last executing test programs: 9m37.759762808s ago: executing program 3 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) unshare(0x2040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) r3 = semget$private(0x0, 0x5, 0x0) semop(r3, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r3, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1800}], 0x1) semctl$SETVAL(r3, 0x1, 0x10, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x44805}, 0x20000010) 9m36.735657868s ago: executing program 3 (id=865): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140d, 0x503, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="000502"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) 9m33.577277744s ago: executing program 3 (id=875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x47, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) read$msr(r2, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) lgetxattr(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)=""/118, 0x76) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000054}, 0x8000) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x8000000004) 9m28.271943155s ago: executing program 3 (id=891): socket$kcm(0xa, 0x3, 0x87) (async) socket$kcm(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x8c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x96, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x4d, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xb00}]}}}}}}}}, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 9m26.094915206s ago: executing program 3 (id=900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xfffffffffffffd7e, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xbf9, 0x6, 0x9c, 0x8}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000540)={0x200, 0x1, &(0x7f00000005c0)=[r2], &(0x7f0000000600)=[0x3], &(0x7f0000000580)=[r3], &(0x7f0000000040), 0x0, 0x200}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x32}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x80) 9m24.980092408s ago: executing program 3 (id=906): close(0x3) syz_usb_connect(0x3, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000263708b10b404316856880102030109021b0002020270ec0904c410006d812e0709fe0000000000000018fdaca633cc014d85272d6d3762f573f1c42c65dfedac09258fb658d488de725d0729bdff5a5c67cb89a7a7e02980100212fb8963254bd33d07973248869ba7b70581c91bea4142f6694c8e388f5a7c77"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402300, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x110, r0, 0xc6693000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0xfffffcfd) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x6, 0x2001) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20004048) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x3}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x14) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 9m9.803179083s ago: executing program 32 (id=906): close(0x3) syz_usb_connect(0x3, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000263708b10b404316856880102030109021b0002020270ec0904c410006d812e0709fe0000000000000018fdaca633cc014d85272d6d3762f573f1c42c65dfedac09258fb658d488de725d0729bdff5a5c67cb89a7a7e02980100212fb8963254bd33d07973248869ba7b70581c91bea4142f6694c8e388f5a7c77"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402300, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x110, r0, 0xc6693000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0xfffffcfd) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x6, 0x2001) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20004048) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x3}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x14) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 2m46.739954633s ago: executing program 0 (id=2049): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0x40) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x20000400) open_by_handle_at(r0, &(0x7f0000000440)=ANY=[], 0x1010fe) 2m46.212216897s ago: executing program 0 (id=2051): openat(0xffffffffffffff9c, 0x0, 0x400800, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000100)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x400000000000826, 0x143381) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000002d00)={0x1, {{0xa, 0x4e22, 0x1000, @private0, 0x3}}, {{0xa, 0x4e22, 0x5, @remote, 0xb0}}}, 0x108) syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x800018f1) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef503"], 0xf8) 2m46.048894417s ago: executing program 0 (id=2053): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b488"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) keyctl$search(0xa, r3, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) 2m45.048180011s ago: executing program 0 (id=2055): socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r1], 0x7c}}, 0x80) 2m44.830957405s ago: executing program 0 (id=2057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x100010, 0xffffffffffffffff, 0x2000) 2m41.576945695s ago: executing program 0 (id=2069): socket$nl_netfilter(0x10, 0x3, 0xc) (async) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100003040000000000c0f0126405fedc", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000a00000000000500090089000000"], 0x44}}, 0x800) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) (async) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') 2m26.21791771s ago: executing program 33 (id=2069): socket$nl_netfilter(0x10, 0x3, 0xc) (async) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100003040000000000c0f0126405fedc", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000a00000000000500090089000000"], 0x44}}, 0x800) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) (async) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') 12.95436181s ago: executing program 4 (id=2516): syz_init_net_socket$ax25(0x3, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0x2a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pimreg1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f00000002c0)='./file0\x00', 0x126) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x40000, 0x0) ioctl$int_in(r0, 0x5421, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 10.79168736s ago: executing program 4 (id=2521): openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000380)={0xa3, 0x0, &(0x7f0000000180)}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a8000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) syz_open_dev$MSR(&(0x7f0000000080), 0x95d1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8.946396036s ago: executing program 4 (id=2526): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) r0 = fsopen(&(0x7f0000000240)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) setresgid(0xee00, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0x10000000000f, &(0x7f0000006680)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x4000000) clock_adjtime(0x0, &(0x7f0000000100)={0x8, 0x6a, 0x55cd, 0x8000000000000001, 0x48d, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x3f08, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0xf2, 0x5, 0x7}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) cachestat(r1, &(0x7f0000000180)={0xff}, &(0x7f0000002280), 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0xfefffffd) r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index=0x7, 0x100000000, &(0x7f00000022c0)="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", 0x1000, 0x8}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) sendmsg$nl_route(r1, 0x0, 0x4024) open(&(0x7f0000000240)='.\x00', 0x404000, 0x50) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aa7ee08f40a51678b75000000010902120001000000000904000000ffffff00"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31032abd7000000000000900000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="ac2fcc97ce021cf7170e1b6ff6ea6829c75ae83a0f7a39dbb62bf44043c1d809305fa9ef50d8078bf5f130a29581daf754b0c12ef6f9c0e8373beead210000000000000000000000000000000070f5fd65ddb629e81f9483f346833e11f6ee95cb4a50e6880f97074b0ca876e6d4872e2a7a42674e9fb9e3f722441838"], 0x24}}, 0x0) 8.569595113s ago: executing program 5 (id=2529): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4801) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES64=r3], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}}, 0x80) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 8.149431088s ago: executing program 1 (id=2532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, r1, 0x325, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xd4}, 0x800) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000006200), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000005c0)='./file0/file0\x00', 0x808, 0x0) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="579374346fe6718346a5f7874b3da7996374e1886615f782694c1342ab308e156c5d51cc41a75715751c6feddbbda89d2837ba8f58620ab8c1bbcebcb9d411a63ca98d4f7516fe453272cdb444e2909eada7dd7c790f8f5dc542119049a9f0f2531f4693de689fa11fdbd5525709a73a98945f016e49f7e7e5c40b8197781a1382ce52b60c2000c78329806416acdcbf1ecffc77839a3f06a3d45a4c11b17de5d2cf63d6bae72a3438115d5744ba2c024cb7e3e41cf34a104af1569162ffa1b53d50825013d69db161846ca282ebe6f9cbdb03bb034c84b7c5bc06a77d7e9eb2c425705fc7ad9509a39b6e2aabeeceabb8a5f31e86046ff71c69e80eca0eff85f336cfcbefacf8e0ce54569d2e2f15526c724908e46f4187ffbe76ca2819e1e050be8b639e4119e5a1e3d4a6db44dbf53119803e52134799e08f937a85312b7149d0c528822e214a4e64d0f61b5eb3c8d40e44bd4409f5eafb78527213d3a28ff00d21f389a7fc869c64eb7b60360e4591558623176047bcf3609531674cfeb2bd046b44eebea3931e1d183d9e6cd24a45a9a6149eb1cb8d6fcd994717c3bd49edf69c1067a9e960bbcdfbc77f43f364186f11348c1c1ad2fc1b990ffdc3ab0f7fb70ca44a3688f1d2a0be6dbc690eb76a37a8da432fdaa73968383bebd7273bc4cc4d6c5f5c6a72f090891425b9a7930ace5f9ead7df35c9394fd9f777506a30bb75a16531badc63e8b4bebbdab5eccc3ad51cfb1f7fa1465b9e31be1c050890f40868f81672d4f8901593e0f320b21966278aac2ed0935a2a507b544d610acf527b848788900902410f9b8c9ec4c2441464f02b69dabca498a1a3e76083b0a5b4842b3a3b58c3b90f2009eafba6d0603d1968809802a65d3b0a696acef4b7aa2e321c7ca6f76bdd9634e71ef0fea27ea7793c4a7f877654feddad211af130ef4d3f81b2b9df7fd003c81dd2aa7626bf1cb731520f706afa3cc5e4471703546835f03ef9c2cbe39aed16ef118a5fd43a4deb97bee421e6eb6dd2156e5d67d9086bdedb4fb44f75dd1bacc4ee7c796460ac043d0069f620e474bdd9bc6a39e7a626da41986d8b22c6ef1eb415aa478525bef9b760a9e2bf7b8951dadeb5f609b1c45fe65a64fa95b99d25b6506c7b91b6512fc89db061ff20b8fa8d6bcade5cf4607c2405857f7add111d0b3a41381c852e9453e4ce7811df90c1ec4c7c872405a10123eafae7d7a1fa028496e8c5aa77da5502723e43d8cf907bc29b8919bbdc58f3535c92266cc49a85681db87e47c94232174db1208564d6cded3a31a8134f7afa015f2c943c5c91fe3f531c578e71c38913c252087f27652af94b0cd36527812bffcbd1c7da2138e47bf7b7fb5c79b0a821a50e4e8b29a4403d53d1657ba470f23a83a91d63c8cce1bc0c3b721c3392dd18b66c6d2662a6a01e412a411843da7d1aa7af0001ddb43135ddeb907b7ea73a23135a0abae480701e80505b3f70a6794e6ac938ffe987702d917f917cbd2c520419480f7e2c4d10d463d2e027de7b27e5be545790f8395a4cd8f6440ef9da5a670be4bb48b42ceb04729aab68d7fac00995afaaebfa845f8dc6f259535eeabe0c336a9c3e33303bc0909bf166ae80334d28e5033c78d5345cb5bc3b2311f3d39f722d3580971505e9a58eb34daa44c6b99fddca22c664624a8bff03ec27b47b256b29e938d50e45e5afd6cd0d42f5eeb34f2b25c18e576f15f4f1ed339240f9ac87de7825152ba25f4aec6fa58aabcd14d89c6a1c215e8b6f2e5283e4132dbd3caa0b1f6252966a02c70d6c515973248fd285ec4d2a3ab472c8b740f024fb0bcf1a1809fa3e9398784cd13ff8a17ed623f5df4d95980b6f81a8d024958d5c3e38229cb0145dcbacde7b094899e88bf7a1c858bdec89c9120f50ed4750d3e2b8384fa4753c05b61306a702edea35c42be2c497077227d2d100aeba1fd117d1b230a3885f16654c6f3e33cd0c1b27bec108613df055cb58f69c2d1c3da7b7ce48d0fd8ad433f56362901794193f939e27d914e1a80291a420302aedab486c4ea8bb8817ef99c39850beb71313099d28d8661053018b32d782dcde658144d7980850e19303f561fa29faaf0eadb98c8594464ebe3b4cbfaa83c017b93438e7ccb30ad5f911cee2ef4bc590d665c35f0d2f1c693e477c0450d5cd1f1e8bee24d286f6e1eb0513b245240f8f9c1c788150ead790e1f23b23131f9020383da9b949a07b22346a6739d838c3631e5bd9167f96b1e14ff078e14f77a919ed157c3cb5a4be0e357f208329e75329a2058b2b40fd6fd74fa652f046ebe0e2477e6c817ff73f4ccf41fbf297e1615109f9807791102d09dc7838ade579f0adc549c93779b2ea5070bc2ca2ec3d6a7f1d341c22efa40735552bdc7d4fb03b865ba30319edf523bdc02a5c2f7ca892cac65673333c484e5b22f3ea2e131627b1106671f44b251bd0bc8134cb6e982378cfcc2fc51ad52145f4cf8cda9646efb6da31cfbd60250673743ec261c584394edaf6ee8dbe8652e8901bd8335539c7b494b28d77da228a4652771c8a4a467593ec2bced41395c61207ac936b116b19017ccfbec97afd62a619071766d5725a8c9fddb845766e79179c408bc5c5375715e6f26ef6c3bc30cd00a2531f4b424ea6764e6eef61458743fa82a96b47aca01a7aa22a8637100787d149e4e698bf38c212402fdb6793ed1e9a64e9f762298a4185af76ecb5d932b9b9f0d6044ac3e4f9e66f22553f1b8b431e5d35f5c4eb8e47b67e17fedb17f3bbba9131829046673e6445e8d735d0b9cac542422f008d575cdaa77e44f56cfbc6ba4969368d4149e4cd2b8e30b5539649c1125c9db1fac53fb67783fe1debd2bc1a38c4e03d266e83c019c55dd53939f81b86d0668205af16ea13632d267a0e6ad829df608403f0dad7ae5fb6404042dd47dda9e40d2714eb2520f356dc74875925fd0e8d851c0a27af265c445dc14c20e155c6b1faa58a03b0d8c57508814472395b336b018ac82d8bba516c25e0257f047cb6a3f508616d3254634166582762590e34fe9f473c3c26e3237b610ea0e97a1c6d07f628ef60ffbbf9797be2c61179019eb230259c989d5eb5f67377ba72aa32d2157be3ddc21f52abd809fd29b0c24ee06fdd2805305d419968fc4aef43620d91787e7128aebcc0c758ce752d890cb144ea1061de61466b1f0f651266d84ef2e74ea07def1f2e8662f7f3afb41705fdb538cb2c69e273d2aa6392152137d7f6b614a068bcba26c323b34308e6fa1267a65d1f24d0756d6d56af7574c5315eb247f286bbb501315992aaeb5c110f6e8ca9188c30afe4a754e60e3c0dba8c28a2c7a4d474c2e4597ed3bc696434c05fb3b79c3623e4550aaf5673fb5b79d49e119e8894c94f6ce019222b9ea02677e620f700fa7aac4d88f13886e72c7a2f0eec695659a848a90bd5bcae78d3b4c9f08173427a40a58f4eb8017fe7f4fa525204c753f9974b839afc4589b2a444bb250d422d67ca9a54008e420d2d813114336baa281c8d328fd277c7d078f3c2c08d46e42a37b7334aeeecac3efcab93b7edf6b8a7139ab35400bd47d4e8a7dc10c914f722028577d58e50dba2137ee2d2644be38a14597420508bc1857b85c0dbc90989466b07a711000f9a69840cd3bc4c6496a6da7671bb1cdbb24c0c613b8f7ac7e8d533d090722ccf8a580e81a5e211bb1a6b034160665c2b42f3fa0eb9d4b4fd92f4cb32f882fe1eccb8f5935c5047302a49a1e54ade686ddc8cee09b6420e7d82228c85a4170b4fcf727be18d7e55900504380f55d16e7c5814fb6e85902c1d79fe6263dff7df681a0a6fc4f4962fc7436de804546658043d1a012c6723bd857fd8eec1c4c73dec687b69d8134937ebb14725c927ccb873cfa85544e38a12785a397f58c96962f5f338ef29ed3cdcfa4eea4317283306e8661811b2bd1cb98ca8e8dca03340b2c6a3bb4ca32a86439b3a7315e05787382a38d59f3d2fb51144abc0a22989c171f9f4cdc06ad922d96a8207b793b663e1c76868eea185e06d815ea718b8e7b8163beb176e73498a726206994322efcf089fc77df7b298abdfd6e3e5877d23e438f69ee5191b3691cb6b02436d77fd2f4621c20fc1ec9d7ec7ed8d396e725ab84bcf1d4201b33b14f4566008de4196d570adeaaade8ce0ebfafea88134e7f40d26548a9412a5faae42e3b24e7325482966a314737ea4855449e7637991dc595f05be8838657b00f5454c1e14a22e2eb4d06018071b9050097a3eecabb1d216a0cde0fab6d4cf73f2668bceb3e1c801d54f1fa47c1c93e3edce503cc92af8a666eb18585e1d1c151f1170e0a2801823ce4d0840666f816e4f8395b8923da03468057a275656c0516310bb7cc85dd4a96c3949ca6db1832b5669cd84b9befade95508e065504725973d716386241cc1cf8755e00d3cf3a94029f7994192ebaf87e1fd431daecea850ce7c351084efbad74600a7c0a7ad9f70fab54b16d4b0498fd3ee08b561c9598d9e35e9457bfd02d67840e0b19b34d32b5dced2b93d97ec3c3a50af5e92c847f02971559bbd2a54e402879588492cc8aaf9bd5e88d816ba84648236c0a16caf4cc846421055edcbac1cce24b66322bbd1f72c76e9a9a464539f4afe283f8a91ea5997f4324bb07a3752d2605f6256a6fa01fe08a2117b1bfd13d592a1431113a03b511be24cd8f5f0e7b1822598a744fd2a48159cf6444ef61bab573aa3e82da963b34ecee5b557cfcdbd5228cab4a5a63eb7af4ec21174e1c623c72a997aec00840b8a7d7d0d72dd57db6a62807c18f02f0700f0502851ccfbf29194d76e9c0e7adc9fcaa097632209858b9c1181caf96519383f321d8bd1f6e54c83c75440cc07a2d5c790101787ac4974979f79275f66b3205ad10a79843937f25799d0cc7b527d3767ec6c93dcc536c78fd9bc5305ed98b0ad138f6897746c75e61afd96e561aae1945f57e8afe681a332de6a449bcba01ad8f87b984f680da344d197d30b175d2c04cec312bb5d7df4ab110d99519a44200880caf04d9d9b7ba189c1008a283c22efd566feb268441dca8b8c67573eb289b5ff116de64ccf34087d48b79852eb295fbed9309bfc1c2bc8f4a9e8c44d517e09eb062064addd68c075c2f4cc0ffaa2ee6a422fc8d3c06a89f4d7b9c9e688d71d2c0773e18edd604b3442cd0a083d1228f2d365369c7ff8f78ded529448d666c3a5a3dde37aacfaf1081698fc051ce6bd1d7db34f65938c279cfa0aa768dfed70b63df96c908caec5dec51064d1ca39447792d900d91a442e4b4210f673ebbfca539bf375da0853765e820c218122a8349dcd67af971c2d1d94b96e909aacc1b645a9e7bb9eef3605fc38f8e2d1b4e696d6fa52118f49bf3e78a5c230d9ea166a9bbaff4c0b0ddc877458fec3c2f0dfdd32d4aff3d53223c5ce526cfa4887c5fa068fea62359e05bf373bd82f9e81c2dea2cabe8ab47085982a381aaec4c9d5d303222ccfe6fb446a538593425c4184cab9663e72360e3cca161bbcf5ca179db469863f429e6661ae9a0778f41a026b23f522f75b921102f8f37840f8521dd9086d40c980e1f3ba9bdfbb97b64896a44b78fd72aba0ccd5c4a6aebdd6b3b56aa8cf925f79732dbe25a288fb8eb2f35d6b7d291b5148faef2f41f7b6406cd1ba8a6dc95ed4f26baf1b9ce7508ad212b65f61b6befdfa65a465f8287c713bb962db51299e5e95e3a0f471d58675336f7451c65c3193041386d67e23975e95f10fb7a04f7e8b4982a1580e442015ae115202d62e97c482d39cb643c75deb5b729df26d9a6b245f4b193dc36437cea42a1b2452ee3fd1e3d9d1e4297bd7a3d0b85aba5a3a1a279757b5572ffd43320cf1cda39715de8a4ddaa75578ecd62e867d490494aab4db0db2afc68c17a6e531ec07721a6838a787bc30ed3a015eb7a7a3b76a356308432ac7198041ab1192e37c7d98e19ddcc69c0dbcae44c87fe408c79f905299612089098d4a879a7accd156a3d5eafe5a333adeb6b2fd5b51e1178a108a72f10aaa2fa94623710f01bf7d7efaac5dd200fa54ea623c09ef7c986038d55c033f9a38aaf557ad7b9124818d22778059057804f1210b3cee7b7cef5520df2a8ec0c9c120b3d8659b8f886828cf3687497a4f58a58db0ec9b1f3a93006edba59ecaa471cdd649fb3850e9de0e04a73bc0d44a02408c68adf731f5d17b65e161ce39aaddc01adece1c215ea858b74e30b5ac4caa7057962dfcf22e1d1d235b685e9661e9972a621bae77af991e665a7cd8449d890e31777e18f811ef6cf6e70d0204cb6d458d7b67281331fd3869825935f4edbdb4b05f44b85c5ad65bb95080ba0e6dc2c1e0780f33d80bdc268c9159f7910b982ec5d4a365438f44e46f0a0d5b2941f8999c8c51ba76506ce382ad05ac6a4c9dbb32a23a9cb10753dc578767ed2752e1ee0e8642f7a0a5c52f05844e5976ea3b057fb9fd5b3968d836f8ca4712b87feb31b047adc5e90a2ee2b28c5d54aa1211bc10e21a5c51cff439e35aa350a84e42c355a94cd4ebaa0da6b7cd3d5c5cc89ed7723b4223b4c1249871dff9645e32dfe5e081d9827da72840efb7a8beffcdaff047f05cf2b480f499676fef7f3438952c12afa5721d07dc2f6f263297f55be3bd33e0a6e20c620b0cbc59c8174468fdd4276f3be250c6b619881b39fc42d6ae461771a5e3ffb702b59224dc944f1b851569088f42fc8f66c7285de7959998bb9d6836f1fc0a07925970902604ab6c194ade8c60ba0c28c130ece1247593d1c8b4ca89c752192df70f9bede368b5ae7765d4b2e4e5ad44ebd059f06905c9edeeefaabccb0b7785ad8dce96d7e7bb97744492c94197d605392edacdb5466cebb9c9e762440916ca22b8f23cfe4f5f5441bb023354295d114d733390b77551a3a22c2691b33c51840b467c13d17cf69572932e20b7d348364f4610f138fedd632401f11d6f55fe6cfc492019456987c0ee62c9ad8cec7a1da9c3cfeeb969cf8cde23dcff4bc4adb1084a0b14c4fd3b6628b9072e18f6cbeb710fb3f7199c6146a88a3cd4666dd821411cfbe9ea73a61f97c925e58ec741a70fba04c3d989e1f98cdcab970481701aac892391bb7df7822fe5ff83e568aca325f8b4ed696aa2357b4ac25ca559cbfb94b817fae429400117552f31b2db8416666192f522d756736328c5196a4040849fa420daaa77738bafcf67baf0a41654ac391e288e68f353c63a19362f84271aeaa939e729df8765845556381cba5a83aea566f8e9699cfd0f735d3dcf0631b1eea5fa9b7ddfc73291b0b3698953e117b311cbca6d4867329bf24d2c7cf03c216c47115804f17ec894d4489fe259602d4eafd57e6ef07b997dfe44e309ddbc6f568d1d723f61b8115033cd29d4366fbb57bf18487021c5da3d9af54952ccb8f083e2efac5c78ce402c890b1657e414006230d3a3a7e9415610dfb981d7434735417729f4430ec176259e8c510a22894d491baf5528b1d8da4063c5a666f1cab7afe1527c04add29f09a2b9fe3ff52082141cd451f626ffef482ec7d415b29287cbf9856e8972f2db88cd30545b67d0a64bc801086f44102f28180658b6fbaba8ad1cca442c39d50c9ea5c679f03bace84bd68a5d5cbcb04f194edf1e8b36e85292499249619f181362e42541227d4a1c81489564a146cdb6223c6d7e7401d98fa482a7a2b228e0db772dbb8ec352f676504715c79e70dc37927c368da8f92482e641ecd4cdcd44bd548032980c67ef09e38a1dd5e790055a3e77c5806525bb7a02d3d3eac567b7386d6cbaad1d9b02073794d327ab39dbf3411da77b6c56511149834a190c2eaa2fb8d98c456e5260f1f91166e25d129ba09a029dd716b7d3919755307452631800944792de9c31dc3bc763d96b1865f37b2a4677206b1717629e0f06bec49d4696b86d14569b565aa241d0bd5ff86b6b7eb7336435d6cc817c306e59bd8566c64014289bebc0639ed0a1610933aece6f505661016bd2bc3641a062d16f879dbec7a5498091f9104c4fb4243eb421b7127b3c27fe90826201eac0a22240db14d27c8689f65e228b5585c8c2ab360ba67ba7169064ea13ea6ce01f892e3ea625d6618de8b55347037cd3274d39d53d69ca5431b1bd029e3d18ddaedd269bb5afc3960bf1e04ed3473d6f8bcd9e40322d9a522abb98369d59bd6f4e48ecd718290170c78abd89d5cc84a0c01e01b80987c8272efdbd95232ac1b77e1683a5431624ebd3672b710e85732b51b09ea195183e569b8a90e4aa5521601db61035e4e7a62005365dce047f18799371b3ada706f4577572efec99e38b9b196ac4006dbae1911c44846e575f19cb98e0c4826e5e4106a3dace02dc8b1a4eb2f3dd0ee0816e78f3105f4161f33e4b5e74b4c896868c07f66d1e95438c9718493a93c82613929a486c7c59f752094db2c2aa9284ec43fa958de2ad5ace3403a29207d770e1b21a4cdc0a5526c0d3b7b7aae68bfb5775efb06c06418a30560f1cb9979b74557d2d3956f3e07fe95a99254342c7e28266e5d379705550acd6e1f23370516813091180e64a5c8894cf0db6630f8a48f56194edfe176583f94e6be1adf2ce864e451ca86095c9fc1233a5429cec6b364871636398e79097c9ff75fe249a64094c51acc25537ae80ad5c58f4f1debb6ebfdae83eacb2c925559161fddd8abfdc5235ac3102b75d3efad584ac7f4c2213085a7c93ba1b9a262af0b120c95417e5875fd64e35b86a33b8c7e2b18c5ff673d3fc98bf6a30ca597855dc5b64337965dc1d45740ac4baec9d2ed8e806998b3392924aceada1522579cf3abc0c802ff94b2c58223079a210f89fd564acc6b5a6df31097b4e48dd115d01731a89196d28b91f1a3931fe0051d6800a345b6eb85287d1b95537e7754380d31b3b47831ddbb4ffed6fc9d893e0a6329fa49d697bf7e4ba1fa2e4d15d47f575ee96e5a2b6b01e56ee7ca2525f69ffcc76b81b82303851a276ce6562340715efe2836838a11bf9df7d5544e7bbd8d4398b429d64cd91a39f7c675a8cd4073d1daba1e1c9f7e57030a172fb358795a9f55280fe969347a47964a9ee97db8800b1549b3025903838f42de3be2b292099554161be6aea2f24ddfa60de1a63c05518e498c1c143de1af401cf1c39354a71f2e84e0e11db7f593493b764f65e9d78394842ad0607451523af8e531cf9b13f44671a808eee8e3a51cf32f033552e2b4751c942baa6361458241adb8fa9d050a95fe8ce51b0f4b4c0158857c6428ce8eec944c72495cce4221a26d191dfc84cce86dde6d9080a1faf947a5177326114a9d432ab74d95caafe06fcac39f81e1aac2c987d709d0d250e065b83e4dc90bf0ee92f4fb6f786b57edccdc245e21e62ae1425c52f1a2481dfb2f6c5993868aeb62bbeb3eecce09ab51f62b2b61468d74ad30fb16c11ec46041da08a61b881e414d7ff73cd1de18cc021c53fb894edbba5f3f0879b5cd9a99b57c6cb4fc2f31f0f5466fc23733780d09f50978d9a101cae0dd6767d3003b80233ad81e65e8adcd3efc6d8ceed2db50665956ec1355873fde6c88fcf1910a091b76aa9ee4324a2f065306f977475ed119f05eb5b660ef50df8dd28392e7a33ad178f4aa5e822252d04c41c48b68d12f935204c11b3e0bac1d6cfde5358285f2ff0c7c823b75997878a935d16d2533677d2c5f3f4882b00ea0e80f8611ab98eb3795444894b551f8ec6b5b2eb98562c404737598335b210ca42459e08087e586ed413b4388863f27dea5ca9e20bcf236f4f7ccf587ade9a4e5ac8282ee6b19ab957033410fe09dec6e1b8b1681c30423581c0f2e9cbb84d5acdf282a4066e84028f872874c0aadd9e285b2929b756b926f19bae8727972dab51f2cac9b416d6fc37fadd6c95d82dc74fee9f6d62a0335a752ee3097b07802e53ee5c6c1591a619b0532d4a4a3509c79816ed20085205cd757695d30edc7ae452249b5ac79852e8717e1f4e1bbc27daa5b99f6c17486e357c33c87ff059140d7c13d5f7c810c1a5b09917aaaf2b19020484d6e6996d4c0ebd44e4c1d5f69dffa10b224ca40da406aac2f84923b37252b4513b9e982f11b3ce54e4ee599cfe7f77950762df4d1742c89efe9b0f1ea1d90e0a6934d4eda07294a5a49400d531785bd135b1ed2a7eb8e9a1f402ba8f876f80063d028b90afa1b6033d2c2e18b60b5f5e284e75413e499105a4ce7a8ac6378a1ca9792abbed60cf51cd0a922259f2c4ed8b434d38356c1db735e6efd64d586904e097aa4fccf55feab1f2d56c2301d6015ab159a9a451faff909c8a601c572ec7bc7a4ea152c8dfef0bc23805dafdb820b249fab2ed5d9440c558c72eebce4a4e470e914868f239090cba5e386a35b01c37cf6fd04ba1e2fe19260acd2c04d454e1c3247d17263b1f5b4c032228ffcb9454f0f639ff0378673227e577e7033011a297c2921e440b951e5f5818c16a30dc8a6918cbdc284318facc107fca034393debdeff1474c6315b0b17ccadf78a9ed5ec15c331d913a5cc95ced985cbc0cb9e7080423a2507ddd957c2dba7996f0796758bb1a4429f5fa8d88814da67dc11149c1a5a2818680eb88d9818a55097c2924b2f88229c1748489556e849f444e6dd0971271a885e8ed10afc48a24a8219233c648450923f993faaffcb33304ba886977e19cdf2611ede95b54d8bbe94ab06bc2e8d2a4e2500763cb6c15a40259e14a699fb3d9dff942c7edf0f4d93dc11418fb256845a0ec1675a1938c00b924508a996fa32ac0d0c607952e8afb80f230c1f755cb97c779686aa5820deac116b9b45c42fc0774790e3b41045f5c3927cb6b6a30157b90c32be33a1b80f36724cf49a1b18700595c0b98eb26258d4616198aa6ceb097f7e57abf5fdd95cde4fc7fd3f72fa842dad51e1e9e528b98fec72f068b16a9294c137527b92f9f0d2de72b170088ccce127ed9e8e7247fcd1d13c874280ebce54a247f8798f822646414e65df99f99f5be6719188a2b9ffdfb15841fbdc291299226dcefca3e4cfaa5ae5f94bf57f7e6bf2736bf28c7b2be9262e3d6dfb820e5702bb5bc63e61b0f4506f329957dd63374341d12f6eec50868efe42597a2d51ff6962e29b7c43d4c4342a2acc24af15ea48b9e084b0eb68dd6bb7f01e44314f425c0616291f64be22948aeaa0f99a89376b7852ba2ab5c0aa2e1c803ae0e30599cb53f67026ff02ea6876edafdb29908b499d0e6427385b5a3835b9fb872fc29e3577632a3b85329619af8dcae23e6d7d31740c7c38205959878506fca312facbb4208450316398ec8106ac6c81e35ee35e132d480d1f00a3d0a719430cb64f5112b78a6f966ee8210b1f186641a5508485fd5310363d89a0d5172a7ba2dbc2a2f1b30750623885b09b4fc8d24e064e1a66fbc591c85b8e2ea1e16b84fda9b21dcb9b5be41766e2f7fa4aba47b823aa6665bb48f3dee3b258c6f2ba52118a797a7f8be73807a8e0956d6c07c37084a5a08e4a6deee42e8e66ed67668f40853155838854d04ff41ba475f24f6e380233b0513aabcb769b1", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x4, {0x0, 0x3, 0x7, 0x800, 0x7, 0x9, {0x5, 0x4, 0x2, 0x800, 0x100, 0x5, 0x5, 0x810, 0x3, 0x0, 0xa5d, r5, r6, 0x80000001, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.984188521s ago: executing program 6 (id=2533): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) keyctl$search(0xa, r3, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) 7.407927574s ago: executing program 4 (id=2534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() setpgid(r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010120, 0x2, 0x0, 0x4e21, 0xfffc, 0x2, 0x80, 0x0, 0x2f}, {0x0, 0x4, 0x5, 0x0, 0x20, 0x0, 0x0, 0x6}, {0xffffbffffffffffc, 0xfffffffffffffffc, 0x0, 0x1000000000}, 0x0, 0xfffffffe, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d4, 0x3c}, 0x2, @in=@local, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = memfd_secret(0x0) futimesat(r5, 0x0, 0x0) 6.875462038s ago: executing program 1 (id=2536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}, 0x32685768}], 0x1, 0x42, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000600000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) 6.447292199s ago: executing program 6 (id=2537): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x4c03, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800}) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6}}, 0x0, 0x0, 0x2}}) 6.184532533s ago: executing program 4 (id=2538): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.768052292s ago: executing program 5 (id=2539): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffeee, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0xc800) (fail_nth: 6) 5.45753942s ago: executing program 4 (id=2540): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000600)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) socket$inet(0x2, 0x2, 0x80000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000227bd7000fbdbdf2501000000080002000900000014000100fc00000000000000000000000000000014000100ff0100000000000000000000000000010500052003000000"], 0x4c}}, 0x20000000) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@sha1={0x1, "0b40778688435356e9e0ba1d86430436927b5bcb"}, 0x15, 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) open(0x0, 0x0, 0x157) 5.290348918s ago: executing program 2 (id=2541): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002200)='/sys/fs/cgroup', 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) 5.284956035s ago: executing program 6 (id=2542): syz_io_uring_setup(0x200018d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket(0x2, 0x805, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r2, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f00000014c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000340)="bd", 0x1}], 0x1}}], 0x1, 0x46054) 4.860112194s ago: executing program 5 (id=2543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, 0x0, 0x8000) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000140)=@default_ibss_ssid, 0x6, 0x2) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x4000}]}, 0x24}}, 0x0) 4.614875387s ago: executing program 1 (id=2544): syz_init_net_socket$ax25(0x3, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0x2a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pimreg1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f00000002c0)='./file0\x00', 0x126) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x40000, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x3) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 4.554496565s ago: executing program 6 (id=2545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x18000000000002a0, 0x6d, 0x0, &(0x7f0000000140)="b9ff03076003008cb89e08f086dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x44}}, 0x40050) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea72500000001000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0xce, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x98, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af6449001"}, {0x5, 0x4, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec7127430d92386b1dae46b"}]}}}}}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000c00)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000140)='d', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)}}], 0x2, 0x2004c0d0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) 4.363907964s ago: executing program 2 (id=2546): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0xffff0000}, 0x52cc) 3.936195189s ago: executing program 5 (id=2547): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) keyctl$search(0xa, r3, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) 2.521952032s ago: executing program 2 (id=2548): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}}, 0x0) 2.517671227s ago: executing program 6 (id=2549): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}]}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'netdevsim0\x00', @random="010000201000"}) 2.397548085s ago: executing program 1 (id=2550): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2014050, 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2014050, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', 0x0, 0x0) 2.396511738s ago: executing program 5 (id=2551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120600"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg$inet_nvme(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x12000) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x729, @private2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) r3 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x8000) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f00000006c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffff80, 0x2, 0x7}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'macvtap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r6}) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)="b75becc680adacbf02b88ddce8acd2a8f4d6d7bd4fc4b4ff3992ab36db08e1621db17230eb3a7e4432142d463b3ff8d8b77ff10f68d5f895770cb13eb97d1a6adaf71b67f742bf337c2a8335334db3674a222d34e91f1577b5db8c33d4d22ee8a6082958104c6ec2d275eaab9eb51b6a6aefb179452287af31bd4c4b090d90ec4cacd8e79a5ca6a62140c89e1ac4c44d0b719293e4e4208b87e433815909c907d30818b073e9aa67d0d602e8c76b7cf032e472e29a72262e9e926e6a3d4130e2428e87f08855278d74", 0xc9}, {&(0x7f0000000180)="e06266414db4e23110e939495cdfef8324b05dbecfa607232eaad72c7dad0de63861d3f54a8873a7045ec66e63b3c1320c510c6520ebfa22f0360dce360ea8", 0x3f}, {&(0x7f00000002c0)="60dd0661a22e72f3f7bd9f277d6ecf0b55dc3a4f91f2fcafabd182fe1814ae1a583ce6fe03f9f39e1c3ea8dfe7e2444cb5ea2306ab40dae4f4cd8cc719de55a6ba1f8ca48a58903f17b34458cc8a8cbd8b898e5503cc603756cb6af997f4c1053055778e38d023d5b0ea2ac96c35ff39a4950bd87d0414990b2455c8a2e754d953a2e11e9a61494d619729764eff3ca842092d881949f4", 0x97}], 0x3}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="6795124e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5332f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c97f560701bfc579fa80f914e3c4028da556cf126da9c1b9b8f8e1135600"/110, 0x6e}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 2.180285933s ago: executing program 6 (id=2552): pipe2(&(0x7f0000000300), 0x800) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400)={0xbc, 0x0, 0x41d4478bbe542ac0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x80, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r6 = syz_io_uring_setup(0x26c8, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r6, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480)) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000580)) 1.515861441s ago: executing program 1 (id=2553): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80010000000002) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (rerun: 32) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100001f00010000000000ffdbdf25030100800c0002000000000000000000140001"], 0x114}], 0x1}, 0x0) (async) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) (async, rerun: 32) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async, rerun: 32) openat(0xffffffffffffffff, 0x0, 0x0, 0x138) (async) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) (async) r5 = timerfd_create(0x0, 0x80800) readv(r5, &(0x7f00000001c0)=[{0x0}], 0x51) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x50, 0x0, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async, rerun: 64) sendmsg$nl_route(r6, 0x0, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa88a800008100000008004500001c0066000000019078ac1414bbe000000112009078000067ce46"], 0x0) (async) syz_io_uring_setup(0xcae, 0x0, &(0x7f00000001c0), 0x0) 1.465201958s ago: executing program 5 (id=2554): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 1.115567751s ago: executing program 1 (id=2555): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r6}, 0x10) r7 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 816.206444ms ago: executing program 2 (id=2556): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002200)='/sys/fs/cgroup', 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) 225.584384ms ago: executing program 2 (id=2557): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) (async, rerun: 32) remap_file_pages(&(0x7f0000338000/0x3000)=nil, 0x3000, 0x2000002, 0x1, 0x2000) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0xffffd000) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 0s ago: executing program 2 (id=2558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0xfffffffffffffffe, 0x0) kernel console output (not intermixed with test programs): connect, device number 22 [ 785.578291][T14297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.629604][T14297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1969'. [ 786.732303][T14302] netlink: 'syz.5.1971': attribute type 9 has an invalid length. [ 786.895987][ T30] audit: type=1400 audit(2000000625.185:1020): avc: denied { open } for pid=14309 comm="syz.5.1972" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 787.366480][T14316] netlink: 'syz.5.1972': attribute type 1 has an invalid length. [ 787.439107][T14316] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1972'. [ 787.492103][ T30] audit: type=1400 audit(2000000625.795:1021): avc: denied { ioctl } for pid=14309 comm="syz.5.1972" path="/dev/ttyqf" dev="devtmpfs" ino=390 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 787.858804][ T30] audit: type=1400 audit(2000000625.845:1022): avc: denied { create } for pid=14309 comm="syz.5.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 787.911387][ T30] audit: type=1400 audit(2000000626.035:1023): avc: denied { ioctl } for pid=14309 comm="syz.5.1972" path="socket:[61211]" dev="sockfs" ino=61211 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 788.215753][T14329] serio: Serial port ptm1 [ 789.302477][T14336] IPv6: sit1: Disabled Multicast RS [ 789.318910][T14336] sit1: entered allmulticast mode [ 789.347885][T14341] FAULT_INJECTION: forcing a failure. [ 789.347885][T14341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.430492][T14341] CPU: 0 UID: 0 PID: 14341 Comm: syz.4.1980 Not tainted syzkaller #0 PREEMPT(full) [ 789.430510][T14341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 789.430516][T14341] Call Trace: [ 789.430521][T14341] [ 789.430525][T14341] dump_stack_lvl+0x16c/0x1f0 [ 789.430542][T14341] should_fail_ex+0x512/0x640 [ 789.430561][T14341] _copy_from_iter+0x29f/0x1720 [ 789.430577][T14341] ? __alloc_skb+0x200/0x380 [ 789.430589][T14341] ? __pfx__copy_from_iter+0x10/0x10 [ 789.430604][T14341] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 789.430621][T14341] netlink_sendmsg+0x829/0xdd0 [ 789.430636][T14341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 789.430653][T14341] ____sys_sendmsg+0xa95/0xc70 [ 789.430669][T14341] ? copy_msghdr_from_user+0x10a/0x160 [ 789.430680][T14341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 789.430701][T14341] ___sys_sendmsg+0x134/0x1d0 [ 789.430713][T14341] ? __pfx____sys_sendmsg+0x10/0x10 [ 789.430743][T14341] __sys_sendmsg+0x16d/0x220 [ 789.430754][T14341] ? __pfx___sys_sendmsg+0x10/0x10 [ 789.430774][T14341] do_syscall_64+0xcd/0x4c0 [ 789.430788][T14341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.430799][T14341] RIP: 0033:0x7f394838ebe9 [ 789.430809][T14341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.430820][T14341] RSP: 002b:00007f39491d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.430831][T14341] RAX: ffffffffffffffda RBX: 00007f39485b6090 RCX: 00007f394838ebe9 [ 789.430838][T14341] RDX: 0000000000040000 RSI: 0000200000004ac0 RDI: 0000000000000005 [ 789.430845][T14341] RBP: 00007f39491d3090 R08: 0000000000000000 R09: 0000000000000000 [ 789.430851][T14341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.430858][T14341] R13: 00007f39485b6128 R14: 00007f39485b6090 R15: 00007fff01b93938 [ 789.430872][T14341] [ 789.566562][ T30] audit: type=1400 audit(2000000627.815:1024): avc: denied { map } for pid=14331 comm="syz.1.1978" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 790.175985][ T30] audit: type=1400 audit(2000000628.465:1025): avc: denied { relabelfrom } for pid=14358 comm="syz.0.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 790.176037][ T30] audit: type=1400 audit(2000000628.465:1026): avc: denied { relabelto } for pid=14358 comm="syz.0.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 790.456031][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 790.583680][T14338] tty tty1: ldisc open failed (-12), clearing slot 0 [ 790.591603][T14355] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 790.697317][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.808056][T14366] netlink: 'syz.4.1987': attribute type 8 has an invalid length. [ 790.815810][T14366] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1987'. [ 790.833407][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.857645][T14371] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1988'. [ 790.867258][T14371] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1988'. [ 790.891126][ T30] audit: type=1400 audit(2000000629.185:1027): avc: denied { listen } for pid=14363 comm="syz.5.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 791.089090][ T43] usb 1-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 791.181811][ T43] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.294394][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.330204][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.370142][ T43] usb 1-1: Product: syz [ 791.392198][ T43] usb 1-1: Manufacturer: syz [ 791.407412][ T43] usb 1-1: SerialNumber: syz [ 791.746879][T14374] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1989'. [ 791.808388][T14374] openvswitch: netlink: EtherType 0 is less than min 600 [ 791.872469][ T43] cdc_ncm 1-1:1.0: bind() failure [ 791.942180][ T43] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 792.215304][T14379] serio: Serial port ptm1 [ 792.237731][ T43] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 792.507941][ T43] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 792.665039][ T43] usb 1-1: USB disconnect, device number 12 [ 793.067513][ T30] audit: type=1400 audit(2000000631.375:1028): avc: denied { map } for pid=14381 comm="syz.1.1990" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 793.315089][T14387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=14387 comm=syz.2.1992 [ 793.479598][ T30] audit: type=1400 audit(2000000631.375:1029): avc: denied { execute } for pid=14381 comm="syz.1.1990" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 793.717457][ T979] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 793.719222][ T30] audit: type=1400 audit(2000000631.975:1030): avc: denied { watch watch_reads } for pid=14389 comm="syz.4.1994" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 794.248233][ T979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 794.268316][ T979] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 794.376033][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 794.383871][ T979] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 794.395991][ T43] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 794.397699][ T979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 794.412668][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.507731][T14406] block nbd5: NBD_DISCONNECT [ 794.512995][T14406] block nbd5: Send disconnect failed -22 [ 794.547504][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.616011][ T979] usb 2-1: Product: syz [ 794.616729][T14052] block nbd5: Disconnected due to user request. [ 794.620351][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 794.620481][ T979] usb 2-1: Manufacturer: syz [ 794.620497][ T979] usb 2-1: SerialNumber: syz [ 794.630624][ T43] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 794.650787][T14394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 794.660901][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 794.700357][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 794.739378][ T9] usb 3-1: SerialNumber: syz [ 794.829373][T14052] block nbd5: shutting down sockets [ 794.880130][ T30] audit: type=1400 audit(2000000633.175:1031): avc: denied { name_bind } for pid=14407 comm="syz.5.2000" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 794.882307][T14408] netlink: 'syz.5.2000': attribute type 9 has an invalid length. [ 794.960635][ T30] audit: type=1400 audit(2000000633.175:1032): avc: denied { read } for pid=14407 comm="syz.5.2000" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 794.996744][ T9] usb 3-1: 0:2 : does not exist [ 795.001625][ T9] usb 3-1: unit 5 not found! [ 795.034049][ T9] usb 3-1: USB disconnect, device number 73 [ 795.049776][ T43] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 795.068792][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 795.103945][T14394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 795.167734][T14409] nbd0: detected capacity change from 0 to 63 [ 795.185881][ T5855] block nbd0: Receive control failed (result -104) [ 795.200351][T14394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 795.318471][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 795.371955][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 795.435958][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 795.494121][ T43] usb 5-1: string descriptor 0 read error: -22 [ 795.522852][ T43] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 795.540346][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.561799][ T43] usb 5-1: config 0 descriptor?? [ 795.568051][T14400] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 795.578079][ T43] hub 5-1:0.0: bad descriptor, ignoring hub [ 795.583979][ T43] hub 5-1:0.0: probe with driver hub failed with error -5 [ 795.636570][ T979] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 795.655775][ T979] cdc_ncm 2-1:1.0: bind() failure [ 795.662193][ T43] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 795.713845][ T979] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 795.752185][ T979] cdc_ncm 2-1:1.1: bind() failure [ 795.801989][T13038] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 795.979496][ T30] audit: type=1400 audit(2000000634.285:1033): avc: denied { write } for pid=14421 comm="syz.2.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 795.984186][T13038] usb 1-1: Using ep0 maxpacket: 32 [ 796.123642][T13038] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 796.132150][T13038] usb 1-1: config 0 has no interface number 0 [ 796.167884][T13038] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.289488][T13038] usb 1-1: config 0 interface 85 has no altsetting 0 [ 796.497853][T13038] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 796.507571][T13038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.530088][T13038] usb 1-1: Product: syz [ 796.535010][T13038] usb 1-1: Manufacturer: syz [ 796.539783][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 796.678585][ T9] usb 2-1: USB disconnect, device number 44 [ 796.799680][T14428] serio: Serial port ptm2 [ 797.646007][T13038] usb 1-1: SerialNumber: syz [ 797.679457][ T1209] usb 5-1: USB disconnect, device number 53 [ 797.720517][T13038] usb 1-1: config 0 descriptor?? [ 797.826122][ T5855] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 797.933815][T13038] appletouch 1-1:0.85: Failed to read mode from device. [ 798.243699][T14437] FAULT_INJECTION: forcing a failure. [ 798.243699][T14437] name failslab, interval 1, probability 0, space 0, times 0 [ 798.266039][T14437] CPU: 0 UID: 0 PID: 14437 Comm: syz.1.2008 Not tainted syzkaller #0 PREEMPT(full) [ 798.266066][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.266076][T14437] Call Trace: [ 798.266082][T14437] [ 798.266089][T14437] dump_stack_lvl+0x16c/0x1f0 [ 798.266113][T14437] should_fail_ex+0x512/0x640 [ 798.266138][T14437] should_failslab+0xc2/0x120 [ 798.266160][T14437] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 798.266182][T14437] ? sidtab_sid2str_get+0x17a/0x680 [ 798.266214][T14437] kmemdup_noprof+0x29/0x60 [ 798.266235][T14437] sidtab_sid2str_get+0x17a/0x680 [ 798.266270][T14437] sidtab_entry_to_string+0x33/0x110 [ 798.266299][T14437] security_sid_to_context_core+0x35c/0x640 [ 798.266328][T14437] selinux_inode_getsecurity+0x2bf/0x370 [ 798.266355][T14437] ? __pfx_selinux_inode_getsecurity+0x10/0x10 [ 798.266392][T14437] security_inode_getsecurity+0x12f/0x2f0 [ 798.266422][T14437] vfs_getxattr+0x19e/0x290 [ 798.266443][T14437] ? __pfx_vfs_getxattr+0x10/0x10 [ 798.266470][T14437] ovl_other_xattr_get+0xf5/0x160 [ 798.266493][T14437] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 798.266515][T14437] ? xattr_resolve_name+0x27b/0x3f0 [ 798.266538][T14437] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 798.266557][T14437] __vfs_getxattr+0x13d/0x1a0 [ 798.266577][T14437] ? __pfx___vfs_getxattr+0x10/0x10 [ 798.266603][T14437] inode_doinit_use_xattr+0xb5/0x410 [ 798.266629][T14437] inode_doinit_with_dentry+0x51e/0x12e0 [ 798.266660][T14437] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 798.266686][T14437] ? do_raw_spin_lock+0x12c/0x2b0 [ 798.266711][T14437] selinux_d_instantiate+0x26/0x30 [ 798.266735][T14437] security_d_instantiate+0x142/0x1a0 [ 798.266762][T14437] d_splice_alias_ops+0x92/0x840 [ 798.266785][T14437] ovl_lookup+0xeee/0x21a0 [ 798.266804][T14437] ? avc_has_perm_noaudit+0x149/0x3b0 [ 798.266833][T14437] ? __pfx_ovl_lookup+0x10/0x10 [ 798.266856][T14437] ? selinux_determine_inode_label+0x2b8/0x400 [ 798.266887][T14437] ? may_create+0x286/0x440 [ 798.266922][T14437] ? __pfx_ovl_permission+0x10/0x10 [ 798.266940][T14437] ? bpf_lsm_inode_permission+0x9/0x10 [ 798.266959][T14437] ? security_inode_permission+0xbf/0x260 [ 798.266988][T14437] ? __pfx_ovl_lookup+0x10/0x10 [ 798.267008][T14437] lookup_open.isra.0+0x4d7/0x1580 [ 798.267032][T14437] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 798.267076][T14437] ? __pfx_down_write+0x10/0x10 [ 798.267096][T14437] ? mnt_get_write_access+0x20c/0x300 [ 798.267128][T14437] path_openat+0x893/0x2cb0 [ 798.267157][T14437] ? __pfx_path_openat+0x10/0x10 [ 798.267179][T14437] ? __lock_acquire+0xb97/0x1ce0 [ 798.267209][T14437] do_filp_open+0x20b/0x470 [ 798.267229][T14437] ? __pfx_do_filp_open+0x10/0x10 [ 798.267274][T14437] ? _raw_spin_unlock+0x28/0x50 [ 798.267301][T14437] ? alloc_fd+0x471/0x7d0 [ 798.267328][T14437] do_sys_openat2+0x11b/0x1d0 [ 798.267353][T14437] ? __pfx_do_sys_openat2+0x10/0x10 [ 798.267379][T14437] ? __fget_files+0x20e/0x3c0 [ 798.267405][T14437] __x64_sys_open+0x153/0x1e0 [ 798.267428][T14437] ? __pfx___x64_sys_open+0x10/0x10 [ 798.267459][T14437] ? rcu_is_watching+0x12/0xc0 [ 798.267484][T14437] do_syscall_64+0xcd/0x4c0 [ 798.267505][T14437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.267528][T14437] RIP: 0033:0x7f0f14d8ebe9 [ 798.267543][T14437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.267560][T14437] RSP: 002b:00007f0f15c4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 798.267578][T14437] RAX: ffffffffffffffda RBX: 00007f0f14fb5fa0 RCX: 00007f0f14d8ebe9 [ 798.267589][T14437] RDX: 0000000000000000 RSI: 00000000001612c2 RDI: 0000200000000200 [ 798.267600][T14437] RBP: 00007f0f15c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 798.267610][T14437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.267620][T14437] R13: 00007f0f14fb6038 R14: 00007f0f14fb5fa0 R15: 00007ffe0bc21e18 [ 798.267645][T14437] [ 798.267671][T14437] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=overlay ino=1574 [ 798.296101][T13038] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 798.693335][T14434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=14434 comm=syz.2.2007 [ 798.729226][T13038] usb 1-1: USB disconnect, device number 13 [ 798.993206][T14450] blktrace: Concurrent blktraces are not allowed on sg0 [ 799.496067][ T1209] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 799.606962][T14466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2016'. [ 799.616246][T14466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2016'. [ 801.426400][T11001] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 801.436013][ T1209] usb 2-1: Using ep0 maxpacket: 8 [ 801.541341][T13038] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 801.554399][ T1209] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 801.616215][T11001] usb 3-1: Using ep0 maxpacket: 8 [ 801.630365][T11001] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 801.646019][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.667730][ T1209] usb 2-1: Product: syz [ 801.674233][ T1209] usb 2-1: Manufacturer: syz [ 801.674621][T11001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.679428][ T1209] usb 2-1: SerialNumber: syz [ 801.755976][T13038] usb 5-1: device descriptor read/64, error -71 [ 801.768950][ T1209] usb 2-1: config 0 descriptor?? [ 801.837029][T11001] pvrusb2: Hardware description: Terratec Grabster AV400 [ 801.854523][T11001] pvrusb2: ********** [ 801.862005][T11001] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 801.925983][T11001] pvrusb2: Important functionality might not be entirely working. [ 801.933866][T11001] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 801.946645][T11001] pvrusb2: ********** [ 801.996007][T13038] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 802.033058][ T2339] pvrusb2: Invalid write control endpoint [ 802.196115][T13038] usb 5-1: device descriptor read/64, error -71 [ 802.227206][ T43] usb 3-1: USB disconnect, device number 74 [ 802.252005][ T2339] pvrusb2: Invalid write control endpoint [ 802.326273][T13038] usb usb5-port1: attempt power cycle [ 802.331710][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 802.486742][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 802.541227][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 802.592547][ T2339] pvrusb2: Device being rendered inoperable [ 802.605324][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 802.832838][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 802.841415][ T2339] pvrusb2: Attached sub-driver cx25840 [ 802.849659][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 802.860211][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 803.586122][T10152] Bluetooth: hci6: command 0x1003 tx timeout [ 803.738755][ T1209] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 803.796490][ T5855] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 803.845437][ T1209] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 803.880153][ T1209] usb 2-1: USB disconnect, device number 45 [ 805.647722][T14510] netlink: 'syz.1.2028': attribute type 9 has an invalid length. [ 806.068947][T14518] serio: Serial port ptm1 [ 806.724672][T14514] netlink: 'syz.4.2029': attribute type 6 has an invalid length. [ 806.913029][T14514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2029'. [ 807.399139][ T30] audit: type=1400 audit(2000000645.665:1034): avc: denied { ioctl } for pid=14523 comm="syz.1.2032" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 807.516010][T10152] Bluetooth: hci5: command 0x0405 tx timeout [ 807.664749][T14527] netlink: 'syz.4.2031': attribute type 4 has an invalid length. [ 807.672602][T14527] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2031'. [ 808.066134][ T5916] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 808.787973][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.817825][ T5916] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 808.827175][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.866049][ T5916] usb 5-1: config 0 descriptor?? [ 809.495583][ T5916] ath6kl: mismatched byte count 0 vs. expected 12 [ 809.508560][ T5916] ath6kl: Failed to init ath6kl core: -22 [ 809.514664][ T5916] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 809.766212][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 809.928538][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.954156][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.004033][ T9] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 810.190103][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.223056][ T9] usb 1-1: config 0 descriptor?? [ 810.382001][T14557] netlink: 'syz.1.2040': attribute type 10 has an invalid length. [ 810.445512][T14557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.486051][T14557] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 810.533352][T14557] netlink: 'syz.1.2040': attribute type 10 has an invalid length. [ 810.542278][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'. [ 810.545970][T14557] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2040'. [ 810.570219][T14557] batadv0: entered promiscuous mode [ 810.576675][T14557] batadv0: entered allmulticast mode [ 810.624745][T14557] bond0: (slave batadv0): Releasing backup interface [ 810.640440][T14557] bridge0: port 1(batadv0) entered blocking state [ 810.647253][T14557] bridge0: port 1(batadv0) entered disabled state [ 810.735740][ T5916] usb 5-1: USB disconnect, device number 57 [ 810.802346][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 810.855368][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 810.907826][ T9] usb 1-1: USB disconnect, device number 14 [ 811.241832][ T3030] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 811.251983][ T3030] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 812.040510][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 812.127235][ T30] audit: type=1400 audit(2000000650.425:1035): avc: denied { bind } for pid=14580 comm="syz.0.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 812.773866][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 812.802015][T14586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=14586 comm=syz.4.2044 [ 813.025131][T14588] netlink: 'syz.1.2045': attribute type 21 has an invalid length. [ 813.033626][T14588] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2045'. [ 813.050666][ T30] audit: type=1400 audit(2000000650.425:1036): avc: denied { name_bind } for pid=14580 comm="syz.0.2047" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 813.102609][T14588] netlink: 'syz.1.2045': attribute type 4 has an invalid length. [ 813.110655][T14588] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2045'. [ 813.133858][T14587] batadv8: entered promiscuous mode [ 813.145998][T14587] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 813.511827][ T30] audit: type=1400 audit(2000000650.425:1037): avc: denied { node_bind } for pid=14580 comm="syz.0.2047" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 813.725183][ T5855] Bluetooth: hci4: unexpected subevent 0x03 length: 244 > 9 [ 813.946024][ T5916] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 814.537401][ T5916] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 814.566554][ T5916] usb 3-1: config 0 has no interface number 0 [ 814.663427][ T5916] usb 3-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 814.799261][ T5916] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 814.858525][ T5916] usb 3-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 814.867748][T14610] netlink: 'syz.0.2055': attribute type 9 has an invalid length. [ 814.876893][T14610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2055'. [ 814.909296][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.956748][ T5916] usb 3-1: config 0 descriptor?? [ 814.981632][T14599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 815.009905][ T5916] cxacru 3-1:0.109: cxacru_bind: interface has incorrect endpoints [ 815.053532][T14618] netlink: 'syz.1.2056': attribute type 21 has an invalid length. [ 815.061583][T14618] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2056'. [ 815.083859][T14618] netlink: 'syz.1.2056': attribute type 4 has an invalid length. [ 815.096947][ T5916] cxacru 3-1:0.109: usbatm_usb_probe: bind failed: -19! [ 815.116066][T14618] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2056'. [ 815.208717][T14599] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 815.290028][T14618] batadv9: entered promiscuous mode [ 815.301774][T14618] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 816.350207][T14624] netlink: 'syz.4.2059': attribute type 7 has an invalid length. [ 816.358227][T14624] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2059'. [ 816.443163][T14636] fuse: Unknown parameter 'group_i00000000000000000000' [ 816.578401][ T30] audit: type=1400 audit(2000000654.885:1038): avc: denied { watch } for pid=14637 comm="syz.4.2062" path="/278/net_prio.prioidx" dev="tmpfs" ino=1488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 816.609583][T11001] usb 3-1: USB disconnect, device number 75 [ 816.713755][ T30] audit: type=1400 audit(2000000654.915:1039): avc: denied { watch_sb } for pid=14637 comm="syz.4.2062" path="/278/net_prio.prioidx" dev="tmpfs" ino=1488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 816.864811][ T30] audit: type=1400 audit(2000000654.945:1040): avc: denied { watch_mount } for pid=14637 comm="syz.4.2062" path="/278" dev="tmpfs" ino=1483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 817.557910][T14645] kvm: emulating exchange as write [ 817.700790][T14645] overlay: Unknown parameter 'smackfshat' [ 817.893919][ T30] audit: type=1400 audit(2000000656.195:1041): avc: denied { map } for pid=14653 comm="syz.5.2066" path="socket:[63077]" dev="sockfs" ino=63077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.918230][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.089434][ T30] audit: type=1400 audit(2000000656.195:1042): avc: denied { read accept } for pid=14653 comm="syz.5.2066" path="socket:[63077]" dev="sockfs" ino=63077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 818.114447][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.445953][ T1209] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 818.521235][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 818.530450][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 819.027590][ T1209] usb 2-1: Using ep0 maxpacket: 8 [ 819.063597][ T1209] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 819.074898][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.083165][ T1209] usb 2-1: Product: syz [ 819.088362][ T1209] usb 2-1: Manufacturer: syz [ 819.093416][ T1209] usb 2-1: SerialNumber: syz [ 819.187665][ T1209] usb 2-1: config 0 descriptor?? [ 819.675767][T14675] netlink: 'syz.2.2073': attribute type 7 has an invalid length. [ 819.713410][T14675] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2073'. [ 820.255999][T14685] netlink: zone id is out of range [ 820.261530][T14685] netlink: zone id is out of range [ 820.266653][T14685] netlink: zone id is out of range [ 820.285075][T14685] netlink: set zone limit has 4 unknown bytes [ 820.386228][ T1209] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 820.438525][ T1209] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 822.154294][T13038] usb 2-1: USB disconnect, device number 46 [ 822.513091][T14727] serio: Serial port ptm1 [ 823.893990][T14731] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2082'. [ 823.981492][ T5855] Bluetooth: hci5: unexpected subevent 0x03 length: 244 > 9 [ 825.597520][ T6054] block nbd0: Possible stuck request ffff888026c50000: control (read@0,1024B). Runtime 30 seconds [ 825.608961][ T6054] block nbd0: Possible stuck request ffff888026c501c0: control (read@1024,1024B). Runtime 30 seconds [ 825.619850][ T6054] block nbd0: Possible stuck request ffff888026c50380: control (read@2048,1024B). Runtime 30 seconds [ 825.630707][ T6054] block nbd0: Possible stuck request ffff888026c50540: control (read@3072,1024B). Runtime 30 seconds [ 825.916281][T14760] netlink: 'syz.5.2090': attribute type 9 has an invalid length. [ 825.956361][T14760] netlink: 'syz.5.2090': attribute type 9 has an invalid length. [ 826.288261][T14764] netlink: 'syz.2.2091': attribute type 3 has an invalid length. [ 826.371287][T14764] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 826.419451][T14764] cramfs: wrong magic [ 826.490604][T14763] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2092'. [ 827.023814][T14771] netlink: 'syz.2.2095': attribute type 9 has an invalid length. [ 827.031797][T14771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2095'. [ 827.189354][ T30] audit: type=1400 audit(2000000665.495:1043): avc: denied { load_policy } for pid=14779 comm="syz.1.2097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 827.829278][ T30] audit: type=1400 audit(2000000665.755:1044): avc: denied { create } for pid=14781 comm="syz.4.2098" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 827.952490][T14780] SELinux: failed to load policy [ 828.013523][ T30] audit: type=1400 audit(2000000666.315:1045): avc: denied { connect } for pid=14783 comm="syz.2.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 828.668289][ T30] audit: type=1400 audit(2000000666.605:1046): avc: denied { unlink } for pid=9122 comm="syz-executor" name="file0" dev="tmpfs" ino=1526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 829.947522][ T1209] usb 4-1: USB disconnect, device number 18 [ 830.065982][T10152] Bluetooth: hci5: command 0x0405 tx timeout [ 830.502040][T14801] batadv10: entered promiscuous mode [ 830.509658][T14801] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 830.720576][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.795616][ T30] audit: type=1400 audit(2000000669.095:1047): avc: denied { bind } for pid=14821 comm="syz.4.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 830.889388][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.930470][T14823] can0: slcan on ttyS3. [ 830.957721][T14825] blktrace: Concurrent blktraces are not allowed on sg0 [ 830.977129][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.080015][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.363248][ T13] bridge_slave_1: left allmulticast mode [ 831.370333][ T13] bridge_slave_1: left promiscuous mode [ 831.377471][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.389634][ T13] bridge_slave_0: left allmulticast mode [ 831.395269][ T13] bridge_slave_0: left promiscuous mode [ 831.402288][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.598502][ T979] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 831.776672][ T979] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 831.784970][ T979] usb 2-1: config 0 has no interface number 0 [ 831.797037][ T979] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 831.815910][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.832578][ T979] usb 2-1: Product: syz [ 831.862941][ T979] usb 2-1: Manufacturer: syz [ 831.867989][ T979] usb 2-1: SerialNumber: syz [ 831.884642][ T979] usb 2-1: config 0 descriptor?? [ 832.132054][ T979] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 832.148627][ T979] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 832.170634][ T979] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 832.180303][ T979] usb 2-1: media controller created [ 832.231795][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.437155][T14834] comedi comedi0: pcl724: I/O port conflict (0x3,4) [ 832.665105][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.680241][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.703651][ T13] bond0 (unregistering): Released all slaves [ 832.886588][T14821] can0 (unregistered): slcan off ttyS3. [ 833.474230][ T979] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 833.570614][ T979] usb 2-1: USB disconnect, device number 47 [ 833.637790][T14843] netlink: 'syz.5.2113': attribute type 10 has an invalid length. [ 833.652018][T14843] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2113'. [ 833.968682][T14853] netlink: 'syz.2.2116': attribute type 7 has an invalid length. [ 833.976739][T14853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2116'. [ 834.076608][ T979] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 834.284675][ T979] usb 6-1: Using ep0 maxpacket: 8 [ 834.333672][ T979] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 834.375913][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.468297][ T979] usb 6-1: Product: syz [ 834.472488][ T979] usb 6-1: Manufacturer: syz [ 834.488560][ T979] usb 6-1: SerialNumber: syz [ 834.519468][ T979] usb 6-1: config 0 descriptor?? [ 834.533192][T10152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.543490][T10152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.551530][T10152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.560699][T10152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.567987][T10152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 834.576890][ T13] hsr_slave_0: left promiscuous mode [ 834.592338][ T30] audit: type=1400 audit(2000000672.895:1048): avc: denied { mounton } for pid=14863 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 834.619375][ T13] hsr_slave_1: left promiscuous mode [ 834.644476][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.651960][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.662475][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.670113][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.786127][ T13] veth1_macvtap: left promiscuous mode [ 834.796392][ T13] veth0_macvtap: left promiscuous mode [ 834.825617][ T13] veth1_vlan: left promiscuous mode [ 834.845722][ T13] veth0_vlan: left promiscuous mode [ 834.881636][T14871] netlink: 'syz.1.2119': attribute type 21 has an invalid length. [ 834.889709][T14871] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2119'. [ 835.597772][ T979] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 835.638238][ T979] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 835.785937][ T1209] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 835.959312][ T1209] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 835.967654][ T1209] usb 5-1: config 0 has no interface number 0 [ 835.984889][ T1209] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 836.005595][ T1209] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 836.028114][ T1209] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 836.053603][ T1209] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 836.072071][ T1209] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 836.107815][ T1209] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 836.138772][ T1209] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 836.161532][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.192544][ T1209] usb 5-1: config 0 descriptor?? [ 836.213613][T14875] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 836.221178][T14875] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 836.236618][ T1209] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 836.302405][ T13] team0 (unregistering): Port device team_slave_1 removed [ 836.363600][ T13] team0 (unregistering): Port device team_slave_0 removed [ 836.475674][ T1209] usb 5-1: USB disconnect, device number 58 [ 836.485477][ T1209] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 836.630492][T10152] Bluetooth: hci2: command tx timeout [ 836.847635][T14871] netlink: 'syz.1.2119': attribute type 4 has an invalid length. [ 836.861780][T14871] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2119'. [ 836.902125][T14872] batadv11: entered promiscuous mode [ 836.935079][T14872] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 837.150690][T14894] netlink: 'syz.4.2122': attribute type 9 has an invalid length. [ 837.254557][T14897] blktrace: Concurrent blktraces are not allowed on sg0 [ 837.421509][ T30] audit: type=1400 audit(2000000675.725:1049): avc: denied { ioctl } for pid=14899 comm="syz.4.2124" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 837.424355][T14900] input: syz1 as /devices/virtual/input/input24 [ 837.703416][ T30] audit: type=1400 audit(2000000675.995:1050): avc: denied { bind } for pid=14904 comm="syz.1.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 837.752373][T11001] usb 6-1: USB disconnect, device number 23 [ 838.401714][T14863] chnl_net:caif_netlink_parms(): no params data found [ 838.479588][T10152] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 838.706271][T10152] Bluetooth: hci2: command tx timeout [ 838.966753][T14863] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.009260][T14863] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.024634][T14863] bridge_slave_0: entered allmulticast mode [ 839.039323][T14863] bridge_slave_0: entered promiscuous mode [ 839.065250][T14863] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.082574][T14863] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.102905][T14863] bridge_slave_1: entered allmulticast mode [ 839.118022][T14863] bridge_slave_1: entered promiscuous mode [ 839.504189][T14863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.545824][T14927] netlink: 'syz.5.2130': attribute type 9 has an invalid length. [ 839.555297][T14927] netlink: 'syz.5.2130': attribute type 9 has an invalid length. [ 839.595567][T14863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.413047][T14863] team0: Port device team_slave_0 added [ 840.444341][T14942] blktrace: Concurrent blktraces are not allowed on sg0 [ 840.444557][T14863] team0: Port device team_slave_1 added [ 840.752732][T14863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.779264][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.817624][T10152] Bluetooth: hci2: command tx timeout [ 840.982624][T14863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.115240][T14863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.635983][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.734367][T14863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.429819][ T30] audit: type=1400 audit(2000000680.735:1051): avc: denied { remount } for pid=14936 comm="syz.5.2132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 842.432886][T14863] hsr_slave_0: entered promiscuous mode [ 842.697971][T14969] netlink: 'syz.1.2139': attribute type 21 has an invalid length. [ 842.708476][T14863] hsr_slave_1: entered promiscuous mode [ 842.708559][T14969] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2139'. [ 842.726216][ T30] audit: type=1400 audit(2000000681.025:1052): avc: denied { unmount } for pid=8986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 842.893340][T10152] Bluetooth: hci2: command tx timeout [ 843.079213][T14863] debugfs: 'hsr0' already exists in 'hsr' [ 843.160297][T14863] Cannot create hsr debugfs directory [ 843.181950][ T30] audit: type=1400 audit(2000000681.475:1053): avc: denied { read } for pid=14971 comm="syz.2.2141" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 843.209579][T14969] netlink: 'syz.1.2139': attribute type 4 has an invalid length. [ 843.217500][T14969] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2139'. [ 843.226943][T14968] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2132'. [ 843.335954][ T30] audit: type=1400 audit(2000000681.475:1054): avc: denied { open } for pid=14971 comm="syz.2.2141" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 843.368188][T14975] batadv12: entered promiscuous mode [ 843.498276][T14979] netlink: 'syz.2.2142': attribute type 9 has an invalid length. [ 843.565375][T14980] netlink: 'syz.2.2142': attribute type 9 has an invalid length. [ 843.708087][ T30] audit: type=1400 audit(2000000681.485:1055): avc: denied { ioctl } for pid=14971 comm="syz.2.2141" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 843.742661][T14975] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 844.163568][ T30] audit: type=1400 audit(2000000682.355:1056): avc: denied { setopt } for pid=14983 comm="syz.4.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 845.138571][T15006] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2150'. [ 845.199054][T15006] gretap0: entered promiscuous mode [ 845.283907][T15006] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2150'. [ 845.292929][T14863] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 845.397418][T14863] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 845.450486][T15007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.460642][T15006] 0ªî{X¹¦: renamed from gretap0 [ 845.720042][T15006] 0ªî{X¹¦: left promiscuous mode [ 845.725100][T15006] 0ªî{X¹¦: entered allmulticast mode [ 845.836917][T15006] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 845.880865][T14863] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 845.946088][T14863] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 846.733715][T15026] FAULT_INJECTION: forcing a failure. [ 846.733715][T15026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.748886][T15026] CPU: 0 UID: 0 PID: 15026 Comm: syz.2.2153 Not tainted syzkaller #0 PREEMPT(full) [ 846.748909][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 846.748919][T15026] Call Trace: [ 846.748925][T15026] [ 846.748930][T15026] dump_stack_lvl+0x16c/0x1f0 [ 846.748947][T15026] should_fail_ex+0x512/0x640 [ 846.748961][T15026] _copy_from_user+0x2e/0xd0 [ 846.748976][T15026] do_sock_getsockopt+0x3ca/0x440 [ 846.748992][T15026] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 846.749005][T15026] ? __fget_files+0x204/0x3c0 [ 846.749025][T15026] __sys_getsockopt+0x12f/0x260 [ 846.749039][T15026] __x64_sys_getsockopt+0xbd/0x160 [ 846.749049][T15026] ? do_syscall_64+0x91/0x4c0 [ 846.749061][T15026] ? lockdep_hardirqs_on+0x7c/0x110 [ 846.749073][T15026] do_syscall_64+0xcd/0x4c0 [ 846.749085][T15026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.749097][T15026] RIP: 0033:0x7f921dd8ebe9 [ 846.749107][T15026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.749118][T15026] RSP: 002b:00007f921eb17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 846.749129][T15026] RAX: ffffffffffffffda RBX: 00007f921dfb6180 RCX: 00007f921dd8ebe9 [ 846.749136][T15026] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000008 [ 846.749147][T15026] RBP: 00007f921eb17090 R08: 0000200000000080 R09: 0000000000000000 [ 846.749154][T15026] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.749160][T15026] R13: 00007f921dfb6218 R14: 00007f921dfb6180 R15: 00007ffd92857cb8 [ 846.749175][T15026] [ 847.041479][T14863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.053805][T14863] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.074666][T14863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 847.084997][T14863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 847.107449][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.114490][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.122778][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.129822][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.195260][T15012] bad cache= option: noni : no [ 847.195260][T15012] blocksize : 1 [ 847.195260][T15012] min keysize : 20 [ 847.195260][T15012] max keysize : 36 [ 847.195260][T15012] ivsize : 8 [ 847.195260][T15012] chunksize : 16 [ 847.195260][T15012] walksize : 16 [ 847.195260][T15012] statesize : 0 [ 847.195260][T15012] [ 847.195260][T15012] name : cbc(des) [ 847.195260][T15012] driver : cbc(ecb(des-generic)) [ 847.195260][T15012] module : kernel [ 847.195260][T15012] priority : 100 [ 847.195260][T15012] refcnt : 1 [ 847.195260][T15012] selftest : passed [ 847.195260][T15012] internal : no [ 847.195260][T15012] type : lskcipher [ 847.195260][T15012] blocksize : 8 [ 847.195260][T15012] min keysize : 8 [ 847.195260][T15012] max keysize : 8 [ 847.195260][T15012] ivsize : 8 [ 847.195260][T15012] chunksize : 8 [ 847.195260][T15012] statesize : 0 [ 847.195260][T15012] [ 847.195260][T15012] name : ecb(des) [ 847.195260][T15012] driver : ecb(des-generic) [ 847.195260][T15012] module : kernel [ 847.195260][T15012] priority : 100 [ 847.195260][T15012] refcnt : 1 [ 847.195260][T15012] selftest : passed [ 847.195260][T15012] internal : no [ 847.195260][T15012] type : lskcipher [ 847.195260][T15012] blocksize : 8 [ 847.195260][T15012] min keysize : 8 [ 847.195260][T15012] max keysize : 8 [ 847.195260][T15012] ivsize : 0 [ 847.195260][T15012] chunksize : 8 [ 847.195260][T15012] statesize : 0 [ 847.195260][T15012] [ 847.195260][T15012] name : lrw(serpent) [ 847.195260][T15012] driver : lrw(ecb-serpent-avx2) [ 847.195260][T15012] module : kernel [ 847.195260][T15012] priority : 600 [ 847.195260][T15012] refcnt : 1 [ 847.195260][T15012] selftest : passed [ 847.195260][T15012] internal : no [ 847.195260][T15012] type : skcipher [ 847.195260][T15012] async : no [ 847.195477][T15012] CIFS: VFS: bad cache= option: noni : no [ 847.195477][T15012] blocksize : 1 [ 847.195477][T15012] min keysize : 20 [ 847.195477][T15012] max keysize : 36 [ 847.195477][T15012] ivsize : 8 [ 847.195477][T15012] chunksize : 16 [ 847.195477][T15012] walksize : 16 [ 847.195477][T15012] statesize : 0 [ 847.195477][T15012] [ 847.195477][T15012] name : cbc(des) [ 847.195477][T15012] driver : cbc(ecb(des-generic)) [ 847.195477][T15012] module : kernel [ 847.195477][T15012] priority : 100 [ 847.195477][T15012] refcnt : 1 [ 847.195477][T15012] selftest : passed [ 847.195477][T15012] internal : no [ 847.195477][T15012] type : lskcipher [ 847.195477][T15012] blocksize : 8 [ 847.195477][T15012] min keysize : 8 [ 847.195477][T15012] max keysize : 8 [ 847.195477][T15012] ivsize : 8 [ 847.195477][T15012] chunksize : 8 [ 847.195477][T15012] statesize : 0 [ 847.195477][T15012] [ 847.195477][T15012] name : ecb(des) [ 847.195477][T15012] driver : ecb(des-generic) [ 847.195477][T15012] module : kernel [ 847.195477][T15012] priority : 100 [ 847.195477][T15012] refcnt : 1 [ 847.195477][T15012] selftest : passed [ 847.195477][T15012] internal : no [ 847.195477][T15012] type : lskcipher [ 847.195477][T15012] blocksize : 8 [ 847.195477][T15012] min keysize : 8 [ 847.195477][T15012] max keysize : 8 [ 847.195477][T15012] ivsize : 0 [ 847.195477][T15012] chunksize : 8 [ 847.195477][T15012] statesize : 0 [ 847.195477][T15012] [ 847.195477][T15012] name : lrw(serpent) [ 847.195477][T15012] driver : lrw(ecb-serpent-avx2) [ 847.195477][T15012] module : kernel [ 847.195477][T15012] priority : 600 [ 847.195477][T15012] refcnt : 1 [ 847.195477][T15012] selftest : passed [ 847.195477][T15012] internal : no [ 847.195477][T15012] type : skcipher [ 847.605518][T14863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.506173][ T5916] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 850.173186][ T5916] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 850.198936][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.305212][ T5916] usb 5-1: config 0 descriptor?? [ 850.340217][ T5916] gspca_main: spca508-2.14.0 probing 8086:0110 [ 850.662091][T14863] veth0_vlan: entered promiscuous mode [ 850.674062][T14863] veth1_vlan: entered promiscuous mode [ 850.715471][T14863] veth0_macvtap: entered promiscuous mode [ 850.742132][T14863] veth1_macvtap: entered promiscuous mode [ 850.794834][T14863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.883717][T14863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.981339][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.022129][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.044213][ T6110] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.101700][ T6110] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.248834][ T5916] gspca_spca508: reg_read err -110 [ 851.290343][T15076] serio: Serial port ptm1 [ 852.176730][ T5916] gspca_spca508: reg_read err -32 [ 852.266017][ T5916] gspca_spca508: reg_read err -32 [ 852.274570][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.425553][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.434857][ T5916] gspca_spca508: reg write: error -71 [ 852.452475][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.469785][ T5916] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 852.946325][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.976673][ T30] audit: type=1400 audit(2000000691.275:1057): avc: denied { mounton } for pid=14863 comm="syz-executor" path="/root/syzkaller.pi19Ta/syz-tmp" dev="sda1" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 853.009976][ T30] audit: type=1400 audit(2000000691.275:1058): avc: denied { mounton } for pid=14863 comm="syz-executor" path="/root/syzkaller.pi19Ta/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 853.049387][ T30] audit: type=1400 audit(2000000691.275:1059): avc: denied { mounton } for pid=14863 comm="syz-executor" path="/root/syzkaller.pi19Ta/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=66657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 853.119898][ T30] audit: type=1400 audit(2000000691.385:1060): avc: denied { mounton } for pid=14863 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 853.155195][ T30] audit: type=1400 audit(2000000691.385:1061): avc: denied { mount } for pid=14863 comm="syz-executor" name="/" dev="gadgetfs" ino=7502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 853.235588][ T5916] usb 5-1: USB disconnect, device number 59 [ 853.246625][ T30] audit: type=1400 audit(2000000691.385:1062): avc: denied { mount } for pid=14863 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 854.635654][T15101] netlink: 'syz.6.2166': attribute type 21 has an invalid length. [ 854.664489][T15101] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2166'. [ 854.697791][T15096] netlink: 'syz.2.2165': attribute type 5 has an invalid length. [ 854.705533][T15096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2165'. [ 854.756294][T15101] netlink: 'syz.6.2166': attribute type 4 has an invalid length. [ 854.766763][T15101] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2166'. [ 855.217861][T15101] batadv1: entered promiscuous mode [ 855.228783][T15101] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 855.426012][T10152] Bluetooth: hci2: command 0x0405 tx timeout [ 855.495987][ T979] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 855.665983][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 855.671162][ T9642] block nbd0: Possible stuck request ffff888026c50000: control (read@0,1024B). Runtime 60 seconds [ 855.685984][ T1209] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 855.707474][ T9642] block nbd0: Possible stuck request ffff888026c501c0: control (read@1024,1024B). Runtime 60 seconds [ 855.750506][ T9642] block nbd0: Possible stuck request ffff888026c50380: control (read@2048,1024B). Runtime 60 seconds [ 855.798313][ T9642] block nbd0: Possible stuck request ffff888026c50540: control (read@3072,1024B). Runtime 60 seconds [ 856.439152][ T979] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 856.448362][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.466031][ T979] usb 2-1: Product: syz [ 856.471989][ T979] usb 2-1: Manufacturer: syz [ 856.485990][ T979] usb 2-1: SerialNumber: syz [ 856.497035][ T979] usb 2-1: config 0 descriptor?? [ 856.647066][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 856.683843][ T1209] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 856.701713][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.735921][ T1209] usb 5-1: Product: syz [ 856.740102][ T1209] usb 5-1: Manufacturer: syz [ 856.744686][ T1209] usb 5-1: SerialNumber: syz [ 856.808052][T15120] serio: Serial port ptm1 [ 857.318632][T15121] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2173'. [ 857.612609][ T979] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 857.673234][ T979] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 858.599726][T15125] netlink: 'syz.5.2174': attribute type 9 has an invalid length. [ 858.924131][ T1209] usb 5-1: config 0 descriptor?? [ 858.936592][ T1209] usb 5-1: can't set config #0, error -71 [ 858.951360][ T976] usb 2-1: USB disconnect, device number 48 [ 858.952202][ T1209] usb 5-1: USB disconnect, device number 60 [ 859.104706][T15129] netlink: 'syz.6.2176': attribute type 9 has an invalid length. [ 859.141152][T15129] netlink: 'syz.6.2176': attribute type 9 has an invalid length. [ 859.988181][T15136] netlink: 'syz.2.2177': attribute type 21 has an invalid length. [ 860.049591][T15136] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2177'. [ 860.058786][T15145] batadv7: entered promiscuous mode [ 860.059743][T15145] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 860.145828][T15147] serio: Serial port ptm1 [ 860.655117][T15136] netlink: 'syz.2.2177': attribute type 4 has an invalid length. [ 860.665459][T15136] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2177'. [ 862.158035][T15154] netlink: 'syz.5.2182': attribute type 9 has an invalid length. [ 862.192350][T15154] netlink: 'syz.5.2182': attribute type 9 has an invalid length. [ 862.676067][ T5855] Bluetooth: hci3: unexpected subevent 0x03 length: 244 > 9 [ 864.680218][T15185] netlink: 'syz.6.2191': attribute type 9 has an invalid length. [ 864.702088][T15185] netlink: 'syz.6.2191': attribute type 9 has an invalid length. [ 864.717392][T11001] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 864.935951][T11001] usb 6-1: Using ep0 maxpacket: 8 [ 865.026921][T10152] Bluetooth: hci2: command 0x0405 tx timeout [ 865.063884][T11001] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 865.078446][T11001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.109691][T11001] usb 6-1: Product: syz [ 865.113930][T11001] usb 6-1: Manufacturer: syz [ 865.136161][T11001] usb 6-1: SerialNumber: syz [ 865.590706][T11001] usb 6-1: config 0 descriptor?? [ 867.366114][T11001] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 867.373528][T11001] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 867.395529][T15207] rtc_cmos 00:00: Alarms can be up to one day in the future [ 867.457907][T15210] netlink: 'syz.1.2197': attribute type 9 has an invalid length. [ 867.468555][T15210] netlink: 'syz.1.2197': attribute type 9 has an invalid length. [ 867.497935][T11001] usb 6-1: USB disconnect, device number 24 [ 867.539199][T15201] rtc_cmos 00:00: Alarms can be up to one day in the future [ 867.551430][T15212] netlink: 'syz.4.2198': attribute type 21 has an invalid length. [ 867.586436][ T979] rtc_cmos 00:00: Alarms can be up to one day in the future [ 867.598938][T15212] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2198'. [ 867.609302][ T979] rtc_cmos 00:00: Alarms can be up to one day in the future [ 867.630859][ T979] rtc_cmos 00:00: Alarms can be up to one day in the future [ 867.666304][ T979] rtc_cmos 00:00: Alarms can be up to one day in the future [ 867.673582][ T979] rtc rtc0: __rtc_set_alarm: err=-22 [ 867.697817][T15212] netlink: 'syz.4.2198': attribute type 4 has an invalid length. [ 867.835551][T15212] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2198'. [ 867.973212][T15216] batadv10: entered promiscuous mode [ 867.990084][T15216] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 868.030818][T15222] netlink: 'syz.2.2201': attribute type 9 has an invalid length. [ 868.050542][T15222] netlink: 'syz.2.2201': attribute type 9 has an invalid length. [ 868.145164][ T30] audit: type=1400 audit(2000000706.445:1063): avc: denied { getopt } for pid=15225 comm="syz.2.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 868.351498][T15231] No control pipe specified [ 869.749298][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.065689][T15248] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 870.152404][T15248] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 870.458970][T15257] netlink: 'syz.4.2213': attribute type 9 has an invalid length. [ 870.841163][T15271] FAULT_INJECTION: forcing a failure. [ 870.841163][T15271] name failslab, interval 1, probability 0, space 0, times 0 [ 870.932161][T15271] CPU: 1 UID: 0 PID: 15271 Comm: syz.2.2216 Not tainted syzkaller #0 PREEMPT(full) [ 870.932187][T15271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 870.932198][T15271] Call Trace: [ 870.932204][T15271] [ 870.932212][T15271] dump_stack_lvl+0x16c/0x1f0 [ 870.932237][T15271] should_fail_ex+0x512/0x640 [ 870.932257][T15271] ? __kmalloc_noprof+0xbf/0x510 [ 870.932278][T15271] ? lsm_blob_alloc+0x68/0x90 [ 870.932297][T15271] should_failslab+0xc2/0x120 [ 870.932318][T15271] __kmalloc_noprof+0xd2/0x510 [ 870.932343][T15271] lsm_blob_alloc+0x68/0x90 [ 870.932363][T15271] security_prepare_creds+0x30/0x270 [ 870.932382][T15271] prepare_creds+0x56f/0x7d0 [ 870.932406][T15271] ovl_setup_cred_for_create+0x25/0x300 [ 870.932434][T15271] ovl_create_or_link+0x6b4/0x870 [ 870.932463][T15271] ? inode_init_owner+0x2d6/0x3e0 [ 870.932489][T15271] ovl_create_object+0x266/0x300 [ 870.932515][T15271] ? __pfx_ovl_create_object+0x10/0x10 [ 870.932542][T15271] ? __pfx_ovl_permission+0x10/0x10 [ 870.932560][T15271] ? bpf_lsm_inode_permission+0x9/0x10 [ 870.932580][T15271] ? security_inode_permission+0xbf/0x260 [ 870.932608][T15271] ? __pfx_ovl_create+0x10/0x10 [ 870.932635][T15271] lookup_open.isra.0+0x11d3/0x1580 [ 870.932659][T15271] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 870.932700][T15271] ? __pfx_down_write+0x10/0x10 [ 870.932721][T15271] ? mnt_get_write_access+0x20c/0x300 [ 870.932756][T15271] path_openat+0x893/0x2cb0 [ 870.932787][T15271] ? __pfx_path_openat+0x10/0x10 [ 870.932815][T15271] do_filp_open+0x20b/0x470 [ 870.932836][T15271] ? __pfx_do_filp_open+0x10/0x10 [ 870.932879][T15271] ? alloc_fd+0x471/0x7d0 [ 870.932907][T15271] do_sys_openat2+0x11b/0x1d0 [ 870.932932][T15271] ? __pfx_do_sys_openat2+0x10/0x10 [ 870.932960][T15271] ? __fget_files+0x20e/0x3c0 [ 870.932984][T15271] __x64_sys_openat+0x174/0x210 [ 870.933016][T15271] ? __pfx___x64_sys_openat+0x10/0x10 [ 870.933038][T15271] ? ksys_write+0x1ac/0x250 [ 870.933066][T15271] do_syscall_64+0xcd/0x4c0 [ 870.933088][T15271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.933106][T15271] RIP: 0033:0x7f921dd8ebe9 [ 870.933122][T15271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.933138][T15271] RSP: 002b:00007f921eb59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 870.933156][T15271] RAX: ffffffffffffffda RBX: 00007f921dfb5fa0 RCX: 00007f921dd8ebe9 [ 870.933168][T15271] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 870.933179][T15271] RBP: 00007f921eb59090 R08: 0000000000000000 R09: 0000000000000000 [ 870.933190][T15271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 870.933201][T15271] R13: 00007f921dfb6038 R14: 00007f921dfb5fa0 R15: 00007ffd92857cb8 [ 870.933228][T15271] [ 870.952367][ T30] audit: type=1400 audit(2000000709.245:1064): avc: denied { connect } for pid=15273 comm="syz.4.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 871.415960][T11001] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 871.898036][T11001] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 871.913357][T11001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.005296][T11001] usb 5-1: config 0 descriptor?? [ 872.042363][T11001] usb 5-1: selecting invalid altsetting 1 [ 872.178299][T11001] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 872.225713][T11001] usb 5-1: USB disconnect, device number 61 [ 872.412959][ T30] audit: type=1400 audit(2000000710.675:1065): avc: denied { map } for pid=15284 comm="syz.2.2221" path="socket:[66211]" dev="sockfs" ino=66211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 872.534743][ T30] audit: type=1400 audit(2000000710.675:1066): avc: denied { read accept } for pid=15284 comm="syz.2.2221" path="socket:[66211]" dev="sockfs" ino=66211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 873.657603][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2225'. [ 873.675957][T15295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2225'. [ 873.725963][T15295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2225'. [ 873.846259][T15299] netlink: 'syz.5.2226': attribute type 5 has an invalid length. [ 873.857756][T15299] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2226'. [ 873.893688][T15304] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 873.900225][T15304] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 873.932971][T15304] vhci_hcd vhci_hcd.0: Device attached [ 873.945486][T15308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 874.017407][T15304] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 874.115961][ T976] vhci_hcd: vhci_device speed not set [ 874.715919][ T976] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 875.074108][T15306] vhci_hcd: connection reset by peer [ 875.080679][ T6622] vhci_hcd: stop threads [ 875.084943][ T6622] vhci_hcd: release socket [ 875.089417][ T6622] vhci_hcd: disconnect device [ 876.572220][ T979] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 876.879202][T15332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=15332 comm=syz.2.2234 [ 876.895941][ T979] usb 7-1: device descriptor read/64, error -71 [ 877.576424][ T979] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 877.638636][T15340] FAULT_INJECTION: forcing a failure. [ 877.638636][T15340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.675922][T15340] CPU: 1 UID: 0 PID: 15340 Comm: syz.5.2236 Not tainted syzkaller #0 PREEMPT(full) [ 877.675948][T15340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 877.675961][T15340] Call Trace: [ 877.675968][T15340] [ 877.675976][T15340] dump_stack_lvl+0x16c/0x1f0 [ 877.676001][T15340] should_fail_ex+0x512/0x640 [ 877.676026][T15340] _copy_to_user+0x32/0xd0 [ 877.676052][T15340] simple_read_from_buffer+0xcb/0x170 [ 877.676074][T15340] proc_fail_nth_read+0x197/0x240 [ 877.676096][T15340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.676119][T15340] ? rw_verify_area+0xcf/0x6c0 [ 877.676146][T15340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.676166][T15340] vfs_read+0x1e1/0xcf0 [ 877.676188][T15340] ? __pfx___mutex_lock+0x10/0x10 [ 877.676208][T15340] ? __pfx_vfs_read+0x10/0x10 [ 877.676234][T15340] ? __fget_files+0x20e/0x3c0 [ 877.676261][T15340] ksys_read+0x12a/0x250 [ 877.676279][T15340] ? __pfx_ksys_read+0x10/0x10 [ 877.676305][T15340] do_syscall_64+0xcd/0x4c0 [ 877.676327][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.676345][T15340] RIP: 0033:0x7f8c2ab8d5fc [ 877.676360][T15340] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 877.676377][T15340] RSP: 002b:00007f8c2b936030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 877.676394][T15340] RAX: ffffffffffffffda RBX: 00007f8c2adb5fa0 RCX: 00007f8c2ab8d5fc [ 877.676406][T15340] RDX: 000000000000000f RSI: 00007f8c2b9360a0 RDI: 0000000000000004 [ 877.676417][T15340] RBP: 00007f8c2b936090 R08: 0000000000000000 R09: 0000000000000000 [ 877.676427][T15340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 877.676438][T15340] R13: 00007f8c2adb6038 R14: 00007f8c2adb5fa0 R15: 00007ffcecc9d3a8 [ 877.676464][T15340] [ 877.864422][ T979] usb 7-1: device descriptor read/64, error -71 [ 877.978789][ T979] usb usb7-port1: attempt power cycle [ 878.082327][T15346] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 878.363081][ T979] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 878.396590][ T979] usb 7-1: device descriptor read/8, error -71 [ 878.408100][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2240'. [ 878.422692][T15352] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2240'. [ 878.677565][ T979] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 878.782935][T15355] netlink: 'syz.1.2241': attribute type 9 has an invalid length. [ 878.818042][T15355] netlink: 'syz.1.2241': attribute type 9 has an invalid length. [ 878.855074][ T979] usb 7-1: device descriptor read/8, error -71 [ 878.967287][ T979] usb usb7-port1: unable to enumerate USB device [ 879.419709][ T30] audit: type=1400 audit(2000000717.725:1067): avc: denied { create } for pid=15360 comm="syz.4.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 880.247347][ T976] vhci_hcd: vhci_device speed not set [ 882.250297][T15385] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2249'. [ 882.402496][T15388] bridge0: entered promiscuous mode [ 882.426995][T15388] macsec1: entered promiscuous mode [ 882.472148][T15390] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2250'. [ 882.487464][T15388] bridge0: port 3(macsec1) entered blocking state [ 882.506160][T15388] bridge0: port 3(macsec1) entered disabled state [ 882.548562][T15388] macsec1: entered allmulticast mode [ 882.553956][T15388] bridge0: entered allmulticast mode [ 882.613410][T15388] macsec1: left allmulticast mode [ 882.625015][T15388] bridge0: left allmulticast mode [ 882.690273][T15388] bridge0: left promiscuous mode [ 883.318913][ T30] audit: type=1400 audit(2000000721.615:1068): avc: denied { bind } for pid=15397 comm="syz.6.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 883.485903][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 883.726223][ T43] usb 7-1: device descriptor read/64, error -71 [ 883.966774][T15406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.096130][ T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 884.220730][T15416] fuse: Bad value for 'rootmode' [ 884.256847][ T43] usb 7-1: device descriptor read/64, error -71 [ 884.732150][ T5908] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 884.846303][ T43] usb usb7-port1: attempt power cycle [ 884.886032][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 884.940604][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 884.943186][T15421] overlayfs: failed to resolve './file1': -2 [ 884.966031][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 884.985881][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3B, changing to 0xB [ 884.997376][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 175, changing to 11 [ 885.008511][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 26515, setting to 1024 [ 885.084710][ T5908] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 885.134028][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.228761][ T43] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 885.247846][ T5908] usb 2-1: Product: syz [ 885.252494][ T5908] usb 2-1: Manufacturer: syz [ 885.257225][ T5908] usb 2-1: SerialNumber: syz [ 885.266471][ T43] usb 7-1: device descriptor read/8, error -71 [ 885.293044][ T5908] usb 2-1: config 0 descriptor?? [ 885.304451][T15408] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 885.814228][ T6054] block nbd0: Possible stuck request ffff888026c50000: control (read@0,1024B). Runtime 90 seconds [ 885.828771][ T6054] block nbd0: Possible stuck request ffff888026c501c0: control (read@1024,1024B). Runtime 90 seconds [ 885.839835][ T6054] block nbd0: Possible stuck request ffff888026c50380: control (read@2048,1024B). Runtime 90 seconds [ 885.841104][ T43] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 885.858896][ T6054] block nbd0: Possible stuck request ffff888026c50540: control (read@3072,1024B). Runtime 90 seconds [ 886.009020][ T43] usb 7-1: device descriptor read/8, error -71 [ 886.117013][T15431] netlink: 'syz.5.2261': attribute type 9 has an invalid length. [ 886.161450][T15431] netlink: 'syz.5.2261': attribute type 9 has an invalid length. [ 886.322326][T15408] fuseblk: Bad value for 'fd' [ 886.350632][ T5908] usb 2-1: USB disconnect, device number 49 [ 886.417216][ T43] usb usb7-port1: unable to enumerate USB device [ 886.569855][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2264'. [ 886.649356][T15440] hugetlbfs: syz.5.2264 (15440): Using mlock ulimits for SHM_HUGETLB is obsolete [ 886.665112][ T30] audit: type=1400 audit(2000000724.965:1069): avc: denied { read } for pid=15438 comm="syz.5.2264" path="socket:[66520]" dev="sockfs" ino=66520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 886.716856][ T5916] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 886.946883][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 887.041946][ T5916] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 887.066260][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.110199][ T5916] usb 5-1: Product: syz [ 887.136071][ T5916] usb 5-1: Manufacturer: syz [ 887.149789][T15444] netlink: 'syz.2.2266': attribute type 9 has an invalid length. [ 887.176188][ T5916] usb 5-1: SerialNumber: syz [ 887.187211][T15444] netlink: 'syz.2.2266': attribute type 9 has an invalid length. [ 887.209531][ T5916] usb 5-1: config 0 descriptor?? [ 887.241301][T15448] netlink: 'syz.6.2268': attribute type 9 has an invalid length. [ 887.636022][ T976] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 887.807674][ T976] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 887.830695][ T976] usb 2-1: config 0 has no interface number 0 [ 887.841241][ T976] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 887.854634][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.872110][ T976] usb 2-1: Product: syz [ 887.880003][ T976] usb 2-1: Manufacturer: syz [ 887.895325][ T976] usb 2-1: SerialNumber: syz [ 887.917923][ T976] usb 2-1: config 0 descriptor?? [ 888.154447][T15450] tipc: Started in network mode [ 888.190773][T15450] tipc: Node identity e296800e19cc, cluster identity 4711 [ 888.213652][T15450] tipc: Enabled bearer , priority 0 [ 888.330832][ T5916] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 888.338442][ T5916] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 888.367974][T15450] syzkaller0: entered promiscuous mode [ 888.383570][T15450] syzkaller0: entered allmulticast mode [ 889.034861][ T30] audit: type=1400 audit(2000000727.335:1070): avc: denied { setopt } for pid=15449 comm="syz.1.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 889.133729][T15450] tipc: Resetting bearer [ 889.158056][ T976] usb 2-1: USB disconnect, device number 50 [ 889.165123][T15449] tipc: Resetting bearer [ 889.262338][T15449] tipc: Disabling bearer [ 889.488656][ T5916] usb 5-1: USB disconnect, device number 62 [ 890.723815][T15511] netlink: 'syz.1.2281': attribute type 9 has an invalid length. [ 890.746014][T15511] netlink: 'syz.1.2281': attribute type 9 has an invalid length. [ 891.013276][ T30] audit: type=1400 audit(2000000729.205:1071): avc: denied { write } for pid=15505 comm="syz.2.2279" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 891.098920][T15520] autofs: Unknown parameter '00000000000000000000' [ 893.214743][T15539] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2290'. [ 894.251295][ T30] audit: type=1400 audit(2000000732.155:1072): avc: denied { execute_no_trans } for pid=15544 comm="syz.1.2293" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 895.847930][T15567] netlink: 'syz.4.2298': attribute type 9 has an invalid length. [ 895.863607][T15567] netlink: 'syz.4.2298': attribute type 9 has an invalid length. [ 896.247884][T15570] netlink: 'syz.2.2299': attribute type 9 has an invalid length. [ 896.347422][T15570] netlink: 'syz.2.2299': attribute type 9 has an invalid length. [ 897.397244][T15584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.629723][ T30] audit: type=1400 audit(2000000735.925:1073): avc: denied { accept } for pid=15591 comm="syz.2.2305" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 899.636559][T15608] FAULT_INJECTION: forcing a failure. [ 899.636559][T15608] name failslab, interval 1, probability 0, space 0, times 0 [ 899.659142][T15608] CPU: 1 UID: 0 PID: 15608 Comm: syz.2.2309 Not tainted syzkaller #0 PREEMPT(full) [ 899.659160][T15608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 899.659167][T15608] Call Trace: [ 899.659171][T15608] [ 899.659176][T15608] dump_stack_lvl+0x16c/0x1f0 [ 899.659193][T15608] should_fail_ex+0x512/0x640 [ 899.659205][T15608] ? fs_reclaim_acquire+0xae/0x150 [ 899.659221][T15608] should_failslab+0xc2/0x120 [ 899.659235][T15608] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 899.659247][T15608] ? security_inode_alloc+0x3b/0x2b0 [ 899.659264][T15608] security_inode_alloc+0x3b/0x2b0 [ 899.659279][T15608] inode_init_always_gfp+0xce4/0x1030 [ 899.659295][T15608] ? __pfx_ovl_inode_set+0x10/0x10 [ 899.659307][T15608] alloc_inode+0x86/0x240 [ 899.659323][T15608] iget5_locked+0x338/0x3d0 [ 899.659339][T15608] ? __pfx_ovl_inode_test+0x10/0x10 [ 899.659350][T15608] ? __pfx_ovl_inode_set+0x10/0x10 [ 899.659362][T15608] ? __pfx_iget5_locked+0x10/0x10 [ 899.659379][T15608] ? __lock_acquire+0xb97/0x1ce0 [ 899.659401][T15608] ovl_get_inode+0xce9/0x13d0 [ 899.659418][T15608] ? __pfx_ovl_get_inode+0x10/0x10 [ 899.659432][T15608] ? do_raw_spin_unlock+0x172/0x230 [ 899.659445][T15608] ? _raw_spin_unlock+0x28/0x50 [ 899.659464][T15608] ovl_lookup+0xda8/0x21a0 [ 899.659482][T15608] ? __pfx_ovl_lookup+0x10/0x10 [ 899.659496][T15608] ? d_alloc_parallel+0x828/0x1480 [ 899.659515][T15608] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 899.659535][T15608] ? __lock_acquire+0xb97/0x1ce0 [ 899.659556][T15608] ? lockdep_init_map_type+0x5c/0x280 [ 899.659569][T15608] __lookup_slow+0x251/0x460 [ 899.659586][T15608] ? __pfx___lookup_slow+0x10/0x10 [ 899.659611][T15608] ? lookup_fast+0x156/0x610 [ 899.659621][T15608] ? __pfx_ovl_permission+0x10/0x10 [ 899.659634][T15608] walk_component+0x353/0x5b0 [ 899.659646][T15608] link_path_walk+0x627/0xe20 [ 899.659662][T15608] path_parentat+0x2b/0x110 [ 899.659673][T15608] __filename_parentat+0x22f/0x680 [ 899.659684][T15608] ? __x64_sys_rmdir+0xb0/0x110 [ 899.659698][T15608] ? __pfx___filename_parentat+0x10/0x10 [ 899.659729][T15608] ? find_held_lock+0x2b/0x80 [ 899.659743][T15608] do_rmdir+0xd7/0x3c0 [ 899.659756][T15608] ? __pfx_do_rmdir+0x10/0x10 [ 899.659773][T15608] ? getname_flags.part.0+0x1c5/0x550 [ 899.659791][T15608] __x64_sys_rmdir+0xc5/0x110 [ 899.659804][T15608] do_syscall_64+0xcd/0x4c0 [ 899.659819][T15608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.659831][T15608] RIP: 0033:0x7f921dd8ebe9 [ 899.659840][T15608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.659851][T15608] RSP: 002b:00007f921eb59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 899.659862][T15608] RAX: ffffffffffffffda RBX: 00007f921dfb5fa0 RCX: 00007f921dd8ebe9 [ 899.659869][T15608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 899.659879][T15608] RBP: 00007f921eb59090 R08: 0000000000000000 R09: 0000000000000000 [ 899.659885][T15608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 899.659892][T15608] R13: 00007f921dfb6038 R14: 00007f921dfb5fa0 R15: 00007ffd92857cb8 [ 899.659906][T15608] [ 899.661435][T15608] overlayfs: failed to get inode (-12) [ 901.180355][T15621] netlink: 'syz.4.2312': attribute type 9 has an invalid length. [ 901.202534][T15621] netlink: 'syz.4.2312': attribute type 9 has an invalid length. [ 901.496353][ T30] audit: type=1400 audit(2000000739.805:1074): avc: denied { getopt } for pid=15622 comm="syz.1.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 902.280425][ T976] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 902.835868][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 902.849563][ T976] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 902.869766][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.897925][ T976] usb 3-1: Product: syz [ 902.902333][ T976] usb 3-1: Manufacturer: syz [ 902.921728][ T976] usb 3-1: SerialNumber: syz [ 902.941249][ T976] usb 3-1: config 0 descriptor?? [ 903.010477][T15640] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2317'. [ 903.521538][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 904.445178][ T976] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 904.467749][ T976] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 904.503022][T15670] netlink: 'syz.1.2321': attribute type 21 has an invalid length. [ 904.511629][T15670] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2321'. [ 904.521004][T15670] netlink: 'syz.1.2321': attribute type 4 has an invalid length. [ 904.568698][T15670] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2321'. [ 904.707942][T15681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.731770][T11001] usb 3-1: USB disconnect, device number 76 [ 904.803830][T15674] batadv13: entered promiscuous mode [ 904.812396][T15674] 8021q: adding VLAN 0 to HW filter on device batadv13 [ 904.851259][T15687] fuse: Unknown parameter 'user_i00000000000000000000' [ 904.976537][T15689] netlink: 'syz.6.2325': attribute type 9 has an invalid length. [ 904.993311][T15689] netlink: 'syz.6.2325': attribute type 9 has an invalid length. [ 906.242725][T15700] blktrace: Concurrent blktraces are not allowed on sg0 [ 907.106297][ T43] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 907.398342][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.465128][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 907.756686][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 907.819791][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2333'. [ 907.859463][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 907.902322][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 907.932653][T15723] netlink: 'syz.2.2335': attribute type 9 has an invalid length. [ 907.940586][T15723] netlink: 'syz.2.2335': attribute type 9 has an invalid length. [ 907.991279][ T43] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 908.021097][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 908.048471][ T43] usb 6-1: Product: syz [ 908.063967][ T43] usb 6-1: Manufacturer: syz [ 908.090244][ T43] usb 6-1: SerialNumber: syz [ 908.107112][ T43] usb 6-1: config 0 descriptor?? [ 908.261990][T15731] fuse: Unknown parameter 'user_i00000000000000000000' [ 908.327432][ T43] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 908.378153][ T43] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 908.586514][T15737] netlink: 'syz.1.2338': attribute type 9 has an invalid length. [ 908.608323][T15737] netlink: 'syz.1.2338': attribute type 9 has an invalid length. [ 908.676949][ T43] usb 6-1: USB disconnect, device number 25 [ 909.483372][T15743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2340'. [ 909.727917][ T30] audit: type=1400 audit(2000000748.035:1075): avc: denied { unmount } for pid=14863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 910.050512][ T5855] Bluetooth: hci5: unexpected subevent 0x03 length: 244 > 9 [ 911.350053][T15775] fuse: Unknown parameter 'user_i00000000000000000000' [ 912.384238][ T30] audit: type=1400 audit(2000000750.665:1076): avc: denied { mounton } for pid=15777 comm="syz.6.2349" path="/proc/156/task" dev="proc" ino=69603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 913.545905][ T30] audit: type=1400 audit(2000000751.845:1077): avc: denied { mount } for pid=15793 comm="syz.5.2355" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 913.601236][T15796] overlay: Unknown parameter 'subj_type' [ 913.647008][T15797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.703262][ T30] audit: type=1400 audit(2000000751.905:1078): avc: denied { mounton } for pid=15793 comm="syz.5.2355" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 913.920698][T15803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2356'. [ 914.608300][T15803] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 914.609547][ T30] audit: type=1400 audit(2000000751.925:1079): avc: denied { unmount } for pid=10295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 914.649121][T15803] block (null): Could not allocate knbd recv work queue. [ 914.666992][T15803] nbd: failed to add new device [ 914.674937][T15806] netlink: 'syz.5.2357': attribute type 9 has an invalid length. [ 916.523744][ T6054] block nbd0: Possible stuck request ffff888026c50000: control (read@0,1024B). Runtime 120 seconds [ 916.535295][ T6054] block nbd0: Possible stuck request ffff888026c501c0: control (read@1024,1024B). Runtime 120 seconds [ 916.548060][ T6054] block nbd0: Possible stuck request ffff888026c50380: control (read@2048,1024B). Runtime 120 seconds [ 916.559496][ T6054] block nbd0: Possible stuck request ffff888026c50540: control (read@3072,1024B). Runtime 120 seconds [ 916.780408][T15827] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 916.935895][ T5908] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 917.076078][T11001] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 917.123163][ T5908] usb 7-1: config 0 has no interfaces? [ 917.154085][ T5908] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 917.185694][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.230515][ T5908] usb 7-1: Product: syz [ 917.249719][T11001] usb 2-1: not running at top speed; connect to a high speed hub [ 917.266117][ T5908] usb 7-1: Manufacturer: syz [ 917.271798][ T5908] usb 7-1: SerialNumber: syz [ 917.287745][T11001] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 917.341416][T11001] usb 2-1: config 1 has no interface number 1 [ 917.362209][T11001] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 917.384020][T11001] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 917.393536][T11001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.402221][T11001] usb 2-1: Product: syz [ 918.101823][T11001] usb 2-1: Manufacturer: syz [ 918.118203][T11001] usb 2-1: SerialNumber: syz [ 918.140824][ T5908] usb 7-1: config 0 descriptor?? [ 918.382714][T11001] usb 2-1: failed to enable PITCH for EP 0x82 [ 918.466338][T11001] usb 2-1: USB disconnect, device number 51 [ 918.606601][T14215] udevd[14215]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.904875][T15849] block nbd5: Attempted send on invalid socket [ 918.911458][T15849] I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 918.921441][T15849] gfs2: error -5 reading superblock [ 919.395372][ T30] audit: type=1400 audit(2000000757.555:1080): avc: denied { remove_name } for pid=15844 comm="syz.4.2366" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 919.466163][ T30] audit: type=1400 audit(2000000757.555:1081): avc: denied { unlink } for pid=15844 comm="syz.4.2366" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 920.011001][ T5855] Bluetooth: hci1: unexpected subevent 0x03 length: 244 > 9 [ 920.137975][T15863] netlink: 'syz.4.2370': attribute type 9 has an invalid length. [ 920.676514][T15870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15870 comm=syz.1.2371 [ 920.779802][T15872] bridge_slave_0: left allmulticast mode [ 920.785645][T15872] bridge_slave_0: left promiscuous mode [ 920.814634][T15872] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.861748][T11001] usb 7-1: USB disconnect, device number 10 [ 920.890231][T15872] bridge_slave_1: left allmulticast mode [ 920.926962][T15872] bridge_slave_1: left promiscuous mode [ 920.943588][T15872] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.066489][T15872] bond0: (slave bond_slave_0): Releasing backup interface [ 921.124745][T15872] bond0: (slave bond_slave_1): Releasing backup interface [ 921.135691][T15872] team0: Port device team_slave_0 removed [ 921.144365][T15872] team0: Port device team_slave_1 removed [ 921.146025][ T43] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 921.150631][T15872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.777683][T15872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.971434][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.002258][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.010374][T15891] fuse: Unknown parameter 'user_id00000000000000000000' [ 922.033069][ T43] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 922.063182][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.101093][ T43] usb 6-1: config 0 descriptor?? [ 922.127567][T15893] vivid-000: disconnect [ 922.305193][ T5855] Bluetooth: hci2: unexpected subevent 0x03 length: 244 > 9 [ 923.924945][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2374'. [ 924.388606][T15888] vivid-000: reconnect [ 924.432868][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 924.455359][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 924.489320][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2382'. [ 924.508150][ T43] usb 6-1: USB disconnect, device number 26 [ 925.224544][T11001] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 925.761818][T11001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.775843][T11001] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 925.785136][T11001] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 925.857385][T11001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 925.965376][T11001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 925.999353][T11001] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 926.125930][T11001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.163974][T15907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 926.200267][T11001] hub 2-1:1.0: bad descriptor, ignoring hub [ 926.226152][T11001] hub 2-1:1.0: probe with driver hub failed with error -5 [ 926.246948][T11001] cdc_wdm 2-1:1.0: skipping garbage [ 926.263729][T11001] cdc_wdm 2-1:1.0: skipping garbage [ 926.283970][T11001] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 926.300273][T11001] cdc_wdm 2-1:1.0: Unknown control protocol [ 926.395633][T11001] usb 2-1: USB disconnect, device number 52 [ 926.944025][T15919] openvswitch: netlink: Flow actions attr not present in new flow. [ 927.820557][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 927.843383][T15934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 928.981436][T15948] overlayfs: failed to resolve './file1': -2 [ 929.106424][T15945] netlink: 'syz.6.2394': attribute type 9 has an invalid length. [ 929.169035][T15945] netlink: 'syz.6.2394': attribute type 9 has an invalid length. [ 929.518064][ T43] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 929.656716][ T43] usb 3-1: device descriptor read/64, error -71 [ 929.936274][ T43] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 930.289165][ T43] usb 3-1: device descriptor read/64, error -71 [ 930.419813][ T43] usb usb3-port1: attempt power cycle [ 931.010549][ T43] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 931.188877][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.528952][ T43] usb 3-1: device descriptor read/8, error -71 [ 932.606437][ T43] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 932.731895][T15989] FAULT_INJECTION: forcing a failure. [ 932.731895][T15989] name failslab, interval 1, probability 0, space 0, times 0 [ 932.754853][T15989] CPU: 0 UID: 0 PID: 15989 Comm: syz.6.2409 Not tainted syzkaller #0 PREEMPT(full) [ 932.754878][T15989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 932.754890][T15989] Call Trace: [ 932.754897][T15989] [ 932.754904][T15989] dump_stack_lvl+0x16c/0x1f0 [ 932.754943][T15989] should_fail_ex+0x512/0x640 [ 932.754964][T15989] ? fs_reclaim_acquire+0xae/0x150 [ 932.754991][T15989] ? tomoyo_encode2+0x100/0x3e0 [ 932.755016][T15989] should_failslab+0xc2/0x120 [ 932.755039][T15989] __kmalloc_noprof+0xd2/0x510 [ 932.755066][T15989] tomoyo_encode2+0x100/0x3e0 [ 932.755095][T15989] tomoyo_encode+0x29/0x50 [ 932.755120][T15989] tomoyo_realpath_from_path+0x18f/0x6e0 [ 932.755149][T15989] ? tomoyo_profile+0x47/0x60 [ 932.755171][T15989] tomoyo_path_number_perm+0x245/0x580 [ 932.755193][T15989] ? tomoyo_path_number_perm+0x237/0x580 [ 932.755218][T15989] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 932.755242][T15989] ? find_held_lock+0x2b/0x80 [ 932.755271][T15989] ? __pfx___schedule+0x10/0x10 [ 932.755302][T15989] ? rcu_is_watching+0x12/0xc0 [ 932.755324][T15989] ? irqentry_exit+0x3b/0x90 [ 932.755342][T15989] ? lockdep_hardirqs_on+0x7c/0x110 [ 932.755361][T15989] ? hook_file_ioctl_common+0x145/0x410 [ 932.755387][T15989] ? __x64_sys_ioctl+0x94/0x210 [ 932.755419][T15989] security_file_ioctl+0x9b/0x240 [ 932.755447][T15989] __x64_sys_ioctl+0xb7/0x210 [ 932.755481][T15989] do_syscall_64+0xcd/0x4c0 [ 932.755504][T15989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.755523][T15989] RIP: 0033:0x7fbb4c58ebe9 [ 932.755539][T15989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.755561][T15989] RSP: 002b:00007fbb4d4a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 932.755579][T15989] RAX: ffffffffffffffda RBX: 00007fbb4c7b5fa0 RCX: 00007fbb4c58ebe9 [ 932.755591][T15989] RDX: 0000200000000100 RSI: 00000000800452d3 RDI: 0000000000000004 [ 932.755602][T15989] RBP: 00007fbb4d4a2090 R08: 0000000000000000 R09: 0000000000000000 [ 932.755613][T15989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.755624][T15989] R13: 00007fbb4c7b6038 R14: 00007fbb4c7b5fa0 R15: 00007ffe4c295a98 [ 932.755651][T15989] [ 932.755712][T15989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 933.056065][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 933.063259][ T43] usb 3-1: device descriptor read/8, error -32 [ 933.177927][ T43] usb usb3-port1: unable to enumerate USB device [ 933.290265][T15997] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 933.346573][T15997] netlink: 'syz.5.2412': attribute type 2 has an invalid length. [ 933.400683][T15998] netlink: 'syz.5.2412': attribute type 2 has an invalid length. [ 933.903294][T15997] : entered promiscuous mode [ 934.284661][T10152] Bluetooth: hci2: command 0x0405 tx timeout [ 935.134788][T16021] fuse: Bad value for 'group_id' [ 935.139839][T16021] fuse: Bad value for 'group_id' [ 935.927858][ T30] audit: type=1400 audit(2000000774.235:1082): avc: denied { read write } for pid=16023 comm="syz.1.2419" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 935.952189][ T30] audit: type=1400 audit(2000000774.235:1083): avc: denied { open } for pid=16023 comm="syz.1.2419" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 936.462014][T16025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input25 [ 936.960083][T16038] FAULT_INJECTION: forcing a failure. [ 936.960083][T16038] name failslab, interval 1, probability 0, space 0, times 0 [ 937.035969][T16038] CPU: 0 UID: 0 PID: 16038 Comm: syz.1.2422 Not tainted syzkaller #0 PREEMPT(full) [ 937.035996][T16038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 937.036007][T16038] Call Trace: [ 937.036014][T16038] [ 937.036020][T16038] dump_stack_lvl+0x16c/0x1f0 [ 937.036044][T16038] should_fail_ex+0x512/0x640 [ 937.036064][T16038] ? __kmalloc_noprof+0xbf/0x510 [ 937.036084][T16038] ? nla_alloc_flow_actions+0x21/0x80 [ 937.036104][T16038] should_failslab+0xc2/0x120 [ 937.036124][T16038] __kmalloc_noprof+0xd2/0x510 [ 937.036146][T16038] nla_alloc_flow_actions+0x21/0x80 [ 937.036167][T16038] ovs_nla_copy_actions+0x60/0x330 [ 937.036195][T16038] ovs_flow_cmd_new+0x451/0xe30 [ 937.036219][T16038] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 937.036236][T16038] ? __kasan_kmalloc+0xaa/0xb0 [ 937.036252][T16038] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 937.036278][T16038] ? genl_family_rcv_msg_doit+0xbf/0x2f0 [ 937.036299][T16038] ? genl_rcv_msg+0x55c/0x800 [ 937.036322][T16038] ? netlink_sendmsg+0x8d1/0xdd0 [ 937.036339][T16038] ? ____sys_sendmsg+0xa95/0xc70 [ 937.036361][T16038] ? ___sys_sendmsg+0x134/0x1d0 [ 937.036377][T16038] ? __sys_sendmsg+0x16d/0x220 [ 937.036400][T16038] ? do_syscall_64+0xcd/0x4c0 [ 937.036465][T16038] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 937.036488][T16038] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 937.036516][T16038] genl_family_rcv_msg_doit+0x209/0x2f0 [ 937.036541][T16038] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 937.036574][T16038] ? bpf_lsm_capable+0x9/0x10 [ 937.036597][T16038] ? security_capable+0x7e/0x260 [ 937.036619][T16038] ? ns_capable+0xd7/0x110 [ 937.036642][T16038] genl_rcv_msg+0x55c/0x800 [ 937.036672][T16038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 937.036695][T16038] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 937.036723][T16038] netlink_rcv_skb+0x158/0x420 [ 937.036744][T16038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 937.036769][T16038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 937.036800][T16038] ? netlink_deliver_tap+0x1ae/0xd30 [ 937.036824][T16038] genl_rcv+0x28/0x40 [ 937.036844][T16038] netlink_unicast+0x5a7/0x870 [ 937.036868][T16038] ? __pfx_netlink_unicast+0x10/0x10 [ 937.036888][T16038] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 937.036916][T16038] netlink_sendmsg+0x8d1/0xdd0 [ 937.036941][T16038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.036971][T16038] ____sys_sendmsg+0xa95/0xc70 [ 937.036995][T16038] ? copy_msghdr_from_user+0x10a/0x160 [ 937.037013][T16038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 937.037048][T16038] ___sys_sendmsg+0x134/0x1d0 [ 937.037069][T16038] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.037120][T16038] __sys_sendmsg+0x16d/0x220 [ 937.037138][T16038] ? __pfx___sys_sendmsg+0x10/0x10 [ 937.037174][T16038] do_syscall_64+0xcd/0x4c0 [ 937.037195][T16038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.037213][T16038] RIP: 0033:0x7f0f14d8ebe9 [ 937.037228][T16038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.037245][T16038] RSP: 002b:00007f0f15c4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.037263][T16038] RAX: ffffffffffffffda RBX: 00007f0f14fb5fa0 RCX: 00007f0f14d8ebe9 [ 937.037275][T16038] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 937.037285][T16038] RBP: 00007f0f15c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 937.037296][T16038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.037306][T16038] R13: 00007f0f14fb6038 R14: 00007f0f14fb5fa0 R15: 00007ffe0bc21e18 [ 937.037332][T16038] [ 937.037364][T16038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.086037][ T30] audit: type=1400 audit(2000000778.315:1084): avc: denied { map } for pid=16063 comm="syz.4.2429" path="socket:[71116]" dev="sockfs" ino=71116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 940.515065][ T30] audit: type=1400 audit(2000000778.315:1085): avc: denied { read } for pid=16063 comm="syz.4.2429" path="socket:[71116]" dev="sockfs" ino=71116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 943.277810][T16088] fuse: Bad value for 'group_id' [ 943.356050][T16088] fuse: Bad value for 'group_id' [ 943.646783][ T30] audit: type=1400 audit(2000000781.805:1086): avc: denied { append } for pid=16099 comm="syz.4.2440" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 944.080817][ T30] audit: type=1400 audit(2000000782.105:1087): avc: denied { remount } for pid=16099 comm="syz.4.2440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 944.243316][T11001] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 944.608836][T11001] usb 3-1: unable to get BOS descriptor or descriptor too short [ 944.697763][T11001] usb 3-1: not running at top speed; connect to a high speed hub [ 944.712896][T16101] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2436'. [ 944.724849][T16101] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2436'. [ 944.756464][T11001] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 576, setting to 64 [ 944.776538][T11001] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.40 [ 944.785943][T11001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.794302][T11001] usb 3-1: Product: syz [ 944.810849][T11001] usb 3-1: Manufacturer: syz [ 944.815448][T11001] usb 3-1: SerialNumber: syz [ 944.834888][T16103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 944.951280][ T30] audit: type=1400 audit(2000000783.255:1088): avc: denied { setattr } for pid=16112 comm="syz.1.2443" name="RDS" dev="sockfs" ino=72126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 945.073806][T16103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.105909][ T30] audit: type=1400 audit(2000000783.335:1089): avc: denied { append } for pid=16112 comm="syz.1.2443" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 945.133011][T16103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.152132][T16103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.237402][T16103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.971031][T11001] usbhid 3-1:1.0: can't add hid device: -71 [ 945.977165][T11001] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 945.997140][T11001] usb 3-1: USB disconnect, device number 81 [ 946.181972][ T30] audit: type=1400 audit(2000000784.475:1090): avc: denied { name_bind } for pid=16126 comm="syz.1.2446" src=28194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 946.893477][ T6054] block nbd0: Possible stuck request ffff888026c50000: control (read@0,1024B). Runtime 150 seconds [ 946.904272][ T6054] block nbd0: Possible stuck request ffff888026c501c0: control (read@1024,1024B). Runtime 150 seconds [ 946.915286][ T6054] block nbd0: Possible stuck request ffff888026c50380: control (read@2048,1024B). Runtime 150 seconds [ 946.927589][ T6054] block nbd0: Possible stuck request ffff888026c50540: control (read@3072,1024B). Runtime 150 seconds [ 947.857990][T16147] syz.1.2450 (16147): attempted to duplicate a private mapping with mremap. This is not supported. [ 948.218867][T16151] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2453'. [ 948.721417][ T979] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 948.967618][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.987479][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.014238][ T979] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 949.066200][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.113665][ T979] usb 7-1: config 0 descriptor?? [ 949.152115][T16169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.434730][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2452'. [ 950.005980][ T979] usbhid 7-1:0.0: can't add hid device: -71 [ 950.012179][ T979] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 950.060756][ T979] usb 7-1: USB disconnect, device number 11 [ 950.069169][T16181] fuse: Unknown parameter '0x0000000000000003' [ 950.142403][T16185] fuse: Unknown parameter '0x0000000000000003' [ 950.544365][ T30] audit: type=1400 audit(2000000788.815:1091): avc: denied { ioctl } for pid=16186 comm="syz.2.2462" path="socket:[71556]" dev="sockfs" ino=71556 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 951.688287][T16214] netlink: 'syz.6.2463': attribute type 10 has an invalid length. [ 951.721382][T16214] veth0_vlan: left promiscuous mode [ 951.735929][T16214] veth0_vlan: entered promiscuous mode [ 951.773362][T16214] team0: Device veth0_vlan failed to register rx_handler [ 952.620738][ T30] audit: type=1400 audit(2000000790.855:1092): avc: denied { mount } for pid=16211 comm="syz.1.2468" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 953.902524][T16234] fuse: Unknown parameter '0x0000000000000003' [ 953.946610][ T979] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 954.101564][ T979] usb 2-1: device descriptor read/64, error -71 [ 954.265653][ T5916] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 954.475569][ T5916] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 954.985883][ T979] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 954.998223][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.027169][ T5916] usb 6-1: Product: syz [ 955.031466][ T5916] usb 6-1: Manufacturer: syz [ 955.045901][ T5916] usb 6-1: SerialNumber: syz [ 955.188954][ T5916] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 955.646083][ T43] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 955.711328][T16250] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2476'. [ 956.053923][T16236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.095035][T16256] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2477'. [ 956.104587][T16256] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2477'. [ 956.127926][T16255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2478'. [ 956.138611][T16255] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2478'. [ 956.140223][T16236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.424601][T11001] usb 6-1: USB disconnect, device number 27 [ 956.435931][ T5916] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 956.706030][ T43] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 957.304364][ T43] ath9k_htc: Failed to initialize the device [ 957.339504][T11001] usb 6-1: ath9k_htc: USB layer deinitialized [ 957.465823][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 957.533036][ T5916] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 957.575451][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.607550][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 957.666427][ T5916] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.715831][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.744281][ T5916] usb 5-1: Product: syz [ 957.756874][ T5916] usb 5-1: Manufacturer: syz [ 957.773646][ T5916] usb 5-1: SerialNumber: syz [ 958.553393][ T5916] usb 5-1: 0:2 : does not exist [ 958.681593][T16283] fuse: Unknown parameter '0x0000000000000003' [ 958.687966][ T30] audit: type=1400 audit(2000000796.975:1093): avc: denied { read } for pid=16278 comm="syz.5.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 958.718081][ T5916] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 959.445128][ T5916] usb 5-1: USB disconnect, device number 63 [ 959.488516][T14053] udevd[14053]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 959.592684][T16293] overlayfs: failed to set uuid (380/file1, err=-1); falling back to uuid=null. [ 959.606435][T16293] overlayfs: failed to verify upper root origin [ 960.376672][T16302] 9pnet_fd: Insufficient options for proto=fd [ 960.904607][T16315] FAULT_INJECTION: forcing a failure. [ 960.904607][T16315] name failslab, interval 1, probability 0, space 0, times 0 [ 960.934186][T16315] CPU: 0 UID: 0 PID: 16315 Comm: syz.1.2493 Not tainted syzkaller #0 PREEMPT(full) [ 960.934206][T16315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 960.934213][T16315] Call Trace: [ 960.934217][T16315] [ 960.934222][T16315] dump_stack_lvl+0x16c/0x1f0 [ 960.934238][T16315] should_fail_ex+0x512/0x640 [ 960.934253][T16315] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 960.934266][T16315] should_failslab+0xc2/0x120 [ 960.934280][T16315] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 960.934290][T16315] ? __might_fault+0xe3/0x190 [ 960.934300][T16315] ? __might_fault+0x13b/0x190 [ 960.934310][T16315] ? getname_flags.part.0+0x4c/0x550 [ 960.934329][T16315] getname_flags.part.0+0x4c/0x550 [ 960.934347][T16315] getname_flags+0x93/0xf0 [ 960.934358][T16315] user_path_at+0x24/0x60 [ 960.934370][T16315] __x64_sys_mount+0x1fc/0x310 [ 960.934386][T16315] ? __pfx___x64_sys_mount+0x10/0x10 [ 960.934404][T16315] do_syscall_64+0xcd/0x4c0 [ 960.934418][T16315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.934429][T16315] RIP: 0033:0x7f0f14d8ebe9 [ 960.934439][T16315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.934450][T16315] RSP: 002b:00007f0f15c4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.934461][T16315] RAX: ffffffffffffffda RBX: 00007f0f14fb5fa0 RCX: 00007f0f14d8ebe9 [ 960.934468][T16315] RDX: 0000200000000300 RSI: 0000200000000000 RDI: 00002000000003c0 [ 960.934475][T16315] RBP: 00007f0f15c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 960.934482][T16315] R10: 0000000000200480 R11: 0000000000000246 R12: 0000000000000001 [ 960.934488][T16315] R13: 00007f0f14fb6038 R14: 00007f0f14fb5fa0 R15: 00007ffe0bc21e18 [ 960.934503][T16315] [ 961.344570][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2494'. [ 961.399451][T16316] netlink: 'syz.6.2492': attribute type 21 has an invalid length. [ 961.407376][T16316] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2492'. [ 961.416522][T16316] netlink: 'syz.6.2492': attribute type 4 has an invalid length. [ 961.424244][T16316] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2492'. [ 961.662612][T16316] batadv2: entered promiscuous mode [ 961.670229][T16316] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 962.570397][T16336] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2497'. [ 962.843332][T16344] syz.4.2498 (16344): drop_caches: 2 [ 963.062115][T16351] netlink: 'syz.1.2503': attribute type 9 has an invalid length. [ 963.070923][T16351] netlink: 'syz.1.2503': attribute type 9 has an invalid length. [ 964.933322][ T30] audit: type=1400 audit(2000000803.235:1094): avc: denied { create } for pid=16368 comm="syz.1.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 965.492184][ T30] audit: type=1400 audit(2000000803.235:1095): avc: denied { connect } for pid=16368 comm="syz.1.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 965.512322][ T30] audit: type=1400 audit(2000000803.245:1096): avc: denied { read } for pid=16368 comm="syz.1.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 965.978181][T16383] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 969.076394][T16415] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2519'. [ 969.355932][T10152] Bluetooth: hci2: command 0x0405 tx timeout [ 970.050233][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 970.815939][ T5908] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 971.106017][ T979] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 971.117122][ T5908] usb 3-1: config 4 has an invalid interface number: 156 but max is 0 [ 971.141250][ T5908] usb 3-1: config 4 has no interface number 0 [ 971.198093][ T5908] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 971.216837][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.225161][ T5908] usb 3-1: Product: syz [ 971.229726][ T5908] usb 3-1: Manufacturer: syz [ 971.234312][ T5908] usb 3-1: SerialNumber: syz [ 971.255912][ T5908] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 971.266600][ T5908] usb 3-1: setting power ON [ 971.271111][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 971.287179][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 971.297183][ T979] usb 5-1: New USB device found, idVendor=0af4, idProduct=6751, bcdDevice=75.8b [ 971.305094][ T5908] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 971.315849][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.329661][ T979] usb 5-1: config 0 descriptor?? [ 971.616183][ T5908] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 971.662296][ T5908] dvb_usb_cxusb 3-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 971.677645][ T5908] usb 3-1: USB disconnect, device number 82 [ 971.790207][ T979] usb 5-1: USB disconnect, device number 64 [ 973.363513][ T30] audit: type=1400 audit(2000000811.645:1097): avc: denied { setopt } for pid=16460 comm="syz.2.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 974.036492][T16473] netlink: 'syz.1.2536': attribute type 9 has an invalid length. [ 974.050535][T16473] netlink: 'syz.1.2536': attribute type 9 has an invalid length. [ 974.084509][T16475] FAULT_INJECTION: forcing a failure. [ 974.084509][T16475] name failslab, interval 1, probability 0, space 0, times 0 [ 974.105574][T16475] CPU: 1 UID: 0 PID: 16475 Comm: syz.5.2539 Not tainted syzkaller #0 PREEMPT(full) [ 974.105597][T16475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 974.105608][T16475] Call Trace: [ 974.105614][T16475] [ 974.105621][T16475] dump_stack_lvl+0x16c/0x1f0 [ 974.105645][T16475] should_fail_ex+0x512/0x640 [ 974.105664][T16475] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 974.105693][T16475] should_failslab+0xc2/0x120 [ 974.105714][T16475] __kmalloc_cache_noprof+0x6a/0x3e0 [ 974.105740][T16475] ? smc_pnet_add+0x479/0x1830 [ 974.105766][T16475] smc_pnet_add+0x479/0x1830 [ 974.105789][T16475] ? __pfx_smc_pnet_add+0x10/0x10 [ 974.105809][T16475] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 974.105835][T16475] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 974.105872][T16475] genl_family_rcv_msg_doit+0x209/0x2f0 [ 974.105898][T16475] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 974.105932][T16475] ? bpf_lsm_capable+0x9/0x10 [ 974.105955][T16475] ? security_capable+0x7e/0x260 [ 974.105981][T16475] genl_rcv_msg+0x55c/0x800 [ 974.106007][T16475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.106030][T16475] ? __pfx_smc_pnet_add+0x10/0x10 [ 974.106049][T16475] ? __lock_acquire+0x62e/0x1ce0 [ 974.106081][T16475] netlink_rcv_skb+0x158/0x420 [ 974.106100][T16475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.106123][T16475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 974.106153][T16475] ? netlink_deliver_tap+0x1ae/0xd30 [ 974.106169][T16475] ? selinux_netlink_send+0x578/0x830 [ 974.106189][T16475] ? is_vmalloc_addr+0x86/0xa0 [ 974.106208][T16475] genl_rcv+0x28/0x40 [ 974.106227][T16475] netlink_unicast+0x5a7/0x870 [ 974.106249][T16475] ? __pfx_netlink_unicast+0x10/0x10 [ 974.106267][T16475] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 974.106293][T16475] netlink_sendmsg+0x8d1/0xdd0 [ 974.106318][T16475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.106348][T16475] ____sys_sendmsg+0xa95/0xc70 [ 974.106373][T16475] ? copy_msghdr_from_user+0x10a/0x160 [ 974.106391][T16475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.106425][T16475] ___sys_sendmsg+0x134/0x1d0 [ 974.106446][T16475] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.106499][T16475] __sys_sendmsg+0x16d/0x220 [ 974.106518][T16475] ? __pfx___sys_sendmsg+0x10/0x10 [ 974.106554][T16475] do_syscall_64+0xcd/0x4c0 [ 974.106577][T16475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.106594][T16475] RIP: 0033:0x7f8c2ab8ebe9 [ 974.106609][T16475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.106625][T16475] RSP: 002b:00007f8c2b936038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.106643][T16475] RAX: ffffffffffffffda RBX: 00007f8c2adb5fa0 RCX: 00007f8c2ab8ebe9 [ 974.106654][T16475] RDX: 000000000000c800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 974.106665][T16475] RBP: 00007f8c2b936090 R08: 0000000000000000 R09: 0000000000000000 [ 974.106674][T16475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.106683][T16475] R13: 00007f8c2adb6038 R14: 00007f8c2adb5fa0 R15: 00007ffcecc9d3a8 [ 974.106707][T16475] [ 975.534849][T16495] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2545'. [ 977.273030][ T6054] block nbd0: Possible stuck request ffff888026c50000: control (read@0,1024B). Runtime 180 seconds [ 977.283916][ T6054] block nbd0: Possible stuck request ffff888026c501c0: control (read@1024,1024B). Runtime 180 seconds [ 977.295198][ T6054] block nbd0: Possible stuck request ffff888026c50380: control (read@2048,1024B). Runtime 180 seconds [ 977.309026][ T6054] block nbd0: Possible stuck request ffff888026c50540: control (read@3072,1024B). Runtime 180 seconds [ 978.435945][ T30] audit: type=1326 audit(2000000816.735:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.6.2552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb4c58ebe9 code=0x0 [ 978.527221][T16531] SELinux: Context Ü is not valid (left unmapped). [ 979.643817][ T30] audit: type=1400 audit(2000000817.945:1099): avc: denied { map } for pid=16546 comm="syz.2.2557" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 979.815326][ T30] audit: type=1400 audit(2000000817.945:1100): avc: denied { execute } for pid=16546 comm="syz.2.2557" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 979.839406][ T31] INFO: task syz.0.2069:14662 blocked for more than 143 seconds. [ 979.839436][ T31] Not tainted syzkaller #0 [ 979.887936][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 979.897888][ T31] task:syz.0.2069 state:D stack:26184 pid:14662 tgid:14661 ppid:9073 task_flags:0x400140 flags:0x00004004 [ 979.909988][ T31] Call Trace: [ 979.913271][ T31] [ 979.916348][ T31] __schedule+0x1190/0x5de0 [ 979.925351][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 979.930455][ T31] ? __pfx___schedule+0x10/0x10 [ 979.937577][ T31] ? find_held_lock+0x2b/0x80 [ 979.942322][ T31] ? schedule+0x2d7/0x3a0 [ 979.947721][ T31] ? bdev_open+0xa2/0xe40 [ 980.003780][ T31] schedule+0xe7/0x3a0 [ 980.018401][ T31] schedule_preempt_disabled+0x13/0x30 [ 980.030047][ T31] __mutex_lock+0x81b/0x1060 [ 980.042046][ T31] ? bdev_open+0xa2/0xe40 [ 980.052977][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 980.072728][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 980.084807][ T31] ? bdev_open+0xa2/0xe40 [ 980.094636][ T31] bdev_open+0xa2/0xe40 [ 980.124393][ T31] bdev_file_open_by_dev+0x182/0x210 [ 980.165008][ T31] setup_bdev_super+0x39b/0x730 [ 980.188945][ T31] get_tree_bdev_flags+0x363/0x620 [ 980.215186][ T31] ? __pfx_jfs_fill_super+0x10/0x10 [ 980.230768][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 980.242896][ T31] ? bpf_lsm_capable+0x9/0x10 [ 980.255489][ T31] ? security_capable+0x7e/0x260 [ 980.276756][ T31] vfs_get_tree+0x8b/0x340 [ 980.288533][ T31] path_mount+0x1513/0x2000 [ 980.299945][ T31] ? __pfx_path_mount+0x10/0x10 [ 980.316235][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 980.327389][ T31] ? putname+0x154/0x1a0 [ 980.331653][ T31] ? putname+0x154/0x1a0 [ 980.336713][ T31] ? __x64_sys_mount+0x28d/0x310 [ 980.342344][ T31] __x64_sys_mount+0x28d/0x310 [ 980.362000][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 980.383050][ T31] do_syscall_64+0xcd/0x4c0 [ 980.398541][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.404563][ T31] RIP: 0033:0x7f0d9a98ebe9 [ 980.409435][ T31] RSP: 002b:00007f0d9b800038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 980.422635][ T31] RAX: ffffffffffffffda RBX: 00007f0d9abb5fa0 RCX: 00007f0d9a98ebe9 [ 980.430883][ T31] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 980.439892][ T31] RBP: 00007f0d9aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 980.457056][ T31] R10: 0000000001a0c000 R11: 0000000000000246 R12: 0000000000000000 [ 980.465050][ T31] R13: 00007f0d9abb6038 R14: 00007f0d9abb5fa0 R15: 00007ffd32891818 [ 980.473690][ T31] [ 980.478114][ T31] [ 980.478114][ T31] Showing all locks held in the system: [ 980.487170][ T31] 1 lock held by khungtaskd/31: [ 980.496841][ T31] #0: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 980.512887][ T31] 2 locks held by getty/5611: [ 980.517815][ T31] #0: ffff888035de20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 980.527813][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 980.538184][ T31] 3 locks held by kworker/u8:15/10054: [ 980.543636][ T31] 1 lock held by udevd/14052: [ 980.548708][ T31] #0: ffff888026c02358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 980.558321][ T31] 2 locks held by syz.0.2069/14662: [ 980.563520][ T31] #0: ffff888032a2a0e0 (&type->s_umount_key#94/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 980.573836][ T31] #1: ffff888026c02358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 980.584529][ T31] 2 locks held by syz.4.2540/16482: [ 980.590906][ T31] #0: ffffffff9036c7d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 980.600674][ T31] #1: ffffffff8e5cc7b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 980.611002][ T31] [ 980.619560][ T31] ============================================= [ 980.619560][ T31] [ 980.629543][ T31] NMI backtrace for cpu 0 [ 980.629558][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 980.629578][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 980.629588][ T31] Call Trace: [ 980.629594][ T31] [ 980.629600][ T31] dump_stack_lvl+0x116/0x1f0 [ 980.629624][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 980.629648][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 980.629677][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 980.629706][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 980.629733][ T31] watchdog+0xf0e/0x1260 [ 980.629758][ T31] ? __pfx_watchdog+0x10/0x10 [ 980.629775][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 980.629795][ T31] ? __kthread_parkme+0x19e/0x250 [ 980.629822][ T31] ? __pfx_watchdog+0x10/0x10 [ 980.629846][ T31] kthread+0x3c2/0x780 [ 980.629865][ T31] ? __pfx_kthread+0x10/0x10 [ 980.629884][ T31] ? rcu_is_watching+0x12/0xc0 [ 980.629906][ T31] ? __pfx_kthread+0x10/0x10 [ 980.629925][ T31] ret_from_fork+0x5d7/0x6f0 [ 980.629941][ T31] ? __pfx_kthread+0x10/0x10 [ 980.629960][ T31] ret_from_fork_asm+0x1a/0x30 [ 980.629993][ T31] [ 980.630000][ T31] Sending NMI from CPU 0 to CPUs 1: [ 980.752384][ C1] NMI backtrace for cpu 1 [ 980.752401][ C1] CPU: 1 UID: 0 PID: 203 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 980.752419][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 980.752428][ C1] Workqueue: bat_events batadv_nc_worker [ 980.752451][ C1] RIP: 0010:kasan_check_range+0x32/0x1b0 [ 980.752472][ C1] Code: 84 64 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 55 53 0f 82 d7 00 00 00 eb 0f cc cc cc 48 b8 00 00 00 00 00 00 00 ff eb 0a <48> b8 00 00 00 00 00 80 ff ff 48 39 c7 0f 82 b3 00 00 00 4c 8d 54 [ 980.752485][ C1] RSP: 0018:ffffc900030679f8 EFLAGS: 00000286 [ 980.752495][ C1] RAX: ffffc90003067a44 RBX: ffff8880606b8f00 RCX: ffffffff819810fc [ 980.752505][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90003067a40 [ 980.752514][ C1] RBP: 1ffff9200060cf44 R08: 0000000000000001 R09: ffffed100c0d71e0 [ 980.752523][ C1] R10: ffff8880606b8f03 R11: 0000000000000000 R12: ffff8880606b8f08 [ 980.752531][ C1] R13: ffff8880606b8f10 R14: ffff88814374cd80 R15: ffff888031a601e0 [ 980.752541][ C1] FS: 0000000000000000(0000) GS:ffff8881247bb000(0000) knlGS:0000000000000000 [ 980.752555][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 980.752564][ C1] CR2: ffffffffffffffff CR3: 0000000062031000 CR4: 00000000003526f0 [ 980.752573][ C1] Call Trace: [ 980.752578][ C1] [ 980.752584][ C1] do_raw_spin_lock+0x12c/0x2b0 [ 980.752600][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 980.752615][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 980.752636][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 980.752657][ C1] batadv_nc_purge_paths+0xd9/0x3a0 [ 980.752679][ C1] batadv_nc_worker+0x921/0x1030 [ 980.752698][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 980.752721][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 980.752743][ C1] ? rcu_is_watching+0x12/0xc0 [ 980.752761][ C1] process_one_work+0x9cf/0x1b70 [ 980.752779][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 980.752798][ C1] ? __pfx_process_one_work+0x10/0x10 [ 980.752815][ C1] ? assign_work+0x1a0/0x250 [ 980.752829][ C1] worker_thread+0x6c8/0xf10 [ 980.752848][ C1] ? __pfx_worker_thread+0x10/0x10 [ 980.752862][ C1] kthread+0x3c2/0x780 [ 980.752875][ C1] ? __pfx_kthread+0x10/0x10 [ 980.752889][ C1] ? rcu_is_watching+0x12/0xc0 [ 980.752904][ C1] ? __pfx_kthread+0x10/0x10 [ 980.752917][ C1] ret_from_fork+0x5d7/0x6f0 [ 980.752930][ C1] ? __pfx_kthread+0x10/0x10 [ 980.752943][ C1] ret_from_fork_asm+0x1a/0x30 [ 980.752964][ C1] [ 980.753532][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 981.004363][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 981.013450][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 981.023483][ T31] Call Trace: [ 981.026742][ T31] [ 981.029652][ T31] dump_stack_lvl+0x3d/0x1f0 [ 981.034226][ T31] vpanic+0x6e8/0x7a0 [ 981.038195][ T31] ? __pfx_vpanic+0x10/0x10 [ 981.042684][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 981.048654][ T31] panic+0xca/0xd0 [ 981.052362][ T31] ? __pfx_panic+0x10/0x10 [ 981.056765][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 981.062123][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 981.068274][ T31] ? watchdog+0xd78/0x1260 [ 981.072671][ T31] ? watchdog+0xd6b/0x1260 [ 981.077066][ T31] watchdog+0xd89/0x1260 [ 981.081297][ T31] ? __pfx_watchdog+0x10/0x10 [ 981.085955][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 981.091146][ T31] ? __kthread_parkme+0x19e/0x250 [ 981.096183][ T31] ? __pfx_watchdog+0x10/0x10 [ 981.100853][ T31] kthread+0x3c2/0x780 [ 981.104904][ T31] ? __pfx_kthread+0x10/0x10 [ 981.109479][ T31] ? rcu_is_watching+0x12/0xc0 [ 981.114227][ T31] ? __pfx_kthread+0x10/0x10 [ 981.118797][ T31] ret_from_fork+0x5d7/0x6f0 [ 981.123369][ T31] ? __pfx_kthread+0x10/0x10 [ 981.127939][ T31] ret_from_fork_asm+0x1a/0x30 [ 981.132694][ T31] [ 981.135885][ T31] Kernel Offset: disabled [ 981.140183][ T31] Rebooting in 86400 seconds..