last executing test programs: 21m50.95542424s ago: executing program 32 (id=1251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000c80), 0x2e9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000c80)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000fc0)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000001000)={&(0x7f0000001040)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x6c}}}], 0x18}, 0x24000891) sendmsg$nl_xfrm(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xc, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x2, 0x4, 0x18}, [@lastused={0xc, 0xf, 0xfffffffffffffe0c}]}, 0xfc}}, 0x0) syz_usb_connect$uac1(0x3, 0xa8, &(0x7f0000000e40)=ANY=[@ANYBLOB="1201100100000010820556014000010203010902960003010080060904000000010100000a2401000036000201020924060206010a00020c24020103020500ff01600709240604020102000905240501060924030200010404220904010000100200000904010101010200000a24020209000400010409050109000003810b0725"], 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1a, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x80, 0x3}}]}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x110, 0x7f, 0x58, 0x0, 0x0, 0xdd}, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x3}, 0x18}}, 0x0) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000280), &(0x7f00000002c0)=@tcp6=r6, 0x2}, 0x20) epoll_create1(0x0) 18m5.374764451s ago: executing program 33 (id=1913): capset(&(0x7f00000006c0)={0x20071026}, &(0x7f0000000700)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) faccessat2(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x7, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_getattr(0x0, &(0x7f00000001c0)={0x38}, 0x38, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000081, 0xfa11, 0x4}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_io_uring_setup(0x6721, &(0x7f0000000080)={0x0, 0xbbb9, 0x200, 0x1, 0x2d6}, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000680)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0xc87c, 0x1, 0x1, 0x13, 0x0, r2}, 0x0, 0x4, 0x0, &(0x7f0000000200)) io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x17b}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x7}, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) userfaultfd(0x80001) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x102, 0x0) 17m50.095801375s ago: executing program 34 (id=1916): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000002c0)=0x6, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000380)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000580)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f00000005c0)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 9m48.318924402s ago: executing program 35 (id=4025): syz_clone(0x54018100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) r2 = add_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x504, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000980)={r3, 0x0, 0x5a}, &(0x7f00000009c0)=ANY=[@ANYBLOB=' nc=pkcs1'], 0x0, &(0x7f0000000a00)=""/90) syz_open_procfs(0x0, &(0x7f0000000a80)='net/ip6_tables_targets\x00') close(0x3) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000180)) 5m53.231883512s ago: executing program 36 (id=4500): connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000a40)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000019a40)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000019a80)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000019ac0)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffa, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000019bc0), 0x800001d, 0x1c) (fail_nth: 4) 4m51.295063886s ago: executing program 37 (id=4602): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x8811}}], 0x2, 0x40044) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sec/tomoyo/profile\x00', 0x81, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000480), 0x4) write(r2, &(0x7f00000002c0)='0-CONFIG=disabled\n', 0x12) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000300)=0x6) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000640), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) recvmmsg(r4, &(0x7f0000000680), 0x1011f, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000700)=0x8fa7, 0x4) listen(0xffffffffffffffff, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsopen(&(0x7f00000007c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4m32.912674655s ago: executing program 8 (id=4628): socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000140)={0x1, 0x1, 0x0, 0xfffe}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c00), &(0x7f0000000080), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000cc0)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000100)='%pB \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f00000005c0)) getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002b80)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f000001bb80)=0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f000001bbc0)={r3}, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f000001bc40)={'wlan1\x00', @random="0200ffffff8d"}) 4m31.976648056s ago: executing program 0 (id=4630): r0 = msgget(0x0, 0x4a) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20842, 0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x1846, 0x4000, 0x802, 0x2b1, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r6, &(0x7f0000001900)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f000001a900)=0x80000000000003) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f000001a940), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f000001a980)={0x7, {0xfffffff7, 0x7, 0x8, 0xd21b}, {0xfe5, 0x4, 0x101, 0x1ff}, {0x9, 0x9a9f}}) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/81) fanotify_init(0x200, 0x0) msgrcv(r0, &(0x7f00000008c0)={0x0, ""/4096}, 0x1008, 0x1, 0x1000) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, &(0x7f0000000300)='discard') io_uring_setup(0x9ab, &(0x7f0000000340)={0x0, 0x4ace, 0x4000, 0x2, 0x282}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 4m30.94113627s ago: executing program 8 (id=4633): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000380)={0xc, @multicast1, 0x4e21, 0x1, 'sed\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000f23a66731101d2b3f3ec8a1e2a2eadba25b919b2efc079bfd6d7055d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./config\x00', &(0x7f00000006c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r5, &(0x7f00000007c0)="aa", 0x1) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) getpid() 4m29.148475205s ago: executing program 38 (id=4633): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000380)={0xc, @multicast1, 0x4e21, 0x1, 'sed\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000f23a66731101d2b3f3ec8a1e2a2eadba25b919b2efc079bfd6d7055d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./config\x00', &(0x7f00000006c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r5, &(0x7f00000007c0)="aa", 0x1) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) getpid() 4m29.132881864s ago: executing program 0 (id=4635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001800050600000000000000"], 0x2c}}, 0x0) 4m29.077153846s ago: executing program 39 (id=4635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001800050600000000000000"], 0x2c}}, 0x0) 4m24.654734221s ago: executing program 1 (id=4643): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) open(&(0x7f0000002400)='./file1\x00', 0x0, 0x0) 4m24.081717597s ago: executing program 40 (id=4643): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) open(&(0x7f0000002400)='./file1\x00', 0x0, 0x0) 4m11.699694073s ago: executing program 41 (id=4651): r0 = fsopen(&(0x7f0000000100)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f00000002c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000192c0)=0x7) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000019400)=@generic={&(0x7f00000193c0)='./file0\x00'}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4, 0x1e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) 3m47.241916592s ago: executing program 42 (id=4664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000780)='./file0/../file0\x00') mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000008c0)='./file0\x00') mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000580)=0x7) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r2, &(0x7f0000001640)="8b", 0x11) 2m29.183452311s ago: executing program 6 (id=4783): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000200)={0x40, 0x23, 0xb4, {0xb4, 0x24, "5164b7d1f910fd02b496e625bad5618ea534c143e960a281303f3011b1f021821ff67034c1d9a49f5c3fc456069483782cd4a5776a25e5404e949981d4fd5fb99a8857f7b156d7eb4ca0b82ee976a9884710e1219eb7c8700b4ed8cfe442d4acbdbf28d21d008402ebaf2e88412545dbfd511c926d9ea9e7ec2dff15a6661b0345f40e21c35dd9b058107d674a468354bce19529ebed8d2695ad5fe4f42503aadab3cbf95cf42457e3a529275820bb12e4ab"}}, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x1c, {[@local=@item_4={0x3, 0x2, 0xa, "934e6c86"}, @global=@item_012={0x0, 0x1, 0x4}, @local=@item_4={0x3, 0x2, 0x1, "0e757749"}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_4={0x3, 0x2, 0x1, "d2eecb22"}, @main=@item_4={0x3, 0x0, 0xc, "4e138054"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x3, "f9261053"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x65, 0x9, 0x1, {0x22, 0xff4}}}}, &(0x7f0000000740)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xf9}, &(0x7f00000006c0)={0x20, 0x1, 0xf, "6716af2d8f8fc02aff498a1e182bfb"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xcd}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r2, 0x601, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2m23.95959447s ago: executing program 43 (id=4764): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) (fail_nth: 4) 2m23.204010901s ago: executing program 6 (id=4789): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019180)=0x80000000000003) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_io_uring_setup(0xf00, &(0x7f0000019340)={0x0, 0x595d, 0x10000, 0x0, 0x4e}, &(0x7f00000193c0)=0x0, &(0x7f0000019400)=0x0, &(0x7f0000019440)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000019480)=@IORING_OP_SEND={0x1a, 0x70, 0x0, 0xffffffffffffffff, &(0x7f0000019500), 0x0, 0x0, 0x20000044, 0x1, {0x0, 0x0, 0x4}}) io_uring_enter(r4, 0x203f, 0xfffffffd, 0x9, 0x0, 0x0) 2m22.085676398s ago: executing program 6 (id=4792): r0 = fsopen(&(0x7f0000000100)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f00000002c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000192c0)=0x7) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000019400)=@generic={&(0x7f00000193c0)='./file0\x00'}, 0x18) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4, 0x1e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) 2m19.589398899s ago: executing program 44 (id=4795): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x891f, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi5\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r4, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x0, 0x0) io_setup(0x5, &(0x7f0000019580)) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000195c0)={0x0, 0x2, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000019700)='./debug\x00', 0x1ff) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mount(0x0, &(0x7f0000019740)='./debug\x00', &(0x7f0000019780)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000197c0)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 2m15.930589664s ago: executing program 6 (id=4801): fsopen(&(0x7f0000000280)='ufs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) poll(0x0, 0x0, 0x4) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x25ca03) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000340)=[{&(0x7f00000003c0)='|', 0xfd}], 0xf, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='vuto_da_alloc', 0x0) 2m13.223747049s ago: executing program 6 (id=4803): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000000c0)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "6c404000000062cf004ab77f8437"}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019400)=0x7) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000019440), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000019480)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000194c0), 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x80, 0x401, 0x6, 0x6, 0x5, 0x401}, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f00000002c0)=[{0x40, 0x9, 0xfe, 0x6a66}, {0x30, 0x1, 0x1, 0xfffff034}, {0x6, 0x15, 0x0, 0xb}]}, 0x10) write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[], 0x33fe0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7", @ANYRESDEC], 0x0) 2m9.917523938s ago: executing program 6 (id=4806): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_gettime(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 2m3.793251831s ago: executing program 5 (id=4812): r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000000440)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019440)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000194c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000019540)='./mnt\x00', &(0x7f0000019580)='nfs4\x00', 0x0, &(0x7f00000195c0)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000019740)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000019780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x80) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x801) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0xcb, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe, 0x6}, 0x20) 2m2.595199789s ago: executing program 5 (id=4813): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x35, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003d55fc8089904a489cd4f010203010902230001020030050904e88001ffa57350082302af1a0201000905055a4d0f4cc860bc3099ab164907979703b180d816f5da5e0cc74a656c87f271c3a81fdde5b0d20222d534f337ea44c6687e03e4329b881681969eae7e76a54b0adb58c4ac75bd2fcd3d8941490c8d2acba464beea07075051844ccc34a8"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0xe8, 0x403, 0x89, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f00000002c0)={0x0, r1, r1, 0xffffffff, 0x9, '\x00', {0x10, 0x5, 0x7, 0x8, 0x1000, 0x6, 0x3, 0xff, {0x4, 0x7}, {0xa, 0xfffffeff}, {0x3, 0xb}, 0x4, 0x6, 0x7fff, 0xe, 0x2, 0x7, 0x5, 0xb, 0x4, 0x1, '\x00', 0x4, 0x7, 0x8001, 0x78}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r3, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001700090025ae700001dcdf25060000000800010003"], 0x1c}}, 0x4000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200008b5}, 0x24000880) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, r6, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x8800) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0xa0102}, 0xc, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000300804f19722be08e3d0e963db2507a04003e4f7026a49a5bbf90b2b5a4fa31bcfc90c7f8a6d6a3e99bcd1924f1c5fca28a5404f59774f93733", @ANYRES16=r6, @ANYBLOB="00042abd7000fedbdf250100000008"], 0x24}, 0x1, 0x0, 0x0, 0x2c00c055}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x0, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000e40)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "d6e4e5", "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"}}, 0x110) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x8000, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$nl_route_sched(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x5}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x401}]}}]}, 0x40}}, 0x4800) openat$sysfs(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/power/resume', 0x149a82, 0x51) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000001100)=ANY=[], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) 2m2.246767848s ago: executing program 8 (id=4788): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x1, 0x1000}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xc, &(0x7f0000000480)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000003c0), &(0x7f0000000400)=0x30) sendmmsg$unix(r5, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000440)=""/8, 0x8}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/43, 0x2b}, {&(0x7f0000001800)=""/64, 0x40}, {&(0x7f0000001840)=""/88, 0x58}, {&(0x7f00000018c0)=""/227, 0xe3}], 0x6, &(0x7f0000002140)=""/264, 0x108}, 0xfffffeff}, {{&(0x7f0000001b40)=@phonet, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001bc0)=""/219, 0xdb}, {&(0x7f0000001cc0)=""/183, 0xb7}, {&(0x7f0000001d80)=""/249, 0xf9}, {&(0x7f0000001e80)=""/115, 0x73}, {&(0x7f0000001f00)=""/42, 0x2a}, {&(0x7f0000001f40)=""/14, 0xe}], 0x6, &(0x7f0000002000)=""/134, 0x86}, 0x5}], 0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000500)='./bus\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x8, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) fchmodat(r8, &(0x7f0000000680)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x20, 0x0) ioctl$VIDIOC_S_EDID(r7, 0xc0285629, &(0x7f0000000700)={0x0, 0x5, 0x7, '\x00', &(0x7f0000000740)=0x9}) openat(r8, &(0x7f0000000780)='./file1\x00', 0x365443, 0x2f) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf250500000008000900020000"], 0x3c}}, 0x20000034) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}) lsetxattr$security_selinux(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 2m0.388039051s ago: executing program 0 (id=4796): r0 = fsopen(&(0x7f0000000100)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f00000002c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000192c0)=0x7) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4, 0x1e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) 1m58.925096281s ago: executing program 8 (id=4817): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000780)='./file0/../file0\x00') mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000008c0)='./file0\x00') mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000640)={r0, &(0x7f0000000540)='bond0\x00', 0x8200, &(0x7f00000005c0)={@_ha_fsid={[0x5, 0x9]}, {0x8, 0x8000, 0x8, 0x2}}, 0x0, &(0x7f0000000680)={@_ha_fsid}, &(0x7f0000000600)=0x80}) write(r2, &(0x7f0000001640)="8b", 0x11) 1m58.75465073s ago: executing program 0 (id=4818): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000780)='./file0/../file0\x00') mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000008c0)='./file0\x00') mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000580)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000640)={r0, &(0x7f0000000540)='bond0\x00', 0x8200, &(0x7f00000005c0)={@_ha_fsid={[0x5, 0x9]}, {0x8, 0x8000, 0x8, 0x2}}, 0x0, &(0x7f0000000680)={@_ha_fsid}, &(0x7f0000000600)=0x80}) write(r2, &(0x7f0000001640)="8b", 0x11) 1m57.135317294s ago: executing program 8 (id=4819): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) (fail_nth: 4) 1m56.724115283s ago: executing program 8 (id=4820): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x760, 0x7, 0x22b, 0x479d4059, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x67, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0x3, [0xc0b8]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r1, r2, 0x3, 0x1}, 0x50) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) write$cgroup_int(r3, 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, 0x0) syz_clone3(0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r5, &(0x7f0000000480)={0x7, 0x4d, 0x2}, 0xffffff28) 1m56.554379372s ago: executing program 45 (id=4820): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x760, 0x7, 0x22b, 0x479d4059, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x67, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0x3, [0xc0b8]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r1, r2, 0x3, 0x1}, 0x50) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) write$cgroup_int(r3, 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, 0x0) syz_clone3(0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r5, &(0x7f0000000480)={0x7, 0x4d, 0x2}, 0xffffff28) 1m55.78768964s ago: executing program 5 (id=4822): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000180)) rseq(0x0, 0x0, 0x0, 0x0) timer_getoverrun(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019b40)=0x4000007) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) shutdown(r3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, 0xffffffffffffffff, 0x8}}, 0x48) 1m54.001249824s ago: executing program 46 (id=4806): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_gettime(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 1m53.73005231s ago: executing program 5 (id=4824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000780)='./file0/../file0\x00') mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000008c0)='./file0\x00') mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000640)={r0, &(0x7f0000000540)='bond0\x00', 0x8200, &(0x7f00000005c0)={@_ha_fsid={[0x5, 0x9]}, {0x8, 0x8000, 0x8, 0x2}}, 0x0, &(0x7f0000000680)={@_ha_fsid}, &(0x7f0000000600)=0x80}) write(r2, &(0x7f0000001640)="8b", 0x11) 1m52.144132872s ago: executing program 0 (id=4825): epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000780)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000040)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000200)={0x1, 0x2}, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, r5, 0x0, 0x118}}}, 0x0) r6 = timerfd_create(0x2, 0x80000) timerfd_settime(r6, 0x3, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) 1m51.882018577s ago: executing program 5 (id=4827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000700)="6c0000001800050604000000000000000a400000fe040001000000001400010020010db800c0000000000000000000010c00080008000200dc05000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x6c) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'wlan0\x00', 0x1}) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000800)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1c, r2, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) 1m51.089070798s ago: executing program 0 (id=4828): syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) socket(0x10, 0x3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="0018010700"/20, @ANYRES32, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fsopen(&(0x7f0000000340)='overlay\x00', 0x1) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x1, 0x100) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='0\n\x00', 0x2) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000001c00), &(0x7f0000001c80)=0x0, &(0x7f0000001cc0)=0x0, &(0x7f0000001d00)=0x0) syz_io_uring_submit$UBLK(r6, r7, r8, &(0x7f0000001d40)=@ublk_get_queue_affinity_sqe={0x2e, 0x0, 0x0, r5, 0x80207501, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x8, &(0x7f0000001dc0)}}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, r8, &(0x7f0000001e80)=@IORING_OP_CONNECT={0x10, 0x78, 0x0, r3, 0x80, &(0x7f0000001e00)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x1}, 0x0, 0x0, 0x1, {0x0, r9}}) getdents64(r4, &(0x7f0000000600)=""/189, 0xbd) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r10, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, 0x0, &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0x101}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) 1m50.240665861s ago: executing program 47 (id=4828): syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) socket(0x10, 0x3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="0018010700"/20, @ANYRES32, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fsopen(&(0x7f0000000340)='overlay\x00', 0x1) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x1, 0x100) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='0\n\x00', 0x2) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000001c00), &(0x7f0000001c80)=0x0, &(0x7f0000001cc0)=0x0, &(0x7f0000001d00)=0x0) syz_io_uring_submit$UBLK(r6, r7, r8, &(0x7f0000001d40)=@ublk_get_queue_affinity_sqe={0x2e, 0x0, 0x0, r5, 0x80207501, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x8, &(0x7f0000001dc0)}}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, r8, &(0x7f0000001e80)=@IORING_OP_CONNECT={0x10, 0x78, 0x0, r3, 0x80, &(0x7f0000001e00)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x1}, 0x0, 0x0, 0x1, {0x0, r9}}) getdents64(r4, &(0x7f0000000600)=""/189, 0xbd) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r10, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, 0x0, &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0x101}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) 1m50.187841542s ago: executing program 5 (id=4830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) openat$nsim_dev_bool(0xffffff9c, 0x0, 0xa2040, 0x0) sendmsg$can_bcm(r4, 0x0, 0x0) r5 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ffd000/0x3000)=nil, 0x5000) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x1000, 0x4, 0x9, 0xe49c, r1, r1, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1m49.864521764s ago: executing program 48 (id=4830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) openat$nsim_dev_bool(0xffffff9c, 0x0, 0xa2040, 0x0) sendmsg$can_bcm(r4, 0x0, 0x0) r5 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ffd000/0x3000)=nil, 0x5000) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x1000, 0x4, 0x9, 0xe49c, r1, r1, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1m27.57037197s ago: executing program 4 (id=4841): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000440)='GPL\x00', 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = syz_socket_connect_nvme_tcp() ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r6, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) keyctl$get_persistent(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="e095a6b5a68afb2d0bf154ffffffffffffc08cfd6f10bb08004500fd8e00000202f500907800000015e00000010d00907800000000001000"/65], 0x0) syz_open_dev$vim2m(&(0x7f0000000700), 0x3, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5b}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)=@ipv4_getnetconf={0x24, 0x52, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x5, 0xe, 0x0, &(0x7f0000000580)="000000000000e0406c4300200000", 0x0, 0x6, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc}, 0x50) 1m27.474931292s ago: executing program 1 (id=4821): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]}) 1m27.243437453s ago: executing program 4 (id=4842): r0 = msgget(0x0, 0x4a) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20842, 0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x1846, 0x4000, 0x802, 0x2b1, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) sched_setaffinity(r5, 0x8, &(0x7f000001a900)=0x80000000000003) openat$vimc0(0xffffffffffffff9c, &(0x7f000001a940), 0x2, 0x0) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/81) fanotify_init(0x200, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, &(0x7f0000000300)='discard') io_uring_setup(0x9ab, &(0x7f0000000340)={0x0, 0x4ace, 0x4000, 0x2, 0x282}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1m27.230961009s ago: executing program 1 (id=4843): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002580)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000025c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002600)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xf) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e079c0814"], 0xa) (async) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x5, 0x8}, {0x4, 0x8, 0xfff8, 0xa}}}}, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8942) syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021ca00001010080fa0904030000010100000a240100010a00020102"], 0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) ioctl(r3, 0xc4c85513, &(0x7f0000000280)) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00009e6000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000440)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}}) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f00009df000/0x18000)=nil, &(0x7f00000024c0)=[@text64={0x40, &(0x7f0000002500)="670f7923430f217b66baf80cb888343a88ef66bafc0ced66baf80cb8c66b5086ef66bafc0c66ed0f987d08260f01c9b9a20100000f322666460f3880421d48b851080000000000000f23c80f21f835000080000f23f8c7442400cb000000c74424029e000000ff2c24", 0x69}], 0x1, 0x4, 0x0, 0x31) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m26.42124065s ago: executing program 4 (id=4844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x109802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000007b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000600)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4, 0x0, 0x0, 0x10000000bff, 0x1e, 0x0, 0x2d, 0x4d}) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x5) r5 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x802) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="000400000500000008"]) writev(r4, &(0x7f0000000300)=[{&(0x7f0000001340)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) 1m25.14485163s ago: executing program 1 (id=4845): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000780)='./file0/../file0\x00') mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000008c0)='./file0\x00') mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000580)=0x7) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000640)={r0, &(0x7f0000000540)='bond0\x00', 0x8200, &(0x7f00000005c0)={@_ha_fsid={[0x5, 0x9]}, {0x8, 0x8000, 0x8, 0x2}}, 0x0, &(0x7f0000000680)={@_ha_fsid}, &(0x7f0000000600)=0x80}) write(r2, &(0x7f0000001640)="8b", 0x11) 1m23.63961721s ago: executing program 1 (id=4846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000192c0)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000019500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000019580)={0x6, 0xf, &(0x7f0000019640)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000196c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019700)={r5, r3, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0xfdef, &(0x7f0000019740)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x7}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r8, &(0x7f0000000240)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x47, &(0x7f0000019240)=0x7) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019280)={&(0x7f00000192c0)=ANY=[], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000194c0)='fd/3\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019300)=@bpf_ext={0x1a, 0x3, &(0x7f0000019480)=ANY=[@ANYBLOB="18000a004f0c000000000000fcffffff9500000000000000a6d8425b700b68ff86a3a49e"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000019400)={'sit0\x00', &(0x7f0000019440)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x3, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x64010102}}}}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 1m2.178930703s ago: executing program 1 (id=4848): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = gettid() prlimit64(r0, 0x7, &(0x7f0000000040)={0x6, 0x6}, &(0x7f00000191c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000019200)={0x0, r0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000019280)={{r1, 0xffffffffffffffff}, &(0x7f00000192c0), &(0x7f0000019300)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000019500)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019540)={0xc, 0x11, &(0x7f0000019600)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000196c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019700)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000019780)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x6a) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r7, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f0000019180)=0x80000000000003) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0xf00, &(0x7f0000019340)={0x0, 0x595d, 0x10000, 0x0, 0x4e}, &(0x7f00000193c0), &(0x7f0000019400), &(0x7f0000019440)) 1m2.17857867s ago: executing program 49 (id=4848): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = gettid() prlimit64(r0, 0x7, &(0x7f0000000040)={0x6, 0x6}, &(0x7f00000191c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000019200)={0x0, r0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000019280)={{r1, 0xffffffffffffffff}, &(0x7f00000192c0), &(0x7f0000019300)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000019500)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019540)={0xc, 0x11, &(0x7f0000019600)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000196c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019700)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000019780)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x6a) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r7, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f0000019180)=0x80000000000003) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0xf00, &(0x7f0000019340)={0x0, 0x595d, 0x10000, 0x0, 0x4e}, &(0x7f00000193c0), &(0x7f0000019400), &(0x7f0000019440)) 1m2.15744146s ago: executing program 4 (id=4858): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendto$packet(r0, &(0x7f00000005c0)="ffffffffffff0211223344550806000108000604000243054305123400123400ff4305029afe00000000", 0x2a, 0x0, &(0x7f0000000600)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000780)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6) ppoll(&(0x7f0000000980)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000009c0)='./pipefs\x00', &(0x7f0000000a00)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a40)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000ac0)='127.0.0.1:/\x00', &(0x7f0000000b00)='./mnt\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,timeo=1']) r7 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) read(r7, 0x0, 0x0) write(r7, &(0x7f0000000c00), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 55.421404237s ago: executing program 4 (id=4867): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='exfat\x00', 0x8080, &(0x7f0000000440)='discard') (fail_nth: 4) 51.281361786s ago: executing program 4 (id=4874): r0 = syz_clone3(&(0x7f0000000680)={0x40001000, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x7}, &(0x7f00000004c0)=""/208, 0xd0, &(0x7f00000005c0)=""/96, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) prlimit64(r0, 0xa, &(0x7f0000000140)={0x7, 0x7}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1000000000000000140100000700000021401f43450f8d41dcf73d97052ebd3a06aee37708947f390b2d7a942999329c0d0ae070feb7440c3b2cc4ddfc9efd0f97365b52d43d0a2d86b6cb3e1f9e50fe835dafa303f1f61561c70449bd5022d46285c74979050000000000000005"], 0x10}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000100)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) r5 = io_uring_setup(0x178e, &(0x7f0000000280)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000340)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f00000003c0)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001) 42.29051168s ago: executing program 3 (id=4890): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000f80)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f0000001000)=0x14) (fail_nth: 4) 41.409732246s ago: executing program 3 (id=4892): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000000c0)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "6c404000000062cf004ab77f8437"}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019400)=0x7) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000019440), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000019480)={0x1, 0x1}, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x80, 0x401, 0x6, 0x6, 0x5, 0x401}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x33fe0) 39.693329134s ago: executing program 3 (id=4893): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="f8", 0x1, 0xfffffffffffffffe) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) r2 = socket$inet6(0xa, 0x5, 0x6) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000380)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendmmsg(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000002c0)}, {&(0x7f00000003c0)="4727e94cc5c96f906af6460708ff7e5d23f55790ae2a8984b5205a", 0x1b}, {&(0x7f0000004880)="0c3124bebd46208688c7e289dec1683cd7a5c483efa87d1cf9cd1be2a7234d203453f1c343ef1c1d1b50caa879c4b2007b05ffc996cfffa63d059c48ad109a8d1c068553f3d67e75aba16b3fe1db361e0ae3fab3b6616276225ac4d78fc995ec673d23839516d14da9de168c841d1dc8a55c20d648e3d6f39e58b9ff23cba00293dc82b193d23a266bcd5465366a146b6e476cb1c0904a9120e7fbd9de9b8df58e249d5866ae85ebbbca0f1cf31b72f0b6c5fdc6a5404bdd27d64d406980a425f0a85ee912e4ad", 0xc7}, {&(0x7f0000004980)="43078e4f32844f261278733e9b70bac70938fdedd07844d5ded5b559434f01714fbc5d266a70535415d2a1e682ae407394dec4b805b99626054e758618f7df052e126c748dacf290f1231e7a6ba921500504cbbe9a78b36f842ab1ef76937fc028db85168c78327786951cfd47d59309b294f086d0e5f7163731f2ee7e09147e77011cf559110520980e0f", 0x8b}], 0x4, &(0x7f0000004c00)}}], 0x1, 0x80) r4 = syz_create_resource$binfmt(&(0x7f0000000400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000480)='./file0\x00'}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x1030800, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d30f8303030303030303030303030303430302c626c6b73697a653d3078303030303030303030303030303630302c64656661756c745f7005726d697373696f6e732c00"]) read$FUSE(r5, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000002640)="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", 0x2000, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004740)={0x50, 0x0, r6, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x7}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000047c0)='./file0\x00', 0x40042, 0xc2) connect$inet(0xffffffffffffffff, &(0x7f0000004800)={0x2, 0xce20, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r7 = openat(0xffffffffffffff9c, &(0x7f0000004840)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r7, 0xa64c000) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x3d) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r8, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4880) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r9, 0x5e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 36.142731601s ago: executing program 50 (id=4874): r0 = syz_clone3(&(0x7f0000000680)={0x40001000, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x7}, &(0x7f00000004c0)=""/208, 0xd0, &(0x7f00000005c0)=""/96, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) prlimit64(r0, 0xa, &(0x7f0000000140)={0x7, 0x7}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1000000000000000140100000700000021401f43450f8d41dcf73d97052ebd3a06aee37708947f390b2d7a942999329c0d0ae070feb7440c3b2cc4ddfc9efd0f97365b52d43d0a2d86b6cb3e1f9e50fe835dafa303f1f61561c70449bd5022d46285c74979050000000000000005"], 0x10}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000100)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) r5 = io_uring_setup(0x178e, &(0x7f0000000280)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000340)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f00000003c0)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001) 31.625122606s ago: executing program 3 (id=4906): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000780)='./file0/../file0\x00') mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000580)=0x7) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000640)={r0, &(0x7f0000000540)='bond0\x00', 0x8200, &(0x7f00000005c0)={@_ha_fsid={[0x5, 0x9]}, {0x8, 0x8000, 0x8, 0x2}}, 0x0, &(0x7f0000000680)={@_ha_fsid}, &(0x7f0000000600)=0x80}) write(r2, &(0x7f0000001640)="8b", 0x11) 30.310408337s ago: executing program 3 (id=4909): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000200)={0x40, 0x23, 0xb4, {0xb4, 0x24, "5164b7d1f910fd02b496e625bad5618ea534c143e960a281303f3011b1f021821ff67034c1d9a49f5c3fc456069483782cd4a5776a25e5404e949981d4fd5fb99a8857f7b156d7eb4ca0b82ee976a9884710e1219eb7c8700b4ed8cfe442d4acbdbf28d21d008402ebaf2e88412545dbfd511c926d9ea9e7ec2dff15a6661b0345f40e21c35dd9b058107d674a468354bce19529ebed8d2695ad5fe4f42503aadab3cbf95cf42457e3a529275820bb12e4ab"}}, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x1c, {[@local=@item_4={0x3, 0x2, 0xa, "934e6c86"}, @global=@item_012={0x0, 0x1, 0x4}, @local=@item_4={0x3, 0x2, 0x1, "0e757749"}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_4={0x3, 0x2, 0x1, "d2eecb22"}, @main=@item_4={0x3, 0x0, 0xc, "4e138054"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x3, "f9261053"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x65, 0x9, 0x1, {0x22, 0xff4}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x20, 0x0, 0x81, "ad03ea2660758125cb636107ab3ec8327565e8d9783db402ce6e62c8907b868204b109bd328cde55ab6467e4642872fd342456395afabf72874f8e51bbbe4abd2ce970fe5b05d82b29be89f3c0bc579bad0fb68501a19410fa7674194dc7bc9467e067822b1ee583fa9cb692315d98a14276ca6c6899655f6bd24a5484f0f47b02"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xf9}, &(0x7f00000006c0)={0x20, 0x1, 0xf, "6716af2d8f8fc02aff498a1e182bfb"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xcd}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r2, 0x601, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 28.405187046s ago: executing program 3 (id=4911): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x2c, 0x803, 0x8005) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000200)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000019200)=0x80000000000003) pipe(&(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000019280)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000192c0)={0x0, 0x0, &(0x7f0000019300)={0x0, 0x3c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000019340)='./file0\x00', 0x40, 0x16f) r6 = syz_open_dev$dri(&(0x7f0000019380), 0x0, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000019440), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000019480)={0x20004, 0xffffffffffffffff, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000194c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000019500)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000180)=0x2, 0x4) 27.710158232s ago: executing program 51 (id=4911): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x2c, 0x803, 0x8005) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000200)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000019200)=0x80000000000003) pipe(&(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000019280)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000192c0)={0x0, 0x0, &(0x7f0000019300)={0x0, 0x3c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000019340)='./file0\x00', 0x40, 0x16f) r6 = syz_open_dev$dri(&(0x7f0000019380), 0x0, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000019440), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000019480)={0x20004, 0xffffffffffffffff, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000194c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000019500)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000180)=0x2, 0x4) 18.187089481s ago: executing program 2 (id=4930): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x0, 0xff, 0x2, 0x800, 0xa4}, &(0x7f0000000840)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000700)) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x2, 0x2) syz_open_dev$vim2m(&(0x7f0000000800), 0x7, 0x2) pipe(0x0) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000900)="580000001400", 0x6}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000940), 0xfef0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0xfffffffffffffe5a, r5, 0x72b}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff1}, {0xffff, 0xc}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1203000000000010700c0af0000000000001090224000100005000090400000903000000092100000001222b00090581030000000200"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000500)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000580)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4010200}, 0xc, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="200029bd7000fbdbdf2501000000000000000b000000000c001473797a3000000000c29bd65782f034e27cc2a82db1e3522c050000002bde9e14042391f7a287"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socket(0x1e, 0x800, 0xb988) 15.727445903s ago: executing program 7 (id=4934): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000780)='./file0/../file0\x00') pivot_root(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000008c0)='./file0\x00') mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000580)=0x7) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000640)={r0, &(0x7f0000000540)='bond0\x00', 0x8200, &(0x7f00000005c0)={@_ha_fsid={[0x5, 0x9]}, {0x8, 0x8000, 0x8, 0x2}}, 0x0, &(0x7f0000000680)={@_ha_fsid}, &(0x7f0000000600)=0x80}) write(r2, &(0x7f0000001640)="8b", 0x11) 14.355582997s ago: executing program 7 (id=4935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000240)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) mkdir(0x0, 0x1ff) r5 = socket(0x1e, 0x1, 0x0) recvfrom$unix(r5, &(0x7f0000000380)=""/242, 0xf2, 0x10000, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r6, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00', 0x1000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 13.2731938s ago: executing program 7 (id=4936): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x22a1d, 0xffb3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000019980)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000199c0)={0x0, 0x0, r1, 0x0, 0x80000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000019a80)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, 0x0, &(0x7f0000000180)=@udp}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000280), &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./tracing\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000019500)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019540)={0x0, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x15c, 0x0, 0xfffffffffffffffc, 0x8000000000000e, 0xd6}) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019600)='./proc\x00', &(0x7f0000019640)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019680)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x23d1) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f00000196c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019700)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a0000000705821f000200070503"], 0x0) 12.255048034s ago: executing program 9 (id=4938): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000000c0)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "6c404000000062cf004ab77f8437"}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019400)=0x7) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x80, 0x401, 0x6, 0x6, 0x5, 0x401}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x33fe0) 12.226342962s ago: executing program 2 (id=4939): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000c00), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000c40)={{0x0, 0x2, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xf2b, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x2000200d}) waitid(0x0, 0x0, 0x0, 0xe, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="7400000010000104fcffffff8100000000000000", @ANYRES32, @ANYBLOB="03150000000000004c0012800c0001006d6163766c616e003c0002800a0004"], 0x74}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000050) sendmsg$nl_route(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@getneigh={0x14, 0x1e, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048840}, 0x14000800) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r8, &(0x7f00000009c0)=[{{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/248, 0xf8}], 0x2, &(0x7f0000000540)=""/153, 0x99}, 0x8b}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/198, 0xc6}], 0x1}, 0x7}, {{&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f0000000900)=""/96, 0x60}], 0x2}, 0xfffffffe}], 0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a0400000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x3f, 0x0, 0x1928d16a40760627}, 0x20000800) 11.188795825s ago: executing program 9 (id=4940): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[], 0x24}}, 0x0) close(r1) sendto$inet6(0xffffffffffffffff, &(0x7f00000008c0)="8b", 0x34000, 0x0, &(0x7f0000000900)={0xa, 0x0, 0x0, @private1}, 0x1c) 10.576454498s ago: executing program 2 (id=4941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9.523312625s ago: executing program 2 (id=4942): syz_usb_connect(0x3, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905073e"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x400, 0x7ffffffe, @mcast1, 0xa8a9}, r1, 0x2}}, 0x48) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000003c0)=0x6) r5 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r7, &(0x7f0000001240)=""/102392, 0x18ff8) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f000001a240), 0x88b02, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000001a280)={0x20, 0x3, &(0x7f000001a340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f000001a380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20099ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f000001a3c0)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f000001a400), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r9, 0x5453, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f00000002c0), r2, r0}}, 0x18) syz_emit_vhci(&(0x7f0000001200)=ANY=[@ANYBLOB="040e44840210"], 0x47) 8.028101197s ago: executing program 9 (id=4943): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = gettid() prlimit64(r0, 0x7, &(0x7f0000000040)={0x6, 0x6}, &(0x7f00000191c0)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000019200)={0x0, r0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000019280)={{r1, 0xffffffffffffffff}, &(0x7f00000192c0), &(0x7f0000019300)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000019500)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019540)={0xc, 0x11, &(0x7f0000019600)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000196c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019700)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000019780)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x6a) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r7, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f0000019180)=0x80000000000003) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000019480)=@IORING_OP_SEND={0x1a, 0x70, 0x0, 0xffffffffffffffff, &(0x7f0000019500), 0x0, 0x0, 0x20000044, 0x1, {0x0, 0x0, 0x4}}) 6.78317596s ago: executing program 9 (id=4944): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000008c0)='./file0\x00') mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000580)=0x7) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000640)={r0, &(0x7f0000000540)='bond0\x00', 0x8200, &(0x7f00000005c0)={@_ha_fsid={[0x5, 0x9]}, {0x8, 0x8000, 0x8, 0x2}}, 0x0, &(0x7f0000000680)={@_ha_fsid}, &(0x7f0000000600)=0x80}) write(r2, &(0x7f0000001640)="8b", 0x11) 5.885305799s ago: executing program 7 (id=4945): mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000d00)='./dev\x00', &(0x7f0000000d40)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./mnt\x00', 0x1ff) mount(&(0x7f0000000dc0)=@filename='./dev/sda1\x00', &(0x7f0000000e00)='./mnt\x00', &(0x7f0000000e40)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000e80)='./mnt\x00', &(0x7f0000000ec0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) (fail_nth: 4) 5.660108734s ago: executing program 7 (id=4946): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x20002, 0x80) ioctl(r1, 0x9, &(0x7f0000000180)) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c9f7b98600"/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x9f22) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001780)='./debug/lru_gen\x00', 0x2, 0x0) write(r4, &(0x7f00000017c0)='+ 0 0 1', 0x7) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x66, 0xc, "284e6a573b9873e74042f9cb9f59df9e5585646b3b969bbf6c238e23a317918f0dff62757dcf4dd82da4b2cce254277e907607cc07f8131839d5409f069b00a810e4b5d8e38c3b4d45da089ac8a807415d8456ce00b31269abf44d09c04936a95330"}]}], {0x14}}, 0x110}}, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000001740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={0x1014, 0xe, 0xb, 0x548676b3daaa119a, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x1}, [@generic="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"]}, 0x1014}}, 0x0) 4.305070825s ago: executing program 7 (id=4947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010010000000000000000500000a20000000000a05040000000000000054d77fc998a9dc1b4f61518b0005000000090001007379000100"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000030a0504000000000000000005000000090001300000000008000a4000000002280004800800140003006e657464657673696d3000000000000014000000110001000000000012f00d7247cc000000100500000a00"/118], 0x84}}, 0x0) r1 = socket(0x1, 0x5, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, &(0x7f0000000600)={0x0}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x20, 0x81, 0x3, 0xfffffffd}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a050c0000000000000000050d0000090001000073797a30000000004000048024000180090001006d6574610000000014000280080002400000000408000140000000211800018008000100667764000c000280080001400000000114000000110001000000000000000000506de38a00"/148], 0x94}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000480)=0x100000001, 0x4) connect(r2, &(0x7f0000000680)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x8000, @dev={0xfe, 0x80, '\x00', 0x35}, 0x4}}, 0x80) copy_file_range(r0, 0x0, r2, &(0x7f00000004c0)=0x8, 0x7fffffff, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000700)={0x7ff, 0x3, 0x1, 'queue0\x00', 0x7b972f08}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000640)={0x200001fe0000, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x2000002, 0x2013, r6, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x4}, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) sendmsg$nl_generic(r1, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001880)={&(0x7f0000002d80)={0x219c, 0x28, 0x20, 0x70bd29, 0x25dfdbfb, {0x16}, [@generic="1d0856a24158741dd001f1928abe9225e8b27b3a48954e683b5d41f2132239dc1cf294e6659ccebce44f5178edf64f5e5fbc3339cd8c34463977f912b6d26f80088f5cfe845662ab14b9aa8ceab5b3fb9cce2d574b9053d2be9eef61a469ea793e76aa483b1e31f2d983a983391f5584f2f3c9", @typed={0xc, 0x10c, 0x0, 0x0, @u64=0x4}, @generic="f3bba6c2a9e5a846d4ce2086166d06346944554e3110f62883bde2d0b6d45b7980c52c507258948144a004cb2ae84738269c2df318d3efa51c5eae9b17746f9faa15c3e847ad4a105e4027249cd9c7501f25c17cbf3999a2786771eac7c68c71cb376fce594a27979f9c0f415d1cb58903b93bd0a6087a5c1102629de5ad8b5edcc0487ffe3724caa2eb0eb3608deca3ab67de5dcec0bae1bab74f0c1640c2411df4e96669a6b797849efca8a189b226bd1bb7150253bcb0f67374aa6812e706f94a59ad9d44cc2c4883e9384f9b519ae021d9cb3daae5cd68a35e84056f2485fc8eca7856a04bd47a7d35c0c5a1ae89c12b8f74b3261462a740760f865f033509cbbc56bba400ebaecea2bb14e38875085544508b6cf315edfe2a4e38f76321638f7b40e10c83f202e5c42d0a3fc0f5d8bdc8c2552d7fd154595d1615ed77c282a8505e009c3d2a2225bad18f5b29fbd8c80f2513e1817854b39c8f60089e1b279eee59259c55e904caf3e604f2bd796251ff8ba25d45fc41456bca94f46ea3b65e88a15497b4bce54d8816a42ce8a6522063d4a6e9b3183a2828d0cf73b9142887724d8b2d3f5d3114574d6d7498e78b5ab0d19ca337ce58a38f1e658540a3ac7eac2f411cf11dea6ea905032fb3793c984521f9b4365666bba0f18ef2dcaa0efdf2dabdd035a4608d8b10ff3fb8bad465ca27ba49b36e0e57992755ac074b577e10dec62b130ab206a03243c02c8f6a5004344fcd5bd25b2fd732171367ded8b469fefb1757a9c9e99bf97c8f43f474354e193043b0eddd7b233ad7527bde26ca974b6cd9679e26d84c50df1172fd6ce85583171fe31e01f259719fc7101cb67f8ab80abb285646753ab2fd663d08607cec20691bc4d8a6e69aa9bb606c3d3f8fa172e337de8a9d451196b3db2c943fe451a174443dd11a93e9a08b13cc93bb1608aa81f1f91158624cc5a997c4d839e903328724d0b8c5a2fe1f14fae6631efa28091bc33ad76a67e5ed3a1b0f435ce74f5338bc7803204d0b8fb38f8e903a851743591e7fd942746f017e7b968812ec5bc09a78b1f05caf9aa251c181d5afbdcb33ce71e0370c0a003bb007d2c5660f93123182dc097e26b008452ac626dac4fea2781cf9a355456727ce68ad4700b180a6a9e1e5c04d276da168a0153f823eaea4ba7b182b6a123ce8db85db3d0ab63f4a72803c0fdf9de8d3b0e3477bc9293f1027170b92eda3ad6d55273c1872fbcf1625fed0155571c372aa6087a198dbbdce2ced0ec6bd6a13a4e97c5544fb0751f79f620832e4fa5c26842b9eae3d9042523db26e5ff6d56478fbb40fa55bca3b1b8b03694ec4f5f1accd48b3eb77284329cedc0dd583b8890312d17348b41d86cb6660c07c1cd63279e1a8bec6a2e588a3ebec785d50a864b0bc9b35e0b09d59be2c0c36ba016a443e75388fbe0f843ae6eedad6e204b4fd0816eaa90c2f5f8f67d6064038db9c2866c0f1ab7e44133fd42f239fc777272cb438f8a303be1fe5f857af725f5ef636f61aaa13bb45f28b3d77de86454dd8386de1205aeaa44c6668ee6de92683043a9294e3d133bb1a940576868bee157fd02b93dd73b2cccd5d8fdd83ea67c1c4d6c481bd0614cddbf9cb2e7da79afff16b3f02ed55fbd7e6f5ed12dddaec42e0a4ebf7645a7c0f9253bdd007012f0b304b3b38f6280a9692135a7220d06f514f47043f0bd1c524e68345d6b359b0c3fea7ee130b5113686348ad4593b4b4bb1d6245637e0fb2d8568f690245eb5dc12d6de5550d3dfeaaf386fde728bd93f13948efc4882ff0f6b947dbaf261d8e1c4e2feed53910c9a813b7c10bbe939b8503d31102fc4dc7075869aa2b11ddaba0c0896381d034076693667790a826bf1583b6df43c688de88d6633e16d689b5d4cdf7b571b03325a8a1b326b628cee2f4e87b8a2f63f609a7708034d9cfa5f631833feb9966a837434e2dc587528f0914c588155659034d77ca70d5abd7263fac29eca42d2e0507c64d82a3ac143df4c16c92d4e0172dd73a858baf682a0845fe7fc98071d3a164324edcc53e0c16e0ccf303fb1f7f72f133d5a33b727db3bd13febd9c2b7c2443c1f4fca943a7c9ae228771524f9aace9ee2532759b5359711fcfc24bc1b8c30aba2a4d2fcc0b78cf571d53f110f3bc7a8eec46c4af5588b46856b243a4d32e8bbb32d5d2de1874e2830efbfd36882588f1ec3c869d199317540f06e5e3754502e58e23cf0beb8dfa81d33a6b0c4096d6edee365164080677677934727b78a7397be294904b4c908b1f180c6ced016f43aae288a2018c0ad396f2f09174d870256936d7563b1a0780935ae900dc45e5ec4a82235ce9271a07314079c00df95cc26d5cc2c7851d378536e21f064f40e94bf9518bf98132598bcdfad974f53a01d224a1ee791d52518b4939115d6342065c7fc653524bc9fa2b5f9c1f96d892313ebf916581be5ce47482e9c33e5a3291f11fbbbf2b27eb41c89f8ec7733fa49683cfe4124452763f9c52c4bbbab01c35d29c0de81d36ce3a83ffa2598be838fe530da247b8e57fc5d903b05af24f759952713f78ab8637c938e02bfd0e08889b8deb3a9a821952ce4f35b7546963f2281d5874f82515f6484e27efb88f794a3e40ca74ec1d79229cf7b1b069f8fbaa699ef2c2be43b668dbadd94f06e1a6fdca175661a49361952890d66903f28dc29f777dd2e1036818c5a8411cbe6ad0104c4b7fb1f9b40510e62f8be820bd8696d8e598d19bd89e0ed20b522d9891b6826591ecad78412150144e73488408d7eb44a942a4d5c848c249830e8824aac40c7a4aabad8cdba4dbd30ef1e7b275f0dce0a8092f661058e49c919d6e8df06d5f39573ea15e6c3f65df03353262a78b6c7cd1095b937b6f5bbb3e1b1b452c8d5281672078d327294daf0777039e790b5a2a3129b1ddb935983dd8d8c14d866e73b95b476ee9bb534fe6ecbf527d4da9b5718ab31eb035d573c4ed1ff703152227fde248a6a4c4308dc5a06c7be0c98335c5cc2d10389b7302d6044e63f40dcc293524d0c7959c5c2b4a5fbbd44d3d6acb85bc0493e841adf4ac7c9fdc4fe668d2c48506a1a2edeef512477c7b87caaa66e73a39b6025ebd0b874ea8c05b9b352dcf53c82d61e6252e99f2235e9a859325c50f74754f7acd2c24ab4064d9f9e14711ade019fa10e25043dcddf88801f0a9f8c4ccce097602bfe3044f6ba7c06f4c9f4e05cbf7ec2e9069d274bc74dc3056aa33a9c99be09e99f0adfd0ea658e28d3ea072f7d5b0cdc0e604782c79a86f94ae002e74ca1ff023790ea3979a770b3d99e9c28e329b161a0cbfc19b00a7b90065d816069910a79518867a87c5bdf14039416ec66202ab150f16b1dab2b33157f999f030c3db936b11c543c607c8028188d26e74c81d1b38dcdab4a9564383667ca76448731cd426632b8bb9e356c5055971f79e1502947b44e133f346b2d990f01cf9fec7b7e337443a36340b0014e9a6b1ae26d37c80590339fe12b856469fcbc2168670184f01db73422a4041835d3d1c711808b00ff5bcfa15445667bb80bf8f80c21c6329a7f984f99b6359123cf47875c6830f86e8ee6fec6f282e564731381fa1a495fa019bbc000c4e2b5e95e897e1220abd30b3e764f682177e442636814448c01d731743f58d9dd73db5e9de5aadbb4f6ffbc4326af6560c8a53ece6a219299e8b80b2aca92e4e8c6d06f257a47a7472d87687994db8dd2e512a6e11439c0241d15d67542a32f6063f05b2bf1a12c457ed28427289c8e13f13232cb3b1834c2efeb65810b49c0230c4b73cc1c4154d04c76cbb12237d09068c0c37900c90a7d3eb75586863d9360968dad67338c29ec2f745a9d7b1b617fe8e36dab6d3c2e7c1477e575d529df21f85807bc49c89ac23cd439a6197479068aa0c081a41b0595ab5a5bc725cd7642bbf3a7f05c53022af0b583cee750080660ebff9772e2e7824401a0e369730480b5e5c269bf9658088cac494f3bf1b9b91e15024a55c0c319cd8e9545f28c9d07bf8c555d4179a3f59a26eb6f321ed159ec7e7adaeab29b731522edfc881d59e167cd6f23aec6e1116cc1bea842066a32abcc4b126016d155411716734965c5f3510de690e843b71b30f92446bcc57ab9f75d4b4b3ee8fdce34810a251162063584b50bc16763fb6e84418c218d2509ca9e9c51d15d7caae5eab5c84418caa43c6f8cc4578ffd2f2aa7f01846e1a3e8bea3bc0d4706468867a5663576e1b78bddf0010beac25488a05dc7f5a3112fbf336a3ebfd2328e4fdc8f8f3a7c5ec512ae62eb0657a11dfc65bee30ea9da54f1d1704502a9cffc3f7da92439d7625aa0b817bf765ab265402f4a5991e4735a9e99f51fd27e8b180d599d7cca00736ea5bdc143f8e41167515e1accea64f746d1f37367985e555d9b7a2824a683becbd516eb004db262472acc6b73a1d4fb5f1fecd6dc3082a5a8d13a610cdb7a7852cb5ce8952ad48072378d285c559cb2a1973dd7a3715ea52ccfb8f2626d639f8692fe9545fb30f61a9df4cdf0c430c476c2cedac38365e30a0dd4168f6c46c4620dd0ab0dc1dc18f4c3d87d432f5d1fa69d994f066de88150114c407e655afa11144cbefee80ef8228c073a398d5e037fcb8d0032cc37030717688bb35900fcd142cb8eee0acc13876e9c534b305cb43f557b7f26540720ab9b3b2d046994e77dc5986f1dbc3625f9e86ef203b1b4e2c3ca89ab855ad396d0e164973fcf770e428c96e20cdc1c4725ea3a2dc712d374fc65206e91d5acff16fcfca8768400326d898df71b67f4b157888c3fbbe38de3b6d235f2eaa7b0a549c96ece1c671b57ffdfc5c29935e0290db16dd6aa5c176c220bd961faef7095438c051bcda248294fb956ca3d00c2c8492259dfedd1af7270e07f6d0020d5f3818db317bbed5c5e2e683a9c49e7223cd41b6aa5d537be5d3e94b99ce61031e2fa5a04ef83b678c2d599fea72597562c387b423574c5222074db0baa0a4a16f7e5e0c088445e9eb019a540321bf4339afe659baa17e4d62606abe157d0bf5838ce7d49421b9f4917686bc508338de3f45fd6332b355b5b38c03c69447c54b28cbe518dc5278aa36c6ea1ca8aa7602d381f813f2c9ce2e096bd75f6c591df0eaa870269b96843719897aad81b64e986caeb8cbbdfb7206e55344ef9d2f9c527f0e0c531a0698355d8847ef9f569455a25f57913c85ff0ea75e689d4d5a517c10826574eda90badf8611efcd2d6adef0e7f691a6c1f632a98efb432cce628b561063c34a8e7671907b5787db8fbac2831d1e4df936c980e8bb6e0b3f16ccdc9ccb0e0e8c77814fa001188b8d5ec7baa0a42a7782614520792a6a13619218843c82ebf16db4a2d854b8b3637051953b302185eabeb15c75131582e88003b581e73d98d28c2b166eb94833d746ef29acd85d0ca6ea9c7178aeffb4f1aacb761c0f44159c26b19090557c4d1ceb682c7b5cd508c59bb742858e1327ebb1fd56ee73244f880cf2759ddfc1e97904e4d06df286092355b4e9b4f7a0fe0319fe7f6c1a225626a9c0494c07dc2accae178f3ffb21e95fc735621e6619a31e2a7f404cdc3b075a004387c6ff2cf28d6bd1b1b15ee6e2608505fd642fcbeb324e5ef307de17d4f34a2d55f6650718893a4826674cad98e002f6720455474d8d7ac6277b77dcd68d1c159dd4d8d89b23ddd84cbd059a7c6bd536c398bbc20cf1fd883e485fe4302f9350038d49c8d3b0edaea2eb4c85a545d15b96425ac59932c080726b3ec1b", @generic="aaea8c3418dcd74c9fae7bebb4903885162c4bbf7eced743cff5b9fc2b701967e52fa4b8489a", @generic="8a6c1035275714432cc501cb31b4d7c63606a088941ef2b9484d81884011a7c41bca9736714feb0057ac4cb6da8c1ef6d74fbbc46769d36786dbca2f9530da0b06be5e", @generic="d597f0cb766c35da34879c2c99490d3014db45b9956126c340d5e682d72ca906c89c7ece9c64782e40b81916d45fa457c06785acf52600972e01dc53bf1cb4675e1931ecdb1da2f58573f205685e6e18992bd0c451c007f5039f8fbb058ffd447cd26bda25d74c28b5305884d1fb87fbbfb8764314cccd431a697b2ccb9d57b09a102d5d4736a4c4bf7900fba4a4972db9edc24a5a7fb45b1649f4f24492d2", @generic="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"]}, 0x219c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0)={0x0, 0x2}, 0x2) unshare(0x6a060000) syz_usb_connect(0x0, 0x36, &(0x7f0000001900)=ANY=[@ANYBLOB="120100033ca7ff1063110001bb23010203010902"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$hiddev(&(0x7f0000001940), 0x4, 0x900) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000001980)={0x3, 0x1, 0x100000, 0x3, 0xfffff6f7, 0x10001}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a40)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="dc0000000906010200000000000000000200ffff300007801800018014000240fc02000000000000000000000000000114001700766c616e010000000000000000000000480007800c00148008000140ac1414bb080008400000004d140017006772653000000000000000000000000008001c4000000000050007002f0000000900130073797a3000000000500008801c0007801800148014000240fc0000000000000000000000000000010c00078008000b40360c000780060005404e2000000c00078005000700020000000c0007800500150003000000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.789267924s ago: executing program 2 (id=4948): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000000c0)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "6c404000000062cf004ab77f8437"}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019400)=0x7) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x80, 0x401, 0x6, 0x6, 0x5, 0x401}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x33fe0) 2.466991894s ago: executing program 9 (id=4949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x140, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @mcast1, [0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@inet=@tcp={{0x30}, {[0x4e22, 0x2], [], 0x0, 0x0, 0x40, 0xc}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x2, "a8243030c835272db5f97eb39697926a96496b427900"}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1}, {0x2, 0x5, 0x1}, {0x2, 0x0, 0x3}, 0x7, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000002940)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000002980)={0xa, 0x4e20, 0x504e, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000029c0)=[{{&(0x7f0000002a40)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002ac0)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000002b00)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 1.37327796s ago: executing program 9 (id=4950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.825316ms ago: executing program 52 (id=4950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=4952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000e00)=ANY=[], 0x2a, 0x0) r2 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f00000005c0), &(0x7f0000000600), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000b40)=""/128, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000003c0)=@caif=@dgm, 0x80, 0x0, 0x0, &(0x7f0000000680)=""/152, 0x98}, 0x400}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0xe1c000}, {{&(0x7f0000000780)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/197, 0xc5}], 0x3, &(0x7f00000009c0)=""/177, 0xb1}, 0x6080cf84}], 0x400000000000234, 0x10162, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000a80)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r1, &(0x7f0000000ac0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000600)={@empty, @private=0xa010102}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000c00)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0xf}, {0x0, 0xd}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200008d4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0x30, 0xffffffffffffffff, 0xffffe000) socket(0x1, 0x1, 0x1) kernel console output (not intermixed with test programs): 433.069289][T23591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1433.087966][T23591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1433.090256][T23591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1433.102146][T23591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1433.459351][T23591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.522670][T23591] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.540113][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.540213][ T8239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.554770][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.554845][ T8239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.630693][T23546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.771585][ T30] audit: type=1400 audit(1792619295.219:1910): avc: denied { write } for pid=23778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1434.018755][ T30] audit: type=1400 audit(1792619295.469:1911): avc: denied { write } for pid=23805 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1434.438908][T23546] veth0_vlan: entered promiscuous mode [ 1434.476116][T23546] veth1_vlan: entered promiscuous mode [ 1434.546563][T23546] veth0_macvtap: entered promiscuous mode [ 1434.563527][T23546] veth1_macvtap: entered promiscuous mode [ 1434.626404][T23546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.672910][T23546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.715486][T22953] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.718082][ T8423] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.760166][ T1494] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.774376][T22953] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.849814][T23812] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1435.990705][T23591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.003376][ T8239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.003397][ T8239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.133450][T22953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.133471][T22953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.154537][ T5603] Bluetooth: hci0: command 0x0406 tx timeout [ 1436.223836][T23591] veth0_vlan: entered promiscuous mode [ 1436.239809][ T30] audit: type=1400 audit(1792619297.689:1912): avc: denied { write } for pid=23818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1436.256854][T23591] veth1_vlan: entered promiscuous mode [ 1436.370406][T23591] veth0_macvtap: entered promiscuous mode [ 1436.391628][T23591] veth1_macvtap: entered promiscuous mode [ 1436.475666][T23591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.495942][T23848] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1792.0), cmd(4) [ 1436.510188][T23591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.593870][ T30] audit: type=1400 audit(1792619298.039:1913): avc: denied { write } for pid=23847 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1436.695802][ T8239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.696131][ T8239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.703379][ T8431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.703414][ T8431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.901568][ T8234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.901589][ T8234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.062550][ T8234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.062570][ T8234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.615629][T23854] FAULT_INJECTION: forcing a failure. [ 1437.615629][T23854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.615701][T23854] CPU: 0 UID: 0 PID: 23854 Comm: syz.4.4815 Tainted: G L syzkaller #0 PREEMPT(full) [ 1437.615727][T23854] Tainted: [L]=SOFTLOCKUP [ 1437.615734][T23854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1437.615745][T23854] Call Trace: [ 1437.615752][T23854] [ 1437.615760][T23854] dump_stack_lvl+0x100/0x190 [ 1437.615793][T23854] should_fail_ex.cold+0x5/0xa [ 1437.615821][T23854] _copy_from_user+0x2e/0xd0 [ 1437.615853][T23854] memdup_user+0x6b/0xe0 [ 1437.615877][T23854] strndup_user+0x78/0xe0 [ 1437.615900][T23854] __x64_sys_mount+0x136/0x310 [ 1437.615924][T23854] ? __pfx___x64_sys_mount+0x10/0x10 [ 1437.615953][T23854] do_syscall_64+0x123/0x790 [ 1437.615975][T23854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.615994][T23854] RIP: 0033:0x7fa22539f559 [ 1437.616011][T23854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.616029][T23854] RSP: 002b:00007fa2261b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1437.616047][T23854] RAX: ffffffffffffffda RBX: 00007fa225626090 RCX: 00007fa22539f559 [ 1437.616060][T23854] RDX: 0000200000019580 RSI: 0000200000019540 RDI: 0000000000000000 [ 1437.616072][T23854] RBP: 00007fa2261b3090 R08: 00002000000195c0 R09: 0000000000000000 [ 1437.616083][T23854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.616094][T23854] R13: 00007fa225626128 R14: 00007fa225626090 R15: 00007ffdd9cce268 [ 1437.616119][T23854] [ 1438.305107][T23856] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4788'. [ 1438.308087][ T30] audit: type=1401 audit(1792619299.759:1914): op=setxattr invalid_context="" [ 1438.789715][T23861] netlink: 34 bytes leftover after parsing attributes in process `syz.0.4796'. [ 1438.879201][T23863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.883627][T23863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.507418][ T30] audit: type=1400 audit(1792619300.959:1915): avc: denied { write } for pid=23850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1439.610584][ T30] audit: type=1400 audit(1792619301.059:1916): avc: denied { write } for pid=23871 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1441.483805][T21670] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1441.516516][ T30] audit: type=1400 audit(1792619302.969:1917): avc: denied { write } for pid=23873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1441.633437][T21670] usb 6-1: Using ep0 maxpacket: 8 [ 1441.637778][ T30] audit: type=1400 audit(1792619303.089:1918): avc: denied { write } for pid=23892 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1441.645018][T21670] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1441.645057][T21670] usb 6-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 1441.647511][T21670] usb 6-1: config 2 has an invalid interface number: 232 but max is 0 [ 1441.647533][T21670] usb 6-1: config 2 has no interface number 0 [ 1441.647564][T21670] usb 6-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 1441.647586][T21670] usb 6-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1441.647607][T21670] usb 6-1: config 2 interface 232 has no altsetting 0 [ 1441.652481][T21670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.652502][T21670] usb 6-1: Product: syz [ 1441.652515][T21670] usb 6-1: Manufacturer: syz [ 1441.652529][T21670] usb 6-1: SerialNumber: syz [ 1441.655259][T23883] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1441.903016][T23883] xt_hashlimit: max too large, truncated to 1048576 [ 1441.956289][T23884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.956708][T23884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.156448][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1442.173886][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1442.177431][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1442.179193][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1442.179803][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1442.377868][T21670] usb 6-1: USB disconnect, device number 61 [ 1442.450345][T22600] udevd[22600]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.232/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1442.502550][T22953] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.587361][ T30] audit: type=1400 audit(1792619304.039:1919): avc: denied { write } for pid=23894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1442.763315][T22953] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.830847][ T30] audit: type=1400 audit(1792619304.279:1920): avc: denied { write } for pid=23913 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1443.064977][T22953] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.159913][T22953] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.506496][T23926] binder: 23924:23926 ioctl 40087602 200000000580 returned -22 [ 1444.380766][ T5603] Bluetooth: hci5: command tx timeout [ 1446.393106][ T5603] Bluetooth: hci5: command tx timeout [ 1446.705633][T22702] netdevsim netdevsim8 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.801978][T23900] rxe_eth0 speed is unknown, defaulting to 1000 [ 1446.815108][ T1494] netdevsim netdevsim8 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.914293][ T8234] netdevsim netdevsim8 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.107121][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1447.116788][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1447.134946][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1447.159609][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1447.170876][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1447.391231][ T30] audit: type=1400 audit(1792619308.849:1921): avc: denied { write } for pid=23919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.496189][T22953] bridge_slave_1: left allmulticast mode [ 1447.496217][T22953] bridge_slave_1: left promiscuous mode [ 1447.496383][T22953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.500456][T22953] bridge_slave_0: left allmulticast mode [ 1447.500479][T22953] bridge_slave_0: left promiscuous mode [ 1447.500635][T22953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.575355][ T30] audit: type=1400 audit(1792619309.029:1922): avc: denied { write } for pid=23959 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.990823][ T30] audit: type=1400 audit(1792619309.439:1923): avc: denied { write } for pid=23961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.102112][ T30] audit: type=1400 audit(1792619309.549:1924): avc: denied { write } for pid=23972 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.471022][T22953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1448.483815][ T5603] Bluetooth: hci5: command tx timeout [ 1448.490277][T22953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1448.514722][T22953] bond0 (unregistering): Released all slaves [ 1448.543264][ T8234] netdevsim netdevsim8 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.755489][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1448.766344][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1448.778391][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1448.795441][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1448.797451][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1449.028565][ T30] audit: type=1400 audit(1792619310.479:1925): avc: denied { write } for pid=23974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.229921][ T5603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1449.251686][ T5603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1449.264089][ T5603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1449.267903][ T5603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1449.268456][ T5603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1449.296928][ T5614] Bluetooth: hci0: command tx timeout [ 1449.464533][ T30] audit: type=1400 audit(1792619310.919:1926): avc: denied { write } for pid=24002 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.500884][T23950] rxe_eth0 speed is unknown, defaulting to 1000 [ 1450.559263][T24000] Bluetooth: hci5: command tx timeout [ 1450.725675][T22953] hsr_slave_0: left promiscuous mode [ 1450.726231][T22953] hsr_slave_1: left promiscuous mode [ 1450.726910][T22953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.726927][T22953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.728161][T22953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.728177][T22953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.776732][T22953] veth1_macvtap: left promiscuous mode [ 1450.776768][T22953] veth0_macvtap: left promiscuous mode [ 1450.776850][T22953] veth1_vlan: left promiscuous mode [ 1450.776919][T22953] veth0_vlan: left promiscuous mode [ 1450.821150][ T30] audit: type=1400 audit(1792619312.269:1927): avc: denied { write } for pid=24017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.873170][T24000] Bluetooth: hci2: command tx timeout [ 1451.039856][ T30] audit: type=1400 audit(1792619312.489:1928): avc: denied { write } for pid=24035 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1451.695891][T24000] Bluetooth: hci0: command tx timeout [ 1451.695950][T24000] Bluetooth: hci6: command tx timeout [ 1451.931150][T22953] team0 (unregistering): Port device team_slave_1 removed [ 1451.951112][T22953] team0 (unregistering): Port device team_slave_0 removed [ 1452.129088][T23985] rxe_eth0 speed is unknown, defaulting to 1000 [ 1452.153023][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1452.492964][T23900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.495483][T23900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.495608][T23900] bridge_slave_0: entered allmulticast mode [ 1452.506542][T23900] bridge_slave_0: entered promiscuous mode [ 1452.514679][T23900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.519344][T23900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.519452][T23900] bridge_slave_1: entered allmulticast mode [ 1452.528847][T23900] bridge_slave_1: entered promiscuous mode [ 1452.670022][T23900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.696277][T23900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.909481][T23900] team0: Port device team_slave_0 added [ 1452.917406][T23900] team0: Port device team_slave_1 added [ 1452.953404][T21349] Bluetooth: hci2: command tx timeout [ 1453.046308][T23998] rxe_eth0 speed is unknown, defaulting to 1000 [ 1453.088735][T23900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.088752][T23900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.088774][T23900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.124535][T23900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.124550][T23900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.124569][T23900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.249525][ T30] audit: type=1400 audit(1792619314.699:1929): avc: denied { write } for pid=24042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1453.350561][ T30] audit: type=1400 audit(1792619314.799:1930): avc: denied { write } for pid=24054 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1453.619842][T22953] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.722559][T23900] hsr_slave_0: entered promiscuous mode [ 1453.730266][T23900] hsr_slave_1: entered promiscuous mode [ 1453.731465][T23900] debugfs: 'hsr0' already exists in 'hsr' [ 1453.731483][T23900] Cannot create hsr debugfs directory [ 1454.682076][T21349] Bluetooth: hci6: command tx timeout [ 1454.682108][T21349] Bluetooth: hci0: command tx timeout [ 1454.988800][T22953] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.033629][ T5603] Bluetooth: hci2: command tx timeout [ 1455.232385][T22953] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.433239][ T5603] Bluetooth: hci1: command 0x0406 tx timeout [ 1455.520858][T22953] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.942702][ T30] audit: type=1400 audit(1792619317.389:1931): avc: denied { write } for pid=24067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1456.014466][T23900] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.077300][ T30] audit: type=1400 audit(1792619317.529:1932): avc: denied { write } for pid=24082 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1456.452575][T23900] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.659794][T23900] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.704521][ T30] audit: type=1400 audit(1792619318.149:1933): avc: denied { write } for pid=24084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1456.713401][T24000] Bluetooth: hci0: command tx timeout [ 1456.713433][T24000] Bluetooth: hci6: command tx timeout [ 1457.712544][ T5603] Bluetooth: hci2: command tx timeout [ 1457.865709][ T30] audit: type=1400 audit(1792619319.319:1934): avc: denied { write } for pid=24105 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1457.949742][T23900] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.109965][T23950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.110047][T23950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.110158][T23950] bridge_slave_0: entered allmulticast mode [ 1458.111453][T23950] bridge_slave_0: entered promiscuous mode [ 1458.169442][T23950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.169512][T23950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.169619][T23950] bridge_slave_1: entered allmulticast mode [ 1458.172624][T23950] bridge_slave_1: entered promiscuous mode [ 1458.243284][ T8239] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.506191][ T30] audit: type=1400 audit(1792619319.959:1935): avc: denied { write } for pid=24113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1458.596790][T22953] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.617283][ T30] audit: type=1400 audit(1792619320.069:1936): avc: denied { write } for pid=24128 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1458.696828][T23950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1458.701491][T23950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.777231][T23950] team0: Port device team_slave_0 added [ 1458.793339][T24000] Bluetooth: hci6: command tx timeout [ 1458.808256][T23985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.810503][T23985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.810634][T23985] bridge_slave_0: entered allmulticast mode [ 1458.819667][T23985] bridge_slave_0: entered promiscuous mode [ 1458.864227][T23950] team0: Port device team_slave_1 added [ 1458.979355][T23985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.979510][T23985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.979641][T23985] bridge_slave_1: entered allmulticast mode [ 1458.986947][T23985] bridge_slave_1: entered promiscuous mode [ 1459.059641][T22953] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.252118][T23950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1459.252135][T23950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1459.252157][T23950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1459.255393][ T8431] netdevsim netdevsim5 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1459.257132][ T8431] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1459.257209][ T8431] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1459.395122][T22953] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.414407][T23950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1459.414423][T23950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1459.414445][T23950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1460.410544][T23985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.468898][T23985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.539988][T22953] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.560558][T23998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.560715][T23998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.560843][T23998] bridge_slave_0: entered allmulticast mode [ 1460.562149][T23998] bridge_slave_0: entered promiscuous mode [ 1460.620973][T23900] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1460.634449][T23900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1460.634906][T23998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.634981][T23998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.635084][T23998] bridge_slave_1: entered allmulticast mode [ 1460.636417][T23998] bridge_slave_1: entered promiscuous mode [ 1460.689722][T23950] hsr_slave_0: entered promiscuous mode [ 1460.690453][T23950] hsr_slave_1: entered promiscuous mode [ 1460.690958][T23950] debugfs: 'hsr0' already exists in 'hsr' [ 1460.690975][T23950] Cannot create hsr debugfs directory [ 1460.718348][T23900] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1460.730685][T23900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1460.762067][T23985] team0: Port device team_slave_0 added [ 1460.807783][ T30] audit: type=1400 audit(1792619322.259:1937): avc: denied { write } for pid=24133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1460.836799][T23900] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1460.842486][T23900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1460.847847][T23985] team0: Port device team_slave_1 added [ 1460.854864][T23998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.948862][ T30] audit: type=1400 audit(1792619322.399:1938): avc: denied { write } for pid=24150 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1460.990283][T23998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.010080][T23900] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1461.019222][T23900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1461.098481][T23985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.098498][T23985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.098520][T23985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.100017][T23985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.100031][T23985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.100053][T23985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.198575][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1461.218429][T23998] team0: Port device team_slave_0 added [ 1461.255006][T23998] team0: Port device team_slave_1 added [ 1461.388085][T23998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.388103][T23998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.388125][T23998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.454415][T23985] hsr_slave_0: entered promiscuous mode [ 1461.455204][T23985] hsr_slave_1: entered promiscuous mode [ 1461.455736][T23985] debugfs: 'hsr0' already exists in 'hsr' [ 1461.455753][T23985] Cannot create hsr debugfs directory [ 1461.502879][T23998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.502898][T23998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.502921][T23998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.555603][ T8431] netdevsim netdevsim0 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 1461.555646][ T8431] netdevsim netdevsim0 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 1461.555678][ T8431] netdevsim netdevsim0 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 1461.598543][T22953] bridge_slave_1: left allmulticast mode [ 1461.598562][T22953] bridge_slave_1: left promiscuous mode [ 1461.598663][T22953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.602624][T22953] bridge_slave_0: left allmulticast mode [ 1461.602640][T22953] bridge_slave_0: left promiscuous mode [ 1461.602731][T22953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.661099][T22953] bridge_slave_1: left allmulticast mode [ 1461.661117][T22953] bridge_slave_1: left promiscuous mode [ 1461.661213][T22953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.686498][T22953] bridge_slave_0: left allmulticast mode [ 1461.686516][T22953] bridge_slave_0: left promiscuous mode [ 1461.686609][T22953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.036747][T22953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.038958][T22953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.041100][T22953] bond0 (unregistering): Released all slaves [ 1462.220690][T22953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.222978][T22953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.251772][T22953] bond0 (unregistering): Released all slaves [ 1462.583547][ T8649] netdevsim netdevsim0 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.650467][T23998] hsr_slave_0: entered promiscuous mode [ 1462.651209][T23998] hsr_slave_1: entered promiscuous mode [ 1462.651811][T23998] debugfs: 'hsr0' already exists in 'hsr' [ 1462.651828][T23998] Cannot create hsr debugfs directory [ 1462.695755][T23950] netdevsim netdevsim9 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1462.918478][T23950] netdevsim netdevsim9 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.138572][T23950] netdevsim netdevsim9 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.261919][T23950] netdevsim netdevsim9 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.356797][T23900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.475446][ T30] audit: type=1400 audit(1792619324.929:1939): avc: denied { write } for pid=24159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1463.566309][T23900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.721005][ T30] audit: type=1400 audit(1792619325.169:1940): avc: denied { write } for pid=24170 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1463.754982][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.755070][ T8431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.789099][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.789187][ T8234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.076626][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1464.390136][T23950] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1464.418525][T23950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1464.419202][T23950] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1464.446675][T23950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1464.462533][T23950] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1464.505250][T23950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1464.506279][T23950] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1464.542857][T23950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1464.756165][T23985] netdevsim netdevsim2 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.956159][T22953] hsr_slave_0: left promiscuous mode [ 1464.962205][T22953] hsr_slave_1: left promiscuous mode [ 1464.962918][T22953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.962936][T22953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.967202][T22953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1464.967219][T22953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.076249][T22953] hsr_slave_0: left promiscuous mode [ 1465.089720][T22953] hsr_slave_1: left promiscuous mode [ 1465.092974][T22953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.092995][T22953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.120427][T22953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.120449][T22953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.149503][ T30] audit: type=1400 audit(1792619326.599:1941): avc: denied { write } for pid=24174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1465.208418][T22953] veth1_macvtap: left promiscuous mode [ 1465.208453][T22953] veth0_macvtap: left promiscuous mode [ 1465.208535][T22953] veth1_vlan: left promiscuous mode [ 1465.208593][T22953] veth0_vlan: left promiscuous mode [ 1465.238110][T22953] veth1_macvtap: left promiscuous mode [ 1465.238143][T22953] veth0_macvtap: left promiscuous mode [ 1465.238225][T22953] veth1_vlan: left promiscuous mode [ 1465.238283][T22953] veth0_vlan: left promiscuous mode [ 1465.347701][ T30] audit: type=1400 audit(1792619326.799:1942): avc: denied { write } for pid=24198 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1466.687857][T22953] team0 (unregistering): Port device team_slave_1 removed [ 1466.725406][T22953] team0 (unregistering): Port device team_slave_0 removed [ 1467.276098][T22953] team0 (unregistering): Port device team_slave_1 removed [ 1467.304875][T22953] team0 (unregistering): Port device team_slave_0 removed [ 1467.586588][T23985] netdevsim netdevsim2 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1467.764283][T23985] netdevsim netdevsim2 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1467.928427][T23985] netdevsim netdevsim2 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.064908][T23950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.127683][T23950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.147225][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.147273][ T8239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.162823][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.162898][ T8234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.352556][T23998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.695821][T23998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.767261][T23900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.942621][T23998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.008791][T23900] veth0_vlan: entered promiscuous mode [ 1469.081158][T23998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.123007][T23900] veth1_vlan: entered promiscuous mode [ 1469.206178][T23900] veth0_macvtap: entered promiscuous mode [ 1469.225931][T23900] veth1_macvtap: entered promiscuous mode [ 1469.270571][T23900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.305921][T23900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.344021][ T8649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.344064][ T8649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.344092][ T8649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.344121][ T8649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.815514][T23950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.957419][ T30] audit: type=1400 audit(1792619331.389:1943): avc: denied { setattr } for pid=24238 comm="syz.4.4840" name="IEEE-802.15.4-MAC" dev="sockfs" ino=103462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1470.361769][ T8649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.361887][ T8649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.819450][T23998] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1470.825901][ T30] audit: type=1400 audit(1792619332.279:1944): avc: denied { write } for pid=24228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1470.867448][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1470.887295][T22953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.887315][T22953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.901459][T23998] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1470.918929][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1470.937999][T23998] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1470.976510][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1470.978771][T23998] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1471.001954][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1471.146075][ T30] audit: type=1400 audit(1792619332.599:1945): avc: denied { write } for pid=24250 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1471.403015][T24000] Bluetooth: Frame is too long (len 10, expected len 4) [ 1471.412938][T24000] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 1471.421934][T23985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1471.456014][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1471.463792][T23985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1472.113010][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1472.177433][T23985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1472.202047][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1472.202782][T23985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1472.241899][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1472.243292][T21677] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1472.405370][T21677] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1472.406474][T21677] usb 2-1: config index 0 descriptor too short (expected 40988, got 28) [ 1472.406499][T21677] usb 2-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 1472.406519][T21677] usb 2-1: config 1 has no interfaces? [ 1472.410381][T21677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.410407][T21677] usb 2-1: Product: syz [ 1472.410421][T21677] usb 2-1: Manufacturer: syz [ 1472.410437][T21677] usb 2-1: SerialNumber: syz [ 1472.429526][T23998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.522542][T23998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.542825][T23950] veth0_vlan: entered promiscuous mode [ 1472.559977][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.560064][ T8525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.587703][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.587787][ T8525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1472.610573][T23950] veth1_vlan: entered promiscuous mode [ 1472.694466][T23985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.769986][T23985] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.798819][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.798904][ T8423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.820693][T21677] usb 2-1: USB disconnect, device number 40 [ 1472.828492][T23950] veth0_macvtap: entered promiscuous mode [ 1472.848607][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.848692][ T8525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1472.891657][T23950] veth1_macvtap: entered promiscuous mode [ 1472.997758][T23950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1473.035475][T23950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1473.058847][ T30] audit: type=1400 audit(1792619334.509:1946): avc: denied { write } for pid=24263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1473.065369][ T8649] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.065583][ T8649] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.065799][ T8649] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.065827][ T8649] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.414129][ T8423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.414150][ T8423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.630452][T24304] binder: 24302:24304 ioctl 40087602 200000000580 returned -22 [ 1473.674094][ T30] audit: type=1400 audit(1792619335.119:1947): avc: denied { write } for pid=24299 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1474.660537][ T8431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.660567][ T8431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.259616][T23985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1475.415913][T23985] veth0_vlan: entered promiscuous mode [ 1475.470530][T23985] veth1_vlan: entered promiscuous mode [ 1475.635197][T24328] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4847'. [ 1475.712443][ T30] audit: type=1400 audit(1792619337.159:1948): avc: denied { watch } for pid=24326 comm="syz.9.4847" path="/1/file5" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1475.712492][ T30] audit: type=1400 audit(1792619337.159:1949): avc: denied { watch_sb } for pid=24326 comm="syz.9.4847" path="/1/file5" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1475.932879][ T8431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.037380][ T30] audit: type=1400 audit(1792619337.489:1950): avc: denied { write } for pid=24309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1476.137490][T23985] veth0_macvtap: entered promiscuous mode [ 1476.151351][T23985] veth1_macvtap: entered promiscuous mode [ 1476.288511][T24340] FAULT_INJECTION: forcing a failure. [ 1476.288511][T24340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1476.288544][T24340] CPU: 1 UID: 0 PID: 24340 Comm: syz.9.4850 Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.288568][T24340] Tainted: [L]=SOFTLOCKUP [ 1476.288574][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1476.288585][T24340] Call Trace: [ 1476.288592][T24340] [ 1476.288600][T24340] dump_stack_lvl+0x100/0x190 [ 1476.288633][T24340] should_fail_ex.cold+0x5/0xa [ 1476.288660][T24340] _copy_to_user+0x32/0xd0 [ 1476.288691][T24340] simple_read_from_buffer+0xcb/0x170 [ 1476.288723][T24340] proc_fail_nth_read+0x1af/0x230 [ 1476.288754][T24340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1476.288785][T24340] ? rw_verify_area+0xce/0x6d0 [ 1476.288808][T24340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1476.288838][T24340] vfs_read+0x1e4/0xb40 [ 1476.288862][T24340] ? lock_acquire+0x1d1/0x380 [ 1476.288896][T24340] ? __fget_files+0x34/0x3d0 [ 1476.288913][T24340] ? __pfx_vfs_read+0x10/0x10 [ 1476.288934][T24340] ? find_held_lock+0x2b/0x80 [ 1476.288952][T24340] ? __fget_files+0x215/0x3d0 [ 1476.288973][T24340] ? __fget_files+0x21f/0x3d0 [ 1476.288997][T24340] ksys_read+0x12a/0x250 [ 1476.289021][T24340] ? __pfx_ksys_read+0x10/0x10 [ 1476.289051][T24340] do_syscall_64+0x123/0x790 [ 1476.289073][T24340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.289092][T24340] RIP: 0033:0x7f635235fd8e [ 1476.289108][T24340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1476.289126][T24340] RSP: 002b:00007f63532f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1476.289145][T24340] RAX: ffffffffffffffda RBX: 00007f63532f86c0 RCX: 00007f635235fd8e [ 1476.289157][T24340] RDX: 000000000000000f RSI: 00007f63532f80a0 RDI: 0000000000000004 [ 1476.289168][T24340] RBP: 00007f63532f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.289180][T24340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.289191][T24340] R13: 00007f6352626038 R14: 00007f6352625fa0 R15: 00007ffeef0eb968 [ 1476.289218][T24340] [ 1476.330482][ T30] audit: type=1400 audit(1792619337.779:1951): avc: denied { write } for pid=24338 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1476.566916][ T8431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.660790][T23998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1476.694470][T23985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1476.715558][T23985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1477.049050][T24000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1477.055877][T24000] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1477.061987][T24000] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1477.077395][T24000] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1477.077822][T24000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1477.385340][ T8431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.474573][ T8525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.474642][ T8525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.483162][ T8525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.483202][ T8525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.741110][ T8431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.931702][T23998] veth0_vlan: entered promiscuous mode [ 1478.020567][T23998] veth1_vlan: entered promiscuous mode [ 1478.210713][T22702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.210734][T22702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.348230][ T30] audit: type=1400 audit(1792619339.799:1952): avc: denied { write } for pid=24347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1478.646334][ T8239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.646354][ T8239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.697480][ T1494] netdevsim netdevsim1 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.831091][ T30] audit: type=1400 audit(1792619340.279:1953): avc: denied { write } for pid=24380 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1478.849587][T23998] veth0_macvtap: entered promiscuous mode [ 1478.892842][T24346] rxe_eth0 speed is unknown, defaulting to 1000 [ 1478.897141][ T1494] netdevsim netdevsim1 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.911795][T23998] veth1_macvtap: entered promiscuous mode [ 1478.966044][ T8239] netdevsim netdevsim1 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.969636][ T1494] netdevsim netdevsim1 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1479.017607][ T8431] bridge_slave_1: left allmulticast mode [ 1479.017632][ T8431] bridge_slave_1: left promiscuous mode [ 1479.017825][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.020148][ T8431] bridge_slave_0: left allmulticast mode [ 1479.020169][ T8431] bridge_slave_0: left promiscuous mode [ 1479.020321][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.114460][ T5603] Bluetooth: hci5: command tx timeout [ 1479.806823][ T8431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.834905][ T8431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.842474][ T8431] bond0 (unregistering): Released all slaves [ 1480.024575][T23998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1480.068212][T23998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.125471][ T1494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.126485][ T1494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.126519][ T1494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.126549][ T1494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.351747][T24371] program syz.4.4844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1480.499425][ T30] audit: type=1400 audit(1792619341.949:1954): avc: denied { write } for pid=24387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1480.673218][ T30] audit: type=1400 audit(1792619342.129:1955): avc: denied { write } for pid=24398 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1480.925614][T22702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.925634][T22702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.096710][ T30] audit: type=1400 audit(1792619342.549:1956): avc: denied { write } for pid=24400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.193316][ T5603] Bluetooth: hci5: command tx timeout [ 1481.224206][ T30] audit: type=1400 audit(1792619342.679:1957): avc: denied { write } for pid=24412 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.378103][ T8239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.378128][ T8239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.027957][ T8431] hsr_slave_0: left promiscuous mode [ 1482.028549][ T8431] hsr_slave_1: left promiscuous mode [ 1482.029238][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.029255][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.031776][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.031792][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.108292][ T8431] veth1_macvtap: left promiscuous mode [ 1482.108315][ T8431] veth0_macvtap: left promiscuous mode [ 1482.108359][ T8431] veth1_vlan: left promiscuous mode [ 1482.108398][ T8431] veth0_vlan: left promiscuous mode [ 1482.111318][ T30] audit: type=1400 audit(1792619343.559:1958): avc: denied { write } for pid=24414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1482.259101][ T30] audit: type=1400 audit(1792619343.709:1959): avc: denied { write } for pid=24434 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1482.626353][ T30] audit: type=1400 audit(1792619344.079:1960): avc: denied { write } for pid=24436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1482.739564][ T30] audit: type=1400 audit(1792619344.189:1961): avc: denied { write } for pid=24447 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1482.850941][ T8431] team0 (unregistering): Port device team_slave_1 removed [ 1482.872298][ T8431] team0 (unregistering): Port device team_slave_0 removed [ 1483.131847][T24346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.131928][T24346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.132039][T24346] bridge_slave_0: entered allmulticast mode [ 1483.158392][T24346] bridge_slave_0: entered promiscuous mode [ 1483.168574][T24346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.168697][T24346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.168807][T24346] bridge_slave_1: entered allmulticast mode [ 1483.170980][T24346] bridge_slave_1: entered promiscuous mode [ 1483.265318][T24346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.271974][T24346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.273357][ T5603] Bluetooth: hci5: command tx timeout [ 1483.372420][T24346] team0: Port device team_slave_0 added [ 1483.385129][T24346] team0: Port device team_slave_1 added [ 1483.491348][T24346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.491365][T24346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.491387][T24346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.500272][T24346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.500286][T24346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.500306][T24346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.599207][ T30] audit: type=1400 audit(1792619345.049:1962): avc: denied { write } for pid=24451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1483.661925][T24346] hsr_slave_0: entered promiscuous mode [ 1483.666443][T24346] hsr_slave_1: entered promiscuous mode [ 1483.666924][T24346] debugfs: 'hsr0' already exists in 'hsr' [ 1483.666939][T24346] Cannot create hsr debugfs directory [ 1483.719463][ T30] audit: type=1400 audit(1792619345.169:1963): avc: denied { write } for pid=24463 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1484.047764][ T30] audit: type=1400 audit(1792619345.499:1964): avc: denied { write } for pid=24465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1484.167293][ T30] audit: type=1400 audit(1792619345.619:1965): avc: denied { write } for pid=24476 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1484.274614][T24346] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.477179][T24346] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.607907][T24346] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.765203][T24346] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.355368][ T5603] Bluetooth: hci5: command tx timeout [ 1485.398817][T24346] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1485.413805][T24346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1485.417616][T24346] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1485.427128][T24346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1485.429364][T24346] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1485.468437][T24346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1485.469837][T24346] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1485.482071][T24346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1485.739256][T24346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.779943][T24346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.791365][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.791464][ T1494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.825913][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.825999][ T8239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.255834][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1486.255851][ T30] audit: type=1400 audit(1792619347.709:1972): avc: denied { write } for pid=24524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1486.370471][ T30] audit: type=1400 audit(1792619347.819:1973): avc: denied { write } for pid=24541 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1486.743400][T24346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1486.857476][ T30] audit: type=1400 audit(1792619348.309:1974): avc: denied { write } for pid=24545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1486.994844][ T30] audit: type=1400 audit(1792619348.449:1975): avc: denied { write } for pid=24564 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1487.202870][T24346] veth0_vlan: entered promiscuous mode [ 1487.221197][T24346] veth1_vlan: entered promiscuous mode [ 1487.252254][T24346] veth0_macvtap: entered promiscuous mode [ 1487.282336][T24346] veth1_macvtap: entered promiscuous mode [ 1487.304148][T24346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1487.322188][T24346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1487.366180][ T8431] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.387882][ T1494] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.388591][ T1494] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.388969][ T1494] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.514228][ T8234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.514250][ T8234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.611292][ T30] audit: type=1400 audit(1792619349.059:1976): avc: denied { write } for pid=24568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1487.635187][ T8234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.635207][ T8234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.728898][ T30] audit: type=1400 audit(1792619349.179:1977): avc: denied { write } for pid=24580 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1487.883896][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1488.023119][T21582] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1488.173161][T21582] usb 8-1: Using ep0 maxpacket: 32 [ 1488.173786][T21582] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1488.175829][T21582] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.175868][T21582] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1488.175893][T21582] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1488.175918][T21582] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1488.177872][T21582] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.177894][T21582] usb 8-1: Product: syz [ 1488.177908][T21582] usb 8-1: Manufacturer: syz [ 1488.177923][T21582] usb 8-1: SerialNumber: syz [ 1488.279144][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1488.281046][T21582] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input56 [ 1488.407094][T24583] netlink: 13 bytes leftover after parsing attributes in process `syz.7.4849'. [ 1488.424036][T21582] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1488.424057][T21582] (id 0x00) [ 1488.446210][ T30] audit: type=1400 audit(1792619349.909:1978): avc: denied { write } for pid=24589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1488.546406][ T30] audit: type=1400 audit(1792619349.999:1979): avc: denied { write } for pid=24601 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1488.557502][T21582] rc_core: IR keymap rc-imon-pad not found [ 1488.557521][T21582] Registered IR keymap rc-empty [ 1488.557574][T21582] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1488.557591][T21582] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1488.634005][T21582] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 1488.638642][T21582] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input57 [ 1488.664762][T21582] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:78> initialized [ 1489.037289][ T30] audit: type=1400 audit(1792619350.489:1980): avc: denied { write } for pid=24604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1489.149653][ T30] audit: type=1400 audit(1792619350.599:1981): avc: denied { write } for pid=24615 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1489.242720][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1489.546856][T24629] imon:vfd_write: invalid payload size [ 1490.898344][ T29] usb 8-1: USB disconnect, device number 78 [ 1491.441098][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1491.441115][ T30] audit: type=1400 audit(1792619352.889:1990): avc: denied { write } for pid=24671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1491.558436][ T30] audit: type=1400 audit(1792619353.009:1991): avc: denied { write } for pid=24682 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1491.895184][ T30] audit: type=1400 audit(1792619353.349:1992): avc: denied { write } for pid=24684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1492.012255][ T30] audit: type=1400 audit(1792619353.459:1993): avc: denied { write } for pid=24695 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1492.351817][ T30] audit: type=1400 audit(1792619353.799:1994): avc: denied { write } for pid=24697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1492.463728][ T30] audit: type=1400 audit(1792619353.919:1995): avc: denied { write } for pid=24708 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1492.814778][ T30] audit: type=1400 audit(1792619354.269:1996): avc: denied { write } for pid=24710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1492.932781][ T30] audit: type=1400 audit(1792619354.379:1997): avc: denied { write } for pid=24721 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1493.362875][ T30] audit: type=1400 audit(1792619354.809:1998): avc: denied { write } for pid=24726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1493.483840][ T30] audit: type=1400 audit(1792619354.939:1999): avc: denied { write } for pid=24737 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1493.576236][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1494.090727][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1494.568920][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1495.071524][ T5263] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1498.439019][T24827] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1498.458285][ T8423] IPVS: starting estimator thread 0... [ 1498.507589][T24837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.509396][T24837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.563435][T24838] IPVS: using max 38 ests per chain, 91200 per kthread [ 1498.714915][T24847] FAULT_INJECTION: forcing a failure. [ 1498.714915][T24847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1498.714949][T24847] CPU: 0 UID: 0 PID: 24847 Comm: syz.3.4861 Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.714975][T24847] Tainted: [L]=SOFTLOCKUP [ 1498.714982][T24847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1498.714992][T24847] Call Trace: [ 1498.714999][T24847] [ 1498.715007][T24847] dump_stack_lvl+0x100/0x190 [ 1498.715038][T24847] should_fail_ex.cold+0x5/0xa [ 1498.715065][T24847] _copy_from_user+0x2e/0xd0 [ 1498.715095][T24847] memdup_user+0x6b/0xe0 [ 1498.715117][T24847] strndup_user+0x78/0xe0 [ 1498.715139][T24847] __x64_sys_mount+0x17f/0x310 [ 1498.715161][T24847] ? __pfx___x64_sys_mount+0x10/0x10 [ 1498.715191][T24847] do_syscall_64+0x123/0x790 [ 1498.715212][T24847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.715231][T24847] RIP: 0033:0x7f401939f559 [ 1498.715247][T24847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.715265][T24847] RSP: 002b:00007f401a30d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1498.715284][T24847] RAX: ffffffffffffffda RBX: 00007f4019625fa0 RCX: 00007f401939f559 [ 1498.715296][T24847] RDX: 0000200000000600 RSI: 00002000000005c0 RDI: 00002000000004c0 [ 1498.715307][T24847] RBP: 00007f401a30d090 R08: 0000200000000640 R09: 0000000000000000 [ 1498.715318][T24847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1498.715329][T24847] R13: 00007f4019626038 R14: 00007f4019625fa0 R15: 00007ffffca4dc68 [ 1498.715354][T24847] [ 1499.151656][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1499.151674][ T30] audit: type=1400 audit(1792619360.599:2012): avc: denied { write } for pid=24845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1499.450274][T24865] bridge_slave_0: left allmulticast mode [ 1499.450324][T24865] bridge_slave_0: left promiscuous mode [ 1499.451101][T24865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.076113][ T30] audit: type=1400 audit(1792619361.529:2013): avc: denied { write } for pid=24871 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1500.085651][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1500.193990][T17911] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1500.234756][ T10] usb 10-1: device descriptor read/64, error -71 [ 1500.343863][T17911] usb 4-1: Using ep0 maxpacket: 32 [ 1500.344442][T17911] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1500.345319][T17911] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.345359][T17911] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1500.345382][T17911] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1500.345408][T17911] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1500.347185][T17911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.347205][T17911] usb 4-1: Product: syz [ 1500.347219][T17911] usb 4-1: Manufacturer: syz [ 1500.347232][T17911] usb 4-1: SerialNumber: syz [ 1500.439398][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1500.442382][T17911] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input58 [ 1500.485416][ T10] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1500.562938][T24870] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4864'. [ 1500.593124][T17911] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1500.593146][T17911] (id 0x00) [ 1500.625785][ T10] usb 10-1: device descriptor read/64, error -71 [ 1500.689300][T17911] rc_core: IR keymap rc-imon-pad not found [ 1500.689320][T17911] Registered IR keymap rc-empty [ 1500.689375][T17911] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1500.689392][T17911] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1500.735211][ T10] usb usb10-port1: attempt power cycle [ 1500.804629][T17911] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1500.808957][T17911] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input59 [ 1500.839233][T17911] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:17> initialized [ 1501.023213][T21676] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1501.094616][ T10] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1501.125340][ T10] usb 10-1: device descriptor read/8, error -71 [ 1501.158050][T21676] usb 8-1: device descriptor read/64, error -71 [ 1501.195170][ T30] audit: type=1400 audit(1792619362.649:2014): avc: denied { write } for pid=24877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1501.302445][ T30] audit: type=1400 audit(1792619362.749:2015): avc: denied { write } for pid=24892 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1501.374578][ T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1501.466713][T21676] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1501.467294][ T10] usb 10-1: device descriptor read/8, error -71 [ 1501.574461][ T10] usb usb10-port1: unable to enumerate USB device [ 1501.629780][T21676] usb 8-1: device descriptor read/64, error -71 [ 1501.890781][T21676] usb usb8-port1: attempt power cycle [ 1501.899025][T24900] imon:vfd_write: invalid payload size [ 1502.391665][T21676] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1502.426234][T24908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1502.594748][ T30] audit: type=1326 audit(1792619363.849:2016): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24905 comm="syz.2.4865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e3b9f559 code=0x7ffc0000 [ 1502.595706][ T30] audit: type=1326 audit(1792619363.849:2017): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24905 comm="syz.2.4865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e3b9f559 code=0x7ffc0000 [ 1502.595852][ T30] audit: type=1326 audit(1792619363.869:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24905 comm="syz.2.4865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e3b9f559 code=0x7ffc0000 [ 1502.595980][ T30] audit: type=1326 audit(1792619363.869:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24905 comm="syz.2.4865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e3b9f559 code=0x7ffc0000 [ 1502.596156][ T30] audit: type=1326 audit(1792619363.869:2020): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24905 comm="syz.2.4865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa1e3b9f559 code=0x7ffc0000 [ 1502.596297][ T30] audit: type=1326 audit(1792619363.869:2021): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24905 comm="syz.2.4865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e3b9f559 code=0x7ffc0000 [ 1502.752786][T21676] usb 8-1: device descriptor read/8, error -71 [ 1503.003855][T21676] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1503.024964][T21676] usb 8-1: device descriptor read/8, error -71 [ 1503.135318][T21676] usb usb8-port1: unable to enumerate USB device [ 1505.508724][T21582] usb 4-1: USB disconnect, device number 17 [ 1505.954897][T24952] cgroup: fork rejected by pids controller in /syz3 [ 1506.283521][T24992] FAULT_INJECTION: forcing a failure. [ 1506.283521][T24992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.283554][T24992] CPU: 0 UID: 0 PID: 24992 Comm: syz.4.4867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1506.283580][T24992] Tainted: [L]=SOFTLOCKUP [ 1506.283587][T24992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1506.283599][T24992] Call Trace: [ 1506.283606][T24992] [ 1506.283613][T24992] dump_stack_lvl+0x100/0x190 [ 1506.283645][T24992] should_fail_ex.cold+0x5/0xa [ 1506.283673][T24992] _copy_from_user+0x2e/0xd0 [ 1506.283702][T24992] memdup_user+0x6b/0xe0 [ 1506.283724][T24992] strndup_user+0x78/0xe0 [ 1506.283747][T24992] __x64_sys_mount+0x17f/0x310 [ 1506.283770][T24992] ? __pfx___x64_sys_mount+0x10/0x10 [ 1506.283798][T24992] do_syscall_64+0x123/0x790 [ 1506.283821][T24992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.283841][T24992] RIP: 0033:0x7fa22539f559 [ 1506.283858][T24992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1506.283876][T24992] RSP: 002b:00007fa2261b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1506.283894][T24992] RAX: ffffffffffffffda RBX: 00007fa225626090 RCX: 00007fa22539f559 [ 1506.283907][T24992] RDX: 00002000000003c0 RSI: 0000200000000340 RDI: 0000200000000280 [ 1506.283919][T24992] RBP: 00007fa2261b3090 R08: 0000200000000440 R09: 0000000000000000 [ 1506.283931][T24992] R10: 0000000000008080 R11: 0000000000000246 R12: 0000000000000001 [ 1506.283943][T24992] R13: 00007fa225626128 R14: 00007fa225626090 R15: 00007ffdd9cce268 [ 1506.283969][T24992] [ 1507.003345][T21676] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1507.201696][T21676] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1507.245419][T21676] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1507.245452][T21676] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1507.320933][T21676] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1507.320962][T21676] usb 10-1: Product: syz [ 1507.320977][T21676] usb 10-1: Manufacturer: syz [ 1507.320993][T21676] usb 10-1: SerialNumber: syz [ 1507.356354][T21676] usb 10-1: config 0 descriptor?? [ 1507.383737][T21676] usb 10-1: selecting invalid altsetting 0 [ 1507.490053][T25003] FAULT_INJECTION: forcing a failure. [ 1507.490053][T25003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.490088][T25003] CPU: 1 UID: 0 PID: 25003 Comm: syz.2.4873 Tainted: G L syzkaller #0 PREEMPT(full) [ 1507.490113][T25003] Tainted: [L]=SOFTLOCKUP [ 1507.490120][T25003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1507.490132][T25003] Call Trace: [ 1507.490139][T25003] [ 1507.490147][T25003] dump_stack_lvl+0x100/0x190 [ 1507.490180][T25003] should_fail_ex.cold+0x5/0xa [ 1507.490206][T25003] _copy_from_user+0x2e/0xd0 [ 1507.490236][T25003] ____sys_sendmsg+0x1d1/0xbe0 [ 1507.490266][T25003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1507.490298][T25003] ? lock_acquire+0x1d1/0x380 [ 1507.490320][T25003] ? get_pid_task+0x2a/0x250 [ 1507.490349][T25003] ___sys_sendmsg+0x190/0x1e0 [ 1507.490378][T25003] ? __pfx____sys_sendmsg+0x10/0x10 [ 1507.490404][T25003] ? get_pid_task+0x106/0x250 [ 1507.490439][T25003] ? find_held_lock+0x2b/0x80 [ 1507.490473][T25003] __sys_sendmsg+0x160/0x210 [ 1507.490495][T25003] ? __pfx___sys_sendmsg+0x10/0x10 [ 1507.490531][T25003] do_syscall_64+0x123/0x790 [ 1507.490558][T25003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.490577][T25003] RIP: 0033:0x7fa1e3b9f559 [ 1507.490593][T25003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.490611][T25003] RSP: 002b:00007fa1e4b47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1507.490630][T25003] RAX: ffffffffffffffda RBX: 00007fa1e3e25fa0 RCX: 00007fa1e3b9f559 [ 1507.490643][T25003] RDX: 0000000000042090 RSI: 0000200000000f40 RDI: 0000000000000004 [ 1507.490654][T25003] RBP: 00007fa1e4b47090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.490665][T25003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.490680][T25003] R13: 00007fa1e3e26038 R14: 00007fa1e3e25fa0 R15: 00007ffd191579f8 [ 1507.490710][T25003] [ 1507.726517][T21676] usb 10-1: USB disconnect, device number 18 [ 1507.809532][ T30] kauditd_printk_skb: 209 callbacks suppressed [ 1507.809551][ T30] audit: type=1400 audit(1792619369.259:2231): avc: denied { write } for pid=24942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1507.931590][T24881] udevd[24881]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1508.058222][T25007] fuse: Unknown parameter 'ÿÿ0x000000000000000a' [ 1508.103160][ T29] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1508.253944][ T29] usb 3-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 1508.255258][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1508.255283][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1508.265252][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.265275][ T29] usb 3-1: Product: syz [ 1508.265289][ T29] usb 3-1: Manufacturer: syz [ 1508.265302][ T29] usb 3-1: SerialNumber: syz [ 1508.288927][ T29] whiteheat 3-1:1.0: Connect Tech - WhiteHEAT converter detected [ 1508.407233][ T30] audit: type=1400 audit(1792619369.859:2232): avc: denied { write } for pid=25017 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1508.515690][T25009] rxe_eth0 speed is unknown, defaulting to 1000 [ 1508.546518][ T29] usb 3-1: Connect Tech - WhiteHEAT: Couldn't get results [-90] [ 1508.546544][ T29] usb 3-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 1508.546561][ T29] usb 3-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 1508.546579][ T29] usb 3-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 1511.159225][T25041] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4877'. [ 1511.162288][ T30] audit: type=1401 audit(1792619372.609:2233): op=setxattr invalid_context="" [ 1511.259294][ T30] audit: type=1400 audit(1792619372.709:2234): avc: denied { write } for pid=25023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1511.704696][T21582] usb 3-1: USB disconnect, device number 65 [ 1511.743362][ T30] audit: type=1400 audit(1792619373.199:2235): avc: denied { write } for pid=25048 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1514.366590][T25074] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4886'. [ 1514.560600][T25081] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4887'. [ 1514.591025][T25081] bond0: (slave bond_slave_0): Releasing backup interface [ 1514.727714][T25081] bond_slave_0: entered promiscuous mode [ 1514.727730][T25081] bond_slave_0: entered allmulticast mode [ 1515.594828][T25088] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1515.594856][T25088] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1515.594921][T25088] vhci_hcd vhci_hcd.0: Device attached [ 1515.662006][ T30] audit: type=1400 audit(1792619377.109:2236): avc: denied { write } for pid=25057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1515.706038][T25089] vhci_hcd: connection closed [ 1515.717378][ T8225] vhci_hcd vhci_hcd.3: stop threads [ 1515.717402][ T8225] vhci_hcd vhci_hcd.3: release socket [ 1515.717449][ T8225] vhci_hcd vhci_hcd.3: disconnect device [ 1515.774062][ T29] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1515.962485][ T30] audit: type=1400 audit(1792619377.409:2237): avc: denied { write } for pid=25097 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1517.049054][T25111] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1517.049074][T25111] audit: out of memory in audit_log_start [ 1519.231156][ T30] audit: type=1400 audit(1792619380.679:2238): avc: denied { write } for pid=25120 comm="syz.9.4894" name="strings" dev="configfs" ino=37370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1519.258312][ T30] audit: type=1400 audit(1792619380.709:2239): avc: denied { ioctl } for pid=25120 comm="syz.9.4894" path="/14/config/usb_gadget/g1/idVendor" dev="configfs" ino=107651 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1519.293872][ T30] audit: type=1400 audit(1792619380.729:2240): avc: denied { setattr } for pid=25120 comm="syz.9.4894" name="g1" dev="configfs" ino=37367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1519.528698][ T30] audit: type=1400 audit(1792619380.979:2241): avc: denied { write } for pid=25119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1519.603570][T25133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1519.639370][ T30] audit: type=1400 audit(1792619381.089:2242): avc: denied { mount } for pid=25132 comm="syz.9.4895" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1519.640859][ T30] audit: type=1400 audit(1792619381.089:2243): avc: denied { read write } for pid=25132 comm="syz.9.4895" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1519.789564][T25141] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4896'. [ 1521.904742][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1521.904758][ T30] audit: type=1400 audit(1792619383.359:2248): avc: denied { unmount } for pid=23950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1522.036198][T23950] svc: failed to register nfsdv3 RPC service (errno 111). [ 1522.049584][T23950] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1522.049604][T23950] failed to unregister tcp with rpcbind [ 1522.050260][T23950] svc: failed to register nfsdv3 RPC service (errno 97). [ 1522.050275][T23950] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1522.050285][T23950] failed to unregister tcp with rpcbind [ 1522.509903][T25167] FAULT_INJECTION: forcing a failure. [ 1522.509903][T25167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1522.509967][T25167] CPU: 0 UID: 0 PID: 25167 Comm: syz.2.4891 Tainted: G L syzkaller #0 PREEMPT(full) [ 1522.509994][T25167] Tainted: [L]=SOFTLOCKUP [ 1522.510001][T25167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1522.510014][T25167] Call Trace: [ 1522.510021][T25167] [ 1522.510030][T25167] dump_stack_lvl+0x100/0x190 [ 1522.510068][T25167] should_fail_ex.cold+0x5/0xa [ 1522.510096][T25167] _copy_to_iter+0x1f3/0x1720 [ 1522.510130][T25167] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1522.510153][T25167] ? __pfx__copy_to_iter+0x10/0x10 [ 1522.510183][T25167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1522.510209][T25167] ? kernfs_put_active+0x93/0xe0 [ 1522.510239][T25167] seq_read_iter+0xdab/0x1270 [ 1522.510280][T25167] kernfs_fop_read_iter+0x46c/0x610 [ 1522.510308][T25167] ? rw_verify_area+0xce/0x6d0 [ 1522.510330][T25167] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1522.510363][T25167] vfs_read+0x82e/0xb40 [ 1522.510391][T25167] ? __pfx_vfs_read+0x10/0x10 [ 1522.510414][T25167] ? find_held_lock+0x2b/0x80 [ 1522.510451][T25167] ksys_read+0x12a/0x250 [ 1522.510477][T25167] ? __pfx_ksys_read+0x10/0x10 [ 1522.510500][T25167] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 1522.510538][T25167] do_syscall_64+0x123/0x790 [ 1522.510562][T25167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.510582][T25167] RIP: 0033:0x7fa1e3b9f559 [ 1522.510600][T25167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.510618][T25167] RSP: 002b:00007fa1e4b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1522.510638][T25167] RAX: ffffffffffffffda RBX: 00007fa1e3e26090 RCX: 00007fa1e3b9f559 [ 1522.510651][T25167] RDX: 0000000000002020 RSI: 00002000000021c0 RDI: 0000000000000003 [ 1522.510663][T25167] RBP: 00007fa1e4b26090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.510675][T25167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1522.510691][T25167] R13: 00007fa1e3e26128 R14: 00007fa1e3e26090 R15: 00007ffd191579f8 [ 1522.510719][T25167] [ 1524.136586][T25173] FAULT_INJECTION: forcing a failure. [ 1524.136586][T25173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1524.137064][T25173] CPU: 1 UID: 0 PID: 25173 Comm: syz.9.4900 Tainted: G L syzkaller #0 PREEMPT(full) [ 1524.137091][T25173] Tainted: [L]=SOFTLOCKUP [ 1524.137098][T25173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1524.137116][T25173] Call Trace: [ 1524.137123][T25173] [ 1524.137132][T25173] dump_stack_lvl+0x100/0x190 [ 1524.137165][T25173] should_fail_ex.cold+0x5/0xa [ 1524.137194][T25173] _copy_from_iter+0x43a/0x1690 [ 1524.137219][T25173] ? __pfx__copy_from_iter+0x10/0x10 [ 1524.137240][T25173] ? mark_held_locks+0x40/0x70 [ 1524.137264][T25173] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1524.137291][T25173] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 1524.137320][T25173] ping_common_sendmsg+0xc4/0x2e0 [ 1524.137352][T25173] ping_v4_sendmsg+0x192/0x19c0 [ 1524.137386][T25173] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 1524.137415][T25173] ? __lock_acquire+0x5c0/0x1f40 [ 1524.137450][T25173] ? release_sock+0x21/0x280 [ 1524.137478][T25173] ? inet_autobind+0x145/0x1a0 [ 1524.137504][T25173] ? find_held_lock+0x2b/0x80 [ 1524.137527][T25173] ? lockdep_hardirqs_on+0x7d/0x110 [ 1524.137547][T25173] ? inet_autobind+0x145/0x1a0 [ 1524.137572][T25173] ? __local_bh_enable_ip+0xa5/0x120 [ 1524.137595][T25173] ? inet_autobind+0x14a/0x1a0 [ 1524.137622][T25173] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 1524.137653][T25173] inet_sendmsg+0x11c/0x140 [ 1524.137674][T25173] ____sys_sendmsg+0x9c9/0xbe0 [ 1524.137700][T25173] ? __pfx_inet_sendmsg+0x10/0x10 [ 1524.137721][T25173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1524.137753][T25173] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1524.137783][T25173] ? rcu_is_watching+0x13/0xc0 [ 1524.137816][T25173] ___sys_sendmsg+0x190/0x1e0 [ 1524.137846][T25173] ? __pfx____sys_sendmsg+0x10/0x10 [ 1524.137892][T25173] ? find_held_lock+0x2b/0x80 [ 1524.137928][T25173] __sys_sendmsg+0x160/0x210 [ 1524.137951][T25173] ? __pfx___sys_sendmsg+0x10/0x10 [ 1524.137987][T25173] do_syscall_64+0x123/0x790 [ 1524.138010][T25173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.138030][T25173] RIP: 0033:0x7f635239f559 [ 1524.138048][T25173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.138067][T25173] RSP: 002b:00007f63532f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1524.138086][T25173] RAX: ffffffffffffffda RBX: 00007f6352625fa0 RCX: 00007f635239f559 [ 1524.138099][T25173] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 1524.138111][T25173] RBP: 00007f63532f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.138122][T25173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.138134][T25173] R13: 00007f6352626038 R14: 00007f6352625fa0 R15: 00007ffeef0eb968 [ 1524.138161][T25173] [ 1526.400428][ T30] audit: type=1400 audit(1792619387.849:2249): avc: denied { write } for pid=25152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1526.484844][T25194] sd 0:0:1:0: PR command failed: 1026 [ 1526.484991][T25194] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1526.485116][T25194] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1526.672517][ T30] audit: type=1800 audit(1792619388.089:2250): pid=25195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4904" name="file0" dev="overlay" ino=98 res=0 errno=0 [ 1527.171270][T25203] binder: 25198:25203 ioctl 40087602 200000000580 returned -22 [ 1528.319339][ T30] audit: type=1400 audit(1792619389.769:2251): avc: denied { write } for pid=25206 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1528.389103][T24000] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1528.410786][T24000] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1528.411924][T24000] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1528.428738][T24000] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1528.429280][T24000] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1529.694636][T25229] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1529.694673][T25229] audit: out of memory in audit_log_start [ 1530.633304][ T5603] Bluetooth: hci7: command tx timeout [ 1530.877674][ T8651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.939117][ T30] audit: type=1400 audit(1792619392.389:2252): avc: denied { write } for pid=25217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1532.208322][T25249] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1532.501743][ T8238] IPVS: starting estimator thread 0... [ 1532.571306][ T30] audit: type=1400 audit(1792619394.019:2253): avc: denied { write } for pid=25250 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1532.595166][T25251] IPVS: using max 51 ests per chain, 122400 per kthread [ 1532.648376][ T30] audit: type=1400 audit(1792619394.099:2254): avc: denied { ioctl } for pid=25253 comm="syz.9.4916" path="socket:[107935]" dev="sockfs" ino=107935 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1532.683870][T24000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1532.692191][T24000] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1532.693174][T24000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1532.693828][T24000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1532.694243][T24000] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1532.719890][T24000] Bluetooth: hci7: command tx timeout [ 1532.831864][ T8651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.255512][ T8651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.373991][T25277] ovs-dp0: entered promiscuous mode [ 1533.386645][T25275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1533.402033][T25197] rxe_eth0 speed is unknown, defaulting to 1000 [ 1533.604364][ T8651] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.673148][T17911] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1534.674511][T17911] usb 3-1: Using ep0 maxpacket: 16 [ 1534.677346][T17911] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 1534.681413][T17911] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 1534.681437][T17911] usb 3-1: config 0 has no interface number 0 [ 1534.681470][T17911] usb 3-1: config 0 interface 99 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1534.681494][T17911] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1534.689454][T17911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.689476][T17911] usb 3-1: Product: syz [ 1534.689489][T17911] usb 3-1: Manufacturer: syz [ 1534.689502][T17911] usb 3-1: SerialNumber: syz [ 1534.697743][T17911] usb 3-1: config 0 descriptor?? [ 1534.701035][T17911] usbtest 3-1:0.99: couldn't get endpoints, -22 [ 1534.701089][T17911] usbtest 3-1:0.99: probe with driver usbtest failed with error -22 [ 1534.713107][ T5603] Bluetooth: hci6: command tx timeout [ 1534.793172][ T5603] Bluetooth: hci7: command tx timeout [ 1534.923163][T21677] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1535.101441][T21677] usb 10-1: Using ep0 maxpacket: 16 [ 1535.102348][T21677] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1535.119725][T21677] usb 10-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1535.119771][T21677] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1535.119796][T21677] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1535.119822][T21677] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1535.122780][T21677] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.122805][T21677] usb 10-1: Product: syz [ 1535.122820][T21677] usb 10-1: Manufacturer: syz [ 1535.122835][T21677] usb 10-1: SerialNumber: syz [ 1535.202254][T21677] usb 10-1: config 0 descriptor?? [ 1535.253267][ T8238] netdevsim netdevsim3 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 1535.450291][T21677] appledisplay 10-1:0.0: Error while getting initial brightness: -71 [ 1535.451589][T21677] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -71 [ 1535.452820][T25254] rxe_eth0 speed is unknown, defaulting to 1000 [ 1535.453560][ T8431] netdevsim netdevsim3 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 1535.463248][ T8238] netdevsim netdevsim3 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 1535.507595][T21677] usb 10-1: USB disconnect, device number 19 [ 1535.536907][T22954] netdevsim netdevsim3 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 1535.627771][ T30] audit: type=1400 audit(1792619397.079:2255): avc: denied { write } for pid=25279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1535.629233][T21582] usb 3-1: USB disconnect, device number 66 [ 1535.658400][ T8651] bridge_slave_1: left allmulticast mode [ 1535.658424][ T8651] bridge_slave_1: left promiscuous mode [ 1535.658602][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.716337][ T8651] bridge_slave_0: left allmulticast mode [ 1535.717041][ T8651] bridge_slave_0: left promiscuous mode [ 1535.717214][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.879963][T25299] FAULT_INJECTION: forcing a failure. [ 1535.879963][T25299] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.879996][T25299] CPU: 1 UID: 0 PID: 25299 Comm: syz.7.4915 Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.880022][T25299] Tainted: [L]=SOFTLOCKUP [ 1535.880028][T25299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1535.880040][T25299] Call Trace: [ 1535.880047][T25299] [ 1535.880054][T25299] dump_stack_lvl+0x100/0x190 [ 1535.880088][T25299] should_fail_ex.cold+0x5/0xa [ 1535.880115][T25299] should_failslab+0xc2/0x120 [ 1535.880144][T25299] __kmalloc_noprof+0xfc/0x840 [ 1535.880169][T25299] ? tomoyo_encode2+0xfb/0x3c0 [ 1535.880193][T25299] tomoyo_encode2+0xfb/0x3c0 [ 1535.880216][T25299] tomoyo_encode+0x29/0x50 [ 1535.880241][T25299] tomoyo_realpath_from_path+0x18c/0x690 [ 1535.880267][T25299] tomoyo_path_number_perm+0x23c/0x580 [ 1535.880293][T25299] ? tomoyo_path_number_perm+0x22e/0x580 [ 1535.880321][T25299] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1535.880359][T25299] ? __lock_acquire+0x5c0/0x1f40 [ 1535.880394][T25299] ? __fget_files+0x34/0x3d0 [ 1535.880412][T25299] ? find_held_lock+0x2b/0x80 [ 1535.880428][T25299] ? hook_file_ioctl_common+0x140/0x440 [ 1535.880456][T25299] ? __fget_files+0x21f/0x3d0 [ 1535.880477][T25299] security_file_ioctl+0xd3/0x230 [ 1535.880506][T25299] __x64_sys_ioctl+0xb7/0x210 [ 1535.880532][T25299] do_syscall_64+0x123/0x790 [ 1535.880553][T25299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.880572][T25299] RIP: 0033:0x7fde0ff9f559 [ 1535.880589][T25299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.880606][T25299] RSP: 002b:00007fde10e42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1535.880625][T25299] RAX: ffffffffffffffda RBX: 00007fde10225fa0 RCX: 00007fde0ff9f559 [ 1535.880637][T25299] RDX: 0000200000000280 RSI: 0000000000003b72 RDI: 0000000000000003 [ 1535.880648][T25299] RBP: 00007fde10e42090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.880659][T25299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.880670][T25299] R13: 00007fde10226038 R14: 00007fde10225fa0 R15: 00007ffe0ef01e28 [ 1535.880705][T25299] [ 1535.880726][T25299] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1537.102317][ T5603] Bluetooth: hci6: command tx timeout [ 1537.102352][ T5603] Bluetooth: hci7: command tx timeout [ 1537.164529][ T30] audit: type=1400 audit(1792619398.619:2256): avc: denied { write } for pid=25301 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1537.724933][ T8651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.766939][ T8651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.778354][ T8651] bond0 (unregistering): Released all slaves [ 1538.242472][T25321] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4925'. [ 1538.382272][T25317] vlan2: entered promiscuous mode [ 1538.382309][T25317] dummy0: entered promiscuous mode [ 1538.382636][T25317] vlan2: entered allmulticast mode [ 1538.382652][T25317] dummy0: entered allmulticast mode [ 1538.406139][T25322] md: invalid raid superblock magic on ram14 [ 1538.406156][T25322] md: ram14 does not have a valid v0.0 superblock, not importing! [ 1538.406213][T25322] md: md_import_device returned -22 [ 1538.702767][ T30] audit: type=1400 audit(1792619400.149:2257): avc: denied { write } for pid=25312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1539.114606][ T5603] Bluetooth: hci6: command tx timeout [ 1539.119942][ T30] audit: type=1400 audit(1792619400.569:2258): avc: denied { write } for pid=25330 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1539.188780][T25334] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[24346] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[25334] [ 1540.483533][T25359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1540.504360][T25359] FAULT_INJECTION: forcing a failure. [ 1540.504360][T25359] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.504397][T25359] CPU: 1 UID: 0 PID: 25359 Comm: syz.9.4929 Tainted: G L syzkaller #0 PREEMPT(full) [ 1540.504426][T25359] Tainted: [L]=SOFTLOCKUP [ 1540.504434][T25359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1540.504447][T25359] Call Trace: [ 1540.504455][T25359] [ 1540.504463][T25359] dump_stack_lvl+0x100/0x190 [ 1540.504498][T25359] should_fail_ex.cold+0x5/0xa [ 1540.504527][T25359] should_failslab+0xc2/0x120 [ 1540.504558][T25359] __kmalloc_cache_noprof+0x91/0x6d0 [ 1540.504581][T25359] ? __kasan_kmalloc+0xaa/0xb0 [ 1540.504608][T25359] ? bpf_init_fs_context+0x49/0x340 [ 1540.504635][T25359] bpf_init_fs_context+0x49/0x340 [ 1540.504657][T25359] alloc_fs_context+0x60c/0xf40 [ 1540.504695][T25359] __x64_sys_fsopen+0xed/0x220 [ 1540.504724][T25359] do_syscall_64+0x123/0x790 [ 1540.504748][T25359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.504772][T25359] RIP: 0033:0x7f635239f559 [ 1540.504789][T25359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.504808][T25359] RSP: 002b:00007f63532f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1540.504828][T25359] RAX: ffffffffffffffda RBX: 00007f6352625fa0 RCX: 00007f635239f559 [ 1540.504841][T25359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 1540.504853][T25359] RBP: 00007f6352436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1540.504865][T25359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1540.504878][T25359] R13: 00007f6352626038 R14: 00007f6352625fa0 R15: 00007ffeef0eb968 [ 1540.504905][T25359] [ 1540.758529][ T30] audit: type=1400 audit(1792619402.209:2259): avc: denied { write } for pid=25336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1541.135199][T17911] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1541.193100][T21349] Bluetooth: hci6: command tx timeout [ 1541.241783][ T30] audit: type=1400 audit(1792619402.689:2260): avc: denied { write } for pid=25372 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1541.284589][T17911] usb 10-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1541.285214][T17911] usb 10-1: config 0 has no interfaces? [ 1541.285245][T17911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.348591][T17911] usb 10-1: config 0 descriptor?? [ 1541.719844][T25365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.720201][T25365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.758772][ T8651] hsr_slave_0: left promiscuous mode [ 1541.759762][ T8651] hsr_slave_1: left promiscuous mode [ 1541.762128][ T8651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.762149][ T8651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.799364][ T8651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.799386][ T8651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.846032][ T8651] veth1_macvtap: left promiscuous mode [ 1541.846068][ T8651] veth0_macvtap: left promiscuous mode [ 1541.846154][ T8651] veth1_vlan: left promiscuous mode [ 1541.846209][ T8651] veth0_vlan: left promiscuous mode [ 1541.846703][T25365] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1541.846719][T25365] block device autoloading is deprecated and will be removed. [ 1542.807424][ T8651] team0 (unregistering): Port device team_slave_1 removed [ 1542.875379][ T8651] team0 (unregistering): Port device team_slave_0 removed [ 1542.978660][T25395] binder: 25393:25395 ioctl 40087602 200000000580 returned -22 [ 1545.337852][T25197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.337971][T25197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.338067][T25197] bridge_slave_0: entered allmulticast mode [ 1545.339289][T25197] bridge_slave_0: entered promiscuous mode [ 1545.373113][T21582] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1545.396085][T25197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.396218][T25197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.396339][T25197] bridge_slave_1: entered allmulticast mode [ 1545.399327][T25197] bridge_slave_1: entered promiscuous mode [ 1545.424660][T21677] usb 10-1: USB disconnect, device number 20 [ 1545.512085][T21582] usb 3-1: device descriptor read/64, error -71 [ 1545.547706][T25197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.550252][T25197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.581238][T25197] team0: Port device team_slave_0 added [ 1545.584663][T25197] team0: Port device team_slave_1 added [ 1545.607528][T25197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.607544][T25197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.607565][T25197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.611600][T25197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.611614][T25197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.611636][T25197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.744550][T21582] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1545.917276][T21582] usb 3-1: device descriptor read/64, error -71 [ 1545.933809][T25197] hsr_slave_0: entered promiscuous mode [ 1545.946934][T25197] hsr_slave_1: entered promiscuous mode [ 1545.948363][T25197] debugfs: 'hsr0' already exists in 'hsr' [ 1545.948379][T25197] Cannot create hsr debugfs directory [ 1546.023811][T21582] usb usb3-port1: attempt power cycle [ 1546.385694][T21582] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1547.368216][T21582] usb 3-1: device not accepting address 69, error -71 [ 1547.679771][T25420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4939'. [ 1547.679798][T25420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4939'. [ 1547.799660][T25420] smbdirect: ib_dev[syz]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1547.799698][T25420] smbdirect: ib_dev[syz]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1547.799740][T25420] smbdirect: ib_dev[syz]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1547.813812][T25420] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1549.256751][ T8651] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.382518][T25254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.385382][T25254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.385521][T25254] bridge_slave_0: entered allmulticast mode [ 1549.403466][T25254] bridge_slave_0: entered promiscuous mode [ 1549.493956][T25254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.494039][T25254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.494177][T25254] bridge_slave_1: entered allmulticast mode [ 1549.501606][T25254] bridge_slave_1: entered promiscuous mode [ 1550.131478][ T8651] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.282362][T25254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.303196][T21676] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1550.303521][T25254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.485699][T21676] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1550.486753][T21676] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1550.486774][T21676] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1550.486795][T21676] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.490489][T21676] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -12 [ 1550.622213][T25197] netdevsim netdevsim8 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1551.939571][ T8651] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.985494][ T30] audit: type=1400 audit(1792619413.439:2261): avc: denied { write } for pid=25427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1552.189843][ T8651] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.254270][T25254] team0: Port device team_slave_0 added [ 1552.358144][T25197] netdevsim netdevsim8 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1552.366149][ T30] audit: type=1400 audit(1792619413.819:2262): avc: denied { write } for pid=25450 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1552.402147][T25254] team0: Port device team_slave_1 added [ 1552.473390][ T1197] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1552.502285][T25254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.502302][T25254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.502325][T25254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.508272][T25254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.508287][T25254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.508307][T25254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.644921][ T1197] usb 3-1: Using ep0 maxpacket: 8 [ 1552.645058][ T5714] usb 8-1: USB disconnect, device number 83 [ 1552.666335][ T1197] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1552.666376][ T1197] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1552.670541][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1552.670572][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1552.670601][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1552.670626][ T1197] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1552.670648][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1552.670669][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1552.670688][ T1197] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1552.681164][ T1197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.681187][ T1197] usb 3-1: Product: syz [ 1552.681201][ T1197] usb 3-1: Manufacturer: syz [ 1552.681214][ T1197] usb 3-1: SerialNumber: syz [ 1552.692975][ T1197] usb 3-1: config 0 descriptor?? [ 1552.698275][T25451] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1552.719946][ T1197] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1552.742614][T25197] netdevsim netdevsim8 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1552.836920][T25455] FAULT_INJECTION: forcing a failure. [ 1552.836920][T25455] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.836952][T25455] CPU: 1 UID: 0 PID: 25455 Comm: syz.7.4945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1552.836978][T25455] Tainted: [L]=SOFTLOCKUP [ 1552.836985][T25455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1552.836996][T25455] Call Trace: [ 1552.837004][T25455] [ 1552.837012][T25455] dump_stack_lvl+0x100/0x190 [ 1552.837053][T25455] should_fail_ex.cold+0x5/0xa [ 1552.837081][T25455] should_failslab+0xc2/0x120 [ 1552.837110][T25455] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1552.837136][T25455] ? jbd2__journal_start+0x194/0x6b0 [ 1552.837170][T25455] jbd2__journal_start+0x194/0x6b0 [ 1552.837202][T25455] __ext4_journal_start_sb+0x314/0x610 [ 1552.837225][T25455] ? ext4_set_acl+0x242/0x560 [ 1552.837251][T25455] ext4_set_acl+0x242/0x560 [ 1552.837286][T25455] ? __pfx_ext4_set_acl+0x10/0x10 [ 1552.837310][T25455] ? __pfx_make_vfsuid+0x10/0x10 [ 1552.837334][T25455] ? selinux_lsm_getattr+0x30d/0x7d0 [ 1552.837362][T25455] ? __pfx_evm_inode_set_acl+0x10/0x10 [ 1552.837389][T25455] set_posix_acl+0x263/0x320 [ 1552.837415][T25455] vfs_set_acl+0x411/0x9e0 [ 1552.837436][T25455] ? mnt_get_write_access+0x52/0x2f0 [ 1552.837464][T25455] do_set_acl+0x14c/0x1a0 [ 1552.837488][T25455] do_setxattr+0xeb/0x180 [ 1552.837510][T25455] filename_setxattr+0x167/0x1d0 [ 1552.837531][T25455] ? __pfx_filename_setxattr+0x10/0x10 [ 1552.837556][T25455] ? do_getname+0x191/0x390 [ 1552.837581][T25455] path_setxattrat+0x1ff/0x3b0 [ 1552.837602][T25455] ? __pfx_path_setxattrat+0x10/0x10 [ 1552.837625][T25455] ? ksys_write+0x190/0x250 [ 1552.837648][T25455] ? ksys_write+0x190/0x250 [ 1552.837691][T25455] ? fput+0x7c/0x100 [ 1552.837708][T25455] ? ksys_write+0x1ac/0x250 [ 1552.837730][T25455] ? __pfx_ksys_write+0x10/0x10 [ 1552.837756][T25455] __x64_sys_setxattr+0xc6/0x140 [ 1552.837776][T25455] ? do_syscall_64+0xae/0x790 [ 1552.837795][T25455] ? lockdep_hardirqs_on+0x7d/0x110 [ 1552.837813][T25455] do_syscall_64+0x123/0x790 [ 1552.837834][T25455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.837853][T25455] RIP: 0033:0x7fde0ff9f559 [ 1552.837869][T25455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.837886][T25455] RSP: 002b:00007fde10e42028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1552.837905][T25455] RAX: ffffffffffffffda RBX: 00007fde10225fa0 RCX: 00007fde0ff9f559 [ 1552.837917][T25455] RDX: 0000000000000000 RSI: 0000200000000ec0 RDI: 0000200000000e80 [ 1552.837928][T25455] RBP: 00007fde10e42090 R08: 0000000000000002 R09: 0000000000000000 [ 1552.837940][T25455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.837951][T25455] R13: 00007fde10226038 R14: 00007fde10225fa0 R15: 00007ffe0ef01e28 [ 1552.837978][T25455] [ 1554.091516][T25254] hsr_slave_0: entered promiscuous mode [ 1554.098576][T25254] hsr_slave_1: entered promiscuous mode [ 1554.100786][T25254] debugfs: 'hsr0' already exists in 'hsr' [ 1554.100805][T25254] Cannot create hsr debugfs directory [ 1554.103256][ T8231] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1554.244640][ T8231] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1554.354817][ T1197] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1554.391099][ T1197] usb 3-1: USB disconnect, device number 71 [ 1554.468682][T25468] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4947'. [ 1554.470992][T25468] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4947'. [ 1554.502473][T25295] udevd[25295]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1554.534829][T25197] netdevsim netdevsim8 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1554.853900][ T8651] bridge_slave_1: left allmulticast mode [ 1554.853924][ T8651] bridge_slave_1: left promiscuous mode [ 1554.854082][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.856548][ T8651] bridge_slave_0: left allmulticast mode [ 1554.856568][ T8651] bridge_slave_0: left promiscuous mode [ 1554.856716][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.894176][ T1197] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1555.014248][T25480] binder: 25478:25480 ioctl 40087602 200000000580 returned -22 [ 1555.148991][ T1197] usb 8-1: device descriptor read/64, error -71 [ 1555.535781][ T30] audit: type=1400 audit(1792619416.989:2263): avc: denied { write } for pid=25461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1555.643133][ T1197] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1555.760335][ T8651] bridge_slave_1: left allmulticast mode [ 1555.760400][ T8651] bridge_slave_1: left promiscuous mode [ 1555.761265][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.941611][ T8651] bridge_slave_0: left allmulticast mode [ 1555.941681][ T8651] bridge_slave_0: left promiscuous mode [ 1555.942456][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.992008][ T8651] pimreg: left allmulticast mode [ 1556.034813][ T1197] usb 8-1: device descriptor read/64, error -71 [ 1556.143412][ T1197] usb usb8-port1: attempt power cycle [ 1556.271602][ T30] audit: type=1400 audit(1792619417.719:2264): avc: denied { write } for pid=25484 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1556.485313][ T1197] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1556.510671][ T1197] usb 8-1: device descriptor read/8, error -71 [ 1556.612002][ T8651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.622941][ T8651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.635381][ T8651] bond0 (unregistering): Released all slaves [ 1556.753202][ T1197] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1556.794467][ T1197] usb 8-1: device descriptor read/8, error -71 [ 1556.903370][ T1197] usb usb8-port1: unable to enumerate USB device [ 1556.930413][ T8651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.950807][ T8651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.951700][ T8651] bond0 (unregistering): Released all slaves [ 1557.083716][ T8231] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.084424][ T8231] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.112480][T25472] rxe_eth0 speed is unknown, defaulting to 1000 [ 1558.986478][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1558.987898][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1558.988704][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1558.989420][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1558.989884][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1559.110352][ T30] audit: type=1400 audit(1792619420.559:2265): avc: denied { write } for pid=25494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1559.385038][ T30] audit: type=1400 audit(1792619420.829:2266): avc: denied { write } for pid=25510 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1559.390801][T25197] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1559.437210][T25197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1559.437930][T25197] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1559.507038][T25197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1559.601316][T25197] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1559.626067][T25197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1559.626757][T25197] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1559.629274][T25197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1559.747775][T25254] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.788984][T25517] trusted_key: encrypted_key: insufficient parameters specified [ 1559.828931][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1560.342324][T25254] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.414384][ T30] audit: type=1400 audit(1792619421.869:2267): avc: denied { write } for pid=25523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1560.509008][ T30] audit: type=1400 audit(1792619421.959:2268): avc: denied { write } for pid=25543 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1560.520407][T25504] rxe_eth0 speed is unknown, defaulting to 1000 [ 1560.687418][T25254] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.885486][ T32] INFO: task syz.3.4764:23392 blocked for more than 144 seconds. [ 1560.885518][ T32] Tainted: G L syzkaller #0 [ 1560.885530][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1560.885538][ T32] task:syz.3.4764 state:D stack:28728 pid:23392 tgid:23390 ppid:21923 task_flags:0x400040 flags:0x00080002 [ 1560.885599][ T32] Call Trace: [ 1560.885606][ T32] [ 1560.885617][ T32] __schedule+0x125e/0x6990 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1560.885650][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1560.885689][ T32] ? __pfx___schedule+0x10/0x10 [ 1560.885715][ T32] ? find_held_lock+0x2b/0x80 [ 1560.885734][ T32] ? schedule+0x225/0x2c0 [ 1560.885765][ T32] sc ** replaying previous printk message ** [ 1560.885765][ T32] schedule+0xdd/0x2c0 [ 1560.885791][ T32] schedule_preempt_disabled+0x13/0x30 [ 1560.885819][ T32] __mutex_lock+0xcca/0x1c10 [ 1560.885838][ T32] ? usbdev_open+0x1b6/0x870 [ 1560.885867][ T32] ? klist_put+0xcb/0x1d0 [ 1560.885892][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1560.885911][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1560.885937][ T32] ? kobject_put+0xb9/0x640 [ 1560.885963][ T32] ? __pfx_bus_find_device+0x10/0x10 [ 1560.885989][ T32] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1560.886012][ T32] ? usbdev_open+0x9d/0x870 [ 1560.886042][ T32] ? usbdev_open+0x1b6/0x870 [ 1560.886068][ T32] usbdev_open+0x1b6/0x870 [ 1560.886097][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1560.886123][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 1560.886148][ T32] ? chrdev_open+0x589/0x6a0 [ 1560.886174][ T32] ? chrdev_open+0x589/0x6a0 [ 1560.886205][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 1560.886233][ T32] chrdev_open+0x234/0x6a0 [ 1560.886262][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1560.886290][ T32] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1560.886317][ T32] do_dentry_open+0x674/0x1470 [ 1560.886341][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1560.886372][ T32] vfs_open_consume+0xcc/0x460 [ 1560.886395][ T32] path_openat+0x1551/0x2430 [ 1560.886418][ T32] ? __pfx_path_openat+0x10/0x10 [ 1560.886443][ T32] do_file_open+0x20e/0x430 [ 1560.886462][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1560.886501][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1560.886533][ T32] ? alloc_fd+0x471/0x7a0 [ 1560.886558][ T32] do_sys_openat2+0x163/0x1d0 [ 1560.886578][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1560.886596][ T32] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1560.886632][ T32] __x64_sys_openat+0x12d/0x210 [ 1560.886653][ T32] ? __pfx___x64_sys_openat+0x10/0x10 [ 1560.886684][ T32] do_syscall_64+0x123/0x790 [ 1560.886706][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.886727][ T32] RIP: 0033:0x7f835eb5fd8e [ 1560.886742][ T32] RSP: 002b:00007f835fae7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1560.886760][ T32] RAX: ffffffffffffffda RBX: 00007f835fae86c0 RCX: 00007f835eb5fd8e [ 1560.886774][ T32] RDX: 0000000000101301 RSI: 00007f835fae7c00 RDI: ffffffffffffff9c [ 1560.886787][ T32] RBP: 00007f835fae7c00 R08: 0000000000000000 R09: 0000000000000000 [ 1560.886799][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1560.886811][ T32] R13: 00007f835ee26038 R14: 00007f835ee25fa0 R15: 00007ffd741ff598 [ 1560.886838][ T32] [ 1560.886876][ T32] [ 1560.886876][ T32] Showing all locks held in the system: [ 1560.886884][ T32] locks held by kworker/0:0/9: 5, last CPU#0: [ 1560.886898][ T32] #0: ffff8880236b3540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1560.886948][ T32] #1: ffffc900000e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1560.886991][ T32] #2: ffff88802bd2e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1560.887037][ T32] #3: ffff88802dcea1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1560.887090][ T32] #4: ffff88802bbca1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1560.887135][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1560.887148][ T32] #0: ffffffff8fdecde0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1560.887227][ T32] locks held by kworker/u8:45/8651: 5, last CPU#0: [ 1560.887241][ T32] #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1560.887283][ T32] #1: ffffc9000dfcfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1560.956771][ T32] #2: ffffffff91cbfd08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1560.956819][ T32] #3: ffff88801e2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 1560.956866][ T32] #4: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 1560.956917][ T32] locks held by kworker/0:13/21677: 3, on CPU#0: [ 1560.956930][ T32] #0: ffff88801d05f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1560.956968][ T32] #1: ffffc90004567d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1560.957008][ T32] #2: ffff88802d0e6250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 1560.957063][ T32] locks held by syz.3.4764/23392: 1, on CPU#1: [ 1560.957076][ T32] #0: ffff88802bd2e1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1560.957124][ T32] locks held by syz.6.4806/23756: 1, on CPU#0: [ 1560.957137][ T32] #0: ffff88802bd2e1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1560.957187][ T32] locks held by syz-executor/25197: 1, on CPU#0: [ 1560.957199][ T32] #0: ffffffff91cd8840 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x4a6/0x1bb0 [ 1560.957245][ T32] locks held by syz-executor/25254: 9, on CPU#0: [ 1560.957257][ T32] #0: ffff8880397e0460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1560.957305][ T32] #1: ffff888034e6d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1560.957350][ T32] #2: ffff88802b5c7968 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1560.957398][ T32] #3: ffffffff9123e900 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1560.957444][ T32] #4: ffff888036474128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1560.957486][ T32] #5: ffff888036472258 (&devlink->lock_key#19){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1560.957537][ T32] #6: ffffffff91cd8840 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x1a6/0x970 [ 1560.957574][ T32] #7: ffff888027a0ce70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x47f/0x2140 [ 1560.957623][ T32] #8: ffffffff8fdf8ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1560.957667][ T32] locks held by syz.7.4947/25472: 3, last CPU#1: [ 1560.957679][ T32] #0: ffffffff91cbfd08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1560.957729][ T32] #1: ffff88801e2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 1560.957773][ T32] #2: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 1560.957819][ T32] locks held by syz-executor/25504: 5, last CPU#0: [ 1560.957831][ T32] #0: ffffffff91cbfd08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1560.957874][ T32] #1: ffffffff918e6de8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 1560.957916][ T32] #2: ffffffff918e6b68 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 1560.957958][ T32] #3: ffff88807d365020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 1560.957999][ T32] #4: ffff88801e2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 1560.958042][ T32] locks held by dhcpcd-run-hook/25548: 1, last CPU#0: [ 1560.958054][ T32] #0: ffff8880758f4cc0 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x254/0xdd0 [ 1560.958108][ T32] [ 1560.958113][ T32] ============================================= [ 1560.958113][ T32] [ 1560.958120][ T32] NMI backtrace for cpu 0 [ 1560.958133][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.958155][ T32] Tainted: [L]=SOFTLOCKUP [ 1560.958161][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1560.958171][ T32] Call Trace: [ 1560.958177][ T32] [ 1560.958184][ T32] dump_stack_lvl+0x100/0x190 [ 1560.958210][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1560.958236][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1560.958257][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1560.958282][ T32] sys_info+0x141/0x190 [ 1560.958302][ T32] watchdog+0xcb1/0x1030 [ 1560.958328][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1560.958352][ T32] ? __pfx_watchdog+0x10/0x10 [ 1560.958374][ T32] ? __kthread_parkme+0x18f/0x230 [ 1560.958398][ T32] ? kthread+0x13a/0x450 [ 1560.958420][ T32] ? __pfx_watchdog+0x10/0x10 [ 1560.958439][ T32] kthread+0x373/0x450 [ 1560.958461][ T32] ? __pfx_kthread+0x10/0x10 [ 1560.958485][ T32] ret_from_fork+0x730/0xd60 [ 1560.958510][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1560.958530][ T32] ? __switch_to+0x800/0x10e0 [ 1560.958554][ T32] ? __pfx_kthread+0x10/0x10 [ 1560.958579][ T32] ret_from_fork_asm+0x1a/0x30 [ 1560.958608][ T32] [ 1560.958614][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1560.958636][ C1] NMI backtrace for cpu 1 [ 1560.958648][ C1] CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.958668][ C1] Tainted: [L]=SOFTLOCKUP [ 1560.958673][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1560.958681][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 1560.958696][ C1] Code: 3c 59 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 bd 50 25 06 e8 28 8d cd fc eb a2 e8 b1 8d [ 1560.958709][ C1] RSP: 0018:ffffc90000a77950 EFLAGS: 00000002 [ 1560.958721][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1560.958730][ C1] RDX: 00000000000003fd RSI: ffffffff85b3bc30 RDI: ffffffff9cc905a0 [ 1560.958739][ C1] RBP: ffffffff9cc90560 R08: 0000000000000001 R09: 000000000000001f [ 1560.958748][ C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 1560.958757][ C1] R13: 0000000000000020 R14: fffffbfff3992109 R15: dffffc0000000000 [ 1560.958766][ C1] FS: 0000000000000000(0000) GS:ffff888122a34000(0000) knlGS:0000000000000000 [ 1560.958781][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1560.958791][ C1] CR2: 00007f51765b2a10 CR3: 000000008e21e000 CR4: 00000000003526f0 [ 1560.958800][ C1] Call Trace: [ 1560.958805][ C1] [ 1560.958811][ C1] wait_for_lsr+0x13a/0x210 [ 1560.958830][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1560.958848][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 1560.958863][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 1560.958877][ C1] serial8250_console_write+0x1108/0x14f0 [ 1560.958898][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1560.958929][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1560.958946][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1560.958965][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 1560.958983][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1560.958998][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1560.959016][ C1] ? do_raw_spin_lock+0xb0/0x260 [ 1560.959038][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 1560.959057][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1560.959076][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 1560.959091][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1560.959109][ C1] nbcon_kthread_func+0x5ef/0x7f0 [ 1560.959126][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1560.959144][ C1] ? __kthread_parkme+0x18f/0x230 [ 1560.959162][ C1] ? kthread+0x13a/0x450 [ 1560.959180][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1560.959195][ C1] kthread+0x373/0x450 [ 1560.959214][ C1] ? __pfx_kthread+0x10/0x10 [ 1560.959233][ C1] ret_from_fork+0x730/0xd60 [ 1560.959249][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1560.959266][ C1] ? __switch_to+0x800/0x10e0 [ 1560.959284][ C1] ? __pfx_kthread+0x10/0x10 [ 1560.959303][ C1] ret_from_fork_asm+0x1a/0x30 [ 1560.959323][ C1] [ 1560.967922][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1562.060721][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1562.071382][ T32] Tainted: [L]=SOFTLOCKUP [ 1562.075703][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1562.085746][ T32] Call Trace: [ 1562.089005][ T32] [ 1562.091915][ T32] dump_stack_lvl+0x100/0x190 [ 1562.096586][ T32] vpanic+0x553/0x970 [ 1562.100558][ T32] ? __pfx_vpanic+0x10/0x10 [ 1562.105049][ T32] panic+0xd1/0xe0 [ 1562.108741][ T32] ? __pfx_panic+0x10/0x10 [ 1562.113137][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1562.119291][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1562.125456][ T32] ? watchdog.cold+0x1ec/0x234 [ 1562.130232][ T32] watchdog.cold+0x1fd/0x234 [ 1562.134827][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1562.140631][ T32] ? __pfx_watchdog+0x10/0x10 [ 1562.145303][ T32] ? __kthread_parkme+0x18f/0x230 [ 1562.150349][ T32] ? kthread+0x13a/0x450 [ 1562.154586][ T32] ? __pfx_watchdog+0x10/0x10 [ 1562.159261][ T32] kthread+0x373/0x450 [ 1562.163326][ T32] ? __pfx_kthread+0x10/0x10 [ 1562.167917][ T32] ret_from_fork+0x730/0xd60 [ 1562.172513][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1562.177627][ T32] ? __switch_to+0x800/0x10e0 [ 1562.182308][ T32] ? __pfx_kthread+0x10/0x10 [ 1562.186891][ T32] ret_from_fork_asm+0x1a/0x30 [ 1562.191648][ T32] [ 1562.194839][ T32] Kernel Offset: disabled [ 1562.199147][ T32] Rebooting in 86400 seconds..