last executing test programs: 5.309482613s ago: executing program 0 (id=1405): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x54, r2, 0xacf5e67dd0b583a1, 0xfffffffb, 0xfffffffd, {{0x5}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x54}}, 0x4c044) preadv(r0, 0x0, 0x0, 0x9, 0x615) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e32, @rand_addr=0x64010102}}, 0x0, 0x0, 0x6, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r5, 0x400, 0x1) exit(0x2) (async) exit(0x2) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) connect$inet(r4, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r4, 0x1) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20003b0000003b0b83efb9302677108120a6ad2a61a54607b71ea9e43d"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 5.02049816s ago: executing program 3 (id=1407): syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3fa0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb, 0x3, 0x7, {0x7, 0x25, 0x1, 0x4, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xd, 0x7, 0x6, {0x7, 0x25, 0x1, 0x4, 0x1, 0x6}}}}}}}}]}}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000380)="e9962aa39a567ed61ec3ec4a05", 0xd}, {&(0x7f00000003c0)="c26aac229870bb25b17da439ce67f4ea383ec73554e2f71deb9d3e81c25faec755a1c53e78dd9f208b3a345cf8eeb584f63617782e91de5d2d4b98e8aee584b69cef7bddcc2286d71b", 0x49}, {&(0x7f0000000480)="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", 0xfd}], 0x3) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001680), 0x0, 0x2002, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/227, 0xe3, 0x40010120, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, r5, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x89) write(r6, &(0x7f0000000000)='R', 0x1) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r6, 0x2}, {r7, 0x1420}, {r6, 0x8142}], 0x3, &(0x7f0000000300)={r8, r9+10000000}, &(0x7f0000000340)={[0xb5ca0000000000]}, 0x8) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendto$packet(r6, &(0x7f00000000c0)="98d2c97cb94b760fb5e4559b1844ccbd558b3f0bfda69a9fbfd605786be2de3afcf73a85", 0x24, 0x40805, 0x0, 0x0) dup(r10) 4.25289605s ago: executing program 1 (id=1410): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0xb0}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9f01478500000083"], 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) close_range(r2, r2, 0x2) r4 = socket$unix(0x1, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r4}}, 0x20) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x5, 0xd0, &(0x7f0000000400)="3b544fd259f273afb9bc53efa7d8ef70412cefaa7283652214daebbd791aacb05383374b1e6271cd2684e71e58c925e8808290e08a47c128d3186d6fb0a549d2ec1e2fcf8647a6043c5120ec5a5b3886020cc626f606ac85c68bfa24a2eee228a9d7fa8b076416345711f4bc6df9b8483f7a7ab167e2e69055ecd9273f7d842ed358df47354b5dcdd46a98e3dc9d5071741818b6bfeeea3570d0eb3f4544f4b60a7a92fa09311d7c239599142501adb171d409216d5d3273277946e5353cf98625ed4276f7583bb36c5292a769a7df06", 0x5bd1bba08fb26c89}, {0x1, 0xd6, &(0x7f0000000500)="b0a4871060c27add8859c0f2329a1bc32212a56280d646b91fa028728c1607e8317850f4f2b7ffa694c29c176e314b92a7a349721610ecaff51e92a50b7d189ba911e2208988574c8d8c34cf2754877ed1bc5bf34ddf5a12c1f453fe5bfbda005c5d9331bd82a9d7e579cc2f0d0425cb3ad25c191f95ff344f19089d4a8ffba66c5a4b4aa19654d4e625b8d7785fc391d8f0d2eb5e933c57780aef4cd1795e4495a5c2e604a064b86672f80311749f9efec09d96f96bfd0b867cb3aee02c34e364b5a5b8ab679e8b81d59c2665105d6acc6d351608ff", 0x1}]}) sendto$inet6(r3, &(0x7f00000001c0)="a6", 0x1, 0x200008c0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc4, 0x0, 0x0}, &(0x7f0000000100)=0x21) write(r2, &(0x7f0000000000)='7', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_open_dev$usbfs(&(0x7f0000000000), 0x102, 0x121703) 3.919571689s ago: executing program 2 (id=1411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd19e2fe8167f8237}, 0x24000050) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='nr0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x43}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xb2a}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2e17}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x43}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xb2a}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2e17}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x3a4, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x959}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x26, 0x3, "1cea69bab1ea713a5023691ddeb60fe6be03a228f7908f678a533c4c8342683cbb57"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa8, 0x3, "b6019f3f984f20c407ac8826a98221819bc1bf7f10b9b170b642d87d144883247570990f05f5d5cd86283c663e31ecdb3400f024f8038115d893d8ee7996999cc75612989e5d7031a4e6d6dbf3cf91e9dc67fb8a69d451763907e26765f4184d6f7424be4c67cf5466a9dd2b97e117fc6aaaa6509defc3d4f7f5f6db3e33b33c15e2b10b831767fc16fda3129bf3792d013ea0f6ccd797ad8c83e682b4746e6458362342"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x56b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x852a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd24}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "a9bf51394726bde87dd75e0592a346e0a3727dca448bb61b42e50f0ce3"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c79}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "1da095c9dc1ea718d5f9fe36b8df70a304a33cba57ce"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x39}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x804}, 0x20040840) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2d0, 0x2d0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000840), {[{{@arp={@multicast2, @broadcast, 0xffffffff, 0xff000000, 0xb, 0x10, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x1e, 0x8000, 0x40, 0x4, 0x18, 'veth1_to_batadv\x00', 'tunl0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x2, 'system_u:object_r:hald_mac_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @empty, @loopback, @private=0xa010101, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x168, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf050}, @TIPC_NLA_NODE_ID={0x12, 0x3, "5f2f48140a27182ec5f0cf2683e3"}, @TIPC_NLA_NODE_ID={0x95, 0x3, "578620c9e4d4eb79c1d45f4293331ec19f8e99e9d2b3c69266bf5c60e97f58a8dd722bb315b8f76834879d87b7e32aa1ca3c6aa69ce337f0ba2528ba1f085d2ce15759a005beecd1bd7e64afd4a59c5407ac1eac4b09f897c1a083c5809ce60e481783d0f7426f6540572a54acf4d0c0d588c432dac25dcd13d8f32d7243ea95ee787434d30ce600285914b5ddde8c2929"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x94e4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x87}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x87}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, r8, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c805}, 0x8081) syz_genetlink_get_family_id$smc(&(0x7f0000001300), r0) (async) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000001300), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x8c, r9, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000014c0), r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001500)={@empty, @initdev}, &(0x7f0000001540)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001500)={@empty, @initdev, 0x0}, &(0x7f0000001540)=0xc) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000001640)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x74, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_FAMILY={0x5, 0xd, 0x3f}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x40, r12, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2a}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x805}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20040014) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x40, r12, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2a}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x805}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20040014) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000017c0), r13) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r12, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20040051) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r12, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20040051) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r4, 0x40106e8c, &(0x7f0000001900)=[0x6, 0x8]) syz_genetlink_get_family_id$team(&(0x7f0000001980), r4) (async) r14 = syz_genetlink_get_family_id$team(&(0x7f0000001980), r4) sendmsg$TEAM_CMD_PORT_LIST_GET(r13, &(0x7f0000001b80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000019c0)={0x158, r14, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r13, &(0x7f0000001b80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000019c0)={0x158, r14, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3.906111549s ago: executing program 2 (id=1412): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x1, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xd11, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x6, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) ioctl$KVM_RUN(r1, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x31, 0x61, 0x63, 0x36, 0x35, 0x3, 0x30, 0x36, 0x31, 0x35, 0x61, 0x39, 0x64, 0x62, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccc9cc307a00844fc79e2bfe20c79db701e5ddeeff80000800", 0x39}, 0x48, r2) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f6007009021200010000000009040000000202", @ANYRES16], 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x62, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x35]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x33, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x36, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233446366778899aabbccddeeff00112233445566eeff00112233445503000000aa91cc7b90e55b668fd3b900", 0x40}, 0x48, r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200050b03000000000000000700000008000700010000000c00008008001d0098"], 0x28}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x64, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "0011227b00f73d778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233eeff00", 0x2d}, 0x48, r2) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000004c0)={'fscrypt:', @auto=[0x38, 0x61, 0x30, 0x32, 0x1, 0x65, 0x32, 0x66, 0x33, 0x64, 0x66, 0x2, 0x32, 0x7, 0x62, 0x36]}, &(0x7f0000000100)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f1de80700", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb8, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80f8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x6c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x5}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004814}, 0x40811) keyctl$unlink(0x9, r0, r2) 2.446105397s ago: executing program 1 (id=1413): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4b4040, 0x82) getdents64(r0, &(0x7f0000000180)=""/249, 0xf9) (async) getdents64(r0, &(0x7f0000000180)=""/249, 0xf9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/tty/ttyS0/rx_trig_bytes\x00', 0x2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/tty/ttyS0/rx_trig_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='8\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/tty/ttyS1/rx_trig_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='8\n\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/tty/ttyS2/rx_trig_bytes\x00', 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/tty/ttyS2/rx_trig_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='8\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/tty/ttyS3/rx_trig_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='8\n\x00', 0x2) (async) write(r4, &(0x7f0000000400)='8\n\x00', 0x2) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a09007f0000000000000000000000000000ffff"], 0x4c}}, 0x80) epoll_create1(0x0) (async) epoll_create1(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) shutdown(r6, 0x1) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f00000002c0), 0x8) (async) connect$bt_sco(r7, &(0x7f00000002c0), 0x8) 2.445211187s ago: executing program 1 (id=1414): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8880}, 0x4000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x72}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a4, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0xf6, 0xc5, "864173cd6ce59eda5334e08af6766fb21af827fa8d9d44a4f0028c568997b6c489a3ec66ba3ab7051b1c35bec15a59342a64458926dae120576cdfa0107b3eaa247f012dd6ba0b4368d70a3d6e2f889b79e3b9bf754fde453aba5b51ce9f63a27ee72ea328e1b9850116a445ea3c16e97b4bb5bc909c6b10e60d9f9e3a32fe712702d701d92747cc8bdaba1175f18649dfc1e852df0bdacee0f126fd497ac1ca3c8e2f254fd430ae0d872ba088b9769e55135eef1a44a1a6b519b03dacac916771dd4a5070c2005cc282ef58a5ba8c76c1c6829587ae2f4ec8acd3b4bfc3687fd40e5185187ef8743b95b9a76624efcc38bc"}, @NL80211_ATTR_VENDOR_DATA={0x7d, 0xc5, "1295d16534351a5253914740894711491cb0370c412fe1891cd2443f976050bd2de9f2fb60667dbfae4dd27fd3df266da5bc6e7eb0509fcfe91c650d12b5786df23b2f1933cc5c2871f0d2f68fec8b71e8ad565fc80f9853d6816578609d2ba6fda34bbec140c7f76d454b22a6776e4c9f188f4b4bf46daf92"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80000001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffbff}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x240040d5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001400)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000013c0)={&(0x7f0000000580)={0xe0c, 0x0, 0x5, 0x300, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x2, 0xfffffffc}, 0x0, 0x6, 0x5, 0xfff, 0x18, 'syz1\x00', "8d563fe77e71a2c7cc99b5c45821447726ece5b9f584929da12e27306627e9a7", "72f6b47efe281edf55716a9fc57608c84c171e2fa66b69ad5911da3ecdf4db9d", [{0xf800, 0x8a0, {0x3, 0xa5}}, {0x7, 0x5, {0x1, 0x7}}, {0x80, 0x2, {0x1, 0x1d68}}, {0x2, 0x0, {0x0, 0x5}}, {0xddc7, 0x9, {0x2, 0x953}}, {0x1, 0x3, {0x3, 0x7fffffff}}, {0x6a7, 0x4, {0x3, 0x6}}, {0x4, 0x4, {0x1, 0x4}}, {0x8, 0x75e, {0x2, 0x10}}, {0x5, 0x0, {0x3, 0x2}}, {0xfff9, 0xe, {0x1, 0x7}}, {0x5, 0x0, {0x0, 0x8be}}, {0x3, 0x2, {0x3, 0x8}}, {0x2469, 0x2, {0x1, 0x8}}, {0x0, 0x80, {0x0, 0x2}}, {0x0, 0x6, {0x2, 0x3}}, {0xd63, 0x3, {0x2, 0xd}}, {0x8, 0x10, {0x1, 0x9}}, {0xf9d, 0x4710, {0x3, 0x8}}, {0xfff7, 0x780, {0x2, 0x9}}, {0x607c, 0xe, {0x2, 0x3}}, {0x1, 0x1, {0x3, 0x7}}, {0x7, 0x5, {0x2}}, {0x4f3, 0x4, {0x3, 0x2}}, {0xa, 0xff, {0x3, 0x4}}, {0x8, 0x9, {0x3, 0x7fffffff}}, {0x1, 0x8, {0x0, 0x7}}, {0x8000, 0x7, {0x0, 0x8}}, {0x1, 0x8, {0x3, 0x1}}, {0x9, 0x1000, {0x1, 0x7fff}}, {0xe1, 0x4, {0x2, 0x3}}, {0x1, 0x6, {0x3}}, {0x0, 0x2, {0x1, 0x53}}, {0x800, 0xe4f1, {0x3, 0x3ff}}, {0x4, 0xd2c, {0x0, 0x10}}, {0x8, 0x1, {0x1, 0xfffffff3}}, {0xffff, 0x7b2, {0x2, 0x7}}, {0x6, 0x2, {0x1, 0xf}}, {0x4, 0x40, {0x1, 0x10}}, {0x10, 0xc86, {0x1, 0x40}}]}}}, {{0x254, 0x1, {{0x3, 0x80000001}, 0x0, 0x92, 0x80, 0x7c47, 0x14, 'syz1\x00', "00b9619681b336519e1f22b870b558b3f59fc5f366bf359fe8c878f82ad69311", "c5c6529b05b68f1f2eb1a9e5610c4bbf30a5e019a1c2f8cd49ec4c21ea437976", [{0x2, 0xff4a, {0x0, 0x6}}, {0x4, 0x46ad, {0x1, 0x7e1}}, {0xe, 0xd1d, {0x1, 0x2}}, {0x5, 0x2, {0x3, 0x2}}, {0x4, 0x2, {0x2, 0x7f}}, {0x9f2, 0x81, {0x2569b843355bd29e, 0x6db}}, {0x38, 0x6f4, {0x2, 0x7}}, {0x7f, 0x6, {0x3, 0x400}}, {0x7, 0x3, {0x2, 0x9}}, {0xfe01, 0xfff, {0x3, 0x200}}, {0x4, 0xc, {0x2, 0x800}}, {0x0, 0xfff7, {0x1, 0x1}}, {0x3, 0xc8, {0x0, 0x1}}, {0x5, 0xd46f, {0x3, 0x6}}, {0x5, 0xfffa, {0x2, 0x4}}, {0x6, 0x8000, {0x2, 0x9}}, {0x9, 0x400, {0x2, 0x100}}, {0x3, 0x3, {0x1, 0x5}}, {0x3, 0x2, {0x0, 0x8000}}, {0x2, 0x3, {0x0, 0x517}}, {0x40, 0xff, {0x1, 0x7}}, {0x0, 0x1, {0x3, 0x9b9}}, {0xfffc, 0x5, {0x2, 0x80000001}}, {0x7, 0x9, {0x3, 0xaf}}, {0x3, 0x4}, {0x40, 0x3b, {0x2471c807293ba0a8, 0x48}}, {0x4, 0xffb, {0x0, 0x364}}, {0x40, 0x8, {0x2, 0x8001}}, {0x4, 0x101, {0x0, 0x8}}, {0x6, 0x9, {0x3, 0x9}}, {0x4, 0x2}, {0x49, 0x2, {0x3, 0x3ff}}, {0x5, 0x959, {0x0, 0x2}}, {0x1, 0x0, {0x3, 0x8}}, {0x2, 0x1, {0x1, 0x8}}, {0x5, 0x4, {0x2, 0x3}}, {0x3, 0x1, {0x0, 0x80}}, {0x3, 0xbe81, {0x3, 0xff}}, {0x6, 0xf, {0x3, 0x6}}, {0xf0, 0x3, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x101}, 0xd, 0x4, 0x2, 0x5f87, 0x25, 'syz0\x00', "a44db019b2bdccae7dde7754135eb833dbce77510a7bc7e3323b361d3d0d5774", "5893b77d160aa55bca64f71fef8bdaca10c90c0106bea8dafd91d06c20106388", [{0xb, 0xc, {0x2, 0xf}}, {0xff, 0x8b, {0x2}}, {0xd, 0x0, {0x0, 0xfc}}, {0x7, 0x3, {0x0, 0x7}}, {0x9, 0x2, {0x0, 0x2}}, {0x7, 0x2e92, {0x3, 0x9f}}, {0x3, 0x5, {0x3, 0xfffff6bc}}, {0x5, 0x6, {0x2}}, {0x6, 0x6, {0x2, 0x2}}, {0x0, 0x3, {0x2, 0x6}}, {0xfff6, 0x7, {0x3, 0x3}}, {0x4, 0x5, {0x3, 0x8001}}, {0x4, 0x800, {0x2, 0x1}}, {0xa, 0x8, {0x1, 0x99}}, {0xfe01, 0x9, {0x1, 0x2}}, {0xe, 0x6659, {0x0, 0x9}}, {0xff, 0x7, {0x3, 0x9}}, {0x6, 0x5, {0x0, 0x3}}, {0xa, 0x2, {0xf444f04006804067, 0x4}}, {0x7, 0x6, {0x0, 0xffffff50}}, {0x5, 0xf8, {0x2}}, {0x0, 0x7, {0x0, 0x1ff}}, {0x3, 0x3, {0x2, 0xff}}, {0x0, 0x200, {0x0, 0xe3}}, {0x45ae, 0x7f, {0x2, 0x4}}, {0x565d, 0x7d79, {0x0, 0x10}}, {0x4, 0xfff5, {0x3, 0x7}}, {0x9, 0xf118, {0x1, 0xff}}, {0x3, 0x0, {0x3, 0x9}}, {0x8001, 0x0, {0x1, 0x6}}, {0x8001, 0x5, {0x3, 0x81}}, {0xd, 0x6, {0x2, 0x3}}, {0x5, 0x7, {0x2, 0x7}}, {0x5, 0x401, {0x1}}, {0x3, 0x7, {0x2, 0x6}}, {0x7, 0x6, {0x0, 0x2}}, {0x8, 0x0, {0x0, 0x2}}, {0x7, 0xd60d, {0x2, 0x3}}, {0x6, 0x2, {0x1, 0x5}}, {0x1000, 0x337, {0x1, 0x70b4}}]}}}, {{0x254, 0x1, {{0x4, 0xfffffffc}, 0xbd, 0x2, 0x8, 0x7, 0x1c, 'syz1\x00', "b25c0ff584523963025a02de3e961eb6fbda7ccb22cf47b20e10614af2be7fed", "9122d5e07d19f6bef09f14e4433793550b2c6a52d927644f573dee2241bdd696", [{0x2, 0x8, {0x1, 0x6}}, {0x1, 0x3, {0x3, 0xb}}, {0x2, 0x4af, {0x1, 0x6}}, {0x401, 0x7, {0x3, 0xfffff800}}, {0x0, 0x1000, {0x1}}, {0x81, 0x2, {0x1, 0x9}}, {0x9, 0x0, {0x1, 0x3}}, {0x4, 0x9, {0x2, 0x8001}}, {0x1, 0xfe00, {0x1, 0x200}}, {0x7, 0x7ff, {0x1, 0x7}}, {0xe, 0xfff7, {0x3, 0x80000001}}, {0x867e, 0x4}, {0x537f, 0x7c, {0x0, 0x2}}, {0x4, 0x8, {0x1, 0xffffffff}}, {0x9, 0x1, {0x2, 0x81}}, {0x800, 0xccb3, {0x1, 0x8001}}, {0x3, 0x3, {0x2, 0x7}}, {0x2, 0x81, {0x0, 0xa65}}, {0x7fff, 0x2, {0x1, 0x7}}, {0x9, 0xb4d, {0x3, 0xeb}}, {0x40, 0x9, {0x3, 0x5}}, {0x647, 0xb, {0x4, 0xfffffffe}}, {0xb8f, 0x9, {0x1, 0x4}}, {0x400, 0x7fff, {0x1, 0x9}}, {0x1, 0x80, {0x0, 0x7}}, {0xff02, 0x3d2f, {0x2, 0x4}}, {0x3, 0x8, {0x1, 0x1}}, {0x8, 0xe7, {0x2, 0x7a5b}}, {0x83, 0x6, {0x1, 0xaf1}}, {0xf9, 0x7, {0x1}}, {0xfc, 0x8, {0x3, 0x5}}, {0xfffc, 0xa00, {0x2, 0x2}}, {0x2, 0x6, {0x2, 0x1}}, {0x5, 0x1ff, {0x0, 0xfffffff7}}, {0x4, 0x5, {0x0, 0x5}}, {0x8, 0x9, {0x0, 0x9733}}, {0x8, 0x4467, {0x3, 0x7fffffff}}, {0x7d, 0x4, {0x3, 0x1}}, {0xde5, 0x1, {0x2}}, {0x2, 0x6, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x2, 0x0, 0x81, 0x4, 0x19, 'syz0\x00', "ea7f5d9899a950849b6db4686b20699aedffc3c429449f8722ec5ed215d5cc2f", "d244e23f02a623e8922ea6829b5e0951d6ae8580ab5bb1cb19cf46286b689e14", [{0x8, 0x4, {0x0, 0x80000000}}, {0x3, 0x5, {0x1, 0x7}}, {0x2d1, 0x5, {0x2, 0x7}}, {0x2, 0x4, {0x3, 0x1}}, {0x5, 0x6a68, {0x2, 0x8739}}, {0x9, 0x1000, {0x0, 0x67d6}}, {0x800, 0x5, {0x2, 0x5}}, {0x0, 0x5, {0x0, 0x3}}, {0x2, 0x8, {0x1, 0x1}}, {0x3ff, 0x54fe, {0x2, 0x8d2}}, {0x3, 0x8}, {0x0, 0x0, {0x2, 0xfffffffa}}, {0x6, 0x73, {0x3, 0xf}}, {0xfff, 0x0, {0x2, 0x162108fa}}, {0x7b2, 0x8001, {0x0, 0x5de}}, {0x9, 0x4, {0x3, 0x1ff}}, {0x4, 0x9, {0x3, 0x3}}, {0x3, 0x6, {0x3, 0x80}}, {0x6, 0x3, {0x0, 0x5}}, {0x8, 0x7, {0x2, 0x8}}, {0xb3ad, 0xfff, {0x3}}, {0x5, 0x6, {0x2, 0x4}}, {0xfffb, 0x7ff, {0x2, 0x9}}, {0x70, 0x8, {0x3, 0x7ff}}, {0x6, 0x1, {0x2, 0x10001}}, {0x4, 0xd, {0x1, 0x200}}, {0x0, 0x5, {0x1, 0x1}}, {0x4, 0xf4, {0x0, 0x3ff}}, {0x1ff, 0x81, {0x1, 0xb}}, {0x6, 0x200, {0x2, 0x2}}, {0x4, 0x9, {0x3, 0x1ff}}, {0x5, 0x0, {0x1, 0xcf}}, {0x9, 0x7, {0x3, 0x5}}, {0x5, 0x81, {0x3, 0x3}}, {0x7f, 0xb79, {0x1, 0x800}}, {0xb2, 0x34c, {0x0, 0x4}}, {0x1ff, 0x2, {0x0, 0x2}}, {0x2, 0x8, {0x3, 0x8}}, {0x8, 0x7ff, {0x0, 0x7f}}, {0x9, 0x0, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x859}, 0x5, 0x1e, 0x5, 0xf, 0x27, 'syz0\x00', "b738ace8861da1c0bc832ac714c00250eb44029418a10c8a72720937caa570c7", "9c17ec57a5725eacba0f8d1731bf86cb6843190002a80dab0562f884f7110e8a", [{0x4, 0xfffa, {0x1, 0xd}}, {0xff8a, 0xf52, {0x0, 0xfffffffe}}, {0x7, 0x5, {0x0, 0x3ff}}, {0xc, 0xd6c, {0x3, 0x9}}, {0x9, 0x0, {0x0, 0x4}}, {0x9, 0xa8, {0x1, 0x400}}, {0x8, 0x1, {0x2}}, {0x7, 0x0, {0x1, 0x3}}, {0xfff9, 0x8000, {0x2, 0x6}}, {0x5, 0x1, {0x3, 0x7f}}, {0x5, 0x0, {0x2, 0x3}}, {0x7, 0x3, {0x2, 0xdc}}, {0x3, 0xc, {0x3, 0xd}}, {0x0, 0x8, {0x3, 0x6}}, {0x9, 0x1, {0x3, 0x1}}, {0x6, 0x0, {0x1, 0xfff}}, {0xfffc, 0x0, {0x2, 0x8}}, {0x1, 0x4, {0x3, 0xfffffff7}}, {0x8, 0xa, {0x2, 0x4}}, {0x5, 0x3, {0x3, 0x3}}, {0x0, 0x10, {0x3, 0x7}}, {0x5, 0x3ff, {0x2, 0x2}}, {0x800, 0xd274, {0x0, 0x6}}, {0x9, 0x5, {0x0, 0x100}}, {0x81, 0xfc, {0x0, 0x1000}}, {0x2, 0x4, {0x0, 0xff}}, {0xaa, 0x7690, {0x2}}, {0xf2e3, 0x40, {0x1, 0x4}}, {0x6, 0x8, {0x2, 0x5}}, {0x5, 0x7f9f, {0x1, 0x5}}, {0x4, 0x3, {0x3}}, {0xfff8, 0x1000, {0x2, 0x10001}}, {0xc, 0x0, {0x2}}, {0x8000, 0x5b, {0x0, 0x9}}, {0x7, 0x1, {0x1, 0x2}}, {0x100, 0x4, {0x3, 0x8}}, {0x2, 0x9, {0x0, 0xb}}, {0x7, 0xfffc, {0x0, 0x9}}, {0x15, 0x147, {0x2, 0x2}}, {0x2, 0x200, {0x1, 0x6}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x20008081}, 0x200088c0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'syztnl1\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x0, 0x4, 0x2b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8, 0x708, 0x6, 0x9}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000016c0)={'sit0\x00', &(0x7f0000001640)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x8, 0x80000000, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @rr={0x7, 0x13, 0xc9, [@dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010100, @private=0xa010100, @local]}, @timestamp={0x44, 0x14, 0x51, 0x0, 0x0, [0x101, 0xfcc7, 0xa, 0x3c00]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'syztnl2\x00', &(0x7f0000001700)={'gretap0\x00', 0x0, 0x1, 0x7, 0x99, 0x55, {{0x8, 0x4, 0x0, 0x8, 0x20, 0x65, 0x0, 0x6, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3e}, {[@generic={0x7, 0x9, "819082361a544c"}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000017c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001840)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001880)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001940)={'ip6gre0\x00', &(0x7f00000018c0)={'ip6gre0\x00', 0x0, 0x29, 0x61, 0x2, 0xd0, 0x10, @local, @private0, 0x10, 0x20, 0xb, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001980)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a00)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001e80)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001a40)={0x3f4, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x533}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r11}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb7}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000001ec0)="e6f8ffb9b5dbdbaeceac64ce4fb2022dccfc95efc3b9edce251098c991808964dca83025baeab4be9bef17f148bf3ac832cee30cbd58448d5b5943543e48a3746faefd18bb14bd30e71f99ca635627a2111e4a8ec41483ba0f1dd5218903ad8663adb31354d69fd14374db952424d6df2b7ed0da8bbc56cbb0dce30be633979e4e163c9ab523badd3e2195d12cedfc861e758ac628d3ce188f7e20cc3b96e17d360d1f142e34c42d53065b9be989b2a99c7251715ddab281472d26517716778d7981b7eb338bd8971ac73832d85e976d6670edd9529d0860c840aa896bbf4d3620e58a0f2392fe3e2719d5676d4818f90b2f3fca04e6fc9f91cd") r16 = syz_genetlink_get_family_id$team(&(0x7f0000002000), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002100)={'gre0\x00', &(0x7f0000002040)={'syztnl2\x00', r11, 0x1, 0x7, 0x9, 0x8, {{0x1c, 0x4, 0x0, 0x24, 0x70, 0x67, 0x0, 0xd4, 0x5c, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@end, @timestamp_addr={0x44, 0x4c, 0xd5, 0x1, 0x6, [{@loopback, 0x6}, {@loopback, 0xd}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x80000001}, {@private=0xa010100, 0xc559}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x146}, {@remote, 0x2}, {@broadcast, 0x2}]}, @rr={0x7, 0xf, 0xbe, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002140)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002180)={0x0, @empty, @remote}, &(0x7f00000021c0)=0xc) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002a00)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000029c0)={&(0x7f0000002200)={0x788, r16, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r15}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r18}, {0x4}}, {{0x8, 0x1, r11}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6b4fc1d8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xce5}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r7}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0x248, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x788}, 0x1, 0x0, 0x0, 0x8004}, 0x20004044) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a80), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x48, r20, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4002}, 0x26048041) getrandom(&(0x7f0000002bc0)=""/51, 0x33, 0x3) 2.439719107s ago: executing program 1 (id=1415): ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20, 0x4}, {@in=@empty, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x2, 0x9}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x4, 0x0, 0xe5}}, 0xf0}}, 0x24004000) 2.430257228s ago: executing program 1 (id=1416): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read$FUSE(r1, 0x0, 0x0) (async) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f57586b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000040)={0x3, 0x200, 0x7, 0x4c8, 0xd, 0x6}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.297468171s ago: executing program 0 (id=1417): r0 = socket(0x2, 0x80802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1414bbac1414aa00000000140000000000000000000000070000009404"], 0x38}, 0x1c880) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x2000000000000004) r4 = syz_usb_connect$uac2(0x6, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_usb_disconnect(r4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0xfc, 0x7ffffffb}]}) close_range(r7, 0xffffffffffffffff, 0x0) socket(0x2, 0x80802, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1414bbac1414aa00000000140000000000000000000000070000009404"], 0x38}, 0x1c880) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x2000000000000004) (async) syz_usb_connect$uac2(0x6, 0x0, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) (async) syz_usb_disconnect(r4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) (async) sendto$packet(r5, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0xfc, 0x7ffffffb}]}) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) 1.991029309s ago: executing program 3 (id=1418): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000080)="749bed", 0x3, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000008fc0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r2, 0x2275, &(0x7f0000000100)=0x3) chdir(&(0x7f00000003c0)='./bus\x00') r3 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r3, 0xfffffffffffffffd, 0x1) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x3}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x8, 0x88000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x17) write(r5, &(0x7f0000000000)='7', 0x1) pipe2$9p(0x0, 0x80000) syz_clone3(&(0x7f0000000500)={0x4010000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000380), {0x41}, &(0x7f0000000400)=""/118, 0x76, &(0x7f0000000480), &(0x7f00000004c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4, {r4}}, 0x58) write(r6, &(0x7f0000000580)="f3381d4dff3139fb8250857f99dfeb0cc983434f53f6aa91c245a893df8cb8e8fe487e04a1ebe79dfbb4ce9c789436f33ab2a550d8c6aa702ea1b89cf089f2c8762f109c49c1cb9634340453d9beff257878560d376771694cfe886b3ce7fdc3a1baa3ba2b7e66024112223dcd92c71d4771c775ba46c04976b885a76a03c8e081eb8d6e2d72a338071d8e8aac9bff563252c797ee58", 0xfffffdec) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) 1.95014822s ago: executing program 3 (id=1419): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x4000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000000)=0x800, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.701407806s ago: executing program 3 (id=1420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1bf) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000080)=0x7f535a3f) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r2, 0x204) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) pipe(&(0x7f0000000280)={0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="2480000000000000dbdf2508009e00010000000c000f009d66cfd31dbd37dc5307000000000000de97c203f81a6f2a691403fa0e32d7a364fc203ee31620365d2982fa18f0b1f70bfecf548a66de00f4ae5ade19e25d3f716c9edd336273158797402208bec0c8d4a7abe7803c9755453520e4b8bfcdaaa3a9593debabd1e75ed76d084371c4db29db93feef49925dd744b1204cac4ade3512bb50866db4f649715d03e553f33e2ae0c3a9bdd0e3dc4571c64c9131015a6651391ac24dcf933683a5c28d8b83786b1bc6"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$inet(r5, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r9) socket$pppl2tp(0x18, 0x1, 0x1) 1.701048646s ago: executing program 3 (id=1421): mkdir(&(0x7f0000000240)='./file0\x00', 0x97) mkdir(&(0x7f00000001c0)='./bus\x00', 0x57) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.425593574s ago: executing program 0 (id=1422): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = eventfd2(0xfffffffd, 0x81800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x1}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x20006, 0x3, 0x0, 0x80000001}, 0x10) r4 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0xc}, {0xfff, 0x4, 0x0, 0x591}, {0xba3, 0x0, 0xa2, 0x1}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r2, 0x3, 0x400, 0x4}) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r5, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, r7}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r9, &(0x7f0000000240), 0x4001) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) dup3(r1, r1, 0x80000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', 0x222c1, 0xea) r12 = getpid() write$cgroup_pid(r11, &(0x7f00000000c0)=r12, 0x12) mkdirat(r11, 0x0, 0x1b5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r13, &(0x7f0000000000)='3', 0x4e) 1.324881796s ago: executing program 0 (id=1423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="f00fba2c8d03000000c80f00c666b80a000f00d00f4ca362000000eae374a70937008fc978c25000f30f060f001926660f5631", 0x33}], 0x1, 0xe8, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x17c}}, 0x10) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000cc0)={0x18, r6, 0x301, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) (async) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000002440)="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", 0x559, r7) (async) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x8, 0x203, 0xffbd, 0x0, 0x100000, 0x0}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.253535468s ago: executing program 0 (id=1424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc048010}, 0x4000000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) syz_usb_connect(0x2, 0x36, &(0x7f0000002100)={{0x12, 0x1, 0x250, 0x94, 0x26, 0xd4, 0x8, 0x502, 0x3394, 0x6221, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x60, 0x7, "", [{{0x9, 0x4, 0xc4, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0xe, 0x1, 0xe}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x2, 0x5, 0x4}}]}}]}}]}}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0xfff, 0x6, 0x5, 0x7fffffff, 0xffffffff, 0xd9}]}) 894.661897ms ago: executing program 2 (id=1425): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1) (async) read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket(0x10, 0x6, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, &(0x7f00000001c0)={r0}) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x52, 0x1, 0x0, 0x6, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') (async) r5 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r5, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80fa}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44044) (async) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000140)={0x101, 0x4, 0x6, 0x0, 0x47, 0x3, 0x0, &(0x7f0000000100)=[{0x0, 0x101, 0x4}, {0x4, 0x1ff, 0x5}, {0x1, 0x1ff, 0x81}]}) write$FUSE_GETXATTR(r0, &(0x7f00000002c0)={0x18, 0x0, r2, {0xfffffff7}}, 0x18) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0xfffffffffffffffe, r2, {0x7}}, 0x18) 858.326218ms ago: executing program 2 (id=1426): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='geneve1\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='100', 0x3) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4c015}, 0x20004080) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x21, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c3169e45", 0x4, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)=@chain) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001700)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001700)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) capset(&(0x7f0000000100)={0x20080522}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') ioctl$KVM_RUN(r6, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) unshare(0x40000000) (async) unshare(0x40000000) 710.751172ms ago: executing program 0 (id=1427): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26, 0x30, 0x9e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xa, 0x14, {0xa, 0x25, 0x25, 0x1ff, 0x50, 0xff6f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008eaff0100b4"], 0x2c}, 0x1, 0x0, 0x0, 0x990}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=T,']) keyctl$session_to_parent(0x12) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r1, &(0x7f0000000180)=""/46, 0x2e) getdents64(r1, &(0x7f00000016c0)=""/70, 0x46) r2 = socket(0x2, 0x3, 0x3) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) bind$inet(r2, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) getsockname$unix(r2, &(0x7f0000000200), &(0x7f0000000140)=0x6e) 632.324074ms ago: executing program 1 (id=1428): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) mount(&(0x7f0000000040)=@filename='./proc/thread-self/fail-nth\x00', 0x0, &(0x7f0000000180)='qnx4\x00', 0x2000808, &(0x7f00000001c0)='asymmetric\x00') syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000080)={0x80000001, 0xfffffffffffffffb}, &(0x7f00000000c0)) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) mlock2(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000009000/0x3000)=nil, 0x3000) 309.098592ms ago: executing program 2 (id=1429): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x7, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x6, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x0, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x101, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x6, 0x5, 0x5, 0x491, 0x9, 0x5, 0x7f, 0x400, 0x102, 0xffffffff, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xffd, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x9, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0xff, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x2, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a401"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{0x0, 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000003c0)={0x2001, {{0x2, 0x4e23, @multicast1}}, {{0x2002, 0x4e24, @loopback}}}, 0x108) getitimer(0x0, &(0x7f0000000040)) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)='.U/', 0x3, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 21.43855ms ago: executing program 2 (id=1430): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x200}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x2202, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x5, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="380100001a00330600000000fddbdf250a010103000000000000000000000000fe800000000000000000000000000033000040004e2480010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000000000000000000032000000fe80000000000000000000000000000b00000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000580a00000000000000000000000000000000000002000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362286369706865725f6e756c6c2900"/235], 0x138}}, 0x200080d4) r7 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @private}}}], 0x20}, 0x31c467c443849f7c) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000080)=@generic={0x3, 0x7fff, 0x1}) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xff13) 0s ago: executing program 3 (id=1431): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x50, r0, 0xffffc000) sigaltstack(&(0x7f0000000000)={0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 21.049669][ T36] audit: type=1400 audit(1791197395.579:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.050738][ T286] cgroup: Unknown subsys name 'net' [ 21.072313][ T36] audit: type=1400 audit(1791197395.579:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.099554][ T36] audit: type=1400 audit(1791197395.599:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.099703][ T286] cgroup: Unknown subsys name 'devices' [ 21.220748][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.226353][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.349438][ T36] audit: type=1400 audit(1791197395.879:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.372696][ T36] audit: type=1400 audit(1791197395.879:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.391269][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.397405][ T36] audit: type=1400 audit(1791197395.879:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.419206][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.429085][ T36] audit: type=1400 audit(1791197395.939:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.463131][ T36] audit: type=1400 audit(1791197395.939:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.488818][ T36] audit: type=1400 audit(1791197395.939:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.514306][ T36] audit: type=1400 audit(1791197395.939:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.713686][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.720759][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.727802][ T296] bridge_slave_0: entered allmulticast mode [ 22.734091][ T296] bridge_slave_0: entered promiscuous mode [ 22.743332][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.750389][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.757421][ T296] bridge_slave_1: entered allmulticast mode [ 22.763606][ T296] bridge_slave_1: entered promiscuous mode [ 22.799755][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.806797][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.813875][ T293] bridge_slave_0: entered allmulticast mode [ 22.820013][ T293] bridge_slave_0: entered promiscuous mode [ 22.828833][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.835887][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.842941][ T293] bridge_slave_1: entered allmulticast mode [ 22.849090][ T293] bridge_slave_1: entered promiscuous mode [ 22.869389][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.876432][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.883516][ T295] bridge_slave_0: entered allmulticast mode [ 22.889704][ T295] bridge_slave_0: entered promiscuous mode [ 22.895797][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.902864][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.909999][ T294] bridge_slave_0: entered allmulticast mode [ 22.916143][ T294] bridge_slave_0: entered promiscuous mode [ 22.922633][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.929701][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.936741][ T294] bridge_slave_1: entered allmulticast mode [ 22.942979][ T294] bridge_slave_1: entered promiscuous mode [ 22.951905][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.958936][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.966011][ T295] bridge_slave_1: entered allmulticast mode [ 22.972160][ T295] bridge_slave_1: entered promiscuous mode [ 23.122369][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.129438][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.136716][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.143748][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.151799][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.158838][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.166099][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.173126][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.183859][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.190958][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.198207][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.205246][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.221922][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.228957][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.236250][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.243319][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.283739][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.291143][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.298344][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.306050][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.313440][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.320750][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.327937][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.335123][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.350369][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.357394][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.365021][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.372054][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.381438][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.388468][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.401298][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.408327][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.418380][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.425442][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.441973][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.449009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.470407][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.477443][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.489728][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.496762][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.526040][ T296] veth0_vlan: entered promiscuous mode [ 23.534852][ T294] veth0_vlan: entered promiscuous mode [ 23.547091][ T293] veth0_vlan: entered promiscuous mode [ 23.558579][ T296] veth1_macvtap: entered promiscuous mode [ 23.571943][ T294] veth1_macvtap: entered promiscuous mode [ 23.587988][ T293] veth1_macvtap: entered promiscuous mode [ 23.605755][ T295] veth0_vlan: entered promiscuous mode [ 23.630239][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.648401][ T295] veth1_macvtap: entered promiscuous mode [ 23.793932][ T313] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 23.801281][ T313] netlink: 'syz.1.2': attribute type 8 has an invalid length. [ 23.845345][ T341] bridge_slave_0: default FDB implementation only supports local addresses [ 24.378717][ T365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=365 comm=syz.0.16 [ 24.392686][ T365] sit0: entered promiscuous mode [ 24.398352][ T365] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 24.406181][ T365] netlink: 1 bytes leftover after parsing attributes in process `syz.0.16'. [ 24.860618][ T379] netlink: 'syz.1.22': attribute type 27 has an invalid length. [ 24.874956][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.882170][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.918974][ T384] netlink: 'syz.1.22': attribute type 4 has an invalid length. [ 24.933613][ T379] netlink: 'syz.1.22': attribute type 4 has an invalid length. [ 25.050104][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.436835][ T422] PM: Enabling pm_trace changes system date and time during resume. [ 25.436835][ T422] PM: Correct system time has to be restored manually after resume. [ 25.921896][ T449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 25.967556][ T462] mmap: syz.3.48 (462) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.363462][ T36] kauditd_printk_skb: 637 callbacks suppressed [ 26.363478][ T36] audit: type=1400 audit(1791197400.889:711): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 26.393626][ T36] audit: type=1400 audit(1791197400.899:712): avc: denied { mounton } for pid=464 comm="syz.2.49" path="/14/bus" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 26.399060][ T465] Zero length message leads to an empty skb [ 26.424745][ T36] audit: type=1400 audit(1791197400.949:713): avc: denied { execmem } for pid=464 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 26.443720][ T36] audit: type=1400 audit(1791197400.949:714): avc: denied { read append } for pid=464 comm="syz.2.49" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 26.466889][ T36] audit: type=1400 audit(1791197400.969:715): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 26.490451][ T36] audit: type=1400 audit(1791197400.989:716): avc: denied { create } for pid=466 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 26.510582][ T36] audit: type=1400 audit(1791197400.989:717): avc: denied { create } for pid=466 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 26.529799][ T36] audit: type=1400 audit(1791197400.989:718): avc: denied { create } for pid=466 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 26.549860][ T36] audit: type=1400 audit(1791197400.989:719): avc: denied { execmem } for pid=466 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 26.568849][ T36] audit: type=1400 audit(1791197400.989:720): avc: denied { create } for pid=466 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 27.099132][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.099301][ T416] Bluetooth: hci0: command 0x1003 tx timeout [ 27.567453][ T528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 28.017579][ T546] netlink: 'syz.1.77': attribute type 16 has an invalid length. [ 28.025464][ T546] netlink: 'syz.1.77': attribute type 4 has an invalid length. [ 28.033652][ T546] netlink: 64114 bytes leftover after parsing attributes in process `syz.1.77'. [ 28.306419][ T568] capability: warning: `syz.2.82' uses deprecated v2 capabilities in a way that may be insecure [ 28.948148][ T591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 29.675423][ T626] syz.0.102 (626): attempted to duplicate a private mapping with mremap. This is not supported. [ 31.442915][ T36] kauditd_printk_skb: 317 callbacks suppressed [ 31.442931][ T36] audit: type=1400 audit(1791197405.969:1038): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 31.472852][ T36] audit: type=1400 audit(1791197405.969:1039): avc: denied { execmem } for pid=698 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 31.492086][ T36] audit: type=1400 audit(1791197405.969:1040): avc: denied { create } for pid=698 comm="syz.3.125" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 31.513273][ T36] audit: type=1400 audit(1791197405.979:1041): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 31.519271][ T702] can0: slcan on ttyS3. [ 31.540725][ T36] audit: type=1400 audit(1791197406.069:1042): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 31.557016][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 31.562025][ T36] audit: type=1400 audit(1791197406.069:1043): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 31.568325][ T149] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 31.568340][ T149] audit: backlog limit exceeded [ 31.589575][ T36] audit: type=1400 audit(1791197406.069:1044): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 31.650584][ T701] can0 (unregistered): slcan off ttyS3. [ 32.271819][ T738] netlink: 'syz.2.137': attribute type 16 has an invalid length. [ 33.368375][ T775] netlink: 80 bytes leftover after parsing attributes in process `syz.0.148'. [ 34.439548][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.630834][ T310] Bluetooth: hci1: Frame reassembly failed (-84) [ 36.140018][ T909] netlink: 252 bytes leftover after parsing attributes in process `syz.0.192'. [ 36.149000][ T909] IPv6: NLM_F_CREATE should be specified when creating new route [ 36.449132][ T36] kauditd_printk_skb: 49178 callbacks suppressed [ 36.449148][ T36] audit: type=1400 audit(1791197410.979:48669): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 36.459420][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.476901][ T36] audit: type=1400 audit(1791197410.979:48670): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 36.482654][ T418] Bluetooth: hci0: command 0x1003 tx timeout [ 36.503965][ T36] audit: type=1400 audit(1791197410.979:48671): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 36.531006][ T36] audit: type=1400 audit(1791197410.979:48672): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 36.542427][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 36.552969][ T36] audit: type=1400 audit(1791197410.979:48673): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 36.558556][ T149] audit: audit_lost=520 audit_rate_limit=0 audit_backlog_limit=64 [ 36.558570][ T149] audit: backlog limit exceeded [ 36.558707][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 36.579964][ T36] audit: type=1400 audit(1791197410.979:48674): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 36.699069][ T416] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 36.699085][ T418] Bluetooth: hci1: command 0x1003 tx timeout [ 37.385510][ T928] bridge_slave_0: default FDB implementation only supports local addresses [ 39.032959][ T1072] syz.0.249 (1072): /proc/1071/oom_adj is deprecated, please use /proc/1071/oom_score_adj instead. [ 40.041050][ T1130] kernel profiling enabled (shift: 4) [ 40.140622][ T1135] netlink: 'syz.2.270': attribute type 4 has an invalid length. [ 41.064453][ T1160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1160 comm=syz.0.278 [ 41.459081][ T36] kauditd_printk_skb: 48609 callbacks suppressed [ 41.459097][ T36] audit: type=1400 audit(1791197415.979:95011): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 41.477181][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 41.486741][ T36] audit: type=1400 audit(1791197415.989:95012): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 41.493188][ T149] audit: audit_lost=1279 audit_rate_limit=0 audit_backlog_limit=64 [ 41.514308][ T418] Bluetooth: hci0: command 0x1003 tx timeout [ 41.527980][ T416] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.528066][ T36] audit: type=1400 audit(1791197415.989:95013): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 41.534192][ T149] audit: backlog limit exceeded [ 41.555514][ T36] audit: type=1400 audit(1791197415.989:95014): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 41.562038][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 41.586484][ T36] audit: type=1400 audit(1791197415.989:95015): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 41.589474][ T149] audit: audit_lost=1280 audit_rate_limit=0 audit_backlog_limit=64 [ 41.826427][ T1199] netlink: 'syz.0.292': attribute type 13 has an invalid length. [ 41.835100][ T1199] erspan0: refused to change device tx_queue_len [ 44.099660][ T1304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=1304 comm=syz.0.316 [ 44.297497][ T1322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 44.408823][ T1334] futex_wake_op: syz.0.325 tries to shift op by 144; fix this program [ 45.551276][ T1386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.342'. [ 45.699939][ T1390] capability: warning: `syz.0.344' uses 32-bit capabilities (legacy support in use) [ 46.470909][ T36] kauditd_printk_skb: 49204 callbacks suppressed [ 46.470925][ T36] audit: type=1400 audit(1791197420.989:143262): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 46.485663][ T1419] dummy0: entered promiscuous mode [ 46.503632][ T36] audit: type=1400 audit(1791197420.999:143263): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 46.525824][ T1419] dummy0: entered allmulticast mode [ 46.541981][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 46.549221][ T149] audit: audit_lost=1600 audit_rate_limit=0 audit_backlog_limit=64 [ 46.558109][ T36] audit: type=1400 audit(1791197420.999:143264): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 46.587329][ T149] audit: backlog limit exceeded [ 46.597504][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 46.598982][ T1421] audit: audit_backlog=65 > audit_backlog_limit=64 [ 46.604514][ T149] audit: audit_lost=1601 audit_rate_limit=0 audit_backlog_limit=64 [ 46.618704][ T36] audit: type=1400 audit(1791197420.999:143265): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 47.274233][ T1432] netlink: 'syz.2.356': attribute type 9 has an invalid length. [ 48.209191][ T1228] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.020958][ T1505] veth1_macvtap: left promiscuous mode [ 49.027182][ T1505] macsec0: entered promiscuous mode [ 49.036377][ T1505] macsec0: entered allmulticast mode [ 49.108584][ T1505] veth1_macvtap: entered promiscuous mode [ 49.115018][ T1505] veth1_macvtap: entered allmulticast mode [ 49.121705][ T1505] macsec0: left promiscuous mode [ 49.127248][ T1505] macsec0: left allmulticast mode [ 49.132699][ T1505] veth1_macvtap: left allmulticast mode [ 50.219065][ T416] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.219072][ T418] Bluetooth: hci0: command 0x1003 tx timeout [ 51.479059][ T36] kauditd_printk_skb: 48939 callbacks suppressed [ 51.482018][ T36] audit: type=1400 audit(1791197425.999:189115): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 51.512139][ T36] audit: type=1400 audit(1791197426.019:189116): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 51.514529][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 51.533358][ T36] audit: type=1400 audit(1791197426.019:189117): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 51.539830][ T149] audit: audit_lost=2632 audit_rate_limit=0 audit_backlog_limit=64 [ 51.561367][ T36] audit: type=1400 audit(1791197426.019:189118): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 51.575135][ T149] audit: backlog limit exceeded [ 51.590147][ T36] audit: type=1400 audit(1791197426.019:189119): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 51.594964][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 51.616108][ T36] audit: type=1400 audit(1791197426.019:189120): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 52.215739][ T1607] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 52.239942][ T1607] netlink: 'syz.0.418': attribute type 3 has an invalid length. [ 54.909470][ T1740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=788 sclass=netlink_tcpdiag_socket pid=1740 comm=syz.2.466 [ 55.172215][ T1770] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 55.191910][ T1770] netlink: 'syz.0.473': attribute type 3 has an invalid length. [ 56.281137][ T1831] netlink: 'syz.0.497': attribute type 12 has an invalid length. [ 56.402872][ T1834] macsec0: entered allmulticast mode [ 56.417099][ T1834] veth1_macvtap: entered allmulticast mode [ 56.423463][ T1834] macsec0: left allmulticast mode [ 56.428752][ T1834] veth1_macvtap: left allmulticast mode [ 56.436817][ T1835] macsec0: entered allmulticast mode [ 56.494466][ T36] kauditd_printk_skb: 42408 callbacks suppressed [ 56.494483][ T36] audit: type=1400 audit(1791197431.019:230313): avc: denied { read } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.526191][ T36] audit: type=1400 audit(1791197431.009:230312): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 56.548161][ T36] audit: type=1400 audit(1791197431.019:230314): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 56.568400][ T296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.570032][ T36] audit: type=1400 audit(1791197431.019:230315): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 56.576124][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.597165][ T36] audit: type=1400 audit(1791197431.019:230316): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 56.610122][ T296] audit: audit_lost=3039 audit_rate_limit=0 audit_backlog_limit=64 [ 56.632859][ T149] audit: audit_lost=3040 audit_rate_limit=0 audit_backlog_limit=64 [ 56.642026][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.852188][ T1906] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 58.876981][ T1906] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.523'. [ 58.947509][ T1912] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 58.955560][ T1912] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.523'. [ 59.196579][ T1930] netlink: 'syz.1.528': attribute type 13 has an invalid length. [ 59.220452][ T1930] virtio_net virtio1 eth0: refused to change device tx_queue_len [ 59.248196][ T1931] netlink: 'syz.1.528': attribute type 13 has an invalid length. [ 59.279146][ T1931] virtio_net virtio1 eth0: refused to change device tx_queue_len [ 59.564535][ T1944] netlink: 288 bytes leftover after parsing attributes in process `syz.1.531'. [ 60.093198][ T1966] netlink: 160 bytes leftover after parsing attributes in process `syz.3.540'. [ 60.232947][ T1977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 60.298687][ T1985] netlink: 'syz.2.545': attribute type 4 has an invalid length. [ 60.485456][ T1993] binfmt_misc: register: failed to install interpreter file ./file0 [ 61.413045][ T36] kauditd_printk_skb: 43816 callbacks suppressed [ 61.413062][ T36] audit: type=1400 audit(1791197436.015:274063): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 61.433139][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.446908][ T36] audit: type=1400 audit(1791197436.015:274064): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 61.450716][ T149] audit: audit_lost=3064 audit_rate_limit=0 audit_backlog_limit=64 [ 61.468411][ T2046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.477266][ T149] audit: backlog limit exceeded [ 61.482638][ T36] audit: type=1400 audit(1791197436.015:274065): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 61.487781][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.508702][ T2046] audit: audit_lost=3065 audit_rate_limit=0 audit_backlog_limit=64 [ 61.523106][ T2046] audit: backlog limit exceeded [ 62.199503][ T1228] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.212272][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.1.590 [ 63.267631][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.1.590 [ 63.302213][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.1.590 [ 63.332075][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.1.590 [ 63.354165][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.1.590 [ 63.384105][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.1.590 [ 63.413544][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.1.590 [ 63.433107][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.1.590 [ 63.462449][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.1.590 [ 63.481998][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.1.590 [ 64.225022][ T418] Bluetooth: hci0: command 0x1003 tx timeout [ 64.231087][ T416] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.946440][ T2215] netlink: 80 bytes leftover after parsing attributes in process `syz.3.626'. [ 66.176071][ T2243] netlink: 'syz.0.634': attribute type 27 has an invalid length. [ 66.199861][ T2243] sit0: left promiscuous mode [ 66.297556][ T2252] @0: renamed from bond_slave_1 [ 66.312106][ T36] kauditd_printk_skb: 41105 callbacks suppressed [ 66.312135][ T36] audit: type=1400 audit(1791197441.036:312898): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.328307][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 66.339948][ T36] audit: type=1400 audit(1791197441.036:312899): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.347131][ T149] audit: audit_lost=3824 audit_rate_limit=0 audit_backlog_limit=64 [ 66.367692][ T36] audit: type=1400 audit(1791197441.036:312900): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.375871][ T149] audit: backlog limit exceeded [ 66.396658][ T36] audit: type=1400 audit(1791197441.036:312901): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.402315][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 66.422672][ T36] audit: type=1400 audit(1791197441.036:312902): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.429127][ T149] audit: audit_lost=3825 audit_rate_limit=0 audit_backlog_limit=64 [ 67.091196][ T2277] netlink: 288 bytes leftover after parsing attributes in process `syz.2.647'. [ 67.859900][ T2314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 70.096012][ T2420] selinux_netlink_send: 56 callbacks suppressed [ 70.096028][ T2420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2420 comm=syz.1.700 [ 70.249627][ T2433] tap0: tun_chr_ioctl cmd 21731 [ 71.064907][ T2470] netlink: 57 bytes leftover after parsing attributes in process `syz.0.716'. [ 71.081673][ T2472] netlink: 57 bytes leftover after parsing attributes in process `syz.0.716'. [ 71.241093][ T36] kauditd_printk_skb: 47481 callbacks suppressed [ 71.241109][ T36] audit: type=1400 audit(1791197446.037:359927): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.256340][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.268795][ T36] audit: type=1400 audit(1791197446.047:359928): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.275584][ T149] audit: audit_lost=3978 audit_rate_limit=0 audit_backlog_limit=64 [ 71.296336][ T36] audit: type=1400 audit(1791197446.047:359929): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.305003][ T149] audit: backlog limit exceeded [ 71.330380][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.331271][ T296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.337207][ T149] audit: audit_lost=3979 audit_rate_limit=0 audit_backlog_limit=64 [ 71.343511][ T296] audit: audit_lost=3980 audit_rate_limit=0 audit_backlog_limit=64 [ 71.481255][ T2477] netlink: 'syz.1.719': attribute type 4 has an invalid length. [ 72.184295][ T2514] futex_wake_op: syz.0.732 tries to shift op by 144; fix this program [ 72.220314][ T2515] futex_wake_op: syz.0.732 tries to shift op by 144; fix this program [ 76.122289][ T2633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 76.196416][ T36] kauditd_printk_skb: 43595 callbacks suppressed [ 76.196434][ T36] audit: type=1400 audit(1791197451.056:402552): avc: denied { read } for pid=2644 comm="syz.3.777" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 76.216659][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.245202][ T296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.251977][ T149] audit: audit_lost=4305 audit_rate_limit=0 audit_backlog_limit=64 [ 76.254994][ T36] audit: type=1400 audit(1791197451.056:402553): avc: denied { read write } for pid=2644 comm="syz.3.777" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 76.259976][ T296] audit: audit_lost=4306 audit_rate_limit=0 audit_backlog_limit=64 [ 76.291398][ T149] audit: backlog limit exceeded [ 76.296545][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.303252][ T149] audit: audit_lost=4307 audit_rate_limit=0 audit_backlog_limit=64 [ 76.311199][ T149] audit: backlog limit exceeded [ 78.003723][ T2721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.806'. [ 78.013309][ T2721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 79.198424][ T2796] x_tables: duplicate underflow at hook 1 [ 79.517678][ T2810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4126 sclass=netlink_route_socket pid=2810 comm=syz.1.836 [ 80.835588][ T2867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 81.159609][ T36] kauditd_printk_skb: 49000 callbacks suppressed [ 81.159625][ T36] audit: type=1400 audit(1791197456.069:451183): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.174999][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.187324][ T36] audit: type=1400 audit(1791197456.069:451184): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.193846][ T149] audit: audit_lost=4431 audit_rate_limit=0 audit_backlog_limit=64 [ 81.214847][ T36] audit: type=1400 audit(1791197456.069:451185): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.228253][ T149] audit: backlog limit exceeded [ 81.245639][ T36] audit: type=1400 audit(1791197456.069:451186): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.249445][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.275964][ T2880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.276510][ T149] audit: audit_lost=4432 audit_rate_limit=0 audit_backlog_limit=64 [ 81.284829][ T2880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2880 comm=syz.0.860 [ 81.330525][ T2882] netlink: 'syz.0.861': attribute type 33 has an invalid length. [ 81.338984][ T2882] netlink: 148 bytes leftover after parsing attributes in process `syz.0.861'. [ 82.600923][ T2916] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.874'. [ 82.741710][ T2929] mmap: syz.0.879 (2929): VmData 29208576 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 84.076017][ T2977] netlink: 'syz.3.897': attribute type 4 has an invalid length. [ 84.083846][ T2977] netlink: 17 bytes leftover after parsing attributes in process `syz.3.897'. [ 85.128661][ T3052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 85.137807][ T3052] bridge_slave_1: left allmulticast mode [ 85.143670][ T3052] bridge_slave_1: left promiscuous mode [ 85.149638][ T3052] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.157348][ T3052] bridge_slave_0: left allmulticast mode [ 85.163073][ T3052] bridge_slave_0: left promiscuous mode [ 85.168980][ T3052] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.646869][ T3078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=164 sclass=netlink_route_socket pid=3078 comm=syz.2.933 [ 85.890841][ T3087] netlink: 'syz.1.936': attribute type 27 has an invalid length. [ 85.905465][ T3087] macsec0: left allmulticast mode [ 86.021527][ T3095] netlink: 'syz.1.938': attribute type 4 has an invalid length. [ 86.029442][ T3095] netlink: 17 bytes leftover after parsing attributes in process `syz.1.938'. [ 86.139099][ T36] kauditd_printk_skb: 50279 callbacks suppressed [ 86.139116][ T36] audit: type=1400 audit(1791197461.070:499714): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.154068][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.166838][ T36] audit: type=1400 audit(1791197461.080:499715): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.175079][ T149] audit: audit_lost=5017 audit_rate_limit=0 audit_backlog_limit=64 [ 86.199688][ T36] audit: type=1400 audit(1791197461.080:499716): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.207980][ T149] audit: backlog limit exceeded [ 86.228547][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.235060][ T149] audit: audit_lost=5018 audit_rate_limit=0 audit_backlog_limit=64 [ 86.243207][ T149] audit: backlog limit exceeded [ 86.248359][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.108227][ T3150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3150 comm=syz.3.962 [ 87.125897][ T3152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.963'. [ 87.136349][ T3150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3150 comm=syz.3.962 [ 87.179800][ T3159] netlink: 'syz.3.965': attribute type 4 has an invalid length. [ 87.198566][ T3159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.965'. [ 88.058553][ T3225] syzkaller1: entered promiscuous mode [ 88.078959][ T3225] syzkaller1: entered allmulticast mode [ 88.169382][ T3230] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 88.177444][ T3230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 88.186942][ T3230] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.194011][ T3230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.987379][ T3263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1004'. [ 90.819429][ T3328] netlink: 'syz.2.1025': attribute type 12 has an invalid length. [ 91.126062][ T36] kauditd_printk_skb: 48030 callbacks suppressed [ 91.126079][ T36] audit: type=1400 audit(1791197466.082:545729): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.159213][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.165989][ T149] audit: audit_lost=5692 audit_rate_limit=0 audit_backlog_limit=64 [ 91.173890][ T149] audit: backlog limit exceeded [ 91.178824][ T36] audit: type=1400 audit(1791197466.103:545730): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.196085][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.202625][ T36] audit: type=1400 audit(1791197466.113:545731): avc: denied { read write } for pid=3343 comm="syz.2.1030" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 91.208991][ T149] audit: audit_lost=5693 audit_rate_limit=0 audit_backlog_limit=64 [ 91.232868][ T36] audit: type=1400 audit(1791197466.113:545732): avc: denied { read write } for pid=3343 comm="syz.2.1030" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 91.241107][ T149] audit: backlog limit exceeded [ 92.050278][ T3371] netlink: 'syz.3.1036': attribute type 32 has an invalid length. [ 93.192769][ T3429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'. [ 93.613315][ T3435] netlink: 57 bytes leftover after parsing attributes in process `syz.3.1056'. [ 94.150073][ T3453] syzkaller1: entered promiscuous mode [ 94.155870][ T3453] syzkaller1: entered allmulticast mode [ 95.428525][ T3505] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1077'. [ 96.119855][ T36] kauditd_printk_skb: 46280 callbacks suppressed [ 96.119872][ T36] audit: type=1400 audit(1791197471.099:590498): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.153501][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.160357][ T149] audit: audit_lost=6199 audit_rate_limit=0 audit_backlog_limit=64 [ 96.166883][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.168392][ T149] audit: backlog limit exceeded [ 96.180419][ T36] audit: type=1400 audit(1791197471.129:590499): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.199597][ T294] audit: audit_lost=6200 audit_rate_limit=0 audit_backlog_limit=64 [ 96.201755][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.216208][ T149] audit: audit_lost=6201 audit_rate_limit=0 audit_backlog_limit=64 [ 96.224308][ T36] audit: type=1400 audit(1791197471.129:590500): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.591180][ T3572] netlink: 'syz.3.1101': attribute type 10 has an invalid length. [ 97.443458][ T3629] syzkaller0: entered promiscuous mode [ 97.452418][ T3629] syzkaller0: entered allmulticast mode [ 97.500630][ T3635] ip6gre0: mtu less than device minimum [ 98.634223][ T3706] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1145'. [ 101.118436][ T36] kauditd_printk_skb: 43164 callbacks suppressed [ 101.118502][ T36] audit: type=1400 audit(1791197476.111:632409): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.133768][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.152699][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.152743][ T149] audit: audit_lost=6620 audit_rate_limit=0 audit_backlog_limit=64 [ 101.159277][ T294] audit: audit_lost=6621 audit_rate_limit=0 audit_backlog_limit=64 [ 101.167801][ T149] audit: backlog limit exceeded [ 101.175268][ T36] audit: type=1400 audit(1791197476.111:632410): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.180518][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.201280][ T294] audit: backlog limit exceeded [ 101.208027][ T149] audit: audit_lost=6622 audit_rate_limit=0 audit_backlog_limit=64 [ 101.226034][ T3790] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1169'. [ 101.248257][ T3792] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1169'. [ 101.489828][ T3801] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 101.518056][ T3800] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 101.525698][ T1225] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.224786][ T3830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3830 comm=syz.3.1181 [ 102.238377][ T3830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3830 comm=syz.3.1181 [ 102.251638][ T3830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3830 comm=syz.3.1181 [ 102.264975][ T3830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3830 comm=syz.3.1181 [ 102.278190][ T3830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3830 comm=syz.3.1181 [ 102.291226][ T3830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3830 comm=syz.3.1181 [ 102.304207][ T3830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3830 comm=syz.3.1181 [ 102.317998][ T3830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3830 comm=syz.3.1181 [ 102.335675][ T3830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3830 comm=syz.3.1181 [ 102.348382][ T3830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3830 comm=syz.3.1181 [ 103.513567][ T418] Bluetooth: hci0: command 0x1003 tx timeout [ 103.513587][ T416] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.596593][ T3869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 103.654686][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 103.993624][ T3922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.119931][ T3925] incfs_lookup_dentry err:-13 [ 104.124722][ T3925] incfs: Can't find or create .index dir in ./file0 [ 104.131363][ T3925] incfs: mount failed -13 [ 104.234437][ T3938] FAULT_INJECTION: forcing a failure. [ 104.234437][ T3938] name failslab, interval 1, probability 0, space 0, times 1 [ 104.247160][ T3938] CPU: 1 UID: 0 PID: 3938 Comm: syz.3.1215 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 104.247191][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.247215][ T3938] Call Trace: [ 104.247223][ T3938] [ 104.247231][ T3938] __dump_stack+0x21/0x30 [ 104.247264][ T3938] dump_stack_lvl+0x140/0x1c0 [ 104.247291][ T3938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.247318][ T3938] ? skb_put+0x10e/0x200 [ 104.247341][ T3938] dump_stack+0x19/0x20 [ 104.247366][ T3938] should_fail_ex+0x3c2/0x510 [ 104.247390][ T3938] should_failslab+0xac/0x100 [ 104.247414][ T3938] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 104.247435][ T3938] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 104.247456][ T3938] ? sidtab_sid2str_get+0x135/0x360 [ 104.247476][ T3938] ? sidtab_sid2str_put+0x72e/0x750 [ 104.247495][ T3938] kmemdup_noprof+0x31/0x80 [ 104.247513][ T3938] sidtab_sid2str_get+0x135/0x360 [ 104.247533][ T3938] security_sid_to_context_core+0x30d/0x5d0 [ 104.247559][ T3938] security_sid_to_context+0x2e/0x50 [ 104.247574][ T3938] avc_audit_post_callback+0x1a8/0x790 [ 104.247589][ T3938] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 104.247602][ T3938] ? __cfi_audit_log_format+0x10/0x10 [ 104.247614][ T3938] ? audit_log_untrustedstring+0xea/0x100 [ 104.247625][ T3938] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 104.247638][ T3938] common_lsm_audit+0x14b9/0x18b0 [ 104.247650][ T3938] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 104.247663][ T3938] ? __cfi_common_lsm_audit+0x10/0x10 [ 104.247675][ T3938] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 104.247686][ T3938] ? call_rcu_hurry+0x30/0x30 [ 104.247699][ T3938] ? avc_update_node+0x2fc/0x8a0 [ 104.247714][ T3938] slow_avc_audit+0x19f/0x220 [ 104.247726][ T3938] ? __cfi_slow_avc_audit+0x10/0x10 [ 104.247739][ T3938] ? avc_has_perm_noaudit+0x2bc/0x360 [ 104.247752][ T3938] avc_has_perm+0x1ec/0x240 [ 104.247764][ T3938] ? __cfi_avc_has_perm+0x10/0x10 [ 104.247776][ T3938] ? __asan_memcpy+0x5a/0x80 [ 104.247787][ T3938] selinux_mount+0x3c0/0x510 [ 104.247801][ T3938] ? __cfi_selinux_mount+0x10/0x10 [ 104.247815][ T3938] ? hook_sb_mount+0x102/0x400 [ 104.247829][ T3938] ? __kasan_slab_free+0x6a/0x80 [ 104.247842][ T3938] security_sb_mount+0xaa/0x140 [ 104.247855][ T3938] path_mount+0xc7/0xff0 [ 104.247865][ T3938] ? putname+0x113/0x150 [ 104.247877][ T3938] __se_sys_mount+0x2bf/0x480 [ 104.247889][ T3938] ? __x64_sys_mount+0xf0/0xf0 [ 104.247900][ T3938] ? __kasan_check_write+0x18/0x20 [ 104.247910][ T3938] ? fpregs_restore_userregs+0x11c/0x260 [ 104.247923][ T3938] __x64_sys_mount+0xc3/0xf0 [ 104.247934][ T3938] x64_sys_call+0x2021/0x2ee0 [ 104.247944][ T3938] do_syscall_64+0x57/0xf0 [ 104.247954][ T3938] ? clear_bhb_loop+0x50/0xa0 [ 104.247974][ T3938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.247988][ T3938] RIP: 0033:0x7f4975f9e159 [ 104.248006][ T3938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.248016][ T3938] RSP: 002b:00007f4976d99028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.248030][ T3938] RAX: ffffffffffffffda RBX: 00007f4976225fa0 RCX: 00007f4975f9e159 [ 104.248039][ T3938] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 104.248047][ T3938] RBP: 00007f497603506b R08: 0000000000000000 R09: 0000000000000000 [ 104.248054][ T3938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.248061][ T3938] R13: 00007f4976226038 R14: 00007f4976225fa0 R15: 00007fff8fc8c708 [ 104.248070][ T3938] [ 104.597854][ T3938] syz.3.1215 (3938): drop_caches: 0 [ 105.369561][ T3992] tipc: Started in network mode [ 105.374469][ T3992] tipc: Node identity , cluster identity 4711 [ 105.380694][ T3992] tipc: Failed to obtain node identity [ 105.386153][ T3992] tipc: Enabling of bearer rejected, failed to enable media [ 105.718475][ T4005] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 105.902779][ T4022] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 105.912574][ T4022] SELinux: failed to load policy [ 106.013504][ T4024] tc_dump_action: action bad kind [ 106.026561][ T4027] overlayfs: missing 'lowerdir' [ 106.329377][ T36] kauditd_printk_skb: 26564 callbacks suppressed [ 106.329393][ T36] audit: type=1400 audit(1791197481.329:658809): avc: denied { mount } for pid=4029 comm="syz.2.1240" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 106.358090][ T4030] rust_binder: Write failure EFAULT in pid:826 [ 106.369207][ T36] audit: type=1400 audit(1791197481.339:658810): avc: denied { search } for pid=4029 comm="syz.2.1240" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.399088][ T36] audit: type=1400 audit(1791197481.339:658811): avc: denied { read } for pid=4029 comm="syz.2.1240" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.422189][ T36] audit: type=1400 audit(1791197481.339:658812): avc: denied { open } for pid=4029 comm="syz.2.1240" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.446510][ T36] audit: type=1400 audit(1791197481.339:658813): avc: denied { setopt } for pid=4029 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.466561][ T36] audit: type=1400 audit(1791197481.339:658814): avc: denied { ioctl } for pid=4029 comm="syz.2.1240" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.492359][ T36] audit: type=1400 audit(1791197481.369:658815): avc: denied { create } for pid=4034 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.512358][ T36] audit: type=1400 audit(1791197481.369:658816): avc: denied { connect } for pid=4034 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.532443][ T36] audit: type=1400 audit(1791197481.440:658817): avc: denied { create } for pid=4043 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.593359][ T36] audit: type=1400 audit(1791197481.590:658818): avc: denied { ioctl } for pid=4046 comm="syz.0.1245" path="socket:[16921]" dev="sockfs" ino=16921 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.619252][ T49] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.716500][ T4061] SELinux: policydb version 1717986918 does not match my version range 15-33 [ 106.725565][ T4061] SELinux: failed to load policy [ 106.732365][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 106.742083][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 106.779696][ T49] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.789982][ T49] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.803223][ T49] usb 3-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 106.812417][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.363571][ T4078] fuse: Bad value for 'fd' [ 107.737476][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 107.749546][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 107.760574][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 107.771219][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 107.782162][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 107.793126][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 107.804173][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 107.815190][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 107.826144][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 107.837044][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 107.848051][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 107.859099][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 107.870093][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 107.881023][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 107.892156][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 107.903660][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 107.914774][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 107.925919][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 107.938190][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 107.949267][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 107.960436][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 107.971712][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 107.982770][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 107.994346][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 108.005649][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 108.017873][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 108.029024][ T49] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 108.042015][ T49] ax88179_178a 3-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 76:9b:28:17:da:1e [ 108.068386][ T49] usb 3-1: USB disconnect, device number 2 [ 108.077511][ T49] ax88179_178a 3-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 108.352705][ T4119] overlayfs: missing 'lowerdir' [ 108.426401][ T377] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.587060][ T377] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.596814][ T377] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.606717][ T377] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.621298][ T377] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 108.630389][ T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 108.638492][ T377] usb 2-1: Product: syz [ 108.642657][ T377] usb 2-1: Manufacturer: syz [ 108.647268][ T377] usb 2-1: SerialNumber: syz [ 108.859576][ T377] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 109.060196][ T377] usb 2-1: USB disconnect, device number 3 [ 109.068780][ T377] usblp0: removed [ 109.286480][ T4163] kvm: Disabled LAPIC found during irq injection [ 109.468226][ T4173] syzkaller1: entered promiscuous mode [ 109.473711][ T4173] syzkaller1: entered allmulticast mode [ 110.613832][ T377] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.743725][ T377] usb 4-1: device descriptor read/64, error -71 [ 110.983434][ T377] usb 4-1: device descriptor read/64, error -71 [ 111.039387][ T4218] fuse: Bad value for 'fd' [ 111.233175][ T377] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.303118][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.363033][ T377] usb 4-1: device descriptor read/64, error -71 [ 111.442961][ T31] usb 2-1: device descriptor read/64, error -71 [ 111.557352][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 111.557367][ T36] audit: type=1400 audit(1791197486.556:658903): avc: denied { ioctl } for pid=4231 comm="syz.2.1297" path="socket:[16335]" dev="sockfs" ino=16335 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.593808][ T4232] 9pnet_fd: Insufficient options for proto=fd [ 111.600503][ T36] audit: type=1400 audit(1791197486.596:658904): avc: denied { shutdown } for pid=4231 comm="syz.2.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.602807][ T377] usb 4-1: device descriptor read/64, error -71 [ 111.620564][ T4233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 111.653015][ T4232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 111.686182][ T36] audit: type=1400 audit(1791197486.686:658905): avc: denied { create } for pid=4234 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.712797][ T31] usb 2-1: device descriptor read/64, error -71 [ 111.732740][ T377] usb usb4-port1: attempt power cycle [ 111.952458][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.996292][ T36] audit: type=1400 audit(1791197486.996:658906): avc: denied { read write } for pid=4242 comm="syz.2.1301" name="synthetic_events" dev="tracefs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 112.020331][ T36] audit: type=1400 audit(1791197486.996:658907): avc: denied { open } for pid=4242 comm="syz.2.1301" path="/275/tracing/synthetic_events" dev="tracefs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 112.044903][ T36] audit: type=1400 audit(1791197487.006:658908): avc: denied { read write } for pid=4242 comm="syz.2.1301" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 112.068833][ T36] audit: type=1400 audit(1791197487.006:658909): avc: denied { open } for pid=4242 comm="syz.2.1301" path="/275/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 112.096387][ T36] audit: type=1400 audit(1791197487.006:658910): avc: denied { ioctl } for pid=4242 comm="syz.2.1301" path="/275/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 112.102588][ T377] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.130177][ T31] usb 2-1: device descriptor read/64, error -71 [ 112.153285][ T377] usb 4-1: device descriptor read/8, error -71 [ 112.166250][ T36] audit: type=1400 audit(1791197487.166:658911): avc: denied { nlmsg_read } for pid=4251 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.166261][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 112.283208][ T377] usb 4-1: device descriptor read/8, error -71 [ 112.372029][ T31] usb 2-1: device descriptor read/64, error -71 [ 112.482100][ T31] usb usb2-port1: attempt power cycle [ 112.541914][ T377] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.562822][ T377] usb 4-1: device descriptor read/8, error -71 [ 112.692780][ T377] usb 4-1: device descriptor read/8, error -71 [ 112.801684][ T377] usb usb4-port1: unable to enumerate USB device [ 112.821641][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.842574][ T31] usb 2-1: device descriptor read/8, error -71 [ 112.972440][ T31] usb 2-1: device descriptor read/8, error -71 [ 113.082114][ T36] audit: type=1400 audit(1791197488.087:658912): avc: granted { setsecparam } for pid=4271 comm="syz.2.1309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 113.211414][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.232184][ T31] usb 2-1: device descriptor read/8, error -71 [ 113.341132][ T49] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.362211][ T31] usb 2-1: device descriptor read/8, error -71 [ 113.481205][ T31] usb usb2-port1: unable to enumerate USB device [ 113.503417][ T49] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 113.512580][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.520550][ T49] usb 3-1: Product: syz [ 113.524806][ T49] usb 3-1: Manufacturer: syz [ 113.529401][ T49] usb 3-1: SerialNumber: syz [ 113.536461][ T49] usb 3-1: UAS is ignored for this device, using usb-storage instead [ 113.544678][ T49] usb 3-1: UAS is ignored for this device, using usb-storage instead [ 113.552851][ T49] usb-storage 3-1:1.0: USB Mass Storage device detected [ 113.560435][ T49] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 113.569101][ T49] scsi host1: usb-storage 3-1:1.0 [ 113.991908][ T49] usb 3-1: USB disconnect, device number 3 [ 114.073339][ T4297] input: syz1 as /devices/virtual/input/input5 [ 114.189736][ T4301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1314'. [ 114.630010][ T49] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.779875][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 114.786072][ T49] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 114.796483][ T49] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 114.806852][ T49] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 114.809867][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.815930][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.831459][ T49] usb 4-1: Product: syz [ 114.835616][ T49] usb 4-1: Manufacturer: syz [ 114.840224][ T49] usb 4-1: SerialNumber: syz [ 114.949753][ T311] usb 3-1: device descriptor read/64, error -71 [ 115.189536][ T311] usb 3-1: device descriptor read/64, error -71 [ 115.349404][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.429365][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.500391][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.510192][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 115.521729][ T10] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 115.531635][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.543974][ T10] usb 2-1: Product: syz [ 115.548267][ T10] usb 2-1: Manufacturer: syz [ 115.552916][ T10] usb 2-1: SerialNumber: syz [ 115.559432][ T311] usb 3-1: device descriptor read/64, error -71 [ 115.567350][ T10] ums-karma 2-1:1.0: USB Mass Storage device detected [ 115.577953][ T10] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 115.577953][ T10] Please send a copy of this message to and [ 115.642562][ T4349] x_tables: unsorted entry at hook 2 [ 115.652691][ T10] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 115.776550][ T4330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 115.786244][ T4330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.795066][ T4330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.802874][ T311] usb 3-1: device descriptor read/64, error -71 [ 115.810024][ T31] usb 2-1: USB disconnect, device number 8 [ 115.919038][ T311] usb usb3-port1: attempt power cycle [ 116.239461][ T4360] selinux_netlink_send: 23 callbacks suppressed [ 116.239482][ T4360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4360 comm=syz.0.1329 [ 116.258808][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.289664][ T311] usb 3-1: device descriptor read/8, error -71 [ 116.309859][ T4364] netlink: 'syz.0.1331': attribute type 9 has an invalid length. [ 116.342070][ T4370] fuse: Bad value for 'fd' [ 116.419611][ T311] usb 3-1: device descriptor read/8, error -71 [ 116.568499][ T377] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.668401][ T311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 116.699400][ T311] usb 3-1: device descriptor read/8, error -71 [ 116.708362][ T377] usb 2-1: device descriptor read/64, error -71 [ 116.829275][ T311] usb 3-1: device descriptor read/8, error -71 [ 116.938278][ T311] usb usb3-port1: unable to enumerate USB device [ 116.948180][ T377] usb 2-1: device descriptor read/64, error -71 [ 117.188052][ T377] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 117.335138][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 117.335168][ T36] audit: type=1400 audit(1791197492.341:658925): avc: denied { connect } for pid=4378 comm="syz.0.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.361006][ T377] usb 2-1: device descriptor read/64, error -71 [ 117.371109][ T36] audit: type=1400 audit(1791197492.351:658926): avc: denied { write } for pid=4378 comm="syz.0.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.391245][ T36] audit: type=1400 audit(1791197492.381:658927): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 117.412527][ T49] usb 4-1: unit 8 not found! [ 117.419408][ T49] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 117.428850][ T49] usb 4-1: USB disconnect, device number 7 [ 117.452131][ T36] audit: type=1400 audit(1791197492.461:658928): avc: denied { setopt } for pid=4380 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.597759][ T377] usb 2-1: device descriptor read/64, error -71 [ 117.657751][ T36] audit: type=1400 audit(1791197492.671:658929): avc: denied { append } for pid=4391 comm="syz.2.1340" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.707757][ T377] usb usb2-port1: attempt power cycle [ 117.777872][ T49] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.786677][ T4395] netlink: 'syz.2.1341': attribute type 12 has an invalid length. [ 117.912317][ T36] audit: type=1400 audit(1791197492.921:658930): avc: denied { mounton } for pid=4402 comm="syz.0.1344" path="/412/file0" dev="tmpfs" ino=2319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.935669][ T49] usb 4-1: device descriptor read/64, error -71 [ 117.947360][ T36] audit: type=1400 audit(1791197492.951:658931): avc: denied { mount } for pid=4403 comm="syz.2.1345" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.971049][ T36] audit: type=1400 audit(1791197492.951:658932): avc: denied { write } for pid=4406 comm="syz.0.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.007721][ T4414] FAULT_INJECTION: forcing a failure. [ 118.007721][ T4414] name failslab, interval 1, probability 0, space 0, times 0 [ 118.020661][ T4414] CPU: 1 UID: 0 PID: 4414 Comm: syz.0.1348 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 118.020693][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.020705][ T4414] Call Trace: [ 118.020712][ T4414] [ 118.020721][ T4414] __dump_stack+0x21/0x30 [ 118.020753][ T4414] dump_stack_lvl+0x140/0x1c0 [ 118.020778][ T4414] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.020806][ T4414] dump_stack+0x19/0x20 [ 118.020828][ T4414] should_fail_ex+0x3c2/0x510 [ 118.020852][ T4414] should_failslab+0xac/0x100 [ 118.020876][ T4414] __kmalloc_cache_noprof+0x41/0x470 [ 118.020897][ T4414] ? alloc_super+0x67/0x950 [ 118.020923][ T4414] ? __kasan_check_write+0x18/0x20 [ 118.020943][ T4414] ? _raw_spin_lock+0x92/0x120 [ 118.020961][ T4414] alloc_super+0x67/0x950 [ 118.020989][ T4414] ? __kasan_kmalloc+0x96/0xb0 [ 118.021013][ T4414] sget+0x1fb/0x710 [ 118.021036][ T4414] ? __cfi_set_anon_super+0x10/0x10 [ 118.021056][ T4414] ? __cfi_devpts_fill_super+0x10/0x10 [ 118.021075][ T4414] mount_nodev+0x37/0x110 [ 118.021095][ T4414] devpts_mount+0x30/0x40 [ 118.021122][ T4414] legacy_get_tree+0x106/0x1b0 [ 118.021149][ T4414] ? __cfi_devpts_mount+0x10/0x10 [ 118.021168][ T4414] vfs_get_tree+0x9e/0x290 [ 118.021187][ T4414] do_new_mount+0x251/0xb40 [ 118.021207][ T4414] ? security_capable+0x44/0x130 [ 118.021231][ T4414] path_mount+0x66a/0xff0 [ 118.021249][ T4414] ? putname+0x113/0x150 [ 118.021271][ T4414] __se_sys_mount+0x2bf/0x480 [ 118.021291][ T4414] ? __x64_sys_mount+0xf0/0xf0 [ 118.021312][ T4414] ? __kasan_check_write+0x18/0x20 [ 118.021331][ T4414] ? fpregs_restore_userregs+0x11c/0x260 [ 118.021356][ T4414] __x64_sys_mount+0xc3/0xf0 [ 118.021375][ T4414] x64_sys_call+0x2021/0x2ee0 [ 118.021393][ T4414] do_syscall_64+0x57/0xf0 [ 118.021410][ T4414] ? clear_bhb_loop+0x50/0xa0 [ 118.021438][ T4414] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.021463][ T4414] RIP: 0033:0x7f5ff419e159 [ 118.021474][ T4414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.021484][ T4414] RSP: 002b:00007f5ff50a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.021497][ T4414] RAX: ffffffffffffffda RBX: 00007f5ff4425fa0 RCX: 00007f5ff419e159 [ 118.021505][ T4414] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 118.021512][ T4414] RBP: 00007f5ff423506b R08: 0000000000000000 R09: 0000000000000000 [ 118.021519][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.021526][ T4414] R13: 00007f5ff4426038 R14: 00007f5ff4425fa0 R15: 00007ffd0d7458b8 [ 118.021535][ T4414] [ 118.286988][ T377] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 118.308190][ T377] usb 2-1: device descriptor read/8, error -71 [ 118.437185][ T49] usb 4-1: device descriptor read/64, error -71 [ 118.448179][ T377] usb 2-1: device descriptor read/8, error -71 [ 118.707012][ T377] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 118.714687][ T49] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.737994][ T377] usb 2-1: device descriptor read/8, error -71 [ 118.771307][ T36] audit: type=1400 audit(1791197493.782:658933): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 118.793178][ T36] audit: type=1400 audit(1791197493.802:658934): avc: denied { create } for pid=4420 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 118.846911][ T49] usb 4-1: device descriptor read/64, error -71 [ 118.867910][ T377] usb 2-1: device descriptor read/8, error -71 [ 118.987431][ T377] usb usb2-port1: unable to enumerate USB device [ 119.086768][ T49] usb 4-1: device descriptor read/64, error -71 [ 119.140114][ T4431] fuse: Bad value for 'fd' [ 119.144907][ T4431] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.196767][ T49] usb usb4-port1: attempt power cycle [ 119.484690][ T4441] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.501005][ T4447] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1358'. [ 119.601342][ T49] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 119.627440][ T49] usb 4-1: device descriptor read/8, error -71 [ 119.760301][ T49] usb 4-1: device descriptor read/8, error -71 [ 120.006203][ T49] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 120.027420][ T49] usb 4-1: device descriptor read/8, error -71 [ 120.167144][ T49] usb 4-1: device descriptor read/8, error -71 [ 120.176124][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 120.286369][ T49] usb usb4-port1: unable to enumerate USB device [ 120.328178][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.338324][ T10] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 120.352553][ T10] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 120.361612][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.369625][ T10] usb 2-1: Product: syz [ 120.373800][ T10] usb 2-1: Manufacturer: syz [ 120.378443][ T10] usb 2-1: SerialNumber: syz [ 120.384627][ T10] usb-storage 2-1:1.0: USB Mass Storage device detected [ 120.392284][ T10] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 120.400443][ T10] scsi host1: usb-storage 2-1:1.0 [ 120.591027][ T4488] netlink: 8184 bytes leftover after parsing attributes in process `syz.1.1360'. [ 120.608336][ T4488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.617836][ T4488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.835755][ T49] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 120.885170][ T4520] overlayfs: missing 'lowerdir' [ 120.890572][ T4521] overlayfs: failed to resolve './file0': -2 [ 120.897227][ T10] usb 2-1: USB disconnect, device number 13 [ 120.996961][ T49] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.005367][ T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.015907][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.026136][ T49] usb 4-1: New USB device found, idVendor=1235, idProduct=820c, bcdDevice= 0.40 [ 121.035173][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.043291][ T49] usb 4-1: Product: syz [ 121.047534][ T49] usb 4-1: Manufacturer: syz [ 121.052139][ T49] usb 4-1: SerialNumber: syz [ 121.231510][ T4531] overlayfs: failed to resolve './file0/file1': -2 [ 121.262978][ T49] usb 4-1: Focusrite Clarett+ Mixer Driver enabled (pid=0x820c); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 121.277569][ T49] usb 4-1: Error initialising Clarett+ Mixer Driver: -22 [ 121.287826][ T49] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 121.297877][ T49] usb 4-1: USB disconnect, device number 12 [ 121.303954][ T4537] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 121.329493][ T3993] udevd[3993]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.971175][ T4554] process 'syz.0.1375' launched './file0' with NULL argv: empty string added [ 121.980239][ T4554] Invalid argument reading file caps for ./file0 [ 121.987472][ T4554] fuse: Unknown parameter '׺QDۗ#يSl;ƻ/(P]l?2y5Hܒ:pc>k' 39$A:\}>&[\"b >15SjN~C[k8}' [ 122.034186][ T4558] FAULT_INJECTION: forcing a failure. [ 122.034186][ T4558] name failslab, interval 1, probability 0, space 0, times 0 [ 122.047372][ T4558] CPU: 1 UID: 0 PID: 4558 Comm: syz.0.1377 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 122.047408][ T4558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.047420][ T4558] Call Trace: [ 122.047426][ T4558] [ 122.047432][ T4558] __dump_stack+0x21/0x30 [ 122.047464][ T4558] dump_stack_lvl+0x140/0x1c0 [ 122.047490][ T4558] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.047515][ T4558] dump_stack+0x19/0x20 [ 122.047538][ T4558] should_fail_ex+0x3c2/0x510 [ 122.047563][ T4558] should_failslab+0xac/0x100 [ 122.047587][ T4558] kmem_cache_alloc_noprof+0x42/0x410 [ 122.047606][ T4558] ? alloc_empty_file+0xbf/0x270 [ 122.047621][ T4558] ? _raw_spin_unlock+0x45/0x60 [ 122.047633][ T4558] alloc_empty_file+0xbf/0x270 [ 122.047647][ T4558] ? _raw_spin_unlock+0x45/0x60 [ 122.047657][ T4558] alloc_file_pseudo+0x142/0x1f0 [ 122.047672][ T4558] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 122.047686][ T4558] ? bpf_lsm_socket_post_create+0xd/0x20 [ 122.047702][ T4558] ? __kasan_check_write+0x18/0x20 [ 122.047722][ T4558] sock_alloc_file+0xbe/0x2b0 [ 122.047745][ T4558] __sys_socketpair+0x3b8/0x5c0 [ 122.047769][ T4558] __x64_sys_socketpair+0x9f/0xc0 [ 122.047790][ T4558] x64_sys_call+0x2081/0x2ee0 [ 122.047800][ T4558] do_syscall_64+0x57/0xf0 [ 122.047811][ T4558] ? clear_bhb_loop+0x50/0xa0 [ 122.047828][ T4558] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.047842][ T4558] RIP: 0033:0x7f5ff419e159 [ 122.047852][ T4558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.047861][ T4558] RSP: 002b:00007f5ff50a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 122.047874][ T4558] RAX: ffffffffffffffda RBX: 00007f5ff4425fa0 RCX: 00007f5ff419e159 [ 122.047883][ T4558] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 122.047889][ T4558] RBP: 00007f5ff423506b R08: 0000000000000000 R09: 0000000000000000 [ 122.047896][ T4558] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 122.047909][ T4558] R13: 00007f5ff4426038 R14: 00007f5ff4425fa0 R15: 00007ffd0d7458b8 [ 122.047925][ T4558] [ 122.274975][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 122.425875][ T9] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 122.436092][ T9] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 122.445196][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.656758][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 122.656777][ T36] audit: type=1400 audit(1791197497.664:658959): avc: denied { map } for pid=4559 comm="syz.3.1378" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.688050][ T9] usb 4-1: string descriptor 0 read error: -71 [ 122.694360][ T9] hub 4-1:32.0: bad descriptor, ignoring hub [ 122.700637][ T9] hub 4-1:32.0: probe with driver hub failed with error -5 [ 122.704762][ T36] audit: type=1400 audit(1791197497.664:658960): avc: denied { execute } for pid=4559 comm="syz.3.1378" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.725254][ T9] usb 4-1: USB disconnect, device number 13 [ 122.856990][ T36] audit: type=1400 audit(1791197497.864:658961): avc: denied { accept } for pid=4582 comm="syz.0.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.944481][ T4587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4587 comm=syz.0.1386 [ 122.961119][ T36] audit: type=1400 audit(1791197497.964:658962): avc: denied { connect } for pid=4586 comm="syz.0.1386" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.383193][ T4601] overlayfs: conflicting options: nfs_export=on,index=off [ 123.554324][ T49] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 123.574424][ T36] audit: type=1400 audit(1791197498.584:658963): avc: denied { accept } for pid=4614 comm="syz.0.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.642111][ T4618] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.714250][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 123.745359][ T49] usb 4-1: config 184 interface 0 altsetting 207 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 123.756782][ T49] usb 4-1: config 184 interface 0 altsetting 207 bulk endpoint 0xE has invalid maxpacket 16 [ 123.774211][ T49] usb 4-1: config 184 interface 0 altsetting 207 bulk endpoint 0x85 has invalid maxpacket 8 [ 123.784793][ T4627] FAULT_INJECTION: forcing a failure. [ 123.784793][ T4627] name failslab, interval 1, probability 0, space 0, times 0 [ 123.794207][ T49] usb 4-1: config 184 interface 0 altsetting 207 has an invalid descriptor for endpoint zero, skipping [ 123.808710][ T49] usb 4-1: config 184 interface 0 altsetting 207 has a duplicate endpoint with address 0x5, skipping [ 123.834199][ T4627] CPU: 0 UID: 0 PID: 4627 Comm: syz.0.1398 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 123.834222][ T49] usb 4-1: config 184 interface 0 altsetting 207 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 123.834234][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.834246][ T4627] Call Trace: [ 123.834253][ T4627] [ 123.834260][ T4627] __dump_stack+0x21/0x30 [ 123.834291][ T4627] dump_stack_lvl+0x140/0x1c0 [ 123.834318][ T4627] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.834350][ T4627] dump_stack+0x19/0x20 [ 123.834375][ T4627] should_fail_ex+0x3c2/0x510 [ 123.834399][ T4627] should_failslab+0xac/0x100 [ 123.834425][ T4627] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 123.834449][ T4627] ? key_alloc+0x338/0x1060 [ 123.834474][ T4627] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 123.834495][ T4627] kmemdup_noprof+0x31/0x80 [ 123.834513][ T4627] key_alloc+0x338/0x1060 [ 123.834540][ T4627] keyring_alloc+0x4b/0xc0 [ 123.834558][ T4627] lookup_user_key+0x485/0x1230 [ 123.834582][ T4627] ? __kasan_kmalloc+0x96/0xb0 [ 123.834605][ T4627] ? __kmalloc_node_noprof+0x252/0x500 [ 123.834626][ T4627] ? __cfi_lookup_user_key+0x10/0x10 [ 123.834672][ T4627] ? check_stack_object+0x81/0x150 [ 123.834694][ T4627] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 123.834722][ T4627] ? __kasan_check_write+0x18/0x20 [ 123.834743][ T4627] __se_sys_add_key+0x317/0x4b0 [ 123.834766][ T4627] ? __x64_sys_add_key+0xf0/0xf0 [ 123.834788][ T4627] ? __kasan_check_write+0x18/0x20 [ 123.834808][ T4627] ? fpregs_restore_userregs+0x11c/0x260 [ 123.834832][ T4627] __x64_sys_add_key+0xc3/0xf0 [ 123.834853][ T4627] x64_sys_call+0x195f/0x2ee0 [ 123.834870][ T4627] do_syscall_64+0x57/0xf0 [ 123.834890][ T4627] ? clear_bhb_loop+0x50/0xa0 [ 123.834914][ T4627] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.834938][ T4627] RIP: 0033:0x7f5ff419e159 [ 123.834954][ T4627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.834971][ T4627] RSP: 002b:00007f5ff50a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 123.834992][ T4627] RAX: ffffffffffffffda RBX: 00007f5ff4425fa0 RCX: 00007f5ff419e159 [ 123.835007][ T4627] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 123.835021][ T4627] RBP: 00007f5ff423506b R08: ffffffffffffffff R09: 0000000000000000 [ 123.835035][ T4627] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 123.835047][ T4627] R13: 00007f5ff4426038 R14: 00007f5ff4425fa0 R15: 00007ffd0d7458b8 [ 123.835063][ T4627] [ 124.164034][ T49] usb 4-1: config 184 interface 0 altsetting 207 has a duplicate endpoint with address 0xA, skipping [ 124.184024][ T49] usb 4-1: config 184 interface 0 has no altsetting 0 [ 124.205053][ T49] usb 4-1: New USB device found, idVendor=1199, idProduct=9011, bcdDevice=a7.e3 [ 124.214193][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.222198][ T49] usb 4-1: Product: syz [ 124.234000][ T49] usb 4-1: Manufacturer: syz [ 124.244001][ T49] usb 4-1: SerialNumber: syz [ 124.462011][ T49] usb 4-1: USB disconnect, device number 14 [ 124.623274][ T4645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1404'. [ 124.743807][ T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 124.894887][ T9] usb 2-1: config 1 has an invalid descriptor of length 235, skipping remainder of the config [ 124.905244][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.912794][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.927206][ T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 124.936308][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.944320][ T9] usb 2-1: Product: syz [ 124.948546][ T9] usb 2-1: Manufacturer: syz [ 124.953131][ T9] usb 2-1: SerialNumber: syz [ 125.083651][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 125.089850][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 125.099351][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.107990][ T10] usb 3-1: config 0 descriptor?? [ 125.116344][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 125.161481][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 125.172360][ T9] usb 2-1: USB disconnect, device number 14 [ 125.203603][ T49] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 125.314385][ T10] usb 3-1: Detected FT232B [ 125.353526][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 125.361111][ T49] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 125.370313][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.378429][ T49] usb 4-1: Product: syz [ 125.382597][ T49] usb 4-1: Manufacturer: syz [ 125.387212][ T49] usb 4-1: SerialNumber: syz [ 125.555371][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 125.562655][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 125.570085][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 125.584794][ T10] usb 3-1: USB disconnect, device number 8 [ 125.591566][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 125.595709][ T36] audit: type=1400 audit(1791197500.605:658964): avc: denied { write } for pid=4655 comm="syz.3.1407" path="socket:[24546]" dev="sockfs" ino=24546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.601583][ T10] ftdi_sio 3-1:0.0: device disconnected [ 125.628626][ T36] audit: type=1400 audit(1791197500.635:658965): avc: denied { read } for pid=4655 comm="syz.3.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.699393][ T36] audit: type=1400 audit(1791197500.705:658966): avc: denied { ioctl } for pid=4661 comm="syz.1.1409" path="socket:[24569]" dev="sockfs" ino=24569 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.963301][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 126.113231][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 126.120659][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.131611][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.141396][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.154212][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 126.163278][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.172035][ T31] usb 2-1: config 0 descriptor?? [ 126.323138][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 126.453090][ T10] usb 3-1: device descriptor read/64, error -71 [ 126.579220][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.586526][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.593798][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.601063][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.608308][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.615583][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.622788][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.630671][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.637932][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.645164][ T31] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.656445][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input6 [ 126.671883][ T31] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 126.692989][ T10] usb 3-1: device descriptor read/64, error -71 [ 126.932905][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.062875][ T10] usb 3-1: device descriptor read/64, error -71 [ 127.302783][ T10] usb 3-1: device descriptor read/64, error -71 [ 127.412823][ T10] usb usb3-port1: attempt power cycle [ 127.488198][ T31] usb 2-1: USB disconnect, device number 15 [ 127.516289][ T36] audit: type=1400 audit(1791197502.526:658967): avc: denied { ioctl } for pid=4678 comm="syz.1.1414" path="socket:[23367]" dev="sockfs" ino=23367 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.752620][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 127.773610][ T10] usb 3-1: device descriptor read/8, error -71 [ 127.872555][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 127.903560][ T10] usb 3-1: device descriptor read/8, error -71 [ 128.002536][ T36] audit: type=1400 audit(1791197503.006:658968): avc: denied { bind } for pid=4694 comm="syz.3.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 128.029662][ T49] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 128.038650][ T49] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 128.045403][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 128.057542][ T49] usb 4-1: USB disconnect, device number 15 [ 128.064004][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.075539][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 128.091702][ T3993] udevd[3993]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.109364][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 128.119695][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 128.134888][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.144250][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 128.152255][ T31] usb 2-1: SerialNumber: syz [ 128.160902][ T4683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.168160][ T4683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.172454][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 128.176989][ T31] hub 2-1:1.0: bad descriptor, ignoring hub [ 128.188860][ T31] hub 2-1:1.0: probe with driver hub failed with error -5 [ 128.213506][ T10] usb 3-1: device descriptor read/8, error -71 [ 128.291702][ T36] audit: type=1400 audit(1791197503.296:658969): avc: denied { getattr } for pid=4704 comm="syz.3.1421" name="/" dev="incremental-fs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 128.292122][ T4705] overlayfs: upper fs does not support tmpfile. [ 128.315437][ T36] audit: type=1400 audit(1791197503.296:658970): avc: denied { create } for pid=4704 comm="syz.3.1421" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.315470][ T36] audit: type=1400 audit(1791197503.296:658971): avc: denied { setattr } for pid=4704 comm="syz.3.1421" name="work" dev="incremental-fs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.363812][ T10] usb 3-1: device descriptor read/8, error -71 [ 128.375852][ T4683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.383745][ T4683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.384489][ T4707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.399649][ T4707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.472495][ T10] usb usb3-port1: unable to enumerate USB device [ 128.568586][ T36] audit: type=1400 audit(1791197503.576:658972): avc: denied { create } for pid=4709 comm="syz.0.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 128.588864][ T36] audit: type=1400 audit(1791197503.606:658973): avc: denied { sys_admin } for pid=4709 comm="syz.0.1422" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 128.615811][ T4657] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 128.622306][ T31] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 128.643044][ T4710] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1422'. [ 128.783271][ T4657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.798692][ T4657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.819287][ T4657] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 128.828618][ T4657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.837738][ T4657] usb 4-1: config 0 descriptor?? [ 129.101382][ T36] audit: type=1400 audit(1791197504.106:658974): avc: denied { ioctl } for pid=4732 comm="syz.2.1425" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 129.286659][ T36] audit: type=1400 audit(1791197504.297:658975): avc: denied { mount } for pid=4741 comm="syz.0.1427" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.310059][ T36] audit: type=1400 audit(1791197504.317:658976): avc: denied { bind } for pid=4741 comm="syz.0.1427" laddr=172.20.20.48 lport=3 faddr=172.20.20.48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.334443][ T36] audit: type=1400 audit(1791197504.317:658977): avc: denied { name_bind } for pid=4741 comm="syz.0.1427" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 129.444733][ T4705] overlayfs: upper fs does not support tmpfile. [ 129.452620][ T4657] usbhid 4-1:0.0: can't add hid device: -71 [ 129.458589][ T4657] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 129.467615][ T4657] usb 4-1: USB disconnect, device number 16 [ 129.492036][ T149] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 129.500293][ T149] usb 2-1: device reset changed ep0 maxpacket size! [ 129.507553][ T49] usb 2-1: USB disconnect, device number 16 [ 129.517553][ T4742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1427'. [ 129.522559][ T49] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 129.702007][ T49] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 129.719500][ T4760] ======================================================= [ 129.719500][ T4760] WARNING: The mand mount option has been deprecated and [ 129.719500][ T4760] and is ignored by this kernel. Remove the mand [ 129.719500][ T4760] option from the mount to silence this warning. [ 129.719500][ T4760] ======================================================= [ 129.852928][ T49] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 129.863853][ T49] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 129.873877][ T49] usb 2-1: config 1 interface 0 has no altsetting 0 [ 129.881911][ T49] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 129.890979][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.899106][ T49] usb 2-1: Product: syz [ 129.903710][ T49] usb 2-1: Manufacturer: syz [ 129.908295][ T49] usb 2-1: SerialNumber: syz [ 129.917340][ T4745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.924787][ T4745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.939610][ T4764] ------------[ cut here ]------------ [ 129.945132][ T4764] WARNING: CPU: 0 PID: 4764 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 129.954649][ T4764] Modules linked in: [ 129.958549][ T4764] CPU: 0 UID: 0 PID: 4764 Comm: syz.2.1430 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 129.970124][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.980217][ T4764] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 129.986257][ T4764] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e5 cd 0b 06 00 0f 85 c2 00 00 00 c6 05 d8 cd 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 130.005905][ T4764] RSP: 0018:ffffc90011e7f640 EFLAGS: 00010246 [ 130.011991][ T4764] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 130.019975][ T4764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90011e7f6f8 [ 130.027970][ T4764] RBP: ffffc90011e7f780 R08: ffffc90011e7f6f7 R09: 0000000000000000 [ 130.035969][ T4764] R10: ffffc90011e7f6e0 R11: fffff520023cfedf R12: ffffc90011e7f680 [ 130.043962][ T4764] R13: dffffc0000000000 R14: 1ffff920023cfecc R15: 0000000000000000 [ 130.051965][ T4764] FS: 00007f79542e26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 130.060898][ T4764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.067503][ T4764] CR2: 000020000000f000 CR3: 0000000131d52000 CR4: 00000000003526b0 [ 130.075501][ T4764] Call Trace: [ 130.078774][ T4764] [ 130.081695][ T4764] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 130.087458][ T4764] ? __kasan_slab_alloc+0x73/0x90 [ 130.092525][ T4764] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 130.098174][ T4764] ? hashtab_init+0xd6/0x1f0 [ 130.102799][ T4764] ___kmalloc_large_node+0x81/0x220 [ 130.108009][ T4764] ? hashtab_init+0xd6/0x1f0 [ 130.112642][ T4764] __kmalloc_large_node_noprof+0x1e/0xd0 [ 130.118288][ T4764] ? hashtab_init+0xd6/0x1f0 [ 130.122923][ T4764] __kmalloc_noprof+0x326/0x510 [ 130.127782][ T4764] ? __cfi_ebitmap_read+0x10/0x10 [ 130.132833][ T4764] hashtab_init+0xd6/0x1f0 [ 130.137272][ T4764] ? policydb_read+0x865/0x2860 [ 130.142143][ T4764] symtab_init+0x44/0x70 [ 130.146401][ T4764] policydb_read+0x8e1/0x2860 [ 130.151093][ T4764] ? __kasan_kmalloc+0x96/0xb0 [ 130.155895][ T4764] ? __cfi_policydb_read+0x10/0x10 [ 130.161011][ T4764] ? security_load_policy+0x130/0x12d0 [ 130.166497][ T4764] security_load_policy+0x16a/0x12d0 [ 130.171828][ T4764] ? irqentry_exit+0x4a/0x60 [ 130.176461][ T4764] ? __kasan_check_write+0x18/0x20 [ 130.181637][ T4764] ? mutex_lock+0x97/0x1d0 [ 130.186079][ T4764] ? __cfi_security_load_policy+0x10/0x10 [ 130.191836][ T4764] ? rep_movs_alternative+0x4a/0xa0 [ 130.197043][ T4764] sel_write_load+0x258/0x600 [ 130.201719][ T4764] ? __cfi_sel_write_load+0x10/0x10 [ 130.206949][ T4764] ? bpf_lsm_file_permission+0xd/0x20 [ 130.212349][ T4764] ? __cfi_sel_write_load+0x10/0x10 [ 130.217559][ T4764] vfs_write+0x3c1/0xfd0 [ 130.221846][ T4764] ? __cfi_vfs_write+0x10/0x10 [ 130.226617][ T4764] ? __kasan_check_write+0x18/0x20 [ 130.231765][ T4764] ? mutex_lock+0x97/0x1d0 [ 130.236217][ T4764] ? __cfi_mutex_lock+0x10/0x10 [ 130.241082][ T4764] ksys_write+0x145/0x260 [ 130.245441][ T4764] ? xfd_validate_state+0x68/0x140 [ 130.250566][ T4764] ? __cfi_ksys_write+0x10/0x10 [ 130.255457][ T4764] ? __kasan_check_write+0x18/0x20 [ 130.260579][ T4764] ? fpregs_restore_userregs+0x11c/0x260 [ 130.266221][ T4764] __x64_sys_write+0x7f/0x90 [ 130.270818][ T4764] x64_sys_call+0x271c/0x2ee0 [ 130.275527][ T4764] do_syscall_64+0x57/0xf0 [ 130.279962][ T4764] ? clear_bhb_loop+0x50/0xa0 [ 130.284673][ T4764] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.290573][ T4764] RIP: 0033:0x7f795339e159 [ 130.295010][ T4764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.314647][ T4764] RSP: 002b:00007f79542e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.323094][ T4764] RAX: ffffffffffffffda RBX: 00007f7953625fa0 RCX: 00007f795339e159 [ 130.331073][ T4764] RDX: 000000000000ff13 RSI: 0000200000000000 RDI: 0000000000000005 [ 130.339070][ T4764] RBP: 00007f795343506b R08: 0000000000000000 R09: 0000000000000000 [ 130.347057][ T4764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.355040][ T4764] R13: 00007f7953626038 R14: 00007f7953625fa0 R15: 00007ffc52b2f338 [ 130.363029][ T4764] [ 130.366046][ T4764] ---[ end trace 0000000000000000 ]--- [ 130.371543][ T4764] SELinux: failed to load policy [ 130.371867][ T293] ------------[ cut here ]------------ [ 130.381944][ T293] WARNING: CPU: 0 PID: 293 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 130.389869][ T293] Modules linked in: [ 130.393786][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 130.406913][ T293] Tainted: [W]=WARN [ 130.410707][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.420762][ T293] RIP: 0010:drop_nlink+0xce/0x110 [ 130.425829][ T293] Code: 04 00 00 be 08 00 00 00 e8 ff 0b ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 7a b5 03 cc e8 12 21 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 130.445464][ T293] RSP: 0018:ffffc9000b6bfc88 EFLAGS: 00010293 [ 130.451534][ T293] RAX: ffffffff81f2578e RBX: ffff8881136330c8 RCX: ffff888121cd0000 [ 130.459524][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.467512][ T293] RBP: ffffc9000b6bfcb0 R08: 0000000000000003 R09: 0000000000000004 [ 130.475516][ T293] R10: dffffc0000000000 R11: fffff520016d7f80 R12: dffffc0000000000 [ 130.483514][ T293] R13: 1ffff110226c6622 R14: ffff888113633110 R15: 0000000000000000 [ 130.491499][ T293] FS: 0000555565cf1500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 130.500466][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.507074][ T293] CR2: 000020000000f000 CR3: 0000000124498000 CR4: 00000000003526b0 [ 130.515076][ T293] Call Trace: [ 130.518352][ T293] [ 130.521273][ T293] shmem_rmdir+0x5f/0x90 [ 130.525559][ T293] vfs_rmdir+0x3de/0x560 [ 130.529814][ T293] incfs_kill_sb+0x102/0x220 [ 130.534453][ T293] deactivate_locked_super+0xd5/0x270 [ 130.539839][ T293] deactivate_super+0xb8/0xe0 [ 130.544549][ T293] cleanup_mnt+0x438/0x4d0 [ 130.548973][ T293] __cleanup_mnt+0x1d/0x40 [ 130.553425][ T293] task_work_run+0x1e5/0x260 [ 130.558023][ T293] ? __cfi_task_work_run+0x10/0x10 [ 130.563151][ T293] ? __x64_sys_umount+0x12e/0x180 [ 130.568183][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 130.573696][ T293] ? __kasan_check_read+0x15/0x20 [ 130.578726][ T293] resume_user_mode_work+0x35/0x50 [ 130.583855][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 130.589325][ T293] do_syscall_64+0x63/0xf0 [ 130.593757][ T293] ? clear_bhb_loop+0x50/0xa0 [ 130.598446][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.604396][ T293] RIP: 0033:0x7f4975f9f397 [ 130.608816][ T293] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 130.628450][ T293] RSP: 002b:00007fff8fc8b978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 130.636883][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4975f9f397 [ 130.644880][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8fc8ba30 [ 130.652866][ T293] RBP: 00007fff8fc8ba30 R08: 00007fff8fc8ca30 R09: 00000000ffffffff [ 130.660835][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8fc8cac0 [ 130.668822][ T293] R13: 00007f49760344bb R14: 000000000001fc57 R15: 00007fff8fc8cb00 [ 130.676815][ T293] [ 130.679831][ T293] ---[ end trace 0000000000000000 ]--- [ 130.686121][ T293] ================================================================== [ 130.694204][ T293] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 130.700433][ T293] Write of size 4 at addr 0000000000000168 by task syz-executor/293 [ 130.708393][ T293] [ 130.710721][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 130.710750][ T293] Tainted: [W]=WARN [ 130.710754][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.710762][ T293] Call Trace: [ 130.710765][ T293] [ 130.710770][ T293] __dump_stack+0x21/0x30 [ 130.710789][ T293] dump_stack_lvl+0x140/0x1c0 [ 130.710804][ T293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 130.710820][ T293] print_report+0x3d/0x70 [ 130.710835][ T293] kasan_report+0x162/0x1a0 [ 130.710849][ T293] ? ihold+0x24/0x70 [ 130.710862][ T293] ? ihold+0x24/0x70 [ 130.710875][ T293] kasan_check_range+0x25a/0x2b0 [ 130.710889][ T293] __kasan_check_write+0x18/0x20 [ 130.710900][ T293] ihold+0x24/0x70 [ 130.710913][ T293] vfs_rmdir+0x25c/0x560 [ 130.710928][ T293] incfs_kill_sb+0x102/0x220 [ 130.710940][ T293] deactivate_locked_super+0xd5/0x270 [ 130.710956][ T293] deactivate_super+0xb8/0xe0 [ 130.710971][ T293] cleanup_mnt+0x438/0x4d0 [ 130.710985][ T293] __cleanup_mnt+0x1d/0x40 [ 130.710998][ T293] task_work_run+0x1e5/0x260 [ 130.711012][ T293] ? __cfi_task_work_run+0x10/0x10 [ 130.711026][ T293] ? __x64_sys_umount+0x12e/0x180 [ 130.711036][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 130.711046][ T293] ? __kasan_check_read+0x15/0x20 [ 130.711057][ T293] resume_user_mode_work+0x35/0x50 [ 130.711067][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 130.711083][ T293] do_syscall_64+0x63/0xf0 [ 130.711093][ T293] ? clear_bhb_loop+0x50/0xa0 [ 130.711108][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.711122][ T293] RIP: 0033:0x7f4975f9f397 [ 130.711132][ T293] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 130.711148][ T293] RSP: 002b:00007fff8fc8b978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 130.711160][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4975f9f397 [ 130.711168][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8fc8ba30 [ 130.711175][ T293] RBP: 00007fff8fc8ba30 R08: 00007fff8fc8ca30 R09: 00000000ffffffff [ 130.711183][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8fc8cac0 [ 130.711191][ T293] R13: 00007f49760344bb R14: 000000000001fc57 R15: 00007fff8fc8cb00 [ 130.711200][ T293] [ 130.711204][ T293] ================================================================== [ 130.949436][ T293] Disabling lock debugging due to kernel taint [ 130.958862][ T293] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 130.966663][ T293] #PF: supervisor write access in kernel mode [ 130.972719][ T293] #PF: error_code(0x0002) - not-present page [ 130.978691][ T293] PGD 8000000130cc2067 P4D 8000000130cc2067 PUD 0 [ 130.985187][ T293] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 130.991244][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Tainted: G B W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 131.004352][ T293] Tainted: [B]=BAD_PAGE, [W]=WARN [ 131.009348][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.019400][ T293] RIP: 0010:ihold+0x2a/0x70 [ 131.023902][ T293] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 fd 17 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 0d [ 131.043512][ T293] RSP: 0018:ffffc9000b6bfcc8 EFLAGS: 00010246 [ 131.049579][ T293] RAX: ffff888121cd0000 RBX: 0000000000000000 RCX: ffff888121cd0000 [ 131.057552][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.065525][ T293] RBP: ffffc9000b6bfcd8 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 131.073498][ T293] R10: dffffc0000000000 R11: fffffbfff1177729 R12: 0000000000000000 [ 131.081472][ T293] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 131.089445][ T293] FS: 0000555565cf1500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 131.098362][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.104947][ T293] CR2: 0000000000000168 CR3: 0000000124498000 CR4: 00000000003526b0 [ 131.112922][ T293] Call Trace: [ 131.116195][ T293] [ 131.119117][ T293] vfs_rmdir+0x25c/0x560 [ 131.123384][ T293] incfs_kill_sb+0x102/0x220 [ 131.128004][ T293] deactivate_locked_super+0xd5/0x270 [ 131.133382][ T293] deactivate_super+0xb8/0xe0 [ 131.138072][ T293] cleanup_mnt+0x438/0x4d0 [ 131.142482][ T293] __cleanup_mnt+0x1d/0x40 [ 131.146886][ T293] task_work_run+0x1e5/0x260 [ 131.151468][ T293] ? __cfi_task_work_run+0x10/0x10 [ 131.156617][ T293] ? __x64_sys_umount+0x12e/0x180 [ 131.161642][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 131.167013][ T293] ? __kasan_check_read+0x15/0x20 [ 131.172031][ T293] resume_user_mode_work+0x35/0x50 [ 131.177142][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 131.182609][ T293] do_syscall_64+0x63/0xf0 [ 131.187019][ T293] ? clear_bhb_loop+0x50/0xa0 [ 131.191691][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.197588][ T293] RIP: 0033:0x7f4975f9f397 [ 131.202006][ T293] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 131.221787][ T293] RSP: 002b:00007fff8fc8b978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 131.230202][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4975f9f397 [ 131.238174][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8fc8ba30 [ 131.246146][ T293] RBP: 00007fff8fc8ba30 R08: 00007fff8fc8ca30 R09: 00000000ffffffff [ 131.254127][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8fc8cac0 [ 131.262088][ T293] R13: 00007f49760344bb R14: 000000000001fc57 R15: 00007fff8fc8cb00 [ 131.270058][ T293] [ 131.273095][ T293] Modules linked in: [ 131.276997][ T293] CR2: 0000000000000168 [ 131.281147][ T293] ---[ end trace 0000000000000000 ]--- [ 131.286597][ T293] RIP: 0010:ihold+0x2a/0x70 [ 131.291106][ T293] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 fd 17 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 0d [ 131.310704][ T293] RSP: 0018:ffffc9000b6bfcc8 EFLAGS: 00010246 [ 131.316773][ T293] RAX: ffff888121cd0000 RBX: 0000000000000000 RCX: ffff888121cd0000 [ 131.324739][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.332702][ T293] RBP: ffffc9000b6bfcd8 R08: ffffffff88bbb947 R09: 1ffffffff1177728 [ 131.340678][ T293] R10: dffffc0000000000 R11: fffffbfff1177729 R12: 0000000000000000 [ 131.348640][ T293] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 131.356607][ T293] FS: 0000555565cf1500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 131.365530][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.372105][ T293] CR2: 0000000000000168 CR3: 0000000124498000 CR4: 00000000003526b0 [ 131.380071][ T293] Kernel panic - not syncing: Fatal exception [ 131.386358][ T293] Kernel Offset: disabled [ 131.390674][ T293] Rebooting in 86400 seconds..