managed:2530264kB mlocked:0kB bounce:0kB free_pcp:49492kB local_pcp:25492kB free_cma:0kB [ 1673.763688][T24412] lowmem_reserve[]: 0 0 0 0 0 [ 1673.763714][T24412] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1673.763759][T24412] lowmem_reserve[]: 0 0 0 0 0 [ 1673.763785][T24412] Node 1 Normal free:3939500kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:2048kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1673.763827][T24412] lowmem_reserve[]: 0 0 0 0 0 [ 1673.763852][T24412] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1673.763940][T24412] Node 0 DMA32: 1592*4kB (UM) 1101*8kB (UM) 1547*16kB (UM) 1366*32kB (UME) 521*64kB (UME) 441*128kB (UME) 127*256kB (UM) 17*512kB (UME) 10*1024kB (M) 21*2048kB (UM) 172*4096kB (UM) = 972408kB [ 1673.764060][T24412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1673.764135][T24412] Node 1 Normal: 9*4kB (UM) 13*8kB (UM) 12*16kB (UM) 9*32kB (UM) 11*64kB (UM) 7*128kB (UM) 4*256kB (U) 2*512kB (UM) 3*1024kB (U) 0*2048kB 960*4096kB (UM) = 3939500kB [ 1673.764248][T24412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.764261][T24412] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1673.764273][T24412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.764284][T24412] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1673.764296][T24412] 65251 total pagecache pages [ 1673.764302][T24412] 0 pages in swap cache [ 1673.769048][T24412] Free swap = 124996kB [ 1673.769058][T24412] Total swap = 124996kB [ 1673.769065][T24412] 2097051 pages RAM [ 1673.769071][T24412] 0 pages HighMem/MovableOnly [ 1673.769076][T24412] 432850 pages reserved [ 1673.769082][T24412] 0 pages cma reserved [ 1673.791244][T17991] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.817086][ T5606] Bluetooth: hci0: command tx timeout [ 1674.211511][ T5724] usb 8-1: USB disconnect, device number 101 [ 1674.598795][T17991] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.649257][T17004] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1674.675184][T17004] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1674.686835][T24415] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4634'. [ 1674.686859][T24415] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4634'. [ 1674.739115][T24415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4634'. [ 1675.899043][ T5606] Bluetooth: hci0: command tx timeout [ 1676.131670][T17991] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.249453][T22759] usb 2-1: USB disconnect, device number 63 [ 1676.483362][T24436] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1676.483458][T24436] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1676.678906][T24439] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4639'. [ 1677.112266][T24432] EXT4-fs (nbd6): unable to read superblock [ 1677.170222][ T31] audit: type=1400 audit(2000000736.370:5925): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1677.204263][ T31] audit: type=1400 audit(2000000736.400:5926): avc: denied { search } for pid=5263 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.204328][ T31] audit: type=1400 audit(2000000736.400:5927): avc: denied { search } for pid=5263 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.204373][ T31] audit: type=1400 audit(2000000736.400:5928): avc: denied { search } for pid=5263 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.204410][ T31] audit: type=1400 audit(2000000736.400:5929): avc: denied { read } for pid=5263 comm="dhcpcd" name="n62" dev="tmpfs" ino=19717 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1677.204438][ T31] audit: type=1400 audit(2000000736.400:5930): avc: denied { open } for pid=5263 comm="dhcpcd" path="/run/udev/data/n62" dev="tmpfs" ino=19717 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1677.204468][ T31] audit: type=1400 audit(2000000736.400:5931): avc: denied { getattr } for pid=5263 comm="dhcpcd" path="/run/udev/data/n62" dev="tmpfs" ino=19717 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1677.845145][T24442] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4638'. [ 1677.976897][ T5606] Bluetooth: hci0: command tx timeout [ 1679.299039][ T31] audit: type=1400 audit(2000000738.500:5932): avc: denied { read } for pid=24453 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.304622][ T31] audit: type=1400 audit(2000000738.500:5933): avc: denied { read open } for pid=24453 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.310221][ T31] audit: type=1400 audit(2000000738.500:5934): avc: denied { getattr } for pid=24453 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.425477][T24455] FAULT_INJECTION: forcing a failure. [ 1679.425477][T24455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1679.438814][T24455] CPU: 0 UID: 0 PID: 24455 Comm: syz.5.4642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1679.438846][T24455] Tainted: [L]=SOFTLOCKUP [ 1679.438853][T24455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1679.438864][T24455] Call Trace: [ 1679.438871][T24455] [ 1679.438878][T24455] dump_stack_lvl+0x100/0x190 [ 1679.438908][T24455] should_fail_ex.cold+0x5/0xa [ 1679.438931][T24455] _copy_from_user+0x2e/0xd0 [ 1679.438959][T24455] video_usercopy+0xe71/0x1730 [ 1679.438980][T24455] ? __pfx___video_do_ioctl+0x10/0x10 [ 1679.439002][T24455] ? __pfx_video_usercopy+0x10/0x10 [ 1679.439038][T24455] v4l2_ioctl+0x1bd/0x250 [ 1679.439060][T24455] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1679.439084][T24455] __x64_sys_ioctl+0x18e/0x210 [ 1679.439115][T24455] do_syscall_64+0x123/0x790 [ 1679.439139][T24455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.439159][T24455] RIP: 0033:0x7f9836b9e159 [ 1679.439182][T24455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.439199][T24455] RSP: 002b:00007f9837b3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1679.439217][T24455] RAX: ffffffffffffffda RBX: 00007f9836e25fa0 RCX: 00007f9836b9e159 [ 1679.439229][T24455] RDX: 0000200000000140 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1679.439239][T24455] RBP: 00007f9837b3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.439251][T24455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1679.439262][T24455] R13: 00007f9836e26038 R14: 00007f9836e25fa0 R15: 00007ffdb5de7a78 [ 1679.439286][T24455] [ 1679.693152][T24381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.693314][T24381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.693415][T24381] bridge_slave_0: entered allmulticast mode [ 1679.718980][T24381] bridge_slave_0: entered promiscuous mode [ 1679.728860][T24381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.732102][T24381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.732215][T24381] bridge_slave_1: entered allmulticast mode [ 1679.740307][T24381] bridge_slave_1: entered promiscuous mode [ 1679.846829][T17004] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1679.935550][T17991] bridge_slave_1: left allmulticast mode [ 1679.935590][T17991] bridge_slave_1: left promiscuous mode [ 1679.935769][T17991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.983477][T17991] bridge_slave_0: left allmulticast mode [ 1679.983518][T17991] bridge_slave_0: left promiscuous mode [ 1679.983679][T17991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.066805][T17004] usb 8-1: Using ep0 maxpacket: 8 [ 1680.077444][ T5606] Bluetooth: hci0: command tx timeout [ 1680.093260][T17004] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1680.155488][T17004] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1680.166491][T17004] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1680.196639][T17004] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1680.196746][T17004] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1680.196805][T17004] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1680.196861][T17004] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1680.223875][T17004] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.659417][T17991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.698840][T17991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.729212][T17991] bond0 (unregistering): Released all slaves [ 1681.757930][T17991] bond1 (unregistering): Released all slaves [ 1681.815805][T17991] bond2 (unregistering): Released all slaves [ 1681.885195][T24381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1681.954914][T24381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.023317][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1682.072115][ T5263] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1682.101227][T24484] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1682.101278][T24484] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1682.206369][T24381] team0: Port device team_slave_0 added [ 1682.218748][T24381] team0: Port device team_slave_1 added [ 1682.259226][T24381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.266943][T24381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.293732][T24381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.306741][T24381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.313814][T24381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.340782][T24381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.396670][ T5599] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1682.627192][ T5599] usb 6-1: Using ep0 maxpacket: 32 [ 1682.840082][ T5599] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1682.840120][ T5599] usb 6-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 1682.865780][ T5599] usb 6-1: config 1 has an invalid interface number: 242 but max is 2 [ 1682.865806][ T5599] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.865825][ T5599] usb 6-1: config 1 has no interface number 2 [ 1682.904484][ T5599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.904522][ T5599] usb 6-1: Product: syz [ 1682.904548][ T5599] usb 6-1: Manufacturer: syz [ 1682.904563][ T5599] usb 6-1: SerialNumber: syz [ 1683.042329][T17004] usb 8-1: USB disconnect, device number 102 [ 1683.117264][T24507] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1683.117353][T24507] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1683.238828][T24381] hsr_slave_0: entered promiscuous mode [ 1683.252118][T24381] hsr_slave_1: entered promiscuous mode [ 1683.252682][T24381] debugfs: 'hsr0' already exists in 'hsr' [ 1683.252703][T24381] Cannot create hsr debugfs directory [ 1683.266243][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 1683.266257][ T31] audit: type=1400 audit(2000000742.460:5943): avc: denied { write } for pid=24503 comm="syz.1.4650" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1683.483611][T24510] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4651'. [ 1684.138091][T17004] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 1684.148143][T17004] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1684.407627][T24523] kvm: pic: non byte write [ 1684.419639][T24526] kvm: user requested TSC rate below hardware speed [ 1684.613224][ T31] audit: type=1400 audit(2000000743.810:5944): avc: denied { write } for pid=24502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1684.615311][T24518] Cannot find add_set index 0 as target [ 1684.741916][ T31] audit: type=1400 audit(2000000743.940:5945): avc: denied { write } for pid=24533 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1684.785496][T24534] input: syz1 as /devices/virtual/input/input78 [ 1684.802212][ T31] audit: type=1400 audit(2000000744.000:5946): avc: denied { read } for pid=4953 comm="acpid" name="event4" dev="devtmpfs" ino=4070 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1684.802267][ T31] audit: type=1400 audit(2000000744.000:5947): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4070 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1684.802311][ T31] audit: type=1400 audit(2000000744.000:5948): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4070 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1684.884887][T24534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4654'. [ 1684.884930][T24534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4654'. [ 1685.174494][T17004] usb 6-1: USB disconnect, device number 39 [ 1686.593487][ T5263] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1686.687027][T17991] hsr_slave_0: left promiscuous mode [ 1686.706731][T17991] hsr_slave_1: left promiscuous mode [ 1686.707435][T17991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1686.707450][T17991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1687.364719][ T31] audit: type=1400 audit(2000000746.350:5949): avc: denied { watch } for pid=24548 comm="syz.5.4660" path="/365" dev="tmpfs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1687.411408][T17991] veth1_macvtap: left promiscuous mode [ 1687.412397][T17991] veth1_vlan: left promiscuous mode [ 1687.412450][T17991] veth0_vlan: left promiscuous mode [ 1687.680127][ T31] audit: type=1400 audit(2000000746.880:5950): avc: denied { write } for pid=24553 comm="syz.1.4661" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1687.716293][ T31] audit: type=1400 audit(2000000746.910:5951): avc: denied { open } for pid=24553 comm="syz.1.4661" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1688.188655][T17991] team0 (unregistering): Port device team_slave_1 removed [ 1688.212275][T17991] team0 (unregistering): Port device team_slave_0 removed [ 1688.566880][T22759] lo speed is unknown, defaulting to 1000 [ 1688.566918][T22759] syz2: Port: 1 Link DOWN [ 1688.831393][T24563] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1688.831447][T24563] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1689.117005][T24565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4662'. [ 1689.581732][T24567] FAULT_INJECTION: forcing a failure. [ 1689.581732][T24567] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.581765][T24567] CPU: 1 UID: 0 PID: 24567 Comm: syz.5.4663 Tainted: G L syzkaller #0 PREEMPT(full) [ 1689.581783][T24567] Tainted: [L]=SOFTLOCKUP [ 1689.581789][T24567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1689.581799][T24567] Call Trace: [ 1689.581806][T24567] [ 1689.581814][T24567] dump_stack_lvl+0x100/0x190 [ 1689.581844][T24567] should_fail_ex.cold+0x5/0xa [ 1689.581870][T24567] should_failslab+0xc2/0x120 [ 1689.581893][T24567] __kmalloc_noprof+0xfc/0x840 [ 1689.581912][T24567] ? video_usercopy+0x1a3/0x1730 [ 1689.581935][T24567] video_usercopy+0x1a3/0x1730 [ 1689.581957][T24567] ? __pfx___video_do_ioctl+0x10/0x10 [ 1689.581975][T24567] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1689.582005][T24567] ? __pfx_video_usercopy+0x10/0x10 [ 1689.582037][T24567] v4l2_ioctl+0x1bd/0x250 [ 1689.582058][T24567] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1689.582079][T24567] __x64_sys_ioctl+0x18e/0x210 [ 1689.582108][T24567] do_syscall_64+0x123/0x790 [ 1689.582130][T24567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.582148][T24567] RIP: 0033:0x7f9836b9e159 [ 1689.582162][T24567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.582174][T24567] RSP: 002b:00007f9837ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1689.582185][T24567] RAX: ffffffffffffffda RBX: 00007f9836e26270 RCX: 00007f9836b9e159 [ 1689.582192][T24567] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000008 [ 1689.582199][T24567] RBP: 00007f9837ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.582205][T24567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.582212][T24567] R13: 00007f9836e26308 R14: 00007f9836e26270 R15: 00007ffdb5de7a78 [ 1689.582225][T24567] [ 1689.703683][ T5885] smbdirect: ib_dev[syz2] removed [ 1690.173249][ T5599] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 1690.188379][ T5599] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1690.788426][T24580] FAULT_INJECTION: forcing a failure. [ 1690.788426][T24580] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.790600][T24580] CPU: 0 UID: 0 PID: 24580 Comm: syz.7.4666 Tainted: G L syzkaller #0 PREEMPT(full) [ 1690.790632][T24580] Tainted: [L]=SOFTLOCKUP [ 1690.790639][T24580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1690.790650][T24580] Call Trace: [ 1690.790657][T24580] [ 1690.790665][T24580] dump_stack_lvl+0x100/0x190 [ 1690.790697][T24580] should_fail_ex.cold+0x5/0xa [ 1690.790719][T24580] ? __netlink_lookup+0x652/0x900 [ 1690.790747][T24580] should_failslab+0xc2/0x120 [ 1690.790769][T24580] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1690.790788][T24580] ? skb_clone+0x190/0x400 [ 1690.790810][T24580] skb_clone+0x190/0x400 [ 1690.790829][T24580] netlink_deliver_tap+0xaed/0xcc0 [ 1690.790860][T24580] netlink_unicast+0x62b/0x850 [ 1690.790893][T24580] ? __pfx_netlink_unicast+0x10/0x10 [ 1690.790927][T24580] netlink_sendmsg+0x8b0/0xda0 [ 1690.790958][T24580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1690.790988][T24580] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1690.791019][T24580] ____sys_sendmsg+0xa4d/0xbe0 [ 1690.791042][T24580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1690.791071][T24580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1690.791099][T24580] ? lock_acquire+0x1d1/0x380 [ 1690.791118][T24580] ? get_pid_task+0x2a/0x250 [ 1690.791144][T24580] ___sys_sendmsg+0x190/0x1e0 [ 1690.791170][T24580] ? __pfx____sys_sendmsg+0x10/0x10 [ 1690.791194][T24580] ? get_pid_task+0x106/0x250 [ 1690.791227][T24580] ? find_held_lock+0x2b/0x80 [ 1690.791267][T24580] __sys_sendmsg+0x160/0x210 [ 1690.791293][T24580] ? __pfx___sys_sendmsg+0x10/0x10 [ 1690.791324][T24580] do_syscall_64+0x123/0x790 [ 1690.791349][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.791368][T24580] RIP: 0033:0x7fa35fd9e159 [ 1690.791385][T24580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.791402][T24580] RSP: 002b:00007fa360bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1690.791421][T24580] RAX: ffffffffffffffda RBX: 00007fa360025fa0 RCX: 00007fa35fd9e159 [ 1690.791433][T24580] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1690.791445][T24580] RBP: 00007fa360bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.791456][T24580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.791466][T24580] R13: 00007fa360026038 R14: 00007fa360025fa0 R15: 00007ffc46310ed8 [ 1690.791492][T24580] [ 1691.035130][T24573] Cannot find add_set index 0 as target [ 1691.714903][ T5599] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 1691.919120][ T5599] hid-generic 0000:0000:0000.0048: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1691.929124][T24588] netlink: 'syz.7.4667': attribute type 12 has an invalid length. [ 1691.929145][T24588] netlink: 'syz.7.4667': attribute type 29 has an invalid length. [ 1691.929157][T24588] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4667'. [ 1691.929174][T24588] netlink: 'syz.7.4667': attribute type 1 has an invalid length. [ 1691.929185][T24588] netlink: 47 bytes leftover after parsing attributes in process `syz.7.4667'. [ 1692.184429][T24381] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1692.205105][T24381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1692.205835][T24381] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1692.241576][T24381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1692.242223][T24381] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1692.278835][T24381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1692.295593][T24381] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1692.363551][ T31] audit: type=1400 audit(2000000751.560:5952): avc: denied { mount } for pid=24593 comm="syz.7.4668" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1692.374978][T24381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1692.390580][T24590] fido_id[24590]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1692.528884][ T31] audit: type=1400 audit(2000000751.730:5953): avc: denied { write } for pid=24575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1693.096618][T17004] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1693.115201][T24381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.191075][T24381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1693.275570][T22702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.275675][T22702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1693.276885][T17004] usb 8-1: Using ep0 maxpacket: 16 [ 1693.282227][T17004] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1693.289951][T17004] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1693.289974][T17004] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.289989][T17004] usb 8-1: config 0 has no interface number 0 [ 1693.304052][T17004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.304073][T17004] usb 8-1: Product: syz [ 1693.304086][T17004] usb 8-1: Manufacturer: syz [ 1693.304098][T17004] usb 8-1: SerialNumber: syz [ 1693.314194][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.314268][ T5885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1693.332786][ T31] audit: type=1400 audit(2000000752.530:5954): avc: denied { write } for pid=24608 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1693.585771][T24616] FAULT_INJECTION: forcing a failure. [ 1693.585771][T24616] name failslab, interval 1, probability 0, space 0, times 0 [ 1693.592112][T24381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1693.612823][T24616] CPU: 0 UID: 0 PID: 24616 Comm: syz.5.4672 Tainted: G L syzkaller #0 PREEMPT(full) [ 1693.612853][T24616] Tainted: [L]=SOFTLOCKUP [ 1693.612859][T24616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1693.612868][T24616] Call Trace: [ 1693.612877][T24616] [ 1693.612884][T24616] dump_stack_lvl+0x100/0x190 [ 1693.612913][T24616] should_fail_ex.cold+0x5/0xa [ 1693.612937][T24616] should_failslab+0xc2/0x120 [ 1693.612959][T24616] __kvmalloc_node_noprof+0x113/0x9b0 [ 1693.612981][T24616] ? seq_read_iter+0x819/0x1270 [ 1693.613007][T24616] seq_read_iter+0x819/0x1270 [ 1693.613034][T24616] ? __pfx_seq_read_iter+0x10/0x10 [ 1693.613054][T24616] vfs_read+0x82e/0xb40 [ 1693.613084][T24616] ? __pfx_vfs_read+0x10/0x10 [ 1693.613126][T24616] ksys_read+0x12a/0x250 [ 1693.613143][T24616] ? __pfx_ksys_read+0x10/0x10 [ 1693.613167][T24616] do_syscall_64+0x123/0x790 [ 1693.613191][T24616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.613211][T24616] RIP: 0033:0x7f9836b9e159 [ 1693.613227][T24616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.613243][T24616] RSP: 002b:00007f9837b1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1693.613261][T24616] RAX: ffffffffffffffda RBX: 00007f9836e26090 RCX: 00007f9836b9e159 [ 1693.613273][T24616] RDX: 0000000000002020 RSI: 0000200000000840 RDI: 0000000000000005 [ 1693.613284][T24616] RBP: 00007f9837b1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1693.613294][T24616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1693.613305][T24616] R13: 00007f9836e26128 R14: 00007f9836e26090 R15: 00007ffdb5de7a78 [ 1693.613328][T24616] [ 1694.403547][T24615] ip6erspan0: entered allmulticast mode [ 1694.494018][ T31] audit: type=1400 audit(2000000753.690:5955): avc: denied { name_bind } for pid=24623 comm="syz.1.4674" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1694.517869][ T31] audit: type=1400 audit(2000000753.720:5956): avc: denied { node_bind } for pid=24623 comm="syz.1.4674" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1694.822492][ T31] audit: type=1400 audit(2000000753.960:5957): avc: denied { read } for pid=24623 comm="syz.1.4674" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1694.822901][ T31] audit: type=1400 audit(2000000754.000:5958): avc: denied { open } for pid=24623 comm="syz.1.4674" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1695.701222][T11938] usb 8-1: USB disconnect, device number 103 [ 1695.719317][ T31] audit: type=1400 audit(2000000754.920:5959): avc: denied { unmount } for pid=19697 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1695.803713][ T31] audit: type=1400 audit(2000000755.000:5960): avc: denied { read } for pid=24623 comm="syz.1.4674" path="socket:[117449]" dev="sockfs" ino=117449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1696.037903][ T31] audit: type=1400 audit(2000000755.240:5961): avc: denied { append } for pid=24641 comm="syz.7.4675" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1697.901712][T24381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1698.045260][ T31] audit: type=1400 audit(2000000757.240:5962): avc: denied { write } for pid=24628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1698.321068][T24381] veth0_vlan: entered promiscuous mode [ 1698.345726][ T31] audit: type=1400 audit(2000000757.540:5963): avc: denied { write } for pid=24668 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1698.374093][T24381] veth1_vlan: entered promiscuous mode [ 1698.504606][T24381] veth0_macvtap: entered promiscuous mode [ 1698.518928][T24381] veth1_macvtap: entered promiscuous mode [ 1698.536482][T24381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.548781][T24381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1698.639096][ T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.658311][T20885] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.659260][T20885] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.659683][T20885] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.744319][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.744368][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.881672][T11397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.890636][T11397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.926292][ T31] audit: type=1400 audit(2000000758.120:5964): avc: denied { mounton } for pid=24381 comm="syz-executor" path="/root/syzkaller.KYyEIj/syz-tmp" dev="sda1" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1698.944004][ T31] audit: type=1400 audit(2000000758.130:5965): avc: denied { mounton } for pid=24381 comm="syz-executor" path="/root/syzkaller.KYyEIj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1698.952159][ T31] audit: type=1400 audit(2000000758.130:5966): avc: denied { mounton } for pid=24381 comm="syz-executor" path="/root/syzkaller.KYyEIj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=117800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1698.952732][ T30] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1698.989553][ T31] audit: type=1400 audit(2000000758.180:5967): avc: denied { mounton } for pid=24381 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1698.989594][ T31] audit: type=1400 audit(2000000758.180:5968): avc: denied { mount } for pid=24381 comm="syz-executor" name="/" dev="gadgetfs" ino=7200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1698.991090][ T31] audit: type=1400 audit(2000000758.180:5969): avc: denied { mount } for pid=24381 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1698.993057][ T31] audit: type=1400 audit(2000000758.180:5970): avc: denied { mounton } for pid=24381 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1699.167547][ T30] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 1.00 [ 1699.179275][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.310357][ T31] audit: type=1400 audit(2000000758.500:5971): avc: denied { open } for pid=24681 comm="syz.1.4682" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=117666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1699.394781][T24686] 9p: Bad value for 'rfdno' [ 1699.947027][T17004] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1700.338222][T17004] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1701.339571][T24691] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4677'. [ 1701.339601][T24691] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4677'. [ 1701.440227][T24696] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4677'. [ 1701.724872][ T9] usb 6-1: USB disconnect, device number 40 [ 1701.800038][T24689] Cannot find add_set index 0 as target [ 1701.859785][T24707] EXT4-fs (nbd9): unable to read superblock [ 1703.627309][ T5606] [ 1703.629663][ T5606] ====================================================== [ 1703.636659][ T5606] WARNING: possible circular locking dependency detected [ 1703.643653][ T5606] syzkaller #0 Tainted: G L [ 1703.649606][ T5606] ------------------------------------------------------ [ 1703.656599][ T5606] kworker/u9:4/5606 is trying to acquire lock: [ 1703.662724][ T5606] ffffffff90f7e800 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x3f/0x4b0 [ 1703.671919][ T5606] [ 1703.671919][ T5606] but task is already holding lock: [ 1703.679274][ T5606] ffffffff90f51cc0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_encrypt_cfm+0x11b/0x740 [ 1703.688577][ T5606] [ 1703.688577][ T5606] which lock already depends on the new lock. [ 1703.688577][ T5606] [ 1703.698977][ T5606] [ 1703.698977][ T5606] the existing dependency chain (in reverse order) is: [ 1703.707982][ T5606] [ 1703.707982][ T5606] -> #2 (hci_cb_list_lock){+.+.}-{4:4}: [ 1703.715708][ T5606] lock_acquire+0x1d1/0x380 [ 1703.720717][ T5606] __mutex_lock+0x1a4/0x1bd0 [ 1703.725808][ T5606] hci_remote_features_evt+0x485/0x9b0 [ 1703.731772][ T5606] hci_event_packet+0x8e9/0xcd0 [ 1703.737130][ T5606] hci_rx_work+0x451/0xfc0 [ 1703.742060][ T5606] process_one_work+0xac7/0x1b10 [ 1703.747499][ T5606] worker_thread+0x5ef/0xe50 [ 1703.752593][ T5606] kthread+0x373/0x450 [ 1703.757161][ T5606] ret_from_fork+0x730/0xd60 [ 1703.762271][ T5606] ret_from_fork_asm+0x1a/0x30 [ 1703.767529][ T5606] [ 1703.767529][ T5606] -> #1 (&hdev->lock){+.+.}-{4:4}: [ 1703.774804][ T5606] lock_acquire+0x1d1/0x380 [ 1703.779818][ T5606] __mutex_lock+0x1a4/0x1bd0 [ 1703.784909][ T5606] l2cap_chan_connect+0xac/0x2050 [ 1703.790429][ T5606] l2cap_sock_connect+0x37a/0x770 [ 1703.795952][ T5606] kernel_connect+0x107/0x160 [ 1703.801126][ T5606] rfcomm_dlc_open+0x838/0xac0 [ 1703.806403][ T5606] rfcomm_sock_connect+0x42c/0x690 [ 1703.812042][ T5606] __sys_connect_file+0x146/0x1a0 [ 1703.817583][ T5606] __sys_connect+0x141/0x170 [ 1703.822674][ T5606] __x64_sys_connect+0x72/0xb0 [ 1703.827954][ T5606] do_syscall_64+0x123/0x790 [ 1703.833046][ T5606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.839445][ T5606] [ 1703.839445][ T5606] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 1703.846802][ T5606] check_prev_add+0xeb/0xe60 [ 1703.851892][ T5606] __lock_acquire+0x1492/0x1ec0 [ 1703.857237][ T5606] lock_acquire+0x1d1/0x380 [ 1703.862235][ T5606] __mutex_lock+0x1a4/0x1bd0 [ 1703.867338][ T5606] rfcomm_security_cfm+0x3f/0x4b0 [ 1703.872860][ T5606] hci_encrypt_cfm+0x18e/0x740 [ 1703.878124][ T5606] hci_encrypt_change_evt+0x92c/0xfb0 [ 1703.883999][ T5606] hci_event_packet+0x8e9/0xcd0 [ 1703.889351][ T5606] hci_rx_work+0x451/0xfc0 [ 1703.894271][ T5606] process_one_work+0xac7/0x1b10 [ 1703.899709][ T5606] worker_thread+0x5ef/0xe50 [ 1703.904803][ T5606] kthread+0x373/0x450 [ 1703.909371][ T5606] ret_from_fork+0x730/0xd60 [ 1703.914459][ T5606] ret_from_fork_asm+0x1a/0x30 [ 1703.919718][ T5606] [ 1703.919718][ T5606] other info that might help us debug this: [ 1703.919718][ T5606] [ 1703.929919][ T5606] Chain exists of: [ 1703.929919][ T5606] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 1703.929919][ T5606] [ 1703.942400][ T5606] Possible unsafe locking scenario: [ 1703.942400][ T5606] [ 1703.949823][ T5606] CPU0 CPU1 [ 1703.955179][ T5606] ---- ---- [ 1703.960517][ T5606] lock(hci_cb_list_lock); [ 1703.965008][ T5606] lock(&hdev->lock); [ 1703.971586][ T5606] lock(hci_cb_list_lock); [ 1703.978601][ T5606] lock(rfcomm_mutex); [ 1703.982733][ T5606] [ 1703.982733][ T5606] *** DEADLOCK *** [ 1703.982733][ T5606] [ 1703.990850][ T5606] locks held by kworker/u9:4/5606: 4, last CPU#0: [ 1703.997236][ T5606] #0: ffff888079f7b140 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1704.007659][ T5606] #1: ffffc90004257d08 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1704.019022][ T5606] #2: ffff8880547e00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_encrypt_change_evt+0x83/0xfb0 [ 1704.028833][ T5606] #3: ffffffff90f51cc0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_encrypt_cfm+0x11b/0x740 [ 1704.038564][ T5606] [ 1704.038564][ T5606] stack backtrace: [ 1704.044428][ T5606] CPU: 0 UID: 0 PID: 5606 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1704.055434][ T5606] Tainted: [L]=SOFTLOCKUP [ 1704.059736][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1704.069768][ T5606] Workqueue: hci3 hci_rx_work [ 1704.074432][ T5606] Call Trace: [ 1704.077687][ T5606] [ 1704.080595][ T5606] dump_stack_lvl+0x100/0x190 [ 1704.085251][ T5606] print_circular_bug.cold+0x178/0x1be [ 1704.090703][ T5606] check_noncircular+0x146/0x160 [ 1704.095649][ T5606] ? lock_acquire+0x1d1/0x380 [ 1704.100300][ T5606] check_prev_add+0xeb/0xe60 [ 1704.104865][ T5606] __lock_acquire+0x1492/0x1ec0 [ 1704.109691][ T5606] ? l2cap_security_cfm+0x90b/0x1240 [ 1704.114951][ T5606] lock_acquire+0x1d1/0x380 [ 1704.119433][ T5606] ? rfcomm_security_cfm+0x3f/0x4b0 [ 1704.124605][ T5606] ? __pfx___might_resched+0x10/0x10 [ 1704.129876][ T5606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1704.135836][ T5606] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 1704.141454][ T5606] __mutex_lock+0x1a4/0x1bd0 [ 1704.146021][ T5606] ? rfcomm_security_cfm+0x3f/0x4b0 [ 1704.151193][ T5606] ? rfcomm_security_cfm+0x3f/0x4b0 [ 1704.156368][ T5606] ? l2cap_security_cfm+0x910/0x1240 [ 1704.161640][ T5606] ? __pfx___mutex_lock+0x10/0x10 [ 1704.166650][ T5606] ? __lock_acquire+0x4c5/0x1ec0 [ 1704.171571][ T5606] ? __pfx___mutex_lock+0x10/0x10 [ 1704.176574][ T5606] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 1704.182183][ T5606] ? rfcomm_security_cfm+0x3f/0x4b0 [ 1704.187358][ T5606] rfcomm_security_cfm+0x3f/0x4b0 [ 1704.192359][ T5606] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 1704.197966][ T5606] hci_encrypt_cfm+0x18e/0x740 [ 1704.202717][ T5606] hci_encrypt_change_evt+0x92c/0xfb0 [ 1704.208070][ T5606] ? __pfx_hci_encrypt_change_evt+0x10/0x10 [ 1704.213945][ T5606] ? __skb_clone+0x570/0x760 [ 1704.218513][ T5606] ? skb_pull_data+0x15f/0x1e0 [ 1704.223255][ T5606] hci_event_packet+0x8e9/0xcd0 [ 1704.228084][ T5606] ? __pfx_hci_encrypt_change_evt+0x10/0x10 [ 1704.233957][ T5606] ? __pfx_hci_event_packet+0x10/0x10 [ 1704.239313][ T5606] ? lockdep_hardirqs_on+0x7d/0x110 [ 1704.244488][ T5606] hci_rx_work+0x451/0xfc0 [ 1704.248886][ T5606] process_one_work+0xac7/0x1b10 [ 1704.253808][ T5606] ? __pfx_process_one_work+0x10/0x10 [ 1704.259160][ T5606] ? lock_acquire+0x1d1/0x380 [ 1704.263820][ T5606] ? __pfx_hci_rx_work+0x10/0x10 [ 1704.268736][ T5606] worker_thread+0x5ef/0xe50 [ 1704.273309][ T5606] ? kthread+0x13a/0x450 [ 1704.277540][ T5606] ? __pfx_worker_thread+0x10/0x10 [ 1704.282643][ T5606] kthread+0x373/0x450 [ 1704.286695][ T5606] ? __pfx_kthread+0x10/0x10 [ 1704.291281][ T5606] ret_from_fork+0x730/0xd60 [ 1704.295848][ T5606] ? __pfx_ret_from_fork+0x10/0x10 [ 1704.300935][ T5606] ? __switch_to+0x800/0x10f0 [ 1704.305600][ T5606] ? __pfx_kthread+0x10/0x10 [ 1704.310176][ T5606] ret_from_fork_asm+0x1a/0x30 [ 1704.314916][ T5606] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1704.376900][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1704.376927][ T31] audit: type=1400 audit(2000000763.570:5974): avc: denied { write } for pid=5585 comm="syz-executor" path="pipe:[3920]" dev="pipefs" ino=3920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1704.410134][ T31] audit: type=1400 audit(2000000763.610:5975): avc: denied { recv } for pid=17991 comm="kworker/u8:1" saddr=10.128.0.169 src=45470 daddr=10.128.10.32 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1705.360432][ T31] audit: type=1400 audit(2000000764.560:5976): avc: denied { write } for pid=24720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.489808][ T31] audit: type=1400 audit(2000000764.690:5977): avc: denied { write } for pid=24753 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.555419][T16801] tipc: Resetting bearer [ 1705.577586][T16801] tipc: Disabling bearer [ 1705.831470][ T31] audit: type=1400 audit(2000000765.030:5978): avc: denied { write } for pid=24755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.939755][ T31] audit: type=1400 audit(2000000765.140:5979): avc: denied { write } for pid=24766 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.990600][ T50] bridge_slave_1: left allmulticast mode [ 1705.996325][ T50] bridge_slave_1: left promiscuous mode [ 1706.002767][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.012148][ T50] bridge_slave_0: left allmulticast mode [ 1706.017968][ T50] bridge_slave_0: left promiscuous mode [ 1706.024274][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.099883][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.109737][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.118749][ T50] bond0 (unregistering): Released all slaves [ 1706.120690][ T50] bond1 (unregistering): Released all slaves [ 1706.124428][ T50] bond2 (unregistering): Released all slaves [ 1706.128144][ T50] bond3 (unregistering): Released all slaves [ 1706.131303][ T50] bond4 (unregistering): Released all slaves [ 1706.294720][ T31] audit: type=1400 audit(2000000765.490:5980): avc: denied { write } for pid=24771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.343369][ T31] audit: type=1400 audit(2000000765.540:5981): avc: denied { write } for pid=24782 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.392805][ T50] hsr_slave_0: left promiscuous mode [ 1706.399471][ T50] hsr_slave_1: left promiscuous mode [ 1706.399868][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.405348][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.496615][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1706.504235][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1706.538037][ T5263] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1706.544813][T24727] tipc: Resetting bearer [ 1706.560799][T24727] tipc: Disabling bearer [ 1706.763303][ T31] audit: type=1400 audit(2000000765.960:5982): avc: denied { write } for pid=24785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.804216][ T31] audit: type=1400 audit(2000000766.000:5983): avc: denied { write } for pid=24796 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.843174][ T50] IPVS: stop unused estimator thread 0... [ 1706.860325][ T5263] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1706.873238][ T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.900230][ T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.955630][ T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.990647][ T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.049167][ T5263] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1707.110295][ T50] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.171432][ T50] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.244055][ T50] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.257158][ T5263] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1707.265524][ T50] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.351453][ T50] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.391702][ T50] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.432727][ T50] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.465253][ T5263] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1707.485923][ T50] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.592299][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.653864][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.670091][ T5263] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1707.692799][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.721664][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.793722][ T50] bridge_slave_1: left allmulticast mode [ 1707.793757][ T50] bridge_slave_1: left promiscuous mode [ 1707.793877][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.805646][ T50] bridge_slave_0: left allmulticast mode [ 1707.805666][ T50] bridge_slave_0: left promiscuous mode [ 1707.805771][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.835069][ T50] bridge_slave_1: left allmulticast mode [ 1707.835102][ T50] bridge_slave_1: left promiscuous mode [ 1707.835214][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.846920][ T50] bridge_slave_0: left allmulticast mode [ 1707.846940][ T50] bridge_slave_0: left promiscuous mode [ 1707.847039][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.873074][ T50] bridge_slave_1: left allmulticast mode [ 1707.873104][ T50] bridge_slave_1: left promiscuous mode [ 1707.873433][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.883120][ T50] bridge_slave_0: left allmulticast mode [ 1707.883370][ T50] bridge_slave_0: left promiscuous mode [ 1707.883467][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.001510][ T50] bond0 (unregistering): Released all slaves [ 1708.003336][ T50] bond1 (unregistering): Released all slaves [ 1708.036358][ T50] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 1708.037006][ T50] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1708.063085][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1708.074299][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.084981][ T50] bond0 (unregistering): Released all slaves [ 1708.091749][ T50] bond1 (unregistering): Released all slaves [ 1708.098465][ T50] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1708.107686][ T50] bond2 (unregistering): Released all slaves [ 1708.128959][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1708.139764][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.149234][ T50] bond0 (unregistering): Released all slaves [ 1708.188953][ T50] bond3 (unregistering): (slave bridge1): Releasing active interface [ 1708.200635][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1708.210222][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.219775][ T50] bond0 (unregistering): Released all slaves [ 1708.221762][ T50] bond1 (unregistering): Released all slaves [ 1708.224973][ T50] bond2 (unregistering): Released all slaves [ 1708.228255][ T50] bond3 (unregistering): Released all slaves [ 1708.238954][ T5263] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1708.356000][ T50] tipc: Left network mode [ 1708.379640][ T50] tipc: Left network mode [ 1708.508263][ T5263] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1708.711313][ T5263] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1708.759596][ T50] hsr_slave_0: left promiscuous mode [ 1708.765380][ T50] hsr_slave_1: left promiscuous mode [ 1708.774943][ T50] hsr_slave_0: left promiscuous mode [ 1708.782426][ T50] hsr_slave_1: left promiscuous mode [ 1708.788396][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1708.788412][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.803609][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1708.811146][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.822500][ T50] hsr_slave_0: left promiscuous mode [ 1708.828846][ T50] hsr_slave_1: left promiscuous mode [ 1708.834639][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1708.843014][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.854183][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1708.861733][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.871905][ T50] hsr_slave_0: left promiscuous mode [ 1708.879007][ T50] hsr_slave_1: left promiscuous mode [ 1708.879581][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1708.879594][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.900224][ T50] veth1_macvtap: left promiscuous mode [ 1708.900265][ T50] veth0_macvtap: left promiscuous mode [ 1708.900314][ T50] veth1_vlan: left promiscuous mode [ 1708.900348][ T50] veth0_vlan: left promiscuous mode [ 1708.912037][ T50] veth1_macvtap: left promiscuous mode [ 1708.912096][ T50] veth1_vlan: left promiscuous mode [ 1708.912138][ T50] veth0_vlan: left promiscuous mode [ 1708.928418][ T50] veth1_macvtap: left promiscuous mode [ 1708.928445][ T50] veth0_macvtap: left promiscuous mode [ 1708.928495][ T50] veth1_vlan: left promiscuous mode [ 1708.928538][ T50] veth0_vlan: left promiscuous mode [ 1708.939834][ T50] veth1_macvtap: left promiscuous mode [ 1708.939861][ T50] veth0_macvtap: left promiscuous mode [ 1708.939903][ T50] veth1_vlan: left allmulticast mode [ 1708.939923][ T50] veth1_vlan: left promiscuous mode [ 1708.939956][ T50] veth0_vlan: left promiscuous mode [ 1709.187838][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1709.195262][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1709.263834][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1709.271312][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1709.342447][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1709.350441][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1709.379157][ T5263] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1709.588780][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 1709.588822][ T31] audit: type=1400 audit(2000000768.790:6000): avc: denied { write } for pid=24914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.626769][ T31] audit: type=1400 audit(2000000768.830:6001): avc: denied { write } for pid=24925 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.685236][ T5263] 8021q: adding VLAN 0 to HW filter on device eth32 [ 1709.924713][ T31] audit: type=1400 audit(2000000769.120:6002): avc: denied { write } for pid=24928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.975348][ T31] audit: type=1400 audit(2000000769.160:6003): avc: denied { write } for pid=24939 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.029183][ T5263] 8021q: adding VLAN 0 to HW filter on device eth33 [ 1710.260169][ T31] audit: type=1400 audit(2000000769.460:6004): avc: denied { write } for pid=24943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.285469][ T50] IPVS: stop unused estimator thread 0... [ 1710.320140][ T31] audit: type=1400 audit(2000000769.520:6005): avc: denied { write } for pid=24954 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.364872][ T5263] 8021q: adding VLAN 0 to HW filter on device eth34 [ 1710.471699][ T31] audit: type=1400 audit(2000000769.670:6006): avc: denied { write } for pid=24957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.521797][ T31] audit: type=1400 audit(2000000769.720:6007): avc: denied { write } for pid=24968 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.561732][ T5263] 8021q: adding VLAN 0 to HW filter on device eth35 [ 1710.682889][ T31] audit: type=1400 audit(2000000769.880:6008): avc: denied { write } for pid=24972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.718582][ T31] audit: type=1400 audit(2000000769.920:6009): avc: denied { write } for pid=24983 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.749238][ T5263] 8021q: adding VLAN 0 to HW filter on device eth36 [ 1710.910443][ T5263] 8021q: adding VLAN 0 to HW filter on device eth37 [ 1711.082146][ T5263] 8021q: adding VLAN 0 to HW filter on device eth38 [ 1711.240831][ T5263] 8021q: adding VLAN 0 to HW filter on device eth39 [ 1711.397119][ T5263] 8021q: adding VLAN 0 to HW filter on device eth40 [ 1711.560775][ T5263] 8021q: adding VLAN 0 to HW filter on device eth41