last executing test programs: 4m11.196279772s ago: executing program 1 (id=64): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010010000000ffdbdf25000000", @ANYRES32=r5, @ANYBLOB="dc02000011000400140012800b0001006d6163736563000004000280"], 0x40}}, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/4112, 0x1010}], 0x1, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001600)={0x0, 0x0}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000001680)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000016c0)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001700), 0x42003, 0x0) pipe2(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r7, 0x407, 0x2000000) setns(0xc9, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001800), 0x16) 4m10.180994764s ago: executing program 1 (id=68): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0xf, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000080)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000340)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x14, 0x34, 0x2, 0x70bd29, 0x25dfdbfb, "", [@typed={0x4, 0x11d}]}, 0x14}], 0x1, 0x0, 0x0, 0x4048881}, 0x44040) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a3000000000090003007379010400000000000000000100000208000b400000000080000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000480001800c000100626974776973650038000280080003400000000208000140000000140800024000000012140007800f0001001f0000ea1b0f56970d09000008000640000000010900010073797a3000000000140000001100010000000000000000000700000a00"/284], 0x11c}}, 0x0) 4m8.127368465s ago: executing program 1 (id=73): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x7}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r5, 0xa64c000) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000280)={0xa0, 0x0, r2, {{0x6, 0x3, 0x1, 0x80, 0x8c0, 0x4, {0x3, 0x6, 0xd6c6, 0x739b, 0x200, 0x40, 0xc, 0xfffffff7, 0x81, 0x2000, 0x8, r3, 0x0, 0x401, 0x400000}}}}, 0xa0) 4m7.89268168s ago: executing program 1 (id=74): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) write$tun(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x84) syz_emit_ethernet(0xe, &(0x7f0000000200)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca}}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) write$binfmt_script(r6, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) write(r9, &(0x7f0000000400)=';', 0x1) sendfile(0xffffffffffffffff, r6, 0x0, 0x8010002b) sendmsg$nl_xfrm(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@newsa={0x138, 0x16, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 4m7.100356866s ago: executing program 1 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1f9) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='file *rivers/hid/hid-core.c line 2088 +', 0x27) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000140)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000780)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000007c0)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f00000009c0), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sigaltstack(0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x40ce, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x10001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x3ff, 0x1000008, 0x2010, 0xffffffffffffffff, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="070000000400"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="bdf59b44ce6cfd3ee0aed5d9be81ba3b9714243aeca55b258bed7e8b4f16c7a4f9088b992e8a5ad609e6976f9d906578194fb475d92d3e4aaef5d6c8a94873c68d7e2776a7c32bf39c9b143404000000340cb9240c6f211ee016d05a955602a1a27bc496d575016a43c9b9824cb8caa94bb8591f07792c617793d9658572d6e1a38c0aed7659956b9222ed623953740d21278f708cff260dc6e0e74bbe2f40cd68efc79757a1dfd8507535bfb755f7722babbdc24058d91200"/195], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r4, &(0x7f0000000480)=[{0x0}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f00000006c0)="5810db642bd42ba6830000000000", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r6, &(0x7f0000000280)='27', 0x2) 4m6.644572367s ago: executing program 1 (id=81): socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000006c0)={@local, 0x40, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) write$tun(r0, &(0x7f00000008c0)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0xf, 0x33, 0x40, @remote, @local, {[], "3b0400000000123400000001000000"}}}, 0x37) (fail_nth: 2) 3m49.930400959s ago: executing program 32 (id=81): socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000006c0)={@local, 0x40, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) write$tun(r0, &(0x7f00000008c0)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0xf, 0x33, 0x40, @remote, @local, {[], "3b0400000000123400000001000000"}}}, 0x37) (fail_nth: 2) 16.236045775s ago: executing program 2 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x200a0204) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xf, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = syz_open_dev$loop(&(0x7f00000005c0), 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000680)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 16.234978942s ago: executing program 5 (id=596): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x16}, 0x20040000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000001600)=""/200, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000001700)={0x84, @broadcast, 0x4e21, 0x3, 'nq\x00', 0x1, 0x10000004, 0x8}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000001780)={{0x62, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x0, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000001800)={&(0x7f0000001840)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f00000018c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000840) r5 = fsmount(r0, 0x1, 0x8) unlinkat(r5, &(0x7f0000000040)='./bus\x00', 0x200) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000001580)=0x7) syz_clone3(&(0x7f00000013c0)={0x81000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0x3d}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000001300)=""/93, &(0x7f0000001380)=[r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r5}}, 0x58) sched_setattr(r8, &(0x7f0000001440)={0x38, 0x0, 0x12, 0x4005, 0x7, 0xd3c, 0x7, 0x10001, 0xe3, 0x4000}, 0x0) sched_getattr(r7, &(0x7f0000001900)={0x38}, 0xffffffffffffffad, 0x0) r9 = syz_open_pts(r6, 0x2001) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) write(r9, &(0x7f00000001c0)="d5", 0xfffffedf) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000200)={0x1, 0x72f3, 0x9, 0xaf, 0x36, "668787fe4150caf251a42dcbffe468fb06bc47", 0x7f, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) 15.221335478s ago: executing program 2 (id=598): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = syz_clone(0x1000000, &(0x7f0000000340), 0x0, &(0x7f0000019440), &(0x7f0000019540), &(0x7f0000019580)="b9da4c378f02fd48aee1a63abdf8049a1571721397c1e355786e51c14ebb8de3") r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000195c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000019600)={0x101ff, 0x0, 0xe000, 0x2000, &(0x7f00002e3000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.129916836s ago: executing program 5 (id=599): r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) r4 = eventfd(0xe467) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r5, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9}}, 0x5) write$nci(r5, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r8, 0x1, 0x70bd27, 0x25dfdb7d, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) write$nci(r5, &(0x7f0000000600)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2, {0x0, 0x4, "cc8b430d"}}, 0x9) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r11, 0x6, 0x15, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@setlink={0x30, 0x13, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x410, 0x52000}, [@IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_NET_NS_FD={0x8, 0x1c, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r13], 0x20}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) 13.991712297s ago: executing program 2 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r2, 0x311, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x2000c010) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x20044445}, 0x800) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001c00)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001c40)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000001c80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001cc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000001d00), 0x0, 0x0) read$msr(r8, &(0x7f0000009b40)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x47, &(0x7f0000022b40)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000022b80)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r9], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x8c0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r11, &(0x7f0000000200)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000000380)=""/16, 0x10}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r10) 12.658497553s ago: executing program 4 (id=603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, 0x2, 0x6, 0xa01, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x4040011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) gettid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x1f, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000480)={0x5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c814) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x1d, 0x2, 0x6) r4 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000380)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@private0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000400)=[{0x3, &(0x7f0000000440)=0x9, 0x82}], 0x1, 0x0, 0x0, 0x1) r5 = mmap$IORING_OFF_CQ_RING(0x0, 0x800, 0x3000000, 0x20010, 0xffffffffffffffff, 0x8000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, &(0x7f0000000180)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0xc) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003, {0x0, 0xf}}, 0x18) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)="0203a3000043750000000000000000", 0xf}], 0x1}, 0x20048040) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x9, 0x2000000005, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3fb, 0x4, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 10.199272911s ago: executing program 4 (id=606): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2c41, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r2, &(0x7f0000001f40)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000005580)="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", 0x2000, &(0x7f0000007580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007640)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000007680)={0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f00000076c0)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0x318c55aa, 0x0, 0xfffe, 0x3, 0xfffffff8, 0x0, 0x0, 0x20, 0x100}}, 0x50) (async, rerun: 32) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000007740)='./file0\x00', 0x40242, 0x1) (async) close(r2) (async) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffff, 0x6) (async, rerun: 64) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r0, 0x7c, 0xd5}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'sha224-arm64\x00'}}, &(0x7f00000001c0)="adb22df6117e3f651892d0c6ec479d089ae6e111dbb6bf191439b58375d6f6dfa222df618fbd5bb8ec04b536db169fc82287e0e742ccd4e0d45691162e3b98787970c2520a62a35f0138d8ca1128aa43a85b3e3820d25c410474c93759c614146082bc695dfdfc3207500b9190801827557ed302869f3cdb5d6597f1", &(0x7f0000000240)="3b0bbcf87a276e3a50285a9355b017e011997746f03ddf6b4ef88854e1e4a9784ae2b24e7b865f46544b50f84fa71035c2e96b9939fe50aaa58762fb50985269d05dcac856b512fd359fd8b8dc031b93b67b1f3187900eaf67e723817311139fc9ae711116376803f59d34e5156a19e7682e76e13be3a70c329147fbbdb616d969fe418b0a6d71af6bea8c4bb1957287196d73a2b54243a619c90fc4534d557a51d2ce01abddbf424a289baf1fffaf09c8207614ed331111845bb7782b33784c62cb1736d81382dbd3a3b5bbe4b393a43ce77dfa58") (rerun: 64) 10.160563448s ago: executing program 5 (id=607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f00000004c0)={'batadv_slave_1\x00', @random="010000201000"}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x4000000, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@mcast1}}]}, 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103000000090585"], 0x0) socket$inet6(0x10, 0x2, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000200)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r4 = getpid() mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) connect(r5, &(0x7f0000000780)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) write$nbd(r5, 0x0, 0x14) sched_setscheduler(r4, 0x1, &(0x7f0000000800)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000900), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000940), 0x10106, 0x2, 0x0) r8 = syz_open_dev$video(&(0x7f0000000980), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000009c0)={0x1, 0x2, 0x2}) 8.779756659s ago: executing program 4 (id=608): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r1, 0x29, 0x80, 0xb5, 0x1, 0x22, @mcast1, @private1, 0x20, 0x1, 0x0, 0x3}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f000000e840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f000000e880)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f000000e900)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000e940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000000e980)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f000000ea00), 0x651, 0x0) recvmmsg(r4, &(0x7f000000ea40), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync_file_range(r7, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) sendmsg(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f000000eb00), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f000000eb40)) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r9, &(0x7f0000000100)={&(0x7f00000001c0)=@can={0x1d, r2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x4008044) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f000000ebc0)=0x1) getsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f000000ec00), &(0x7f000000ec40)=0x10) 8.774192366s ago: executing program 2 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000001280)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r0, &(0x7f0000001300)='27', 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000001340)={0x1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 8.512457913s ago: executing program 3 (id=610): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x840000000001) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000600)={@desc={0x1, 0x0, @desc2}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48000000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80300, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x6ad01, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000300), 0x88302, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x354a, &(0x7f0000000540)={0x0, 0x1030b5, 0x20, 0x3, 0x158}, &(0x7f00000005c0), &(0x7f0000000740), &(0x7f0000000780)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) pselect6(0x40, &(0x7f0000000440)={0x3, 0x0, 0x222, 0x7d, 0xfffc, 0x8000, 0x4, 0xfba}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0x80000001, 0x80000006, 0xb06c}, 0x0, 0x0) 7.682101606s ago: executing program 4 (id=611): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0xf, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.992772876s ago: executing program 0 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f00000001c0)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000191c0)=0x40003) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000019200)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000193c0)={0x0, 0x19, &(0x7f0000019400)={&(0x7f0000019440)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 6.698482473s ago: executing program 3 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0xa}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), 0xc9, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={'sha384\x00'}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x4e23, @empty}, 'ip6gre0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x290) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000840), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000880)={0x38, 0x6, 0x8, 0x3, 0x0, 0x81, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r6, r6, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000008c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$media(&(0x7f0000000180), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) dup3(r4, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x7c81, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2e, &(0x7f0000000100)=0x79, 0x4) bind$inet(r9, &(0x7f0000000940)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, 0x0, 0x0) 6.285713718s ago: executing program 4 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="de000000", @ANYRES32=r2, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) socket$inet(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0xc8d4) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x6) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x10, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000980), 0x0, 0x0) read$msr(r5, &(0x7f00000009c0)=""/102392, 0x18ff8) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000199c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000019a00)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000019a40)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000019ac0)={0x28, 0x5, r7, 0x0, &(0x7f00002ce000/0x1000)=nil, 0x1000, 0x1020800}) ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f0000019b00)={0x8, r8}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) readv(r9, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000800)=""/27, 0x1b}, {&(0x7f0000000840)=""/35, 0x23}, {0x0}, {0x0}], 0x5) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_clone(0x204811, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) 6.267021799s ago: executing program 0 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd09, 0x0) 5.457752291s ago: executing program 4 (id=616): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x201120, 0x0) fcntl$setflags(r0, 0x2, 0x0) (async) r1 = io_uring_setup(0x1878, &(0x7f0000000040)={0x0, 0x865, 0x2000, 0x3, 0x221}) mmap$IORING_OFF_SQ_RING(0x0, 0xda8, 0xa, 0xafeecd0b76c3bef4, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x5, &(0x7f00000000c0)=0x1) (async) r2 = epoll_create(0x2) epoll_wait(r2, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x9) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000140), 0x4) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000180)={0xfffffffb, 0x0, '\x00', @zc_export={r2}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x1, r4, 'id0\x00'}) ioctl$MEMGETREGIONCOUNT(r5, 0x80044d07, &(0x7f00000002c0)) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r5, 0x0, 0xa79, 0x6a, &(0x7f0000000300)="be2fe994cf4a12b226b467c88eee1a1ce7ef2d1bc0ee28a5724bda377fda166bdefb0b7111961ff1e6ccc6b9970c966b38feabb34322907a040024b67ffd1150063f34376c9d46ff4901df0fe9d631fc3dcb8ea4f0b6760c007985541b216e82becacb7e5c92c7321515"}) (async) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000400)=0x6, 0x4) (async) lseek(r3, 0x4, 0x1) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f0000000440)={0x4, 0xfffffffb, 0xf, 0x5, 0x10, 0x1140}) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000480)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01864c2, &(0x7f00000004c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01864c1, &(0x7f0000000500)={r6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$nl_route_sched_retired(r5, &(0x7f0000003c40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003c00)={&(0x7f00000005c0)=@newtaction={0x361c, 0x30, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{0x81c, 0x1, [@m_ipt={0x438, 0x1d, 0x0, 0x0, {{0x8}, {0x314, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf9, 0x6, {0xeb, 'raw\x00', 0x1, 0x89, "42fa4a0cae5aeac991c81f5ce305c80163cac2d0d842238d4878cc49a1f60561ad50cc566eaed5c3a8165ce47204b10b0b0f28426435c3aab31e3c68081553791b78bad97f1eaa3dd40f636710eb0362faec5b72000334fbf647e1cd63b84fe59c475cb44e6a0d2bbcbf80328a5035a3e60095cbac28ebda96dc527e88f1498042eef25d22f24dec465344f8745fc8a7f412e34abfbbda5e584fe642a278c76c6df084e83f0e994033f62430a8f729241c05a7a4c593098d2173981e97ccd9eaf9a86cb42682376e5681525d00f576"}}, @TCA_IPT_TARG={0xc8, 0x6, {0x8, 'security\x00', 0x4, 0x5, "cf0e9e4130b94fa4865c275d92cb2a1467af20af313743e658add2feb3c7e7d92c4e189a1f564a531893fddeaa372be264083b98eeba13a47b45104bce56f07ee7aabf065de37c701d3e947b2d853cc3bcaa52791fe65ac70842b039be4817a17a60400fe806cc449941692cccd2762dc9c018b45617db1a0fad68f0fbec392be9993d8fa724b16d54e147e90c6b070aca1b7e1ae869be84f2964718ec09"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xdf, 0x6, {0x3, 'mangle\x00', 0x1, 0x5, "f629a0f338d62c56cbf74180428233d8f9fafad228dcbb7baab66f9c05cedb77016fa7e593ca6f6b3a5cb925cd68829a21d4f822c8d0ddc608fb38819717b0c965da08a18470ce12d789e3000b4f0cdc2c7c3c68024c2d48bec766813c9e8b59728b4e906d21344edb1e97825943cc8a57ec76e7fa95cc280256337ae541e23191b8cdf81b6e19689ee7eb414f00e7de26041aa0e915820fdf12b428156ed0236d4274afa55b52a72d1b4813a13f04ebf122970ff2"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x90, 0x19, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0xffff}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x350, 0x1b, 0x0, 0x0, {{0x8}, {0x260, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x9f, 0x6, {0x8000, 'security\x00', 0x4b, 0xa94, "c44a99f344cc7d0ca7b2b00454111e3e7cd77dc1b80e1d4247c4d8f236049c40738ba61a9df63bca07b805c9dbaa4ba4562070e7b97238d969ef15a00406096aeb418c09e519878865f48160425f4b3113f8f5ffe08c421dae419b27cbf320b69adaec6daece8ae0b8b47a822cd9ca25e0cd324ed9"}}, @TCA_IPT_TARG={0xce, 0x6, {0x39d, 'filter\x00', 0x6, 0x1, "3f3bea1a24ab68bd19d6983bef7850c25c8e4b38c34983c64cf612d31aa41ab250bb024513af239e73ae61864e789411cefc9569c826fa8f128327f9f636815f1d795bd5f4bfb80878b09857abffdb5dbf4eb1c8e1b1c270b817349b0650cb16e19aee35cdef0b6580b83983ad90ed49d3f79b963fd33517a7065a6512f69f85447ad3e30189ba8d25b9d4588c9db480ca8a2441a92bb2b8b0a80600a2e6e1ae06df2190"}}, @TCA_IPT_TARG={0xe9, 0x6, {0x2, 'filter\x00', 0x0, 0x5, "607b03314dd13dabd534f4b3c258ca5dee41d6285b5f30c8c523b16e0599cbd4a4b41046a88bb938755397c4a7e5f5333b451d2063b897f122039a8254cbfe452c61ba29a990e7c5ca618e6f54cfb3495606fd7d4321d54f059570055f2a2e68f9497416207970ff339ffa350600fc8f1d2707b25d452076a030c839b5f6fdea5bf6fc0c7b24a7b9cfac621d170c72f25e2a9899dedb8ca8fc10bf8203c0c9f99429c1ecdfb50ea56eac3636992eb8613acc96598b6bffe4b3b7ede54a7adb"}}]}, {0xc9, 0x6, "462a9dabfdfcfa79f8e3f1ea33f2e1ee3bd052e3f0709a03c7db460efc1bdbc5d0b487bb3b4a3c2b5a68dc66c32eed22854cc0108887c5cb730e882f42ee86b2791a9d79a96ab2370d4d6ef0a1434a3f99108324262986a36350320e54340312e0cd1a34cfad817049965cc32d89ef50922bac5834041a719c4dd93c58ea6a719cbbfdaee526abeb6f2de5d3f303127ffc65ce6897d93f113f523b208506a81657b048f4bb3773222467d9d5b734cfbb0c26ff921aeba1dbe9fcccf5919315fa9bf9cd0a92"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x2ab4, 0x1, [@m_ipt={0x68, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0x36, 0x6, "f8f99d7a564ebe28ba3088d715263315c622f4090a6618e42928624e5849adb8e52f530b3f8bde66a71ab722900238841cfb"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x104c, 0x13, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x80}, @TCA_IPT_INDEX={0x8, 0x3, 0xd0}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x134c, 0xf, 0x0, 0x0, {{0x8}, {0x324, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0xf0, 0x6, {0x4, 'filter\x00', 0x7f, 0x8, "71727e15055f3abbdb3c6f2d525d3402baa697d6918553d04f9b02165f00cb5003884d09f827e1b123cd0f8a7f88533874b31124124416ad908769c7f08ce68d0296480637e612664e0b5e245dcce64b2f4800bed21ea776b84227eefd4184be4f2e029ba94616f8ac36d46dc04ec30f6344b77c7128096d56628950cf43dcd6d565aa10ed92d2b52629c3ddf729c1e74eb701523115e62ad02aa79c108e18efeaf8e8442ac4ca76ff12c284efa102970dde881bf991f7763899b17c63d6b20f48102afea91e"}}, @TCA_IPT_TARG={0xdb, 0x6, {0x0, 'filter\x00', 0xfa, 0xe92, "3c825b938c5a71b32be678d0c7e31b1b4fdcae039206c485d0a36325ec1e58724ab5beab0622f9f811aa99c284f4622e64ef70aab0e413f44b32b6e4cbabc52a5eb50815b6584607e52a6b78877b25a77bda82f6c7879abd960f1fd2736851ac0ef8ca5ee582a291d3712ec2688bbbdb94b008a353b3a03a459866c16257f26540dbbbab3323e2a2e2f8c3eadec88e88d2246cb6ff042910ff54acacea21c085a11c7cca89aeecff50a6665a63b3ddf248"}}, @TCA_IPT_TARG={0x115, 0x6, {0x4, 'filter\x00', 0x1, 0x8, "39eb47ef24b616eda7ec85ea54407e86b57c504dd3aeccefc26847012846ed33056dedd6e170b07dfb04b5d8a6da1990344794fbe46bd3465248e8a7f6035fc854b833d74d87da1946674359661fb76733ea239777e7fa46420d436a4fc2882f66551751afd1a44896e0d6c2679c77c44e3d450e84eab2fcfd738e7501dbd18614ea8845a3643a9fd38dbe4474de4f6b77ec1ac6e1f46613034c4ff72188b449aaa0d605ca740af2de43b424df9e7266971d614f4c182e50bb361296bd5b217a2169b8ff740173a23090a95099439562420ab468f5b3485fedf4288e532227f50408fd50f2b07879bb74a1"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}, @m_ipt={0x1c4, 0x10, 0x0, 0x0, {{0x8}, {0x158, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xba, 0x6, {0x2, 'filter\x00', 0x1, 0x7, "a542f1a7a86e21d56e9fc345aa181a6ccc8872523437fe251438efda32a160b152dd01d95a1d3fc4d5cedd04618e7ed95a74ac29094fe5c2d999a2ef6a3e01c1a3b193557fee23ba0652838ef794c8d6182cfbc0756c8dc2806f58f2c17de947161ece415b850c20db361edb63b44b18c9ab000ea5c0dc4e3226cb1e33ae2245e7f5e68b26454df9c6ef400ef9d96e37"}}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x6b, 0x6, {0x0, 'mangle\x00', 0x5, 0xef, "518d2388259632f5c9dc8457d1312d7cd5872c802366f145a6afaa7ec55e89fc5253e26417e5cad5fcb60c23e68265c15d31585524776831efadb34c786ffe7c19"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x45, 0x6, "ad29608c9a69f2ecad86b6572cd49d538b57ce26b3966be89f0bd41af6580e0c4a58b1702f583f71e7055278f1af118a5fbab7452d28f35d7ebb536aab14d91371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xe0, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0xb5, 0x6, "101dde5423fb05d5b8b8711a2d5b11997b5205fdf82f2222780f1b35b64775612ff9675d1bb5611c266d3d839da55ce718d8e89682ec68ddd49ee6e546ab42763e9dd7d656f4d7604f112edc85def6785ea7b856691502e10b04e592732483f2a8a3464e32e24954bf32262fd0c8e60cd336eedd7dba5c2d87a81baf6da59522ac851ffefbbca6bd6edad78b4c840842679c1d0230058a9f5ca7f427cac31b3f57e1c683e04e4b5f3f64ddc22df32d8f17"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x17c, 0xd, 0x0, 0x0, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xc0, 0x6, {0xb32, 'mangle\x00', 0xa, 0x2401, "d2f678f7136643d77a5b23ad82db00bc365958808726b6ea4e28483077bce1eff27ad6b60d77de056d835c51de01e1f438b31eb55e501c29ec6891e6555002538dcffda17528858395f824c310053cc5586ea797770fdc50426c118c6a423ded6df2b3c42e1372ca9ca89f41b277332a68b07f2084689d7f15cca3d404d88aeb890976d02cea2392f60657afb2754de917469cc78f8e"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8}]}, {0x5f, 0x6, "5e7ec418b3410fadb579bf320002129ebd134208781dc83e894bc9572c6ba3c96214997d042e3e670c622dbbe6e63215c3605c41c5a580fa5661753c37ebc90a706bce7c17a18ec857fb1966d2a12e988007f9e3510a632b48bcc0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x100, 0x5, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x31, 0x6, {0xfffa, 'raw\x00', 0x8, 0x1, "601f32e1f2f9a7"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x59, 0x6, "66d7ba9a87eb6b78225902cc713654cb0e69254a39df081f46459d9a8f0c13ff326c88623c3b66fa134e177a1727c360606aa78d3934c1d38c36a62bd4f5a16eb0b1ca719a8bd742fd7dc2a23694825c20cbb3b673"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x190, 0x1c, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xffffff34}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x78, 0x6, {0x0, 'nat\x00', 0x0, 0x2, "68047f3a8c1aad084ffff70cc97091d8e6e43f8b1d9feb56e49b6b495b73a9c975d6a9ba8a1bea2b24ab9cd70b72dd9c5439e0830edd8d9abcae8587fb240ff19f4024db0ab355e39d3315abd806"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xa0}]}, {0xac, 0x6, "9916e3bb63b12b811be1034fa762647025477f8fc8c031b490bca48b29a4f7e0699f19cea4f7c102d5932d11cf2de5969d3be2f12d63490527c0a6c1ddf8e9cf67bfff8fa48736204ede25800fe783e1407201dd9845ecc21ad63abc492a3843a47e2220d44ca9112f1fe618a36a7a045626c1cf4846ce633d973fd0733eaf943538f2ae7b930f4a83c7fd9caa77711e108677d6e7ee85d82b728f67b22f95e195a504deb2113863"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x338, 0x1, [@m_ipt={0x208, 0xb, 0x0, 0x0, {{0x8}, {0x124, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x110, 0x6, {0x8001, 'raw\x00', 0x4, 0x1ff, "3cd93130c34b284babd4199fabd0ee5fc63a940a0c33bb683718026aba6cda9ce03a24e4262c5753bdc8e5742a18c0509817d44f9de69e7000390086e9baa91f756b057e53656c47bd71bc83ca20bfc248922c551b43d1333136e46f95a046991804882e2ec87fdb020ef09777594a7d127622443d865a1f954ae335ac14b8bd591bda76f7b0ab81fbb671b6f6802dae31caa7b63b2c56d76e8631d7b3dafd3a3b3b804a056cebc3b50c438984f37568a7edfb20d03b79caf04711f3146e27b7cc56bc87ff5c1916140f50832b05f3e69b52916824d073c12155dc20fe43e0bba7ba69217d0b"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xbd, 0x6, "fbadb95c2c99a23c5abc0f01a226db1b19f6cc2119bc4d63377e2f463f63fb1f7ab7d49ce44e94281de78ce2b4d9762c4a77f1191aa7f303b9f2106c4d6c704e27b1efd83baf59503b820e334fab5eef1a9441d1051ddcfbbf41ad7659e059b81e30471fa6e1fdb559b5ef95e710f0b1814ae8c067ed9f5310fe6acace224c0816ef093c1a1a25a62674ed3a41a43781a7e5ce2848c00d94ec8d72291ababb1e41d46f0fc29186a3eb5567130d68f802b923bb4a23032b45de"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x12c, 0x7, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x7fffffff}]}, {0xf4, 0x6, "e061c22fb95e70e698279b602ed9ee48ebb7d73fd2206adaf77e9e61e3f3b731dfc03f2e9c17e73570236f53d68d7ae2beaec4f5e84e787e7f0a685210677f0f5fb9cccc2f78c794c6fe25fecf9f7f5e4fed5d5c0e103e2d2845fa327cd6576e7301c86904466b15c71505b14817e46bdb29b314b91d91cdf200a17cca4d61840da58e19f6a7cdc64f3ff83a0c59ae06dd8bb700c31726adedc02b5fe0a11d51d4a79c2579dba9ff2face5db7be08a679c64ded458d71c8b4b82a2083e9bd228447951ccaa20e1fb90e5c98a961ddc26473655babe934fe6cefa40cfbd01e629aae6b8e737d67e9257144b9f1417cffd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x361c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4008084) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000003c80)={0xaa, 0x4}) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000003cc0)={0x401, 0x0, 0x2, 0x8001, 0x4}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004f00)={0x18, 0x6, &(0x7f0000003d00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xde8, 0x0, 0x0, 0x0, 0x2157}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000003d40)='syzkaller\x00', 0x45, 0x1000, &(0x7f0000003d80)=""/4096, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004d80)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000004dc0)={0x0, 0xb, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000004e00)=[r5, r5, r5], &(0x7f0000004e40)=[{0x1, 0x3, 0xb, 0x3}, {0x0, 0x2, 0x3, 0xb}, {0x3, 0x5, 0xe, 0x3}, {0x0, 0x3, 0x8, 0xa}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x4, 0x8, 0x2}, {0x3, 0x4, 0x1, 0x2}, {0x5, 0x4, 0x6, 0x6}, {0x3, 0x3, 0x7, 0x9}], 0x10, 0x3}, 0x94) (async) syz_open_dev$sndmidi(&(0x7f0000004fc0), 0x2, 0x2fe79c92a5e8a1aa) (async) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x9402000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xc69c}]}, 0x1c}}, 0x40000000) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000005100)={0x0, 0x4, 0x6, 0x7469, 0x41b, 0xa2}, &(0x7f0000005140)=0x14) 5.288819916s ago: executing program 0 (id=617): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x7, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'team_slave_1\x00'}) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r5, @ANYRES32, @ANYRES32=r1, @ANYRES64=r3, @ANYRES8=r1, @ANYBLOB='\x00'/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r6, 0x6, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000002c0), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000300)=0x2) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x4f8c, 0x0, r8}) bind$bt_sco(r9, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) recvmmsg(r7, &(0x7f0000000340), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x180, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000004000000000040008000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000f0712c2907efa024ab"], 0x50) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000780)=""/215, &(0x7f0000000880)=0xd7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="1808000018000000000000000000008018110000", @ANYRES32=r10, @ANYBLOB="00000000000004000000000014000000b7030000000000008500000005000000bca90000000000003509010019000000950000000000000075090200020000007b9a00fe00000000b509000090000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000e44649c111f7bf321867757d8d002d26a3acf5dde475a5adad54e5d9a76dbdef0cc32ed0", @ANYRESDEC=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe84}, 0x94) r11 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r11, &(0x7f0000000680)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x3}}, 0x10) sendmsg$tipc(r11, &(0x7f00000006c0)={&(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040010}, 0x20028805) close(r11) sendmsg$tipc(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 5.180632416s ago: executing program 3 (id=618): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103800) r0 = syz_open_dev$sg(&(0x7f00000014c0), 0x1, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./nfsd\x00', &(0x7f0000001c40)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000001cc0)="31b5fa09e813b788a5ebd125b227c2cf9afb666a254311c9cd68b062b95614ebfeb727bff41aafc84ab37a67763857bbd793", 0x32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x1c, &(0x7f0000001d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001500)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) getpriority(0x2, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x48) close(r3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newnexthop={0x48, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x2}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xbac7}, @NHA_RES_GROUP_IDLE_TIMER={0x8}]}]}, 0x48}}, 0x0) (fail_nth: 2) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x13, 0x8, &(0x7f0000001740)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000001780)='GPL\x00', 0x4, 0xc3, &(0x7f00000017c0)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0x8, 0x10, &(0x7f0000001900), 0x10}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x0, @empty=0x2000000}, 0xffac, &(0x7f0000000100)=[{&(0x7f0000000300)="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", 0xffa0}, {&(0x7f0000001300)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001340)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000001540)={0xffffffffffffffc0}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa401020301090224000100000000090400"], 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[@timestamping={{0x14, 0x1, 0x25, 0xa27}}], 0x18}}], 0x2, 0x40500f0) 4.375981761s ago: executing program 5 (id=619): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x400454a4, &(0x7f00000000c0)) setfsgid(0xee00) getpriority(0x1, r0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r4, 0x5452, 0x0) sendmmsg$inet6(r4, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c", 0x3}], 0x1}}], 0x2, 0x1c000) mount(0x0, 0x0, &(0x7f0000000180)='aio\x00', 0x2200cd0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000003c0)="baf80c66b871c9b58066efbafc0cb013ee67660fecf60fc71a3e0f01cb2e3e0fae336665660f0766b9340b000066b80000008066ba000000000f303e0f300fc72a660f3840c4", 0x46}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000300)=@x86={0x84, 0x7, 0x8, 0x0, 0x5, 0xcd, 0x5, 0x40, 0x8, 0x1, 0xc, 0x6, 0x0, 0x9, 0xe, 0x7, 0x2, 0xdc, 0x58, '\x00', 0x4, 0x45}) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f00000013c0)=@vmx={0x100, 0x0, 0x2080, {0x7000, 0x8080000, {0x2}, 0x0, 0x802}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ccffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe2d012b6255614c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f00000072c0)=@vmx={0x100, 0x0, 0x2080, {0x8080000, 0x25000, {}, 0x0, 0x5}, {"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", "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"}}) (fail_nth: 3) 3.667888454s ago: executing program 2 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x0, 0xd1, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x4, 0x8, 0x40}}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) close(r3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYRES16=r3]) link(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000008c0)='./file0/file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x2}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x1, 0x1, 0x3, 0x6, 0x2, 0x8}], 0x0, 0xb3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) getsockopt$packet_buf(r7, 0x107, 0x6, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000006c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000800)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000840)={0x1, 0x5}) 3.405774225s ago: executing program 3 (id=621): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1be8ffff0300000004000200020000000000502b68565f0fb2803046b08353fc00000d796a606e97ab6861e4744cc9b49c8932", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000880)={r1, &(0x7f00000008c0)="da", &(0x7f0000000900)=""/6, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x84, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x143) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000000ac1e0001000000000000000000000000ac1414aa00000000000000000000030000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c0000000200000000000000000000000000ffffac1e010106000000040300000100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000440)='2', 0x1}, {&(0x7f00000005c0)="480a9ce567", 0x5}], 0x2) socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000600), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000640)={0x8, 0x0, [{0x40000000, 0x4, 0x1, 0x7, 0x81, 0x7, 0x5}, {0x0, 0x5, 0x1, 0x3ff, 0x7ffffdff, 0x8004, 0xffff}, {0x80000019, 0x2, 0x1, 0x7, 0xdf1, 0x7, 0x5}, {0x80000000, 0x2bb, 0x1, 0xd, 0x100003, 0x7ff, 0xc}, {0x80000000, 0x100, 0x0, 0x6, 0x3, 0x2, 0x3}, {0x40000000, 0x3, 0xb, 0xfffffff7, 0xfffffff9, 0xff, 0x6}, {0x0, 0x7fffffff, 0x1, 0x80, 0x401, 0x8, 0xa}, {0x80000004, 0x8, 0x1, 0x9, 0x0, 0x4, 0x5}]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x1, 0x1, 0xff}, 0x0, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x5, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) 2.983764183s ago: executing program 5 (id=622): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000600)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r3, &(0x7f0000004500)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001d500)=0x7) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f000001d540)) inotify_init() writev(0xffffffffffffffff, &(0x7f000001d5c0)=[{&(0x7f000001d600)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f000001d640)={0x0, 0x5b, &(0x7f000001d680)={&(0x7f000001d6c0)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000) (fail_nth: 2) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f000001d700), 0x0, 0x0) 1.962420897s ago: executing program 5 (id=623): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = userfaultfd(0x80001) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)=ANY=[@ANYBLOB="030000001800010000000000000000000000000a50000000060a0b04000000000000000001f0ff002400048020cb000000000000008a000014000280080002400000001108000140000000020900010073797a30000000000900020073797a320000000014000034322b160000000000000000000a00000a"], 0x78}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000002a40)=ANY=[@ANYBLOB="aaaaaaaaaaaac50cafed498086dd65cec4ef004811"], 0x0) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x13e) ioctl$BLKPG(r6, 0xc0c0128e, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c}) r7 = socket(0x10, 0x4, 0x7) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r7, &(0x7f0000000240)=[{{0x0, 0x4000000, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0xa6, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000001500)=0x6) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000027c0)={&(0x7f0000003dc0)=ANY=[@ANYRES16=r1, @ANYRES16=r5, @ANYRES16=r0], 0x1270}, 0x1, 0x0, 0x0, 0xc845}, 0x40080) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) close_range(0xffffffffffffffff, r8, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0xffffffffffffff75, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000fbff00000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1.9481687s ago: executing program 2 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000)='270', 0x3) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x800) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='4', 0x1}, {0x0, 0x900}], 0x2) unshare(0x40000000) 1.462630155s ago: executing program 3 (id=625): syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0) syz_open_dev$midi(&(0x7f0000000180), 0x3, 0x189e42) (fail_nth: 4) 975.408335ms ago: executing program 0 (id=626): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0xa00, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000002000000a00000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001e0000001000000000000000000000000f08000000000000000000000000000aaf8840000ff"], 0x118}}, 0x0) 641.395079ms ago: executing program 0 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd09, 0x0) 414.531335ms ago: executing program 0 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0xa}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), 0xc9, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={'sha384\x00'}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x4e23, @empty}, 'ip6gre0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000a00)=ANY=[], 0x290) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r5) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000840), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000880)={0x38, 0x6, 0x8, 0x3, 0x0, 0x81, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r6, r6, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000008c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$media(&(0x7f0000000180), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) dup3(r4, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x7c81, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2e, &(0x7f0000000100)=0x79, 0x4) bind$inet(r9, &(0x7f0000000940)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, 0x0, 0x0) 0s ago: executing program 3 (id=629): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0xe, 0x80800) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000640)={0x2, 0x4, 0xf8, &(0x7f0000000540)=""/248}) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00141a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000490780000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r4, r4, 0x34) ptrace(0x10, r4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/tty/ttyS0/rx_trig_bytes\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000680)={0x30, 0x5, 0x0, {0x0, 0x2, 0x8000000000000, 0x400}}, 0x30) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x129a02, 0x5) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x3b, 0x0, &(0x7f0000000240)) kernel console output (not intermixed with test programs): 240.773474][ T5747] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 240.777944][ T5747] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 240.777968][ T5747] usb 4-1: config 0 has no interface number 0 [ 240.778000][ T5747] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 240.781671][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.781692][ T5747] usb 4-1: Product: syz [ 240.781706][ T5747] usb 4-1: Manufacturer: syz [ 240.781720][ T5747] usb 4-1: SerialNumber: syz [ 240.863782][ T5747] usb 4-1: config 0 descriptor?? [ 240.874714][ T5747] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 240.874772][ T5747] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 241.178843][ T5603] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 241.185066][ T7970] macvtap1: entered allmulticast mode [ 241.185120][ T7970] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 241.185223][ T7970] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 241.191004][ T7970] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 241.274643][ T7970] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 241.404650][ T5603] usb 1-1: Using ep0 maxpacket: 16 [ 241.423179][ T5603] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.436763][ T5603] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.436786][ T5603] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.534374][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.534407][ T5603] usb 1-1: Product: syz [ 241.534444][ T5603] usb 1-1: Manufacturer: syz [ 241.534495][ T5603] usb 1-1: SerialNumber: syz [ 241.591120][ T4931] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 241.649883][ T5747] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 241.650251][ T5747] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 241.959242][ T5603] usb 1-1: 0:2 : does not exist [ 241.959299][ T5603] usb 1-1: unit 9 not found! [ 242.238734][ T5603] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 242.266500][ T5603] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 242.282627][ T5603] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 242.289436][ T5603] usb 1-1: 4:0: cannot get min/max values for control 5 (id 4) [ 242.316389][ T5603] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 242.407834][ T5786] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.407879][ T5786] usb 5-1: MIDIStreaming interface descriptor not found [ 242.434209][ T5603] usb 1-1: USB disconnect, device number 9 [ 242.615995][ T5786] usb 5-1: USB disconnect, device number 11 [ 242.688998][ T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 242.719307][ T7081] udevd[7081]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 242.910359][ T44] usb 3-1: New USB device found, idVendor=413c, idProduct=8218, bcdDevice=ca.32 [ 242.943773][ T44] usb 3-1: config 127 has an invalid interface number: 136 but max is 0 [ 242.943799][ T44] usb 3-1: config 127 has an invalid interface number: 89 but max is 0 [ 242.943817][ T44] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 242.943836][ T44] usb 3-1: config 127 has no interface number 0 [ 242.943850][ T44] usb 3-1: config 127 has no interface number 1 [ 242.943887][ T44] usb 3-1: too many endpoints for config 127 interface 89 altsetting 231: 126, using maximum allowed: 30 [ 242.943917][ T44] usb 3-1: config 127 interface 89 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 126 [ 242.943941][ T44] usb 3-1: config 127 interface 136 has no altsetting 0 [ 242.943958][ T44] usb 3-1: config 127 interface 89 has no altsetting 0 [ 242.948226][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.948251][ T44] usb 3-1: Product: syz [ 242.948265][ T44] usb 3-1: Manufacturer: syz [ 242.948280][ T44] usb 3-1: SerialNumber: syz [ 243.775901][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 243.775918][ T29] audit: type=1400 audit(1792354179.058:806): avc: denied { bind } for pid=7984 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.775957][ T29] audit: type=1400 audit(1792354179.058:807): avc: denied { name_bind } for pid=7984 comm="syz.4.412" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 243.775994][ T29] audit: type=1400 audit(1792354179.058:808): avc: denied { node_bind } for pid=7984 comm="syz.4.412" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 243.917322][ T7977] FAULT_INJECTION: forcing a failure. [ 243.917322][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 243.917345][ T7977] CPU: 1 UID: 0 PID: 7977 Comm: syz.2.410 Not tainted syzkaller #0 PREEMPT(full) [ 243.917360][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.917367][ T7977] Call Trace: [ 243.917371][ T7977] [ 243.917377][ T7977] dump_stack_lvl+0x100/0x190 [ 243.917401][ T7977] should_fail_ex.cold+0x5/0xa [ 243.917418][ T7977] should_failslab+0xc2/0x120 [ 243.917437][ T7977] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 243.917454][ T7977] ? cond_policydb_dup+0x5a7/0x750 [ 243.917471][ T7977] kmemdup_noprof+0x29/0x60 [ 243.917485][ T7977] cond_policydb_dup+0x5a7/0x750 [ 243.917505][ T7977] security_set_bools+0x13f/0x6c0 [ 243.917524][ T7977] sel_commit_bools_write+0x36d/0x420 [ 243.917539][ T7977] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 243.917559][ T7977] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 243.917573][ T7977] vfs_writev+0x5ed/0xdd0 [ 243.917590][ T7977] ? __pfx_vfs_writev+0x10/0x10 [ 243.917606][ T7977] ? lock_acquire+0x1d1/0x380 [ 243.917619][ T7977] ? __fget_files+0x34/0x3d0 [ 243.917641][ T7977] ? __fget_files+0x21f/0x3d0 [ 243.917661][ T7977] ? do_writev+0x13e/0x340 [ 243.917673][ T7977] do_writev+0x13e/0x340 [ 243.917686][ T7977] ? __pfx_do_writev+0x10/0x10 [ 243.917703][ T7977] do_syscall_64+0x123/0x790 [ 243.917722][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.917734][ T7977] RIP: 0033:0x7f7179b9e559 [ 243.917744][ T7977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.917755][ T7977] RSP: 002b:00007f717aad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 243.917767][ T7977] RAX: ffffffffffffffda RBX: 00007f7179e25fa0 RCX: 00007f7179b9e559 [ 243.917774][ T7977] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000006 [ 243.917781][ T7977] RBP: 00007f7179c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 243.917788][ T7977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.917794][ T7977] R13: 00007f7179e26038 R14: 00007f7179e25fa0 R15: 00007ffce356aab8 [ 243.917811][ T7977] [ 244.118382][ T5786] usb 4-1: USB disconnect, device number 15 [ 244.145648][ T7977] rxe_eth0 speed is unknown, defaulting to 1000 [ 244.215323][ T7999] FAULT_INJECTION: forcing a failure. [ 244.215323][ T7999] name failslab, interval 1, probability 0, space 0, times 0 [ 244.215378][ T7999] CPU: 1 UID: 0 PID: 7999 Comm: syz.5.414 Not tainted syzkaller #0 PREEMPT(full) [ 244.215399][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.215411][ T7999] Call Trace: [ 244.215417][ T7999] [ 244.215424][ T7999] dump_stack_lvl+0x100/0x190 [ 244.215455][ T7999] should_fail_ex.cold+0x5/0xa [ 244.215482][ T7999] should_failslab+0xc2/0x120 [ 244.215511][ T7999] kmem_cache_alloc_noprof+0x92/0x6a0 [ 244.215535][ T7999] ? mas_next_range+0xa4/0x100 [ 244.215553][ T7999] ? vm_area_alloc+0x1f/0x160 [ 244.215575][ T7999] vm_area_alloc+0x1f/0x160 [ 244.215591][ T7999] __mmap_region+0x1025/0x32e0 [ 244.215617][ T7999] ? __pfx___mmap_region+0x10/0x10 [ 244.215638][ T7999] ? get_page_from_freelist+0x110d/0x35d0 [ 244.215672][ T7999] ? mas_prev_slot+0x768/0x11b0 [ 244.215713][ T7999] ? unmapped_area_topdown+0x54e/0x6a0 [ 244.215797][ T7999] mmap_region+0x3db/0x6d0 [ 244.215821][ T7999] ? __pfx_mmap_region+0x10/0x10 [ 244.215842][ T7999] ? thp_get_unmapped_area_vmaflags+0x2a5/0x330 [ 244.215865][ T7999] ? selinux_mmap_addr+0x2b/0x110 [ 244.215888][ T7999] ? bpf_lsm_mmap_addr+0x9/0x30 [ 244.215914][ T7999] ? security_mmap_addr+0x71/0x1e0 [ 244.215942][ T7999] ? __get_unmapped_area+0x255/0x3e0 [ 244.215972][ T7999] do_mmap+0x12c7/0x1c30 [ 244.216003][ T7999] ? lock_acquire+0x1d1/0x380 [ 244.216024][ T7999] ? __pfx_do_mmap+0x10/0x10 [ 244.216050][ T7999] ? __pfx___might_resched+0x10/0x10 [ 244.216077][ T7999] ? __pfx_down_write_killable+0x10/0x10 [ 244.216101][ T7999] vm_mmap_pgoff+0x28d/0x470 [ 244.216129][ T7999] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 244.216158][ T7999] ? find_held_lock+0x2b/0x80 [ 244.216185][ T7999] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 244.216209][ T7999] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 244.216235][ T7999] ksys_mmap_pgoff+0xe4/0x610 [ 244.216261][ T7999] ? find_held_lock+0x2b/0x80 [ 244.216293][ T7999] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 244.216325][ T7999] __x64_sys_mmap+0x125/0x190 [ 244.216350][ T7999] do_syscall_64+0x123/0x790 [ 244.216379][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.216398][ T7999] RIP: 0033:0x7f318eb9e2c2 [ 244.216413][ T7999] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 244.216430][ T7999] RSP: 002b:00007f318f9cbd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 244.216448][ T7999] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f318eb9e2c2 [ 244.216459][ T7999] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 244.216469][ T7999] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 244.216480][ T7999] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 244.216491][ T7999] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f318ec53521 [ 244.216517][ T7999] [ 245.702654][ T29] audit: type=1400 audit(1792354181.238:809): avc: denied { write } for pid=7969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.760145][ T29] audit: type=1400 audit(1792354181.284:810): avc: denied { connect } for pid=8003 comm="syz.5.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.760749][ T29] audit: type=1400 audit(1792354181.284:811): avc: denied { accept } for pid=8005 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.763762][ T29] audit: type=1400 audit(1792354181.284:812): avc: denied { create } for pid=8005 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.054881][ T29] audit: type=1400 audit(1792354181.565:813): avc: denied { write } for pid=8009 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.242723][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 246.262294][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 246.505453][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 246.505575][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 246.730784][ T29] audit: type=1400 audit(1792354182.201:814): avc: denied { ioctl } for pid=8022 comm="syz.0.420" path="socket:[18156]" dev="sockfs" ino=18156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.785218][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 246.785415][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 246.820711][ T8025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.843292][ T29] audit: type=1400 audit(1792354182.295:815): avc: denied { write } for pid=8022 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.850584][ T8010] ceph: No mds server is up or the cluster is laggy [ 246.991147][ T8023] netlink: 532 bytes leftover after parsing attributes in process `syz.0.420'. [ 247.299258][ T8039] netlink: 'syz.5.422': attribute type 4 has an invalid length. [ 247.354901][ T8039] netlink: 'syz.5.422': attribute type 4 has an invalid length. [ 247.596524][ T5602] Bluetooth: hci5: command 0x0406 tx timeout [ 249.736162][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 249.736182][ T29] audit: type=1400 audit(1792354184.165:822): avc: denied { mount } for pid=8046 comm="syz.3.424" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 249.834192][ T29] audit: type=1400 audit(1792354185.101:823): avc: denied { write } for pid=8049 comm="syz.0.425" path="socket:[18254]" dev="sockfs" ino=18254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.234463][ T8060] ceph: No mds server is up or the cluster is laggy [ 250.259832][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 250.259995][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 250.610373][ T10] libceph: connect (1)[c::]:6789 error -101 [ 250.708267][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 251.096107][ T10] usb 3-1: USB disconnect, device number 8 [ 251.446227][ T8077] FAULT_INJECTION: forcing a failure. [ 251.446227][ T8077] name failslab, interval 1, probability 0, space 0, times 0 [ 251.446248][ T8077] CPU: 1 UID: 0 PID: 8077 Comm: syz.4.430 Not tainted syzkaller #0 PREEMPT(full) [ 251.446261][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 251.446267][ T8077] Call Trace: [ 251.446271][ T8077] [ 251.446276][ T8077] dump_stack_lvl+0x100/0x190 [ 251.446297][ T8077] should_fail_ex.cold+0x5/0xa [ 251.446313][ T8077] should_failslab+0xc2/0x120 [ 251.446330][ T8077] __kmalloc_cache_node_noprof+0x94/0x720 [ 251.446345][ T8077] ? process_measurement+0x4c8/0x2350 [ 251.446363][ T8077] ? __get_vm_area_node+0x124/0x350 [ 251.446381][ T8077] __get_vm_area_node+0x124/0x350 [ 251.446399][ T8077] __vmalloc_node_range_noprof+0x268/0x1420 [ 251.446417][ T8077] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 251.446428][ T8077] ? __mutex_lock+0x26c/0x1bd0 [ 251.446445][ T8077] ? xt_find_table_lock+0x5a/0x520 [ 251.446461][ T8077] ? __lock_acquire+0x5c0/0x1f40 [ 251.446476][ T8077] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 251.446491][ T8077] ? net_generic+0x25/0x2a0 [ 251.446504][ T8077] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 251.446526][ T8077] ? net_generic+0xea/0x2a0 [ 251.446539][ T8077] ? net_generic+0xea/0x2a0 [ 251.446556][ T8077] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 251.446567][ T8077] __vmalloc_node_noprof+0xad/0xf0 [ 251.446584][ T8077] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 251.446597][ T8077] do_ip6t_get_ctl+0x7e0/0xc30 [ 251.446611][ T8077] ? __mutex_unlock_slowpath+0x35d/0x930 [ 251.446628][ T8077] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 251.446641][ T8077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 251.446668][ T8077] ? nf_sockopt_find.isra.0+0x222/0x290 [ 251.446683][ T8077] nf_getsockopt+0x7c/0xe0 [ 251.446695][ T8077] ipv6_getsockopt+0x207/0x2a0 [ 251.446710][ T8077] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 251.446722][ T8077] ? lock_acquire+0x1d1/0x380 [ 251.446734][ T8077] ? __might_fault+0xc5/0x140 [ 251.446746][ T8077] ? find_held_lock+0x2b/0x80 [ 251.446765][ T8077] udpv6_getsockopt+0xc0/0x240 [ 251.446781][ T8077] ? __pfx_udpv6_getsockopt+0x10/0x10 [ 251.446799][ T8077] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 251.446817][ T8077] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 251.446832][ T8077] do_sock_getsockopt+0x50a/0x6e0 [ 251.446849][ T8077] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 251.446866][ T8077] ? __fget_files+0x34/0x3d0 [ 251.446882][ T8077] ? find_held_lock+0x2b/0x80 [ 251.446902][ T8077] ? __fget_files+0x21f/0x3d0 [ 251.446921][ T8077] __sys_getsockopt+0x148/0x260 [ 251.446937][ T8077] ? __x64_sys_getsockopt+0xbd/0x160 [ 251.446948][ T8077] __x64_sys_getsockopt+0xbd/0x160 [ 251.446958][ T8077] ? do_syscall_64+0xae/0x790 [ 251.446974][ T8077] ? lockdep_hardirqs_on+0x7d/0x110 [ 251.446989][ T8077] do_syscall_64+0x123/0x790 [ 251.447007][ T8077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.447018][ T8077] RIP: 0033:0x7f2c7999e559 [ 251.447028][ T8077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.447038][ T8077] RSP: 002b:00007f2c7a94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 251.447050][ T8077] RAX: ffffffffffffffda RBX: 00007f2c79c25fa0 RCX: 00007f2c7999e559 [ 251.447057][ T8077] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 251.447063][ T8077] RBP: 00007f2c7a94e090 R08: 0000200000001e40 R09: 0000000000000000 [ 251.447070][ T8077] R10: 0000200000001900 R11: 0000000000000246 R12: 0000000000000001 [ 251.447076][ T8077] R13: 00007f2c79c26038 R14: 00007f2c79c25fa0 R15: 00007fff5e8f7a78 [ 251.447091][ T8077] [ 251.447097][ T8077] syz.4.430: vmalloc error: size 96, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 251.447151][ T8077] CPU: 1 UID: 0 PID: 8077 Comm: syz.4.430 Not tainted syzkaller #0 PREEMPT(full) [ 251.447162][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 251.447168][ T8077] Call Trace: [ 251.447172][ T8077] [ 251.447176][ T8077] dump_stack_lvl+0x100/0x190 [ 251.447193][ T8077] warn_alloc.cold+0x9e/0xb2 [ 251.447206][ T8077] ? __pfx_warn_alloc+0x10/0x10 [ 251.447217][ T8077] ? __kasan_kmalloc+0x8a/0xb0 [ 251.447239][ T8077] ? __get_vm_area_node+0x22b/0x350 [ 251.447258][ T8077] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 251.447274][ T8077] ? __mutex_lock+0x26c/0x1bd0 [ 251.447290][ T8077] ? xt_find_table_lock+0x5a/0x520 [ 251.447305][ T8077] ? __lock_acquire+0x5c0/0x1f40 [ 251.447320][ T8077] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 251.447334][ T8077] ? net_generic+0x25/0x2a0 [ 251.447347][ T8077] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 251.447364][ T8077] ? net_generic+0xea/0x2a0 [ 251.447377][ T8077] ? net_generic+0xea/0x2a0 [ 251.447394][ T8077] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 251.447406][ T8077] __vmalloc_node_noprof+0xad/0xf0 [ 251.447422][ T8077] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 251.447435][ T8077] do_ip6t_get_ctl+0x7e0/0xc30 [ 251.447449][ T8077] ? __mutex_unlock_slowpath+0x35d/0x930 [ 251.447466][ T8077] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 251.447479][ T8077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 251.447502][ T8077] ? nf_sockopt_find.isra.0+0x222/0x290 [ 251.447519][ T8077] nf_getsockopt+0x7c/0xe0 [ 251.447532][ T8077] ipv6_getsockopt+0x207/0x2a0 [ 251.447546][ T8077] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 251.447557][ T8077] ? lock_acquire+0x1d1/0x380 [ 251.447570][ T8077] ? __might_fault+0xc5/0x140 [ 251.447581][ T8077] ? find_held_lock+0x2b/0x80 [ 251.447600][ T8077] udpv6_getsockopt+0xc0/0x240 [ 251.447615][ T8077] ? __pfx_udpv6_getsockopt+0x10/0x10 [ 251.447634][ T8077] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 251.447652][ T8077] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 251.447671][ T8077] do_sock_getsockopt+0x50a/0x6e0 [ 251.447687][ T8077] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 251.447704][ T8077] ? __fget_files+0x34/0x3d0 [ 251.447720][ T8077] ? find_held_lock+0x2b/0x80 [ 251.447741][ T8077] ? __fget_files+0x21f/0x3d0 [ 251.447760][ T8077] __sys_getsockopt+0x148/0x260 [ 251.447776][ T8077] ? __x64_sys_getsockopt+0xbd/0x160 [ 251.447786][ T8077] __x64_sys_getsockopt+0xbd/0x160 [ 251.447797][ T8077] ? do_syscall_64+0xae/0x790 [ 251.447812][ T8077] ? lockdep_hardirqs_on+0x7d/0x110 [ 251.447828][ T8077] do_syscall_64+0x123/0x790 [ 251.447845][ T8077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.447856][ T8077] RIP: 0033:0x7f2c7999e559 [ 251.447864][ T8077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.447875][ T8077] RSP: 002b:00007f2c7a94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 251.447885][ T8077] RAX: ffffffffffffffda RBX: 00007f2c79c25fa0 RCX: 00007f2c7999e559 [ 251.447892][ T8077] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 251.447898][ T8077] RBP: 00007f2c7a94e090 R08: 0000200000001e40 R09: 0000000000000000 [ 251.447904][ T8077] R10: 0000200000001900 R11: 0000000000000246 R12: 0000000000000001 [ 251.447911][ T8077] R13: 00007f2c79c26038 R14: 00007f2c79c25fa0 R15: 00007fff5e8f7a78 [ 251.447925][ T8077] [ 251.451094][ T8077] Mem-Info: [ 251.451105][ T8077] active_anon:31799 inactive_anon:0 isolated_anon:0 [ 251.451105][ T8077] active_file:39 inactive_file:68337 isolated_file:0 [ 251.451105][ T8077] unevictable:0 dirty:669 writeback:0 [ 251.451105][ T8077] slab_reclaimable:12756 slab_unreclaimable:105049 [ 251.451105][ T8077] mapped:31627 shmem:22443 pagetables:1301 [ 251.451105][ T8077] sec_pagetables:0 bounce:0 [ 251.451105][ T8077] kernel_misc_reclaimable:0 [ 251.451105][ T8077] free:1233089 free_pcp:31514 free_cma:0 [ 251.451146][ T8077] Node 0 active_anon:127196kB inactive_anon:0kB active_file:156kB inactive_file:273144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126508kB dirty:2676kB writeback:0kB shmem:89772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12380kB pagetables:5052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 251.451189][ T8077] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 251.451231][ T8077] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.451278][ T8077] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 251.451310][ T8077] Node 0 DMA32 free:972548kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:127196kB inactive_anon:0kB active_file:156kB inactive_file:273144kB unevictable:0kB writepending:2676kB zspages:0kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:126056kB local_pcp:31580kB free_cma:0kB [ 251.451360][ T8077] lowmem_reserve[]: 0 0 0 0 0 [ 251.451389][ T8077] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.451437][ T8077] lowmem_reserve[]: 0 0 0 0 0 [ 251.451467][ T8077] Node 1 Normal free:3944448kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.451517][ T8077] lowmem_reserve[]: 0 0 0 0 0 [ 251.451557][ T8077] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 251.452628][ T8077] Node 0 DMA32: 1413*4kB (UME) 1540*8kB (UME) 1693*16kB (UM) 967*32kB (UME) 345*64kB (UME) 398*128kB (UME) 199*256kB (UM) 113*512kB (UME) 34*1024kB (UME) 12*2048kB (UME) 160*4096kB (UM) = 972580kB [ 251.452767][ T8077] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 251.452842][ T8077] Node 1 Normal: 2*4kB (M) 7*8kB (UM) 8*16kB (UM) 6*32kB (UM) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3944448kB [ 251.452957][ T8077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.452969][ T8077] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.452981][ T8077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.452992][ T8077] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.453004][ T8077] 90765 total pagecache pages [ 251.453010][ T8077] 0 pages in swap cache [ 251.453015][ T8077] Free swap = 124996kB [ 251.453020][ T8077] Total swap = 124996kB [ 251.453027][ T8077] 2097051 pages RAM [ 251.453032][ T8077] 0 pages HighMem/MovableOnly [ 251.453037][ T8077] 437690 pages reserved [ 251.453042][ T8077] 0 pages cma reserved [ 251.473894][ T5786] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 252.394943][ T5786] usb 1-1: Using ep0 maxpacket: 32 [ 252.626761][ T5786] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 252.702751][ T8081] macvtap1: entered allmulticast mode [ 252.702780][ T8081] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 252.702864][ T8081] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 252.723420][ T8081] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 252.893069][ T5786] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 252.893148][ T5786] usb 1-1: config 0 has no interface number 0 [ 252.893328][ T5786] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 252.950785][ T8081] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 252.974390][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.974423][ T5786] usb 1-1: Product: syz [ 252.974460][ T5786] usb 1-1: Manufacturer: syz [ 252.974497][ T5786] usb 1-1: SerialNumber: syz [ 253.158959][ T5786] usb 1-1: config 0 descriptor?? [ 253.206420][ T5786] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 253.206453][ T5786] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 253.284775][ T5603] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 253.341701][ T29] audit: type=1400 audit(1792354188.375:824): avc: denied { write } for pid=8056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.531652][ T29] audit: type=1400 audit(1792354188.552:825): avc: denied { write } for pid=8102 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.696780][ T5603] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 253.783460][ T5786] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 253.784082][ T5786] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 253.858798][ T5603] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 253.858838][ T5603] usb 3-1: too many configurations: 47, using maximum allowed: 8 [ 253.859764][ T5603] usb 3-1: config index 0 descriptor too short (expected 65454, got 68) [ 253.859788][ T5603] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 253.859827][ T5603] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 253.860715][ T5603] usb 3-1: config index 1 descriptor too short (expected 65454, got 68) [ 253.860737][ T5603] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 253.860774][ T5603] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 253.861653][ T5603] usb 3-1: config index 2 descriptor too short (expected 65454, got 68) [ 253.861674][ T5603] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 253.861710][ T5603] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 253.862586][ T5603] usb 3-1: config index 3 descriptor too short (expected 65454, got 68) [ 253.862608][ T5603] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 253.862643][ T5603] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 253.863522][ T5603] usb 3-1: config index 4 descriptor too short (expected 65454, got 68) [ 253.863545][ T5603] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 253.863585][ T5603] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 253.864461][ T5603] usb 3-1: config index 5 descriptor too short (expected 65454, got 68) [ 253.864481][ T5603] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 253.864517][ T5603] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 253.865388][ T5603] usb 3-1: config index 6 descriptor too short (expected 65454, got 68) [ 253.865408][ T5603] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 253.865442][ T5603] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 253.866789][ T5603] usb 3-1: config index 7 descriptor too short (expected 65454, got 68) [ 253.866811][ T5603] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 253.866847][ T5603] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 254.039213][ T5603] usb 3-1: string descriptor 0 read error: -71 [ 254.039321][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.165613][ T8115] ip_tables: iptables: counters copy to user failed while replacing table [ 254.175181][ T5603] usb 3-1: can't set config #1, error -71 [ 254.176723][ T5603] usb 3-1: USB disconnect, device number 9 [ 254.222671][ T29] audit: type=1400 audit(1792354189.198:826): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 254.797942][ T8122] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 255.237588][ T29] audit: type=1400 audit(1792354190.152:827): avc: denied { write } for pid=8106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.263163][ T8126] ipip0: entered promiscuous mode [ 255.263180][ T8126] ipip0: entered allmulticast mode [ 255.269358][ T8126] team0: Device ipip0 is of different type [ 255.444705][ T29] audit: type=1400 audit(1792354190.348:828): avc: denied { write } for pid=8130 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.131489][ T5720] usb 1-1: USB disconnect, device number 10 [ 256.189145][ T8147] cgroup: No subsys list or none specified [ 258.046566][ T8160] netlink: 532 bytes leftover after parsing attributes in process `syz.0.445'. [ 258.083308][ T29] audit: type=1400 audit(1792354192.818:829): avc: denied { write } for pid=8137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.127603][ T5720] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 258.237679][ T29] audit: type=1400 audit(1792354192.958:830): avc: denied { write } for pid=8166 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.295846][ T5720] usb 6-1: unable to get BOS descriptor or descriptor too short [ 258.295889][ T5720] usb 6-1: New USB device found, idVendor=1235, idProduct=0401, bcdDevice= 0.40 [ 258.296911][ T5720] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.296951][ T5720] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.300240][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.300264][ T5720] usb 6-1: Product: syz [ 258.300279][ T5720] usb 6-1: Manufacturer: syz [ 258.300293][ T5720] usb 6-1: SerialNumber: syz [ 258.401116][ T29] audit: type=1400 audit(1792354193.117:831): avc: denied { write } for pid=8168 comm="syz.2.446" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.450058][ T8169] loop7: detected capacity change from 0 to 7 [ 258.595435][ T8169] Dev loop7: unable to read RDB block 7 [ 258.595467][ T8169] loop7: unable to read partition table [ 258.595644][ T8169] loop7: partition table beyond EOD, truncated [ 258.595669][ T8169] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 258.598715][ T29] audit: type=1400 audit(1792354193.295:832): avc: denied { watch } for pid=8153 comm="syz.5.444" path="/60" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 258.707823][ T29] audit: type=1400 audit(1792354193.398:833): avc: denied { mount } for pid=8173 comm="syz.0.447" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 258.723232][ T4969] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.723267][ T4969] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.723289][ T4969] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.723308][ T4969] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.723354][ T4969] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.723383][ T4969] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.723402][ T4969] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.723413][ T4969] ldm_validate_partition_table(): Disk read failed. [ 258.723430][ T4969] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.723449][ T4969] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.723468][ T4969] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.723488][ T4969] Dev loop7: unable to read RDB block 0 [ 258.723526][ T4969] loop7: unable to read partition table [ 258.723662][ T4969] loop7: partition table beyond EOD, truncated [ 258.847561][ T29] audit: type=1400 audit(1792354193.529:834): avc: denied { write } for pid=8173 comm="syz.0.447" name="usb_gadget" dev="configfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.864768][ T8177] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.923652][ T29] audit: type=1400 audit(1792354193.594:835): avc: denied { write } for pid=8173 comm="syz.0.447" name="target" dev="configfs" ino=2868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.937238][ T29] audit: type=1400 audit(1792354193.604:836): avc: denied { write } for pid=8173 comm="syz.0.447" name="usb_gadget" dev="configfs" ino=18568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.993838][ T8177] netlink: 5 bytes leftover after parsing attributes in process `syz.4.439'. [ 258.994631][ T8177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.527144][ T8199] No control pipe specified [ 260.378564][ T5699] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 260.576218][ T5699] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 260.586265][ T5720] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.586300][ T5720] usb 6-1: MIDIStreaming interface descriptor not found [ 260.588031][ T5699] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 260.588052][ T5699] usb 3-1: config 0 has no interface number 0 [ 260.594340][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.594359][ T5699] usb 3-1: Product: syz [ 260.594371][ T5699] usb 3-1: Manufacturer: syz [ 260.594384][ T5699] usb 3-1: SerialNumber: syz [ 260.634291][ T5699] usb 3-1: config 0 descriptor?? [ 261.820674][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.820700][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.058419][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 262.058436][ T29] audit: type=1400 audit(1792354196.541:841): avc: denied { write } for pid=8203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.154933][ T29] audit: type=1400 audit(1792354196.625:842): avc: denied { write } for pid=8228 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.205843][ T5720] usb 6-1: USB disconnect, device number 11 [ 262.496512][ T29] audit: type=1400 audit(1792354196.887:843): avc: denied { write } for pid=8213 comm="syz.5.452" name="functions" dev="configfs" ino=18567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.496721][ T29] audit: type=1400 audit(1792354196.915:844): avc: denied { write } for pid=8213 comm="syz.5.452" name="p_chmask" dev="configfs" ino=19528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 262.496879][ T29] audit: type=1400 audit(1792354196.915:845): avc: denied { open } for pid=8213 comm="syz.5.452" path="/61/config/usb_gadget/g1/functions/uac1.usb0/p_chmask" dev="configfs" ino=19528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 262.692905][ T5699] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 262.692932][ T5699] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 262.693114][ T5699] asix 3-1:0.251: probe with driver asix failed with error -71 [ 262.780187][ T5699] usb 3-1: USB disconnect, device number 10 [ 262.870553][ T6915] udevd[6915]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.979492][ T8235] netlink: 20 bytes leftover after parsing attributes in process `syz.5.456'. [ 263.442633][ T29] audit: type=1400 audit(1792354197.822:846): avc: denied { write } for pid=8237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.511102][ T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 263.573509][ T29] audit: type=1400 audit(1792354197.944:847): avc: denied { write } for pid=8254 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.674909][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 263.674935][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 263.677577][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.677597][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 263.677703][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.707160][ T10] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -22 [ 263.907362][ T5603] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 263.942377][ T29] audit: type=1400 audit(1792354198.299:848): avc: denied { accept } for pid=8243 comm="syz.5.457" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.943680][ T29] audit: type=1400 audit(1792354198.299:849): avc: denied { read } for pid=8243 comm="syz.5.457" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.000445][ T8268] FAULT_INJECTION: forcing a failure. [ 264.000445][ T8268] name failslab, interval 1, probability 0, space 0, times 0 [ 264.000475][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.2.462 Not tainted syzkaller #0 PREEMPT(full) [ 264.000492][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.000501][ T8268] Call Trace: [ 264.000506][ T8268] [ 264.000511][ T8268] dump_stack_lvl+0x100/0x190 [ 264.000538][ T8268] should_fail_ex.cold+0x5/0xa [ 264.000558][ T8268] should_failslab+0xc2/0x120 [ 264.000580][ T8268] __kmalloc_noprof+0xfc/0x840 [ 264.000599][ T8268] ? tomoyo_encode2+0xfb/0x3c0 [ 264.000626][ T8268] tomoyo_encode2+0xfb/0x3c0 [ 264.000650][ T8268] tomoyo_encode+0x29/0x50 [ 264.000671][ T8268] tomoyo_realpath_from_path+0x18c/0x690 [ 264.000689][ T8268] tomoyo_path_number_perm+0x23c/0x580 [ 264.000708][ T8268] ? tomoyo_path_number_perm+0x22e/0x580 [ 264.000728][ T8268] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.000755][ T8268] ? __lock_acquire+0x5c0/0x1f40 [ 264.000782][ T8268] ? __fget_files+0x34/0x3d0 [ 264.000803][ T8268] ? find_held_lock+0x2b/0x80 [ 264.000823][ T8268] ? hook_file_ioctl_common+0x140/0x440 [ 264.000844][ T8268] ? __fget_files+0x21f/0x3d0 [ 264.000868][ T8268] security_file_ioctl+0xd3/0x230 [ 264.000889][ T8268] __x64_sys_ioctl+0xb7/0x210 [ 264.000908][ T8268] do_syscall_64+0x123/0x790 [ 264.000934][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.000949][ T8268] RIP: 0033:0x7f7179b9e559 [ 264.000961][ T8268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.000975][ T8268] RSP: 002b:00007f717aad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.000989][ T8268] RAX: ffffffffffffffda RBX: 00007f7179e25fa0 RCX: 00007f7179b9e559 [ 264.000998][ T8268] RDX: 0000200000000340 RSI: 0000000040946400 RDI: 0000000000000003 [ 264.001007][ T8268] RBP: 00007f717aad6090 R08: 0000000000000000 R09: 0000000000000000 [ 264.001015][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.001024][ T8268] R13: 00007f7179e26038 R14: 00007f7179e25fa0 R15: 00007ffce356aab8 [ 264.001044][ T8268] [ 264.001078][ T8268] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.079972][ T5603] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 264.081678][ T5603] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 264.081700][ T5603] usb 5-1: config 0 interface 0 has no altsetting 0 [ 264.092937][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 264.092954][ T5603] usb 5-1: Product: syz [ 264.092972][ T5603] usb 5-1: Manufacturer: syz [ 264.092984][ T5603] usb 5-1: SerialNumber: syz [ 264.102042][ T5603] usb 5-1: config 0 descriptor?? [ 264.107927][ T8257] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.140665][ T5603] usb 5-1: selecting invalid altsetting 0 [ 264.342523][ T29] audit: type=1400 audit(1792354198.664:850): avc: denied { mount } for pid=8255 comm="syz.4.461" name="/" dev="ramfs" ino=19568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 264.352738][ T8257] usb 5-1: BOGUS urb xfer, pipe 0 != type 3 [ 264.911845][ T5603] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 265.063754][ T8268] comedi comedi1: reset error (fatal) [ 265.076941][ T5603] usb 4-1: Using ep0 maxpacket: 32 [ 265.078780][ T5603] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 265.098503][ T5603] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 265.098519][ T5603] usb 4-1: config 0 has no interface number 0 [ 265.098540][ T5603] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 265.131042][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.131059][ T5603] usb 4-1: Product: syz [ 265.131072][ T5603] usb 4-1: Manufacturer: syz [ 265.131085][ T5603] usb 4-1: SerialNumber: syz [ 265.165938][ T5603] usb 4-1: config 0 descriptor?? [ 265.198239][ T5603] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 265.198341][ T5603] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 265.768518][ T5603] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 265.768947][ T5603] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 266.921147][ C0] net_ratelimit: 54 callbacks suppressed [ 267.314307][ T8255] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 267.329108][ T10] usb 5-1: USB disconnect, device number 12 [ 267.828910][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 267.828924][ T29] audit: type=1400 audit(1792354201.929:856): avc: denied { unlink } for pid=8311 comm="syz.4.466" name="#1" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 268.803171][ T5720] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 269.083766][ T5720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.083802][ T5720] usb 3-1: New USB device found, idVendor=1235, idProduct=0401, bcdDevice= 0.40 [ 269.085520][ T5720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.085579][ T5720] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.242069][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.242089][ T5720] usb 3-1: Product: syz [ 269.242104][ T5720] usb 3-1: Manufacturer: syz [ 269.242118][ T5720] usb 3-1: SerialNumber: syz [ 269.963505][ T5603] usb 4-1: USB disconnect, device number 16 [ 270.066920][ T8339] netlink: 'syz.4.473': attribute type 64 has an invalid length. [ 270.135428][ T29] audit: type=1400 audit(1792354204.089:857): avc: denied { write } for pid=8313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.312057][ T29] audit: type=1400 audit(1792354204.258:858): avc: denied { write } for pid=8344 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.415983][ T8345] macvtap1: entered allmulticast mode [ 270.416109][ T8345] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 270.416218][ T8345] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 270.441182][ T8345] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 270.470012][ T8345] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 270.585902][ T5603] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 271.267660][ T5720] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.267696][ T5720] usb 3-1: MIDIStreaming interface descriptor not found [ 271.394749][ T5720] usb 3-1: USB disconnect, device number 11 [ 271.604940][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 271.708903][ T8358] serio: Serial port ptm0 [ 271.799764][ T44] usb 4-1: New USB device found, idVendor=413c, idProduct=8218, bcdDevice=ca.32 [ 271.804916][ T44] usb 4-1: config 127 has an invalid interface number: 136 but max is 0 [ 271.804938][ T44] usb 4-1: config 127 has an invalid interface number: 89 but max is 0 [ 271.804951][ T44] usb 4-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 271.804964][ T44] usb 4-1: config 127 has no interface number 0 [ 271.804973][ T44] usb 4-1: config 127 has no interface number 1 [ 271.804997][ T44] usb 4-1: too many endpoints for config 127 interface 89 altsetting 231: 126, using maximum allowed: 30 [ 271.805014][ T44] usb 4-1: config 127 interface 89 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 126 [ 271.805028][ T44] usb 4-1: config 127 interface 136 has no altsetting 0 [ 271.805037][ T44] usb 4-1: config 127 interface 89 has no altsetting 0 [ 271.814361][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.814378][ T44] usb 4-1: Product: syz [ 271.814391][ T44] usb 4-1: Manufacturer: syz [ 271.814404][ T44] usb 4-1: SerialNumber: syz [ 272.041345][ T8354] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 272.041360][ T8354] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 272.050034][ T8354] vhci_hcd vhci_hcd.0: Device attached [ 272.159575][ T29] audit: type=1400 audit(1792354205.979:859): avc: denied { setopt } for pid=8333 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 272.159776][ T29] audit: type=1400 audit(1792354205.979:860): avc: denied { accept } for pid=8333 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 272.167191][ T29] audit: type=1400 audit(1792354205.988:861): avc: denied { write } for pid=8333 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 272.386353][ T42] net_ratelimit: 62 callbacks suppressed [ 273.018547][ T5603] usb 6-1: USB disconnect, device number 12 [ 273.044502][ T8349] FAULT_INJECTION: forcing a failure. [ 273.044502][ T8349] name failslab, interval 1, probability 0, space 0, times 0 [ 273.044521][ T8349] CPU: 0 UID: 0 PID: 8349 Comm: syz.3.475 Not tainted syzkaller #0 PREEMPT(full) [ 273.044535][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.044546][ T8349] Call Trace: [ 273.044550][ T8349] [ 273.044555][ T8349] dump_stack_lvl+0x100/0x190 [ 273.044577][ T8349] should_fail_ex.cold+0x5/0xa [ 273.044607][ T8349] should_failslab+0xc2/0x120 [ 273.044637][ T8349] kmem_cache_alloc_noprof+0x92/0x6a0 [ 273.044659][ T8349] ? __proc_create+0xc1/0x8f0 [ 273.044673][ T8349] ? __proc_create+0x247/0x8f0 [ 273.044689][ T8349] __proc_create+0x247/0x8f0 [ 273.044705][ T8349] ? __pfx___proc_create+0x10/0x10 [ 273.044731][ T8349] proc_create_reg+0x75/0x170 [ 273.044757][ T8349] proc_create_data+0x86/0x110 [ 273.044780][ T8349] ? __pfx_proc_create_data+0x10/0x10 [ 273.044803][ T8349] ? net_generic+0xf4/0x2a0 [ 273.044823][ T8349] nfs_net_init+0x11a/0x340 [ 273.044836][ T8349] ? __pfx_nfs_net_init+0x10/0x10 [ 273.044847][ T8349] ops_init+0x1e2/0x5f0 [ 273.044863][ T8349] setup_net+0x118/0x3a0 [ 273.044886][ T8349] ? __pfx_setup_net+0x10/0x10 [ 273.044914][ T8349] copy_net_ns+0x345/0x7a0 [ 273.044939][ T8349] create_new_namespaces+0x3ea/0xac0 [ 273.044959][ T8349] unshare_nsproxy_namespaces+0xf2/0x220 [ 273.044976][ T8349] ksys_unshare+0x4a2/0xb30 [ 273.044992][ T8349] ? __pfx_ksys_unshare+0x10/0x10 [ 273.045016][ T8349] __x64_sys_unshare+0x31/0x40 [ 273.045039][ T8349] do_syscall_64+0x123/0x790 [ 273.045069][ T8349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.045088][ T8349] RIP: 0033:0x7fef3d19e559 [ 273.045098][ T8349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.045109][ T8349] RSP: 002b:00007fef3dfa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 273.045121][ T8349] RAX: ffffffffffffffda RBX: 00007fef3d425fa0 RCX: 00007fef3d19e559 [ 273.045128][ T8349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 273.045135][ T8349] RBP: 00007fef3d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 273.045142][ T8349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.045148][ T8349] R13: 00007fef3d426038 R14: 00007fef3d425fa0 R15: 00007ffd2126c2b8 [ 273.045175][ T8349] [ 273.153641][ T5720] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 273.175260][ T5699] usb 38-1: SetAddress Request (2) to port 0 [ 273.175305][ T5699] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 273.315885][ T5720] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 273.318890][ T5720] usb 3-1: config index 0 descriptor too short (expected 45, got 44) [ 273.318911][ T5720] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 273.318944][ T5720] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.322368][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.322403][ T5720] usb 3-1: Product: syz [ 273.322416][ T5720] usb 3-1: Manufacturer: syz [ 273.322430][ T5720] usb 3-1: SerialNumber: syz [ 273.555818][ T8377] device-mapper: table: 248:0: raid: Cannot understand number of raid parameters (-EINVAL) [ 273.555837][ T8377] device-mapper: ioctl: error adding target to table [ 273.653594][ T44] usb 4-1: USB disconnect, device number 17 [ 274.677680][ T29] audit: type=1400 audit(1792354208.336:862): avc: denied { write } for pid=8360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.730236][ T5603] usb 3-1: USB disconnect, device number 12 [ 274.732418][ T8365] vhci_hcd: connection reset by peer [ 274.751430][ T42] vhci_hcd vhci_hcd.2: stop threads [ 274.751758][ T42] vhci_hcd vhci_hcd.2: release socket [ 274.768786][ T42] vhci_hcd vhci_hcd.2: disconnect device [ 275.010680][ T8392] netlink: 'syz.0.481': attribute type 4 has an invalid length. [ 275.082924][ T8393] netlink: 'syz.0.481': attribute type 4 has an invalid length. [ 275.287755][ T29] audit: type=1400 audit(1792354208.860:863): avc: denied { write } for pid=8391 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.993361][ T8398] ipip0: entered promiscuous mode [ 276.993377][ T8398] ipip0: entered allmulticast mode [ 276.995067][ T8398] team0: Device ipip0 is of different type [ 277.345030][ T5603] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 277.379139][ T8416] loop5: detected capacity change from 0 to 7 [ 277.402605][ T8416] Dev loop5: unable to read RDB block 7 [ 277.402651][ T8416] loop5: unable to read partition table [ 277.402751][ T8416] loop5: partition table beyond EOD, truncated [ 277.402768][ T8416] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 277.539871][ T5603] usb 3-1: Using ep0 maxpacket: 32 [ 277.541335][ T5603] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 277.542344][ T5603] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 277.542366][ T5603] usb 3-1: config 0 has no interface number 0 [ 277.542399][ T5603] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 277.544499][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.544518][ T5603] usb 3-1: Product: syz [ 277.544533][ T5603] usb 3-1: Manufacturer: syz [ 277.544547][ T5603] usb 3-1: SerialNumber: syz [ 277.587451][ T5603] usb 3-1: config 0 descriptor?? [ 277.621371][ T5603] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 277.621426][ T5603] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 277.744943][ T29] audit: type=1400 audit(1792354211.208:864): avc: denied { write } for pid=8407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.793371][ C0] net_ratelimit: 53 callbacks suppressed [ 277.909355][ T29] audit: type=1400 audit(1792354211.357:865): avc: denied { write } for pid=8428 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.098809][ T8431] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 278.102272][ T29] audit: type=1400 audit(1792354211.535:866): avc: denied { read append } for pid=8429 comm="syz.0.491" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 278.102312][ T29] audit: type=1400 audit(1792354211.535:867): avc: denied { open } for pid=8429 comm="syz.0.491" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 278.102349][ T29] audit: type=1400 audit(1792354211.535:868): avc: denied { ioctl } for pid=8429 comm="syz.0.491" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 278.102386][ T29] audit: type=1400 audit(1792354211.535:869): avc: denied { read } for pid=8429 comm="syz.0.491" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 278.102416][ T29] audit: type=1400 audit(1792354211.535:870): avc: denied { open } for pid=8429 comm="syz.0.491" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 278.102437][ T29] audit: type=1400 audit(1792354211.535:871): avc: denied { ioctl } for pid=8429 comm="syz.0.491" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 278.214978][ T5603] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 278.215360][ T5603] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 278.558087][ T5699] usb 38-1: device descriptor read/8, error -110 [ 278.774049][ T8442] netlink: 'syz.3.494': attribute type 1 has an invalid length. [ 278.774069][ T8442] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.494'. [ 279.375366][ T8449] FAULT_INJECTION: forcing a failure. [ 279.375366][ T8449] name failslab, interval 1, probability 0, space 0, times 0 [ 279.375407][ T8449] CPU: 0 UID: 0 PID: 8449 Comm: syz.0.495 Not tainted syzkaller #0 PREEMPT(full) [ 279.375428][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 279.375439][ T8449] Call Trace: [ 279.375445][ T8449] [ 279.375451][ T8449] dump_stack_lvl+0x100/0x190 [ 279.375480][ T8449] should_fail_ex.cold+0x5/0xa [ 279.375506][ T8449] should_failslab+0xc2/0x120 [ 279.375532][ T8449] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 279.375556][ T8449] ? __alloc_skb+0x5b7/0x710 [ 279.375573][ T8449] ? __alloc_skb+0x140/0x710 [ 279.375588][ T8449] __alloc_skb+0x140/0x710 [ 279.375598][ T8449] ? __alloc_skb+0x5b7/0x710 [ 279.375608][ T8449] ? __pfx___alloc_skb+0x10/0x10 [ 279.375623][ T8449] netlink_alloc_large_skb+0x69/0x150 [ 279.375643][ T8449] netlink_sendmsg+0x680/0xda0 [ 279.375656][ T8449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.375669][ T8449] ? selinux_socket_sendmsg+0x198/0x2f0 [ 279.375688][ T8449] ____sys_sendmsg+0xa4d/0xbe0 [ 279.375706][ T8449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.375719][ T8449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.375742][ T8449] ___sys_sendmsg+0x190/0x1e0 [ 279.375759][ T8449] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.375781][ T8449] ? find_held_lock+0x2b/0x80 [ 279.375808][ T8449] __sys_sendmsg+0x160/0x210 [ 279.375821][ T8449] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.375841][ T8449] do_syscall_64+0x123/0x790 [ 279.375859][ T8449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.375872][ T8449] RIP: 0033:0x7f424059e559 [ 279.375882][ T8449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.375893][ T8449] RSP: 002b:00007f42413f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.375904][ T8449] RAX: ffffffffffffffda RBX: 00007f4240826090 RCX: 00007f424059e559 [ 279.375912][ T8449] RDX: 0000000020040004 RSI: 0000200000000080 RDI: 0000000000000004 [ 279.375919][ T8449] RBP: 00007f42413f8090 R08: 0000000000000000 R09: 0000000000000000 [ 279.375925][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.375932][ T8449] R13: 00007f4240826128 R14: 00007f4240826090 R15: 00007fffa618b5b8 [ 279.375947][ T8449] [ 279.735741][ T5699] usb usb38-port1: attempt power cycle [ 280.273001][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 280.273020][ T29] audit: type=1400 audit(1792354213.565:874): avc: denied { write } for pid=8440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.349964][ T5699] usb usb38-port1: unable to enumerate USB device [ 280.358214][ T8463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.379126][ T8463] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 280.426867][ T8463] xt_hashlimit: max too large, truncated to 1048576 [ 280.432437][ T29] audit: type=1400 audit(1792354213.715:875): avc: denied { getopt } for pid=8462 comm="syz.5.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 280.654435][ T29] audit: type=1400 audit(1792354213.930:876): avc: denied { write } for pid=8467 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.829775][ T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 280.994338][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 280.995449][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.995510][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.037252][ T10] mdc800 6-1:1.0: probe fails -> wrong Interface [ 282.094029][ T10] usb 6-1: USB disconnect, device number 13 [ 282.184449][ T29] audit: type=1400 audit(1792354215.361:877): avc: denied { read } for pid=8476 comm="syz.4.498" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 282.218678][ T29] audit: type=1400 audit(1792354215.389:878): avc: denied { setopt } for pid=8483 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 282.241124][ T29] audit: type=1400 audit(1792354215.398:879): avc: denied { write } for pid=8483 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 282.977006][ T5720] usb 3-1: USB disconnect, device number 13 [ 283.076391][ T29] audit: type=1400 audit(1792354216.193:880): avc: denied { write } for pid=8470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.161521][ T29] audit: type=1400 audit(1792354216.278:881): avc: denied { write } for pid=8493 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.256650][ C1] net_ratelimit: 77 callbacks suppressed [ 283.980186][ T8509] No source specified [ 284.603610][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 284.659346][ T29] audit: type=1400 audit(1792354217.681:882): avc: denied { write } for pid=8498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.780040][ T29] audit: type=1400 audit(1792354217.784:883): avc: denied { write } for pid=8525 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.795692][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 284.798979][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.799011][ T10] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 284.800249][ T10] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 284.800269][ T10] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 284.800285][ T10] usb 3-1: config 14 has no interface number 0 [ 284.800299][ T10] usb 3-1: config 14 has no interface number 1 [ 284.800345][ T10] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 284.800370][ T10] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 284.800392][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 284.800414][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 284.800437][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 284.800458][ T10] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.800479][ T10] usb 3-1: config 14 interface 57 has no altsetting 0 [ 284.800493][ T10] usb 3-1: config 14 interface 228 has no altsetting 0 [ 284.806410][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.806427][ T10] usb 3-1: Product: syz [ 284.806439][ T10] usb 3-1: Manufacturer: syz [ 284.806452][ T10] usb 3-1: SerialNumber: syz [ 286.416080][ T8506] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5597] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8506] [ 286.493481][ T10] legousbtower 3-1:14.57: interrupt endpoints not found [ 286.728236][ T8542] loop5: detected capacity change from 0 to 7 [ 286.732335][ T8542] Dev loop5: unable to read RDB block 7 [ 286.732364][ T8542] loop5: unable to read partition table [ 286.732497][ T8542] loop5: partition table beyond EOD, truncated [ 286.732511][ T8542] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 287.061621][ T29] audit: type=1400 audit(1792354219.916:884): avc: denied { shutdown } for pid=8528 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.350823][ T29] audit: type=1400 audit(1792354220.188:885): avc: denied { write } for pid=8535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.653206][ T29] audit: type=1400 audit(1792354220.478:886): avc: denied { write } for pid=8556 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.247958][ T10] legousbtower 3-1:14.228: get version request failed: -71 [ 288.248088][ T10] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 288.289318][ T10] usb 3-1: USB disconnect, device number 14 [ 288.675870][ T29] audit: type=1400 audit(1792354221.422:887): avc: denied { getopt } for pid=8571 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.729847][ C0] net_ratelimit: 425 callbacks suppressed [ 288.760810][ T29] audit: type=1400 audit(1792354221.507:888): avc: denied { ioctl } for pid=8575 comm="syz.3.509" path="socket:[20064]" dev="sockfs" ino=20064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.848119][ T5699] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 289.015544][ T8583] netlink: 'syz.0.515': attribute type 4 has an invalid length. [ 289.075610][ T8586] netlink: 'syz.0.515': attribute type 4 has an invalid length. [ 289.264373][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 289.285642][ T5699] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 289.308775][ T5699] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 289.308805][ T5699] usb 3-1: config 0 has no interface number 0 [ 289.308837][ T5699] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 289.351257][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.351277][ T5699] usb 3-1: Product: syz [ 289.351290][ T5699] usb 3-1: Manufacturer: syz [ 289.351303][ T5699] usb 3-1: SerialNumber: syz [ 289.553030][ T5720] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 290.873113][ T29] audit: type=1400 audit(1792354223.490:889): avc: denied { ioctl } for pid=8593 comm="syz.5.517" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 291.013888][ T5699] usb 3-1: config 0 descriptor?? [ 291.125275][ T5720] usb 4-1: Using ep0 maxpacket: 8 [ 291.153616][ T5720] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 291.225186][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.367133][ T8594] Bluetooth: hci0: unsupported parameter 5134 [ 291.367651][ T8594] Bluetooth: hci0: unsupported parameter 8192 [ 291.369094][ T8594] Bluetooth: hci0: unsupported parameter 5134 [ 291.369109][ T8594] Bluetooth: hci0: unsupported parameter 8192 [ 291.649538][ T5699] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 291.649567][ T5699] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 291.653509][ T5720] pvrusb2: Hardware description: Terratec Grabster AV400 [ 291.653519][ T5720] pvrusb2: ********** [ 291.653523][ T5720] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 291.653530][ T5720] pvrusb2: Important functionality might not be entirely working. [ 291.653535][ T5720] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 291.653541][ T5720] pvrusb2: ********** [ 292.184942][ T2354] pvrusb2: Invalid write control endpoint [ 292.209749][ T29] audit: type=1400 audit(1792354224.734:890): avc: denied { write } for pid=8563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.240737][ T5699] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 292.240988][ T5699] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 292.427741][ T8576] pvrusb2: Invalid write control endpoint [ 292.445492][ T5699] usb 4-1: USB disconnect, device number 18 [ 292.498689][ T2354] pvrusb2: Invalid write control endpoint [ 292.498699][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 292.498707][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 292.498713][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 292.498721][ T2354] pvrusb2: Device being rendered inoperable [ 292.529249][ T2354] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 292.529285][ T2354] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 292.572105][ T2354] pvrusb2: Attached sub-driver cx25840 [ 292.572114][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 292.572123][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 292.661073][ T29] audit: type=1400 audit(1792354225.155:891): avc: denied { write } for pid=8601 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.203451][ C0] net_ratelimit: 48 callbacks suppressed [ 294.473000][ T5699] usb 3-1: USB disconnect, device number 15 [ 295.702211][ T5602] Bluetooth: hci3: command 0x0406 tx timeout [ 295.824231][ T8629] FAULT_INJECTION: forcing a failure. [ 295.824231][ T8629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.824259][ T8629] CPU: 1 UID: 0 PID: 8629 Comm: syz.0.527 Not tainted syzkaller #0 PREEMPT(full) [ 295.824279][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 295.824290][ T8629] Call Trace: [ 295.824297][ T8629] [ 295.824305][ T8629] dump_stack_lvl+0x100/0x190 [ 295.824337][ T8629] should_fail_ex.cold+0x5/0xa [ 295.824363][ T8629] _copy_from_iter+0x1f4/0x1690 [ 295.824393][ T8629] ? __asan_memset+0x23/0x50 [ 295.824416][ T8629] ? __pfx__copy_from_iter+0x10/0x10 [ 295.824449][ T8629] ? __pfx___alloc_skb+0x10/0x10 [ 295.824479][ T8629] netlink_sendmsg+0x808/0xda0 [ 295.824503][ T8629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.824524][ T8629] ? selinux_socket_sendmsg+0x198/0x2f0 [ 295.824554][ T8629] ____sys_sendmsg+0xa4d/0xbe0 [ 295.824577][ T8629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.824598][ T8629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.824629][ T8629] ? lock_acquire+0x1d1/0x380 [ 295.824654][ T8629] ? get_pid_task+0x2a/0x250 [ 295.824683][ T8629] ___sys_sendmsg+0x190/0x1e0 [ 295.824710][ T8629] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.824736][ T8629] ? get_pid_task+0x106/0x250 [ 295.824772][ T8629] ? find_held_lock+0x2b/0x80 [ 295.824816][ T8629] __sys_sendmsg+0x160/0x210 [ 295.824836][ T8629] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.824870][ T8629] do_syscall_64+0x123/0x790 [ 295.824899][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.824918][ T8629] RIP: 0033:0x7f424059e559 [ 295.824934][ T8629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.824952][ T8629] RSP: 002b:00007f4241419028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.824971][ T8629] RAX: ffffffffffffffda RBX: 00007f4240825fa0 RCX: 00007f424059e559 [ 295.824984][ T8629] RDX: 0000000000000040 RSI: 0000200000001640 RDI: 0000000000000005 [ 295.824996][ T8629] RBP: 00007f4241419090 R08: 0000000000000000 R09: 0000000000000000 [ 295.825007][ T8629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.825018][ T8629] R13: 00007f4240826038 R14: 00007f4240825fa0 R15: 00007fffa618b5b8 [ 295.825044][ T8629] [ 296.835870][ T8641] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 297.310154][ T29] audit: type=1400 audit(1792354229.504:892): avc: denied { write } for pid=8620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.365454][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 297.365542][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 297.365616][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 297.365690][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 297.365765][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 297.365838][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 297.365913][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 297.365994][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 297.366072][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 297.366146][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 297.375431][ T29] audit: type=1400 audit(1792354229.570:893): avc: denied { read } for pid=8637 comm="syz.3.530" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 297.375472][ T29] audit: type=1400 audit(1792354229.570:894): avc: denied { open } for pid=8637 comm="syz.3.530" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 297.624209][ T8651] netlink: 'syz.4.518': attribute type 4 has an invalid length. [ 297.670282][ T8651] netlink: 'syz.4.518': attribute type 4 has an invalid length. [ 298.755444][ T29] audit: type=1400 audit(1792354230.861:895): avc: denied { write } for pid=8655 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.765547][ T8659] fuse: Bad value for 'group_id' [ 298.765560][ T8659] fuse: Bad value for 'group_id' [ 298.775540][ T8659] ipip0: entered promiscuous mode [ 298.775554][ T8659] ipip0: entered allmulticast mode [ 298.777031][ T8659] team0: Device ipip0 is of different type [ 299.677397][ C0] net_ratelimit: 72 callbacks suppressed [ 300.155698][ T29] audit: type=1400 audit(1792354232.170:896): avc: denied { bind } for pid=8667 comm="syz.3.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 301.462489][ T5699] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 301.622744][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 301.623391][ T5699] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 301.624414][ T5699] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 301.624438][ T5699] usb 5-1: config 0 has no interface number 0 [ 301.624472][ T5699] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 301.626529][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.626550][ T5699] usb 5-1: Product: syz [ 301.626571][ T5699] usb 5-1: Manufacturer: syz [ 301.626586][ T5699] usb 5-1: SerialNumber: syz [ 301.736686][ T5699] usb 5-1: config 0 descriptor?? [ 301.768159][ T5699] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 301.768215][ T5699] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 301.855694][ T8701] veth1_macvtap: left promiscuous mode [ 302.467093][ T29] audit: type=1400 audit(1792354234.284:897): avc: denied { write } for pid=8671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.836651][ T5699] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 302.837086][ T5699] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 302.975724][ T8708] __nla_validate_parse: 36 callbacks suppressed [ 302.975739][ T8708] netlink: 532 bytes leftover after parsing attributes in process `syz.3.539'. [ 303.206081][ T29] audit: type=1400 audit(1792354235.023:898): avc: denied { write } for pid=8709 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.344907][ T8715] macvtap1: entered allmulticast mode [ 304.344919][ T8715] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 304.344941][ T8715] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 304.366562][ T8715] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 304.405335][ T8715] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 304.440022][ T8722] FAULT_INJECTION: forcing a failure. [ 304.440022][ T8722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.440051][ T8722] CPU: 1 UID: 0 PID: 8722 Comm: syz.5.535 Not tainted syzkaller #0 PREEMPT(full) [ 304.440071][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 304.440082][ T8722] Call Trace: [ 304.440089][ T8722] [ 304.440097][ T8722] dump_stack_lvl+0x100/0x190 [ 304.440128][ T8722] should_fail_ex.cold+0x5/0xa [ 304.440154][ T8722] _copy_from_iter+0x1f4/0x1690 [ 304.440183][ T8722] ? __asan_memset+0x23/0x50 [ 304.440208][ T8722] ? __pfx__copy_from_iter+0x10/0x10 [ 304.440233][ T8722] ? __pfx___alloc_skb+0x10/0x10 [ 304.440261][ T8722] netlink_sendmsg+0x808/0xda0 [ 304.440284][ T8722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.440309][ T8722] ? selinux_socket_sendmsg+0x198/0x2f0 [ 304.440338][ T8722] ____sys_sendmsg+0xa4d/0xbe0 [ 304.440360][ T8722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.440381][ T8722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.440410][ T8722] ? lock_acquire+0x1d1/0x380 [ 304.440431][ T8722] ? get_pid_task+0x2a/0x250 [ 304.440459][ T8722] ___sys_sendmsg+0x190/0x1e0 [ 304.440485][ T8722] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.440515][ T8722] ? get_pid_task+0x106/0x250 [ 304.440550][ T8722] ? find_held_lock+0x2b/0x80 [ 304.440592][ T8722] __sys_sendmsg+0x160/0x210 [ 304.440614][ T8722] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.440648][ T8722] do_syscall_64+0x123/0x790 [ 304.440681][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.440700][ T8722] RIP: 0033:0x7f318eb9e559 [ 304.440716][ T8722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.440734][ T8722] RSP: 002b:00007f318f9cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.440752][ T8722] RAX: ffffffffffffffda RBX: 00007f318ee25fa0 RCX: 00007f318eb9e559 [ 304.440764][ T8722] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 304.440775][ T8722] RBP: 00007f318f9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 304.440787][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.440797][ T8722] R13: 00007f318ee26038 R14: 00007f318ee25fa0 R15: 00007fff622016d8 [ 304.440823][ T8722] [ 304.474375][ T5720] usb 5-1: USB disconnect, device number 13 [ 304.627722][ T4931] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 304.663860][ T8724] fuse: Bad value for 'group_id' [ 304.663873][ T8724] fuse: Bad value for 'group_id' [ 305.084936][ T8738] loop5: detected capacity change from 0 to 7 [ 305.161727][ C0] net_ratelimit: 82 callbacks suppressed [ 305.443061][ T29] audit: type=1400 audit(1792354237.109:899): avc: denied { append } for pid=8732 comm="syz.5.544" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 305.460661][ T8724] ipip0: entered promiscuous mode [ 305.460677][ T8724] ipip0: entered allmulticast mode [ 305.471661][ T8724] team0: Device ipip0 is of different type [ 305.478541][ T8738] Dev loop5: unable to read RDB block 7 [ 305.478571][ T8738] loop5: unable to read partition table [ 305.478720][ T8738] loop5: partition table beyond EOD, truncated [ 305.478748][ T8738] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 305.638481][ T8739] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.795250][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.5.544'. [ 305.853952][ T8739] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8743] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8739] [ 306.044190][ T29] audit: type=1400 audit(1792354237.680:900): avc: denied { lock } for pid=8745 comm="syz.4.546" path="socket:[20436]" dev="sockfs" ino=20436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 306.079178][ T29] audit: type=1400 audit(1792354237.708:901): avc: denied { create } for pid=8752 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 306.946724][ T29] audit: type=1400 audit(1792354238.035:902): avc: denied { listen } for pid=8752 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 306.946771][ T29] audit: type=1400 audit(1792354238.035:903): avc: denied { append } for pid=8752 comm="syz.5.548" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 306.946809][ T29] audit: type=1400 audit(1792354238.082:904): avc: denied { write } for pid=8752 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 307.433497][ T8746] FAULT_INJECTION: forcing a failure. [ 307.433497][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 307.433523][ T8746] CPU: 0 UID: 0 PID: 8746 Comm: syz.4.546 Not tainted syzkaller #0 PREEMPT(full) [ 307.433547][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 307.433561][ T8746] Call Trace: [ 307.433568][ T8746] [ 307.433577][ T8746] dump_stack_lvl+0x100/0x190 [ 307.433611][ T8746] should_fail_ex.cold+0x5/0xa [ 307.433640][ T8746] should_failslab+0xc2/0x120 [ 307.433672][ T8746] __kmalloc_noprof+0xfc/0x840 [ 307.433701][ T8746] ? ops_init+0x77/0x5f0 [ 307.433728][ T8746] ops_init+0x77/0x5f0 [ 307.433753][ T8746] setup_net+0x118/0x3a0 [ 307.433776][ T8746] ? __pfx_setup_net+0x10/0x10 [ 307.433813][ T8746] copy_net_ns+0x345/0x7a0 [ 307.433840][ T8746] create_new_namespaces+0x3ea/0xac0 [ 307.433871][ T8746] unshare_nsproxy_namespaces+0xf2/0x220 [ 307.433901][ T8746] ksys_unshare+0x4a2/0xb30 [ 307.433928][ T8746] ? __pfx_ksys_unshare+0x10/0x10 [ 307.433965][ T8746] __x64_sys_unshare+0x31/0x40 [ 307.433992][ T8746] do_syscall_64+0x123/0x790 [ 307.434024][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.434045][ T8746] RIP: 0033:0x7f2c7999e559 [ 307.434062][ T8746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.434082][ T8746] RSP: 002b:00007f2c7a94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 307.434101][ T8746] RAX: ffffffffffffffda RBX: 00007f2c79c25fa0 RCX: 00007f2c7999e559 [ 307.434115][ T8746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 307.434125][ T8746] RBP: 00007f2c79a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 307.434138][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.434149][ T8746] R13: 00007f2c79c26038 R14: 00007f2c79c25fa0 R15: 00007fff5e8f7a78 [ 307.434176][ T8746] [ 307.705206][ T29] audit: type=1400 audit(1792354239.223:905): avc: denied { read write } for pid=8770 comm="syz.2.551" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 307.748505][ T29] audit: type=1400 audit(1792354239.223:906): avc: denied { open } for pid=8770 comm="syz.2.551" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 307.816712][ T29] audit: type=1400 audit(1792354239.326:907): avc: denied { write } for pid=8720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 ** 3201 printk messages dropped ** [ 308.297846][ T29] audit: type=1400 audit(1792354239.784:908): avc: denied { read write } for pid=8769 comm="syz.3.552" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 309.867676][ T987] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 310.036406][ T987] usb 1-1: Using ep0 maxpacket: 32 [ 310.039513][ T987] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 310.042931][ T987] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 310.042950][ T987] usb 1-1: config 0 has no interface number 0 [ 310.042996][ T987] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 310.049630][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.049648][ T987] usb 1-1: Product: syz [ 310.049660][ T987] usb 1-1: Manufacturer: syz [ 310.049674][ T987] usb 1-1: SerialNumber: syz [ 310.057517][ T987] usb 1-1: config 0 descriptor?? [ 310.067603][ T987] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 310.067649][ T987] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 310.538706][ C1] net_ratelimit: 121 callbacks suppressed [ 310.646373][ T987] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 310.648698][ T987] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 310.871492][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 310.871507][ T29] audit: type=1400 audit(1792354242.198:915): avc: denied { write } for pid=8794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.021005][ T8816] netlink: 532 bytes leftover after parsing attributes in process `syz.4.561'. [ 311.024883][ T29] audit: type=1400 audit(1792354242.329:916): avc: denied { write } for pid=8817 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.813409][ T8843] netlink: 'syz.2.564': attribute type 5 has an invalid length. [ 311.871122][ T29] audit: type=1400 audit(1792354243.124:917): avc: denied { write } for pid=8823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.898621][ T29] audit: type=1400 audit(1792354243.133:918): avc: denied { watch_reads } for pid=8833 comm="syz.5.550" path="/78" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 312.026961][ T8840] kvm [8833]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 312.027034][ T8840] kvm [8833]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 312.039028][ T8840] kvm [8833]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 312.054888][ T8840] kvm [8833]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 312.054952][ T8840] kvm [8833]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 312.164725][ T8854] afs: Unknown parameter 'GX^bnm`Bӌs[jgeցڗ' [ 312.186041][ T29] audit: type=1400 audit(1792354243.423:919): avc: denied { accept } for pid=8852 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 312.778725][ T29] audit: type=1400 audit(1792354243.975:920): avc: denied { write } for pid=8851 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.655922][ T29] audit: type=1400 audit(1792354244.798:921): avc: denied { getopt } for pid=8861 comm="syz.2.569" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.658719][ T29] audit: type=1400 audit(1792354244.798:922): avc: denied { map } for pid=8861 comm="syz.2.569" path="socket:[20641]" dev="sockfs" ino=20641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 313.658763][ T29] audit: type=1400 audit(1792354244.798:923): avc: denied { read accept } for pid=8861 comm="syz.2.569" path="socket:[20641]" dev="sockfs" ino=20641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 313.675041][ T5264] veth1_macvtap: entered promiscuous mode [ 314.109560][ T29] audit: type=1400 audit(1792354245.013:924): avc: denied { write } for pid=8861 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 314.759529][ T5720] usb 1-1: USB disconnect, device number 11 [ 315.926766][ C0] net_ratelimit: 55 callbacks suppressed [ 316.063788][ T8878] binder: 8877:8878 ioctl c00c6211 0 returned -14 [ 316.317500][ T8881] fuse: Bad value for 'user_id' [ 316.317537][ T8881] fuse: Bad value for 'user_id' [ 316.627729][ T8881] ipip0: entered promiscuous mode [ 316.627749][ T8881] ipip0: entered allmulticast mode [ 316.703786][ T8881] team0: Device ipip0 is of different type [ 317.165244][ T8895] netlink: 532 bytes leftover after parsing attributes in process `syz.2.576'. [ 317.311845][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 317.311858][ T29] audit: type=1400 audit(1792354248.212:926): avc: denied { write } for pid=8875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.372110][ T4931] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 317.421348][ T29] audit: type=1400 audit(1792354248.315:927): avc: denied { write } for pid=8908 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.432976][ T8904] nvme nvme0: failed to connect socket: -111 [ 317.532733][ T4931] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 317.536077][ T4931] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 317.536098][ T4931] usb 5-1: Product: syz [ 317.536113][ T4931] usb 5-1: Manufacturer: syz [ 317.536127][ T4931] usb 5-1: SerialNumber: syz [ 317.541059][ T5786] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 317.554964][ T4931] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 318.683385][ T29] audit: type=1400 audit(1792354249.494:928): avc: denied { write } for pid=8900 comm="syz.5.571" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 318.684594][ T8901] random: crng reseeded on system resumption [ 318.854089][ T8920] jffs2: notice: (8920) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 318.896724][ T4931] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 318.896754][ T4931] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 319.059154][ T29] audit: type=1400 audit(1792354249.765:929): avc: denied { execute } for pid=8924 comm="syz.2.583" name="cgroup" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 319.147680][ T29] audit: type=1400 audit(1792354249.933:930): avc: denied { write } for pid=8900 comm="syz.5.571" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.151626][ T29] audit: type=1400 audit(1792354249.933:931): avc: denied { add_name } for pid=8900 comm="syz.5.571" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.221775][ T29] audit: type=1400 audit(1792354250.008:932): avc: denied { create } for pid=8900 comm="syz.5.571" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 319.238898][ T4931] usb 5-1: USB disconnect, device number 14 [ 319.316408][ T29] audit: type=1400 audit(1792354250.092:933): avc: denied { read write open } for pid=8900 comm="syz.5.571" path="/80/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 319.321033][ T5786] usb 6-1: unable to get BOS descriptor or descriptor too short [ 319.321071][ T5786] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 319.322110][ T5786] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 319.322143][ T5786] usb 6-1: can't read configurations, error -71 [ 319.532880][ T29] audit: type=1400 audit(1792354250.298:934): avc: denied { write } for pid=8914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.630286][ T29] audit: type=1400 audit(1792354250.382:935): avc: denied { write } for pid=8939 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.116621][ T8952] netlink: 92 bytes leftover after parsing attributes in process `syz.3.584'. [ 321.333778][ T8967] macvtap1: entered allmulticast mode [ 321.333806][ T8967] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 321.333905][ T8967] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 321.337854][ T8967] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 321.582927][ C1] net_ratelimit: 60 callbacks suppressed [ 322.476973][ T8967] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 322.521122][ T8972] fuse: Bad value for 'user_id' [ 322.521471][ T8972] fuse: Bad value for 'user_id' [ 322.895797][ T987] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 322.902645][ T5720] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 323.845905][ T8972] ipip0: entered promiscuous mode [ 323.845915][ T8972] ipip0: entered allmulticast mode [ 323.862527][ T8972] team0: Device ipip0 is of different type [ 323.891279][ T5720] usb 6-1: device descriptor read/64, error -71 [ 324.149858][ T5720] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 324.306423][ T5720] usb 6-1: device descriptor read/64, error -71 [ 324.416767][ T5720] usb usb6-port1: attempt power cycle [ 324.536226][ T8992] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input14 [ 324.544100][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 324.544111][ T29] audit: type=1400 audit(1792354254.975:942): avc: denied { read } for pid=4954 comm="acpid" name="mouse1" dev="devtmpfs" ino=3078 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 324.544146][ T29] audit: type=1400 audit(1792354254.975:943): avc: denied { open } for pid=4954 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3078 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 324.612968][ T29] audit: type=1400 audit(1792354255.013:944): avc: denied { ioctl } for pid=4954 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3078 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 324.811434][ T5720] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 325.045904][ T5720] usb 6-1: device not accepting address 18, error -71 [ 325.379649][ T5857] IPVS: starting estimator thread 0... [ 325.537717][ T9002] IPVS: using max 43 ests per chain, 103200 per kthread [ 325.579111][ T9003] binder: 9001:9003 ioctl c00c6211 0 returned -14 [ 327.047686][ C1] net_ratelimit: 84 callbacks suppressed [ 327.053259][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.053304][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.273847][ T29] audit: type=1400 audit(1792354258.464:945): avc: denied { mount } for pid=9019 comm="syz.0.590" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 328.624530][ T29] audit: type=1800 audit(1792354258.801:946): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.602" name="file0" dev="overlay" ino=711 res=0 errno=0 [ 329.696305][ T29] audit: type=1400 audit(1792354259.792:947): avc: denied { getopt } for pid=9039 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.717262][ T29] audit: type=1400 audit(1792354259.821:948): avc: denied { setopt } for pid=9039 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.722348][ T29] audit: type=1400 audit(1792354259.830:949): avc: denied { bind } for pid=9039 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.142778][ T9011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.885545][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 330.922932][ T9049] fuse: Bad value for 'user_id' [ 330.922948][ T9049] fuse: Bad value for 'user_id' [ 330.936406][ T29] audit: type=1400 audit(1792354260.952:950): avc: denied { write } for pid=9032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.012171][ T9049] ipip0: entered promiscuous mode [ 331.012186][ T9049] ipip0: entered allmulticast mode [ 331.030461][ T9049] team0: Device ipip0 is of different type [ 331.052333][ T29] audit: type=1400 audit(1792354261.065:951): avc: denied { nlmsg_write } for pid=9062 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 332.118202][ T29] audit: type=1400 audit(1792354261.588:952): avc: denied { read } for pid=9062 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 332.142198][ T29] audit: type=1400 audit(1792354262.075:953): avc: denied { write } for pid=9060 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.500346][ T5786] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 332.516461][ T9047] syzkaller0: entered promiscuous mode [ 332.516476][ T9047] syzkaller0: entered allmulticast mode [ 332.529685][ T7458] net_ratelimit: 113 callbacks suppressed [ 333.000702][ T9079] binder: 9078:9079 ioctl c00c6211 0 returned -14 [ 333.009029][ T9070] evm: overlay not supported [ 333.074545][ T5786] usb 6-1: Using ep0 maxpacket: 32 [ 333.076136][ T5786] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 333.079219][ T5786] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 333.079250][ T5786] usb 6-1: config 0 has no interface number 0 [ 333.079378][ T5786] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 333.087435][ T5786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.087452][ T5786] usb 6-1: Product: syz [ 333.087465][ T5786] usb 6-1: Manufacturer: syz [ 333.087478][ T5786] usb 6-1: SerialNumber: syz [ 333.100772][ T5786] usb 6-1: config 0 descriptor?? [ 333.105342][ T5786] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 333.105389][ T5786] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 333.674273][ T5786] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 333.692975][ T5786] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 335.321605][ T9104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.880987][ T29] audit: type=1400 audit(1792354265.583:954): avc: denied { ioctl } for pid=9110 comm="syz.0.617" path="socket:[21957]" dev="sockfs" ino=21957 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 336.075707][ T9114] FAULT_INJECTION: forcing a failure. [ 336.075707][ T9114] name failslab, interval 1, probability 0, space 0, times 0 [ 336.075735][ T9114] CPU: 0 UID: 0 PID: 9114 Comm: syz.3.618 Not tainted syzkaller #0 PREEMPT(full) [ 336.075755][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.075767][ T9114] Call Trace: [ 336.075774][ T9114] [ 336.075782][ T9114] dump_stack_lvl+0x100/0x190 [ 336.075814][ T9114] should_fail_ex.cold+0x5/0xa [ 336.075842][ T9114] should_failslab+0xc2/0x120 [ 336.075870][ T9114] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 336.075895][ T9114] ? __alloc_skb+0x5b7/0x710 [ 336.075914][ T9114] ? __alloc_skb+0x140/0x710 [ 336.075942][ T9114] __alloc_skb+0x140/0x710 [ 336.075959][ T9114] ? __alloc_skb+0x5b7/0x710 [ 336.075976][ T9114] ? __pfx___alloc_skb+0x10/0x10 [ 336.076002][ T9114] netlink_alloc_large_skb+0x69/0x150 [ 336.076034][ T9114] netlink_sendmsg+0x680/0xda0 [ 336.076057][ T9114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.076079][ T9114] ? selinux_socket_sendmsg+0x198/0x2f0 [ 336.076110][ T9114] ____sys_sendmsg+0xa4d/0xbe0 [ 336.076134][ T9114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.076154][ T9114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.076185][ T9114] ? lock_acquire+0x1d1/0x380 [ 336.076207][ T9114] ? get_pid_task+0x2a/0x250 [ 336.076235][ T9114] ___sys_sendmsg+0x190/0x1e0 [ 336.076263][ T9114] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.076289][ T9114] ? get_pid_task+0x106/0x250 [ 336.076324][ T9114] ? find_held_lock+0x2b/0x80 [ 336.076368][ T9114] __sys_sendmsg+0x160/0x210 [ 336.076390][ T9114] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.076424][ T9114] do_syscall_64+0x123/0x790 [ 336.076454][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.076474][ T9114] RIP: 0033:0x7fef3d19e559 [ 336.076490][ T9114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.076508][ T9114] RSP: 002b:00007fef3dfa3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.076527][ T9114] RAX: ffffffffffffffda RBX: 00007fef3d425fa0 RCX: 00007fef3d19e559 [ 336.076540][ T9114] RDX: 0000000000000000 RSI: 0000200000001a80 RDI: 0000000000000007 [ 336.076552][ T9114] RBP: 00007fef3dfa3090 R08: 0000000000000000 R09: 0000000000000000 [ 336.076563][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.076574][ T9114] R13: 00007fef3d426038 R14: 00007fef3d425fa0 R15: 00007ffd2126c2b8 [ 336.076600][ T9114] [ 336.399886][ T5786] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 336.446077][ T5603] usb 6-1: USB disconnect, device number 20 [ 336.547192][ T29] audit: type=1400 audit(1792354266.209:955): avc: denied { connect } for pid=9110 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.561028][ T5786] usb 4-1: Using ep0 maxpacket: 16 [ 336.561685][ T5786] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 336.567094][ T5786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.579141][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.579158][ T5786] usb 4-1: Product: syz [ 336.579171][ T5786] usb 4-1: Manufacturer: syz [ 336.579184][ T5786] usb 4-1: SerialNumber: syz [ 336.593275][ T5786] usb 4-1: config 0 descriptor?? [ 336.810350][ T29] audit: type=1400 audit(1792354266.453:956): avc: denied { open } for pid=9113 comm="syz.3.618" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 336.842547][ T29] audit: type=1400 audit(1792354266.490:957): avc: denied { read } for pid=9121 comm="syz.2.609" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 336.842951][ T29] audit: type=1400 audit(1792354266.490:958): avc: denied { open } for pid=9121 comm="syz.2.609" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 336.843214][ T9123] FAULT_INJECTION: forcing a failure. [ 336.843214][ T9123] name failslab, interval 1, probability 0, space 0, times 0 [ 336.843243][ T9123] CPU: 1 UID: 0 PID: 9123 Comm: syz.2.609 Not tainted syzkaller #0 PREEMPT(full) [ 336.843266][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.843278][ T9123] Call Trace: [ 336.843285][ T9123] [ 336.843294][ T9123] dump_stack_lvl+0x100/0x190 [ 336.843334][ T9123] should_fail_ex.cold+0x5/0xa [ 336.843364][ T9123] should_failslab+0xc2/0x120 [ 336.843397][ T9123] __kmalloc_cache_node_noprof+0x94/0x720 [ 336.843426][ T9123] ? kernel_text_address+0x8d/0x100 [ 336.843448][ T9123] ? __get_vm_area_node+0x124/0x350 [ 336.843480][ T9123] __get_vm_area_node+0x124/0x350 [ 336.843513][ T9123] __vmalloc_node_range_noprof+0x268/0x1420 [ 336.843546][ T9123] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 336.843574][ T9123] ? __pfx_stack_trace_save+0x10/0x10 [ 336.843597][ T9123] ? stack_depot_save_flags+0x27/0x9f0 [ 336.843624][ T9123] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 336.843652][ T9123] ? __kasan_kmalloc+0xaa/0xb0 [ 336.843679][ T9123] ? do_syscall_64+0x123/0x790 [ 336.843713][ T9123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 336.843752][ T9123] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 336.843779][ T9123] __vmalloc_node_noprof+0xad/0xf0 [ 336.843808][ T9123] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 336.843838][ T9123] __vmalloc_noprof+0xa3/0x120 [ 336.843867][ T9123] ? __pfx___vmalloc_noprof+0x10/0x10 [ 336.843906][ T9123] bpf_prog_alloc_no_stats+0x59/0x690 [ 336.843937][ T9123] bpf_prog_alloc+0x3b/0x200 [ 336.843966][ T9123] bpf_prog_create_from_user+0xb4/0x2e0 [ 336.843994][ T9123] ? __pfx_seccomp_check_filter+0x10/0x10 [ 336.844025][ T9123] do_seccomp+0x870/0x27c0 [ 336.844045][ T9123] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 336.844084][ T9123] ? __pfx_do_seccomp+0x10/0x10 [ 336.844103][ T9123] ? __x64_sys_openat+0x12d/0x210 [ 336.844125][ T9123] ? __pfx___x64_sys_futex+0x10/0x10 [ 336.844166][ T9123] do_syscall_64+0x123/0x790 [ 336.844198][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.844219][ T9123] RIP: 0033:0x7f7179b9e559 [ 336.844236][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.844255][ T9123] RSP: 002b:00007f717aad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 336.844274][ T9123] RAX: ffffffffffffffda RBX: 00007f7179e25fa0 RCX: 00007f7179b9e559 [ 336.844288][ T9123] RDX: 0000200000001340 RSI: 000000000000003f RDI: 0000000000000001 [ 336.844300][ T9123] RBP: 00007f7179c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 336.844318][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.844330][ T9123] R13: 00007f7179e26038 R14: 00007f7179e25fa0 R15: 00007ffce356aab8 [ 336.844358][ T9123] [ 336.844378][ T9123] syz.2.609: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 336.844434][ T9123] CPU: 1 UID: 0 PID: 9123 Comm: syz.2.609 Not tainted syzkaller #0 PREEMPT(full) [ 336.844455][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.844468][ T9123] Call Trace: [ 336.844475][ T9123] [ 336.844483][ T9123] dump_stack_lvl+0x100/0x190 [ 336.844515][ T9123] warn_alloc.cold+0x9e/0xb2 [ 336.844539][ T9123] ? __pfx_warn_alloc+0x10/0x10 [ 336.844559][ T9123] ? __kasan_kmalloc+0x8a/0xb0 [ 336.844592][ T9123] ? __get_vm_area_node+0x22b/0x350 [ 336.844623][ T9123] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 336.844653][ T9123] ? __pfx_stack_trace_save+0x10/0x10 [ 336.844675][ T9123] ? stack_depot_save_flags+0x27/0x9f0 [ 336.844698][ T9123] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 336.844719][ T9123] ? __kasan_kmalloc+0xaa/0xb0 [ 336.844738][ T9123] ? do_syscall_64+0x123/0x790 [ 336.844762][ T9123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 336.844792][ T9123] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 336.844813][ T9123] __vmalloc_node_noprof+0xad/0xf0 [ 336.844836][ T9123] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 336.844859][ T9123] __vmalloc_noprof+0xa3/0x120 [ 336.844881][ T9123] ? __pfx___vmalloc_noprof+0x10/0x10 [ 336.844911][ T9123] bpf_prog_alloc_no_stats+0x59/0x690 [ 336.844935][ T9123] bpf_prog_alloc+0x3b/0x200 [ 336.844958][ T9123] bpf_prog_create_from_user+0xb4/0x2e0 [ 336.844979][ T9123] ? __pfx_seccomp_check_filter+0x10/0x10 [ 336.845004][ T9123] do_seccomp+0x870/0x27c0 [ 336.845019][ T9123] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 336.845046][ T9123] ? __pfx_do_seccomp+0x10/0x10 [ 336.845060][ T9123] ? __x64_sys_openat+0x12d/0x210 [ 336.845076][ T9123] ? __pfx___x64_sys_futex+0x10/0x10 [ 336.845106][ T9123] do_syscall_64+0x123/0x790 [ 336.845130][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.845146][ T9123] RIP: 0033:0x7f7179b9e559 [ 336.845158][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.845173][ T9123] RSP: 002b:00007f717aad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 336.845187][ T9123] RAX: ffffffffffffffda RBX: 00007f7179e25fa0 RCX: 00007f7179b9e559 [ 336.845197][ T9123] RDX: 0000200000001340 RSI: 000000000000003f RDI: 0000000000000001 [ 336.845206][ T9123] RBP: 00007f7179c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 336.845216][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.845225][ T9123] R13: 00007f7179e26038 R14: 00007f7179e25fa0 R15: 00007ffce356aab8 [ 336.845246][ T9123] [ 336.845254][ T9123] Mem-Info: [ 336.845263][ T9123] active_anon:28741 inactive_anon:0 isolated_anon:0 [ 336.845263][ T9123] active_file:39 inactive_file:68369 isolated_file:0 [ 336.845263][ T9123] unevictable:0 dirty:428 writeback:0 [ 336.845263][ T9123] slab_reclaimable:12843 slab_unreclaimable:106623 [ 336.845263][ T9123] mapped:42934 shmem:20111 pagetables:1396 [ 336.845263][ T9123] sec_pagetables:0 bounce:0 [ 336.845263][ T9123] kernel_misc_reclaimable:0 [ 336.845263][ T9123] free:1246209 free_pcp:18534 free_cma:0 [ 336.845314][ T9123] Node 0 active_anon:114964kB inactive_anon:0kB active_file:156kB inactive_file:273272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171736kB dirty:1712kB writeback:0kB shmem:80444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12632kB pagetables:5432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 336.845361][ T9123] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 336.845405][ T9123] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.845454][ T9123] lowmem_reserve[]: 0 [ 336.851880][ T9123] 2452 2452 2452 2452 [ 336.851909][ T9123] Node 0 DMA32 free:1025060kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:114964kB inactive_anon:0kB active_file:156kB inactive_file:273272kB unevictable:0kB writepending:1712kB zspages:0kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:73984kB local_pcp:63444kB free_cma:0kB [ 336.851962][ T9123] lowmem_reserve[]: 0 0 0 0 0 [ 336.851992][ T9123] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.852041][ T9123] lowmem_reserve[]: 0 0 0 0 0 [ 336.852070][ T9123] Node 1 Normal free:3944448kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.852115][ T9123] lowmem_reserve[]: 0 0 0 0 0 [ 336.852142][ T9123] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 336.852253][ T9123] Node 0 DMA32: 3520*4kB (UM) 300*8kB (UM) 1139*16kB (UME) 54*32kB (UME) 710*64kB (ME) 541*128kB (UME) 264*256kB (UM) 129*512kB (UME) 45*1024kB (UME) 13*2048kB (UME) 163*4096kB (UM) = 1025104kB [ 336.852383][ T9123] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 336.852463][ T9123] Node 1 Normal: 2*4kB (M) 7*8kB (UM) 8*16kB (UM) 6*32kB (UM) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3944448kB [ 336.852587][ T9123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.852600][ T9123] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.852613][ T9123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.852626][ T9123] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.852639][ T9123] 88540 total pagecache pages [ 336.852645][ T9123] 0 pages in swap cache [ 336.852651][ T9123] Free swap = 124996kB [ 336.852658][ T9123] Total swap = 124996kB [ 336.852664][ T9123] 2097051 pages RAM [ 336.852670][ T9123] 0 pages HighMem/MovableOnly [ 336.852676][ T9123] 437690 pages reserved [ 336.852682][ T9123] 0 pages cma reserved [ 336.862919][ T5603] usb 4-1: USB disconnect, device number 19 [ 337.589929][ T9132] fuse: Bad value for 'user_id' [ 337.589944][ T9132] fuse: Bad value for 'user_id' [ 337.784668][ T9132] ipip0: entered promiscuous mode [ 337.784682][ T9132] ipip0: entered allmulticast mode [ 337.897624][ T5708] net_ratelimit: 61 callbacks suppressed [ 337.913657][ T9132] team0: Device ipip0 is of different type [ 338.654658][ T9143] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 338.654689][ T9143] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 338.654725][ T9143] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 338.939768][ T9143] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 338.948048][ T29] audit: type=1400 audit(1792354268.155:959): avc: denied { write } for pid=9140 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 339.260871][ T9150] FAULT_INJECTION: forcing a failure. [ 339.260871][ T9150] name failslab, interval 1, probability 0, space 0, times 0 [ 339.260907][ T9150] CPU: 0 UID: 0 PID: 9150 Comm: syz.2.624 Not tainted syzkaller #0 PREEMPT(full) [ 339.260933][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 339.260948][ T9150] Call Trace: [ 339.260956][ T9150] [ 339.260965][ T9150] dump_stack_lvl+0x100/0x190 [ 339.261000][ T9150] should_fail_ex.cold+0x5/0xa [ 339.261031][ T9150] should_failslab+0xc2/0x120 [ 339.261061][ T9150] kmem_cache_alloc_noprof+0x92/0x6a0 [ 339.261091][ T9150] ? avtab_insert_node+0x2a/0x3c0 [ 339.261118][ T9150] avtab_insert_node+0x2a/0x3c0 [ 339.261141][ T9150] avtab_insert_nonunique+0x3ad/0x570 [ 339.261169][ T9150] cond_dup_av_list+0x19d/0x2b0 [ 339.261199][ T9150] cond_policydb_dup+0x46e/0x750 [ 339.261234][ T9150] security_set_bools+0x13f/0x6c0 [ 339.261267][ T9150] sel_commit_bools_write+0x36d/0x420 [ 339.261293][ T9150] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 339.261327][ T9150] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 339.261374][ T9150] vfs_writev+0x5ed/0xdd0 [ 339.261405][ T9150] ? __pfx_vfs_writev+0x10/0x10 [ 339.261436][ T9150] ? lock_acquire+0x1d1/0x380 [ 339.261461][ T9150] ? __fget_files+0x34/0x3d0 [ 339.261498][ T9150] ? __fget_files+0x21f/0x3d0 [ 339.261532][ T9150] ? do_writev+0x13e/0x340 [ 339.261553][ T9150] do_writev+0x13e/0x340 [ 339.261577][ T9150] ? __pfx_do_writev+0x10/0x10 [ 339.261609][ T9150] do_syscall_64+0x123/0x790 [ 339.261642][ T9150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.261663][ T9150] RIP: 0033:0x7f7179b9e559 [ 339.261681][ T9150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.261701][ T9150] RSP: 002b:00007f717aad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 339.261721][ T9150] RAX: ffffffffffffffda RBX: 00007f7179e25fa0 RCX: 00007f7179b9e559 [ 339.261734][ T9150] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000005 [ 339.261747][ T9150] RBP: 00007f7179c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 339.261758][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.261769][ T9150] R13: 00007f7179e26038 R14: 00007f7179e25fa0 R15: 00007ffce356aab8 [ 339.261797][ T9150] [ 339.680578][ T9150] rxe_eth0 speed is unknown, defaulting to 1000 [ 339.809612][ T5747] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 339.869298][ T29] audit: type=1400 audit(1792354269.315:960): avc: denied { write } for pid=9151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.983478][ T5747] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.984949][ T5747] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 339.984989][ T5747] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.985015][ T5747] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.985071][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.067601][ T5747] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.068285][ T5747] usb 4-1: invalid MIDI out EP 0 [ 340.096863][ T29] audit: type=1400 audit(1792354269.530:961): avc: denied { write } for pid=9164 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.275486][ T9154] FAULT_INJECTION: forcing a failure. [ 340.275486][ T9154] name failslab, interval 1, probability 0, space 0, times 0 [ 340.275512][ T9154] CPU: 1 UID: 0 PID: 9154 Comm: syz.3.625 Not tainted syzkaller #0 PREEMPT(full) [ 340.275532][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.275543][ T9154] Call Trace: [ 340.275550][ T9154] [ 340.275558][ T9154] dump_stack_lvl+0x100/0x190 [ 340.275590][ T9154] should_fail_ex.cold+0x5/0xa [ 340.275616][ T9154] should_failslab+0xc2/0x120 [ 340.275642][ T9154] kmem_cache_alloc_noprof+0x92/0x6a0 [ 340.275667][ T9154] ? security_file_alloc+0x34/0x2c0 [ 340.275698][ T9154] security_file_alloc+0x34/0x2c0 [ 340.275726][ T9154] init_file+0x95/0x480 [ 340.275753][ T9154] alloc_empty_file+0x79/0x1c0 [ 340.275773][ T9154] path_openat+0xdb/0x2450 [ 340.275804][ T9154] ? __pfx_path_openat+0x10/0x10 [ 340.275843][ T9154] do_file_open+0x20e/0x430 [ 340.275872][ T9154] ? __pfx_do_file_open+0x10/0x10 [ 340.275917][ T9154] ? _raw_spin_unlock+0x28/0x50 [ 340.275940][ T9154] ? alloc_fd+0x471/0x7a0 [ 340.275975][ T9154] do_sys_openat2+0x10f/0x1e0 [ 340.275993][ T9154] ? __pfx_do_sys_openat2+0x10/0x10 [ 340.276010][ T9154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.276040][ T9154] ? __fget_files+0x21f/0x3d0 [ 340.276072][ T9154] __x64_sys_openat+0x12d/0x210 [ 340.276091][ T9154] ? __pfx___x64_sys_openat+0x10/0x10 [ 340.276109][ T9154] ? ksys_write+0x1ac/0x250 [ 340.276141][ T9154] do_syscall_64+0x123/0x790 [ 340.276171][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.276190][ T9154] RIP: 0033:0x7fef3d15ed8e [ 340.276206][ T9154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.276224][ T9154] RSP: 002b:00007fef3dfa2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 340.276242][ T9154] RAX: ffffffffffffffda RBX: 00007fef3dfa36c0 RCX: 00007fef3d15ed8e [ 340.276254][ T9154] RDX: 0000000000189e02 RSI: 00007fef3dfa2c00 RDI: ffffffffffffff9c [ 340.276266][ T9154] RBP: 00007fef3dfa2c00 R08: 0000000000000000 R09: 0000000000000000 [ 340.276277][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 340.276289][ T9154] R13: 00007fef3d426038 R14: 00007fef3d425fa0 R15: 00007ffd2126c2b8 [ 340.276316][ T9154] [ 340.277195][ T9167] netlink: 44 bytes leftover after parsing attributes in process `syz.0.626'. [ 340.804357][ T5747] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 340.831731][ T5747] usb 4-1: USB disconnect, device number 20 [ 341.122904][ T29] audit: type=1400 audit(1792354270.484:962): avc: denied { ioctl } for pid=9184 comm="syz.5.623" path="/87/file0" dev="tmpfs" ino=499 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 341.365685][ T9185] ================================================================== [ 341.365694][ T9185] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40 [ 341.365713][ T9185] Read of size 1 at addr ffff88805535e9a0 by task syz.5.623/9185 [ 341.365722][ T9185] [ 341.365733][ T9185] CPU: 1 UID: 0 PID: 9185 Comm: syz.5.623 Not tainted syzkaller #0 PREEMPT(full) [ 341.365747][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 341.365754][ T9185] Call Trace: [ 341.365758][ T9185] [ 341.365763][ T9185] dump_stack_lvl+0x100/0x190 [ 341.365782][ T9185] print_report+0x13d/0x4b0 [ 341.365799][ T9185] ? __virt_addr_valid+0x239/0x430 [ 341.365813][ T9185] ? _raw_spin_lock+0x2e/0x40 [ 341.365826][ T9185] kasan_report+0xdf/0x1c0 [ 341.365844][ T9185] ? _raw_spin_lock+0x2e/0x40 [ 341.365859][ T9185] ? _raw_spin_lock+0x2e/0x40 [ 341.365872][ T9185] __kasan_check_byte+0x36/0x50 [ 341.365889][ T9185] lock_acquire+0x132/0x380 [ 341.365903][ T9185] ? lock_acquire+0x1d1/0x380 [ 341.365917][ T9185] _raw_spin_lock+0x2e/0x40 [ 341.365930][ T9185] ? lockref_get+0x15/0x50 [ 341.365945][ T9185] lockref_get+0x15/0x50 [ 341.365960][ T9185] __simple_recursive_removal+0x3d/0x5c0 [ 341.365979][ T9185] ? __pfx_remove_one+0x10/0x10 [ 341.366002][ T9185] ? mntput+0x70/0xa0 [ 341.366028][ T9185] debugfs_remove+0x5d/0x80 [ 341.366049][ T9185] ieee80211_sta_debugfs_remove+0x38/0x80 [ 341.366074][ T9185] __sta_info_destroy_part2+0x318/0x510 [ 341.366102][ T9185] __sta_info_flush+0x4f6/0x720 [ 341.366121][ T9185] ? __pfx___sta_info_flush+0x10/0x10 [ 341.366136][ T9185] ? linkwatch_schedule_work+0x16f/0x1a0 [ 341.366154][ T9185] ? linkwatch_fire_event+0x74/0x270 [ 341.366171][ T9185] ieee80211_ibss_disconnect+0x195/0xbc0 [ 341.366185][ T9185] ieee80211_ibss_leave+0x4a/0x160 [ 341.366197][ T9185] cfg80211_leave_ibss+0x1ab/0x490 [ 341.366214][ T9185] cfg80211_leave_locked+0x1ad/0x470 [ 341.366232][ T9185] cfg80211_leave+0x5d/0x90 [ 341.366245][ T9185] cfg80211_netdev_notifier_call+0x30c/0x1140 [ 341.366261][ T9185] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 341.366277][ T9185] ? do_raw_spin_lock+0x128/0x260 [ 341.366295][ T9185] ? __lock_acquire+0x5c0/0x1f40 [ 341.366309][ T9185] ? debug_object_assert_init+0x1c4/0x310 [ 341.366322][ T9185] ? __pfx_debug_object_assert_init+0x10/0x10 [ 341.366335][ T9185] ? __lock_acquire+0x5c0/0x1f40 [ 341.366348][ T9185] ? find_held_lock+0x2b/0x80 [ 341.366366][ T9185] ? __lock_acquire+0x5c0/0x1f40 [ 341.366381][ T9185] ? lock_acquire+0x1d1/0x380 [ 341.366393][ T9185] ? wireless_nlevent_flush+0x1b/0x100 [ 341.366408][ T9185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 341.366424][ T9185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 341.366439][ T9185] ? inetdev_event+0x149/0x17f0 [ 341.366453][ T9185] ? igmp_netdev_event+0x7b/0x880 [ 341.366466][ T9185] ? __pfx_igmp_netdev_event+0x10/0x10 [ 341.366478][ T9185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 341.366492][ T9185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 341.366506][ T9185] ? ipmr_device_event+0x1c4/0x230 [ 341.366519][ T9185] notifier_call_chain+0x99/0x3f0 [ 341.366538][ T9185] call_netdevice_notifiers_info+0xbe/0x110 [ 341.366563][ T9185] __dev_close_many+0xff/0x710 [ 341.366585][ T9185] ? queue_work_on+0x11b/0x1e0 [ 341.366603][ T9185] ? __pfx___dev_close_many+0x10/0x10 [ 341.366629][ T9185] ? __local_bh_enable_ip+0xa5/0x120 [ 341.366653][ T9185] __dev_change_flags+0x307/0x850 [ 341.366673][ T9185] ? __pfx___dev_change_flags+0x10/0x10 [ 341.366693][ T9185] ? __pfx_validate_linkmsg+0x10/0x10 [ 341.366715][ T9185] netif_change_flags+0x8d/0x160 [ 341.366741][ T9185] do_setlink.isra.0+0x1ac4/0x3e60 [ 341.366768][ T9185] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 341.366791][ T9185] ? __lock_acquire+0x5c0/0x1f40 [ 341.366816][ T9185] ? do_raw_spin_lock+0x128/0x260 [ 341.366843][ T9185] ? find_held_lock+0x2b/0x80 [ 341.366871][ T9185] ? debug_mutex_remove_waiter+0xa0/0x320 [ 341.366900][ T9185] ? debug_mutex_remove_waiter+0xa0/0x320 [ 341.366932][ T9185] ? mark_held_locks+0x40/0x70 [ 341.366954][ T9185] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.366980][ T9185] ? __mutex_lock+0x829/0x1bd0 [ 341.367007][ T9185] ? lockdep_hardirqs_on+0x7d/0x110 [ 341.367035][ T9185] ? __mutex_lock+0x829/0x1bd0 [ 341.367063][ T9185] ? __mutex_lock+0x26c/0x1bd0 [ 341.367091][ T9185] ? rtnl_newlink+0xac3/0x2620 [ 341.367114][ T9185] ? __pfx___mutex_lock+0x10/0x10 [ 341.367141][ T9185] ? rcu_is_watching+0x13/0xc0 [ 341.367168][ T9185] ? cap_capable+0x107/0x430 [ 341.367192][ T9185] rtnl_newlink+0x1dc4/0x2620 [ 341.367207][ T9185] ? __pfx_rtnl_newlink+0x10/0x10 [ 341.367220][ T9185] ? avc_has_perm_noaudit+0x56/0x470 [ 341.367234][ T9185] ? find_held_lock+0x2b/0x80 [ 341.367251][ T9185] ? avc_has_perm_noaudit+0x11e/0x470 [ 341.367263][ T9185] ? avc_has_perm_noaudit+0x11e/0x470 [ 341.367279][ T9185] ? __lock_acquire+0x5c0/0x1f40 [ 341.367295][ T9185] ? lock_acquire+0x1d1/0x380 [ 341.367307][ T9185] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 341.367321][ T9185] ? find_held_lock+0x2b/0x80 [ 341.367337][ T9185] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 341.367350][ T9185] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 341.367363][ T9185] ? __pfx_rtnl_newlink+0x10/0x10 [ 341.367376][ T9185] rtnetlink_rcv_msg+0x95e/0xe90 [ 341.367390][ T9185] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.367405][ T9185] ? ref_tracker_free+0x37e/0x6c0 [ 341.367418][ T9185] netlink_rcv_skb+0x159/0x420 [ 341.367429][ T9185] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.367443][ T9185] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.367457][ T9185] ? netlink_deliver_tap+0x1ae/0xcc0 [ 341.367475][ T9185] netlink_unicast+0x65f/0x950 [ 341.367486][ T9185] ? __pfx_netlink_unicast+0x10/0x10 [ 341.367499][ T9185] netlink_sendmsg+0x8b0/0xda0 [ 341.367510][ T9185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.367522][ T9185] ? selinux_socket_sendmsg+0x198/0x2f0 [ 341.367539][ T9185] ____sys_sendmsg+0xa4d/0xbe0 [ 341.367560][ T9185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.367578][ T9185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.367604][ T9185] ___sys_sendmsg+0x190/0x1e0 [ 341.367620][ T9185] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.367635][ T9185] ? futex_wait+0x11e/0x370 [ 341.367650][ T9185] ? find_held_lock+0x2b/0x80 [ 341.367671][ T9185] __sys_sendmsg+0x160/0x210 [ 341.367683][ T9185] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.367702][ T9185] do_syscall_64+0x123/0x790 [ 341.367736][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.367755][ T9185] RIP: 0033:0x7f318eb9e559 [ 341.367770][ T9185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.367782][ T9185] RSP: 002b:00007f318f9cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.367794][ T9185] RAX: ffffffffffffffda RBX: 00007f318ee25fa0 RCX: 00007f318eb9e559 [ 341.367801][ T9185] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 000000000000000c [ 341.367808][ T9185] RBP: 00007f318ec35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 341.367815][ T9185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.367822][ T9185] R13: 00007f318ee26038 R14: 00007f318ee25fa0 R15: 00007fff622016d8 [ 341.367834][ T9185] [ 341.367838][ T9185] [ 341.367841][ T9185] Allocated by task 5600: [ 341.367847][ T9185] kasan_save_stack+0x30/0x50 [ 341.367861][ T9185] kasan_save_track+0x14/0x30 [ 341.367875][ T9185] __kasan_slab_alloc+0x89/0x90 [ 341.367889][ T9185] kmem_cache_alloc_lru_noprof+0x265/0x6a0 [ 341.367903][ T9185] __d_alloc+0x35/0xa50 [ 341.367912][ T9185] d_alloc_parallel+0x105/0x14c0 [ 341.367925][ T9185] lookup_open+0x6bb/0x1990 [ 341.367936][ T9185] path_openat+0x10a0/0x2450 [ 341.367951][ T9185] do_file_open+0x20e/0x430 [ 341.367966][ T9185] do_sys_openat2+0x10f/0x1e0 [ 341.367975][ T9185] __x64_sys_openat+0x12d/0x210 [ 341.367985][ T9185] do_syscall_64+0x123/0x790 [ 341.368000][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.368010][ T9185] [ 341.368012][ T9185] Freed by task 4958: [ 341.368017][ T9185] kasan_save_stack+0x30/0x50 [ 341.368031][ T9185] kasan_save_track+0x14/0x30 [ 341.368045][ T9185] kasan_save_free_info+0x3b/0x70 [ 341.368055][ T9185] __kasan_slab_free+0x5f/0x80 [ 341.368070][ T9185] kmem_cache_free+0x127/0x6c0 [ 341.368080][ T9185] rcu_core+0x5f0/0x1260 [ 341.368094][ T9185] handle_softirqs+0x1e6/0x9d0 [ 341.368105][ T9185] do_softirq+0xaf/0xf0 [ 341.368115][ T9185] __local_bh_enable_ip+0xff/0x120 [ 341.368126][ T9185] __alloc_skb+0x5db/0x710 [ 341.368135][ T9185] alloc_skb_with_frags+0xdd/0x760 [ 341.368146][ T9185] sock_alloc_send_pskb+0x801/0x980 [ 341.368162][ T9185] unix_dgram_sendmsg+0x3c7/0x1810 [ 341.368174][ T9185] __sys_sendto+0x48b/0x4e0 [ 341.368183][ T9185] __x64_sys_sendto+0xe0/0x1c0 [ 341.368197][ T9185] do_syscall_64+0x123/0x790 [ 341.368220][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.368237][ T9185] [ 341.368241][ T9185] Last potentially related work creation: [ 341.368248][ T9185] kasan_save_stack+0x30/0x50 [ 341.368270][ T9185] kasan_record_aux_stack+0xa7/0xc0 [ 341.368287][ T9185] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 341.368302][ T9185] dentry_free+0x152/0x2c0 [ 341.368317][ T9185] dentry_kill+0x5e8/0xc20 [ 341.368328][ T9185] dput.part.0+0xd7/0x240 [ 341.368339][ T9185] dput+0x1f/0x30 [ 341.368349][ T9185] step_into_slowpath+0xc53/0xf90 [ 341.368361][ T9185] path_openat+0xeef/0x2450 [ 341.368376][ T9185] do_file_open+0x20e/0x430 [ 341.368391][ T9185] do_sys_openat2+0x10f/0x1e0 [ 341.368400][ T9185] __x64_sys_openat+0x12d/0x210 [ 341.368409][ T9185] do_syscall_64+0x123/0x790 [ 341.368424][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.368434][ T9185] [ 341.368436][ T9185] The buggy address belongs to the object at ffff88805535e8d0 [ 341.368436][ T9185] which belongs to the cache dentry of size 312 [ 341.368445][ T9185] The buggy address is located 208 bytes inside of [ 341.368445][ T9185] freed 312-byte region [ffff88805535e8d0, ffff88805535ea08) [ 341.368455][ T9185] [ 341.368458][ T9185] The buggy address belongs to the physical page: [ 341.368463][ T9185] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5535e [ 341.368473][ T9185] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 341.368481][ T9185] memcg:ffff88805535fed9 [ 341.368486][ T9185] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 341.368496][ T9185] page_type: f5(slab) [ 341.368506][ T9185] raw: 00fff00000000040 ffff88801eab13c0 dead000000000100 dead000000000122 [ 341.368516][ T9185] raw: 0000000000000000 0000000200150015 00000000f5000000 ffff88805535fed9 [ 341.368526][ T9185] head: 00fff00000000040 ffff88801eab13c0 dead000000000100 dead000000000122 [ 341.368536][ T9185] head: 0000000000000000 0000000200150015 00000000f5000000 ffff88805535fed9 [ 341.368546][ T9185] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 341.368555][ T9185] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 341.368562][ T9185] page dumped because: kasan: bad access detected [ 341.368567][ T9185] page_owner tracks the page as allocated [ 341.368571][ T9185] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5604, tgid 5604 (syz-executor), ts 69726382339 [ 341.368590][ T9185] post_alloc_hook+0xfd/0x120 [ 341.368601][ T9185] get_page_from_freelist+0x110d/0x35d0 [ 341.368613][ T9185] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 341.368625][ T9185] new_slab+0xa9/0x6e0 [ 341.368635][ T9185] refill_objects+0xe3/0x410 [ 341.368646][ T9185] __pcs_replace_empty_main+0x35e/0x650 [ 341.368657][ T9185] kmem_cache_alloc_lru_noprof+0x4c0/0x6a0 [ 341.368671][ T9185] __d_alloc+0x35/0xa50 [ 341.368680][ T9185] d_alloc+0x4a/0x1e0 [ 341.368688][ T9185] lookup_one_qstr_excl+0x171/0x250 [ 341.368699][ T9185] start_dirop+0x59/0xb0 [ 341.368712][ T9185] simple_start_creating+0xf9/0x110 [ 341.368732][ T9185] debugfs_start_creating.part.0+0x7b/0x150 [ 341.368749][ T9185] __debugfs_create_file+0xa9/0x500 [ 341.368768][ T9185] debugfs_create_file_short+0x41/0x60 [ 341.368789][ T9185] ieee80211_debugfs_recreate_netdev+0x2e5/0x1790 [ 341.368814][ T9185] page last free pid 1 tgid 1 ts 15807278676 stack trace: [ 341.368822][ T9185] free_pages_prepare+0x586/0xe00 [ 341.368835][ T9185] __free_contig_range_common+0x14f/0x250 [ 341.368852][ T9185] destroy_args+0xa8/0x7a0 [ 341.368875][ T9185] debug_vm_pgtable+0x1d69/0x3490 [ 341.368897][ T9185] do_one_initcall+0x11c/0x6f0 [ 341.368915][ T9185] kernel_init_freeable+0x6ea/0x7b0 [ 341.368931][ T9185] kernel_init+0x21/0x1e0 [ 341.368941][ T9185] ret_from_fork+0x730/0xd60 [ 341.368953][ T9185] ret_from_fork_asm+0x1a/0x30 [ 341.368964][ T9185] [ 341.368967][ T9185] Memory state around the buggy address: [ 341.368972][ T9185] ffff88805535e880: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 341.368980][ T9185] ffff88805535e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 341.368987][ T9185] >ffff88805535e980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 341.368993][ T9185] ^ [ 341.368999][ T9185] ffff88805535ea00: fb fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 [ 341.369007][ T9185] ffff88805535ea80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 341.369013][ T9185] ================================================================== [ 341.369035][ T9185] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 342.635505][ T9185] CPU: 1 UID: 0 PID: 9185 Comm: syz.5.623 Not tainted syzkaller #0 PREEMPT(full) [ 342.644673][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 342.654705][ T9185] Call Trace: [ 342.657959][ T9185] [ 342.660864][ T9185] dump_stack_lvl+0x100/0x190 [ 342.665522][ T9185] vpanic+0x553/0x970 [ 342.669478][ T9185] ? __pfx_vpanic+0x10/0x10 [ 342.673951][ T9185] ? mark_held_locks+0x40/0x70 [ 342.678686][ T9185] ? irqentry_exit+0x24d/0xa10 [ 342.683427][ T9185] ? _raw_spin_lock+0x2e/0x40 [ 342.688079][ T9185] panic+0xd1/0xe0 [ 342.691773][ T9185] ? __pfx_panic+0x10/0x10 [ 342.696165][ T9185] check_panic_on_warn.cold+0x19/0x34 [ 342.701511][ T9185] end_report.part.0+0x3a/0x90 [ 342.706275][ T9185] kasan_report.cold+0xe/0x18 [ 342.710937][ T9185] ? _raw_spin_lock+0x2e/0x40 [ 342.715588][ T9185] ? _raw_spin_lock+0x2e/0x40 [ 342.720246][ T9185] __kasan_check_byte+0x36/0x50 [ 342.725079][ T9185] lock_acquire+0x132/0x380 [ 342.729556][ T9185] ? lock_acquire+0x1d1/0x380 [ 342.734213][ T9185] _raw_spin_lock+0x2e/0x40 [ 342.738688][ T9185] ? lockref_get+0x15/0x50 [ 342.743084][ T9185] lockref_get+0x15/0x50 [ 342.747305][ T9185] __simple_recursive_removal+0x3d/0x5c0 [ 342.752915][ T9185] ? __pfx_remove_one+0x10/0x10 [ 342.757737][ T9185] ? mntput+0x70/0xa0 [ 342.761693][ T9185] debugfs_remove+0x5d/0x80 [ 342.766181][ T9185] ieee80211_sta_debugfs_remove+0x38/0x80 [ 342.771880][ T9185] __sta_info_destroy_part2+0x318/0x510 [ 342.777412][ T9185] __sta_info_flush+0x4f6/0x720 [ 342.782241][ T9185] ? __pfx___sta_info_flush+0x10/0x10 [ 342.787593][ T9185] ? linkwatch_schedule_work+0x16f/0x1a0 [ 342.793207][ T9185] ? linkwatch_fire_event+0x74/0x270 [ 342.798470][ T9185] ieee80211_ibss_disconnect+0x195/0xbc0 [ 342.804079][ T9185] ieee80211_ibss_leave+0x4a/0x160 [ 342.809162][ T9185] cfg80211_leave_ibss+0x1ab/0x490 [ 342.814263][ T9185] cfg80211_leave_locked+0x1ad/0x470 [ 342.819524][ T9185] cfg80211_leave+0x5d/0x90 [ 342.824001][ T9185] cfg80211_netdev_notifier_call+0x30c/0x1140 [ 342.830042][ T9185] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 342.836518][ T9185] ? do_raw_spin_lock+0x128/0x260 [ 342.841521][ T9185] ? __lock_acquire+0x5c0/0x1f40 [ 342.846438][ T9185] ? debug_object_assert_init+0x1c4/0x310 [ 342.852128][ T9185] ? __pfx_debug_object_assert_init+0x10/0x10 [ 342.858164][ T9185] ? __lock_acquire+0x5c0/0x1f40 [ 342.863086][ T9185] ? find_held_lock+0x2b/0x80 [ 342.867739][ T9185] ? __lock_acquire+0x5c0/0x1f40 [ 342.872649][ T9185] ? lock_acquire+0x1d1/0x380 [ 342.877297][ T9185] ? wireless_nlevent_flush+0x1b/0x100 [ 342.882733][ T9185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.888604][ T9185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.894469][ T9185] ? inetdev_event+0x149/0x17f0 [ 342.899291][ T9185] ? igmp_netdev_event+0x7b/0x880 [ 342.904288][ T9185] ? __pfx_igmp_netdev_event+0x10/0x10 [ 342.909718][ T9185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.915583][ T9185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.921449][ T9185] ? ipmr_device_event+0x1c4/0x230 [ 342.926535][ T9185] notifier_call_chain+0x99/0x3f0 [ 342.931536][ T9185] call_netdevice_notifiers_info+0xbe/0x110 [ 342.937404][ T9185] __dev_close_many+0xff/0x710 [ 342.942152][ T9185] ? queue_work_on+0x11b/0x1e0 [ 342.946887][ T9185] ? __pfx___dev_close_many+0x10/0x10 [ 342.952233][ T9185] ? __local_bh_enable_ip+0xa5/0x120 [ 342.957491][ T9185] __dev_change_flags+0x307/0x850 [ 342.962486][ T9185] ? __pfx___dev_change_flags+0x10/0x10 [ 342.968001][ T9185] ? __pfx_validate_linkmsg+0x10/0x10 [ 342.973354][ T9185] netif_change_flags+0x8d/0x160 [ 342.978266][ T9185] do_setlink.isra.0+0x1ac4/0x3e60 [ 342.983350][ T9185] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 342.988779][ T9185] ? __lock_acquire+0x5c0/0x1f40 [ 342.993700][ T9185] ? do_raw_spin_lock+0x128/0x260 [ 342.998697][ T9185] ? find_held_lock+0x2b/0x80 [ 343.003349][ T9185] ? debug_mutex_remove_waiter+0xa0/0x320 [ 343.009043][ T9185] ? debug_mutex_remove_waiter+0xa0/0x320 [ 343.014755][ T9185] ? mark_held_locks+0x40/0x70 [ 343.019502][ T9185] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 343.025295][ T9185] ? __mutex_lock+0x829/0x1bd0 [ 343.030040][ T9185] ? lockdep_hardirqs_on+0x7d/0x110 [ 343.035218][ T9185] ? __mutex_lock+0x829/0x1bd0 [ 343.039970][ T9185] ? __mutex_lock+0x26c/0x1bd0 [ 343.044721][ T9185] ? rtnl_newlink+0xac3/0x2620 [ 343.049460][ T9185] ? __pfx___mutex_lock+0x10/0x10 [ 343.054459][ T9185] ? rcu_is_watching+0x13/0xc0 [ 343.059198][ T9185] ? cap_capable+0x107/0x430 [ 343.063771][ T9185] rtnl_newlink+0x1dc4/0x2620 [ 343.068430][ T9185] ? __pfx_rtnl_newlink+0x10/0x10 [ 343.073425][ T9185] ? avc_has_perm_noaudit+0x56/0x470 [ 343.078683][ T9185] ? find_held_lock+0x2b/0x80 [ 343.083338][ T9185] ? avc_has_perm_noaudit+0x11e/0x470 [ 343.088681][ T9185] ? avc_has_perm_noaudit+0x11e/0x470 [ 343.094028][ T9185] ? __lock_acquire+0x5c0/0x1f40 [ 343.098943][ T9185] ? lock_acquire+0x1d1/0x380 [ 343.103590][ T9185] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 343.108681][ T9185] ? find_held_lock+0x2b/0x80 [ 343.113342][ T9185] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 343.118427][ T9185] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 343.123518][ T9185] ? __pfx_rtnl_newlink+0x10/0x10 [ 343.128515][ T9185] rtnetlink_rcv_msg+0x95e/0xe90 [ 343.133426][ T9185] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.138867][ T9185] ? ref_tracker_free+0x37e/0x6c0 [ 343.143873][ T9185] netlink_rcv_skb+0x159/0x420 [ 343.148608][ T9185] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.154040][ T9185] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.159306][ T9185] ? netlink_deliver_tap+0x1ae/0xcc0 [ 343.164574][ T9185] netlink_unicast+0x65f/0x950 [ 343.169309][ T9185] ? __pfx_netlink_unicast+0x10/0x10 [ 343.174563][ T9185] netlink_sendmsg+0x8b0/0xda0 [ 343.179295][ T9185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.184559][ T9185] ? selinux_socket_sendmsg+0x198/0x2f0 [ 343.190079][ T9185] ____sys_sendmsg+0xa4d/0xbe0 [ 343.194825][ T9185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.200078][ T9185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.205339][ T9185] ___sys_sendmsg+0x190/0x1e0 [ 343.209988][ T9185] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.215160][ T9185] ? futex_wait+0x11e/0x370 [ 343.219635][ T9185] ? find_held_lock+0x2b/0x80 [ 343.224291][ T9185] __sys_sendmsg+0x160/0x210 [ 343.228851][ T9185] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.233935][ T9185] do_syscall_64+0x123/0x790 [ 343.238502][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.244367][ T9185] RIP: 0033:0x7f318eb9e559 [ 343.248754][ T9185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.268340][ T9185] RSP: 002b:00007f318f9cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.276728][ T9185] RAX: ffffffffffffffda RBX: 00007f318ee25fa0 RCX: 00007f318eb9e559 [ 343.284671][ T9185] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 000000000000000c [ 343.292612][ T9185] RBP: 00007f318ec35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 343.300553][ T9185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.308494][ T9185] R13: 00007f318ee26038 R14: 00007f318ee25fa0 R15: 00007fff622016d8 [ 343.316445][ T9185] [ 343.319651][ T9185] Kernel Offset: disabled [ 343.323948][ T9185] Rebooting in 86400 seconds..