last executing test programs: 2m42.439021894s ago: executing program 3 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x964, 0x0, 0x5, 0x104, 0x0, 0x0, {0x0, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x5}, 0xa, 0x9, 0x9, 0x0, 0x1e, 'syz0\x00', "ae30290ad128ef61792a19db79f8e781542845a48a773536fc6a5c6eca87eab2", "b6274a456e96b26da1610453f57f16bfa1c36ac2496811a0c7baa9cb5aeb9ca0", [{0x8001, 0x4, {0x0, 0x101}}, {0x3, 0x0, {0x1, 0x6}}, {0x4, 0xfff9, {0x2, 0x5}}, {0x1, 0x9, {0x1, 0x5}}, {0x0, 0xffff, {0x0, 0x7}}, {0x2, 0x200, {0x2, 0x5}}, {0x6, 0x7, {0x1, 0x401}}, {0x9, 0x4, {0x2, 0x5}}, {0x3, 0x4, {0x1, 0x1ff}}, {0x9, 0xd0d3, {0x0, 0x4}}, {0x4, 0x469, {0x3}}, {0x81, 0x8, {0x0, 0x3}}, {0xf48, 0x1, {0x1, 0x80000000}}, {0x0, 0x9, {0x1, 0x9}}, {0x0, 0x3, {0x1, 0x401}}, {0x4, 0x9, {0x1, 0x800}}, {0x9, 0xfff7, {0x0, 0x6}}, {0x60, 0x3, {0x1, 0x7}}, {0x9, 0x7f, {0x3, 0xb9ea}}, {0x2, 0x7, {0x0, 0x4}}, {0xffa6, 0x5, {0x1, 0xffffffd9}}, {0xd34, 0x800, {0x1, 0x5}}, {0x0, 0x6, {0x0, 0xfffffffd}}, {0x7, 0x2, {0x2}}, {0x800, 0x40, {0x2, 0xa4}}, {0x1, 0x6, {0x0, 0x1}}, {0x5, 0x200, {0x3, 0x80000000}}, {0x1, 0x7, {0x1, 0xeb}}, {0x3, 0xbe6e, {0x1, 0x3}}, {0x800, 0x4, {0x0, 0x2}}, {0x3, 0x1000, {0x0, 0x8}}, {0x5, 0x400, {0x3, 0x31a}}, {0x1, 0x6, {0x0, 0x4}}, {0x7fff, 0x7, {0x3, 0x2}}, {0x10, 0x800}, {0x3, 0x4, {0x2, 0x4}}, {0x1, 0x9, {0x1, 0xebdf}}, {0x9, 0x1000, {0x3, 0x9}}, {0x0, 0x7, {0x0, 0x3}}, {0x800, 0x2, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x4, 0x5, 0x401, 0xfffc, 0x4, 'syz1\x00', "afea86fcce53f2aed5e07a58e7774cc0018df247d2aae171cdadf05c734780ad", "80ca0adcb32e761ed374ddcb11618a65ecd03255e64fbafe372b04dda6d5209e", [{0x7, 0x72d, {0x2, 0x1}}, {0x22a1, 0x1, {0x2, 0x40}}, {0x6, 0x3, {0x3, 0x173}}, {0xc, 0x800, {0x2, 0x80000000}}, {0x9da, 0x8, {0x1, 0x1998}}, {0x101, 0x4, {0x0, 0x6}}, {0x1000, 0x401, {0x3, 0x467}}, {0x9, 0x8, {0x0, 0xffffff96}}, {0x9, 0xfff0}, {0xc, 0x8, {0x0, 0x7f}}, {0xff, 0x424d, {0x1, 0xc}}, {0x80, 0x1, {0x1, 0x4}}, {0xfc04, 0xb, {0x0, 0x3a26}}, {0x1, 0x0, {0x1}}, {0x401, 0xc6d4, {0x0, 0xc3}}, {0x1, 0x3, {0x3, 0x3}}, {0x800, 0x4, {0x3, 0x1}}, {0x2, 0x40, {0x0, 0x3}}, {0x3ff, 0x8, {0x3, 0x401}}, {0xa, 0x7, {0x0, 0xb5}}, {0x2faa, 0x7, {0x1, 0x6}}, {0x9, 0x6, {0x1, 0x5}}, {0x4, 0xd, {0x1}}, {0x1, 0x3, {0x2, 0x3}}, {0x3, 0x9, {0x2, 0x1}}, {0x281, 0xc, {0x1, 0x8000}}, {0x9, 0xffc, {0x3, 0x1}}, {0x1, 0x4, {0x0, 0x1}}, {0x20, 0x4ab, {0x0, 0x7}}, {0x2, 0x2, {0x3, 0x6}}, {0x3ff, 0x4, {0x3, 0x22}}, {0x5, 0x1ff, {0x0, 0x7}}, {0x4, 0x0, {0x0, 0x1}}, {0x7, 0x2, {0x0, 0x1}}, {0xb8, 0x3, {0x3, 0x4}}, {0x2, 0x8fa, {0x0, 0xffff8000}}, {0x1, 0x0, {0x0, 0x3}}, {0x5, 0x1000, {0x2}}, {0x9, 0x6, {0x3, 0x13}}, {0x200, 0x4, {0x0, 0x1ff}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x8, 0x3f, 0xbe07, 0x6, 0x1, 'syz1\x00', "c96d3ead79768b5c9e8717f4e780de80230a82c246289bcbfcf465c18bf56430", "80c0160d15b5bf2b777cbf427dc2ca0a8dd142e232cf3614b92e87303f66eaaf", [{0xe, 0x7fff, {0x2, 0x10}}, {0x2, 0xffff, {0x2, 0x7}}, {0xff, 0x7, {0x3, 0xb}}, {0x3, 0x9, {0x1, 0x6}}, {0xda, 0x2, {0x2}}, {0x0, 0x5, {0x1, 0x3}}, {0x6, 0xffff, {0x0, 0x7}}, {0x0, 0x0, {0x2, 0x2}}, {0x0, 0x5, {0x3}}, {0x5, 0x227, {0x0, 0x20000000}}, {0x90, 0x3, {0x3, 0x6}}, {0x9, 0x4, {0x3, 0x4}}, {0xb952, 0xc6d, {0x3, 0xed}}, {0x5, 0x6d, {0x3, 0xa47a}}, {0x7f, 0x0, {0x1, 0xe}}, {0x7, 0xb02, {0x1, 0x8}}, {0x2, 0x1, {0x0, 0x1}}, {0x4, 0x6, {0x0, 0x40100000}}, {0x4, 0x9, {0x1}}, {0x3, 0x7, {0x2, 0x4c2e}}, {0x4, 0xf501, {0x3, 0x6}}, {0x3, 0x2, {0x1, 0x5}}, {0x5, 0x7, {0x3, 0x4}}, {0xc000, 0x6, {0x0, 0x7fffffff}}, {0x2, 0x2ee, {0x3, 0x80000000}}, {0x7, 0x0, {0x2, 0x5}}, {0x1, 0x7, {0x2, 0x2}}, {0xc, 0x9, {0x3, 0x919}}, {0x7fff, 0x8fd8, {0x2, 0x81}}, {0xfff7, 0x40, {0x0, 0x10}}, {0x7, 0x100, {0x0, 0x1b}}, {0x3, 0x0, {0x0, 0x432b}}, {0x9, 0x5, {0x2, 0x8324}}, {0xb, 0x7b44, {0x0, 0x9}}, {0x8, 0x9, {0x3, 0x3}}, {0x9, 0xd, {0x0, 0x1}}, {0x7fff, 0xf7, {0x3, 0x101}}, {0x8, 0x1, {0x0, 0x8}}, {0x7, 0x8, {0x0, 0x9}}, {0x1ff, 0xe, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x5, 0x0, 0x7, 0x1, 0x0, 'syz1\x00', "7b9e811c96d91ce4f54bbd37e4b4fbc58a4fad3c6666ed2f460078d0127f770e", "2b732d28f06c1d75f6710e402a58437bc818fb6de7f11bff0c140f6575bde214", [{0xb, 0x5e6, {0x3, 0x2}}, {0xd, 0x9, {0x0, 0xfffff800}}, {0xb1d8, 0xf1ed, {0x0, 0x3}}, {0x5, 0x3, {0x0, 0x34ab}}, {0x4, 0x1, {0x1, 0x101}}, {0x8, 0x244, {0x1, 0x66}}, {0x6, 0x9e, {0x2, 0xffffffff}}, {0x3, 0x800, {0x2}}, {0x6, 0x0, {0x2}}, {0x800, 0xff, {0x1, 0x8}}, {0x7, 0x5, {0x2}}, {0xe, 0x6, {0x3, 0x5}}, {0xff, 0x9, {0x0, 0x1}}, {0xfaf5, 0x8000, {0x2, 0x7}}, {0x5, 0xfffe, {0x2, 0x2}}, {0x1, 0x3, {0x2, 0x6}}, {0x101, 0xfff9, {0x2}}, {0x8a, 0x4, {0x0, 0xfffffff9}}, {0x2, 0x6357, {0x1, 0x8}}, {0x2, 0x40, {0x1, 0x1}}, {0xf44}, {0x4, 0x5, {0x0, 0x8}}, {0x1, 0x3, {0x0, 0x1}}, {0x2, 0x9, {0x1, 0x7}}, {0x7, 0xdff8, {0x3, 0xd0d}}, {0x3, 0x8, {0x3, 0x10001}}, {0xff, 0x9, {0x0, 0x7}}, {0x1f, 0x1, {0x3, 0x5}}, {0xd, 0x81, {0x0, 0xfffffff8}}, {0x0, 0x2, {0x2, 0x6}}, {0x200, 0xfedd, {0x3, 0x1}}, {0x4, 0xffff, {0x2, 0x7ff}}, {0x0, 0x9, {0x0, 0x400}}, {0xfe, 0x1a6b, {0x2, 0x2}}, {0x9, 0x9, {0x2, 0x3}}, {0x1, 0x0, {0x3, 0x6}}, {0x1, 0x2, {0x3, 0x6}}, {0x6, 0x8, {0x1, 0x1}}, {0x1c88, 0x9, {0x3, 0x7}}, {0x6, 0xffff, {0x0, 0x9}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x78, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff76f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5736}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x24000140) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x40880) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x3, 0x12) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000000000000009058202", @ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX=r0], 0x0) 2m40.663429321s ago: executing program 3 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x709e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffd, 0xfffffffd}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000280)="352f1938d141676d9b1a4a6ddb9a8a366c59065f664735c08b9d697a645f85b19ba903068a09046d1f26aad0196458046b814c8b24a30ae0f476f81d10c407116c373a57482b9d956e73e6d7de6a1f226382bebdf8fea373d3dff4d015317c2595cc", 0x62, 0xebec93e830f96115}) io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000680)='nilfs2_segment_usage_check\x00', r10}, 0x18) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r12 = getpid() sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m39.775863391s ago: executing program 3 (id=187): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x100000, &(0x7f0000000140)="85ce6188b46230ba16718d574197f70d64d3323522a28eca4166fffa3d60493f53f1e4171c126e7118765548983c8b077b0eba1ac399208d", 0xffffffffffffff84, 0x0, &(0x7f0000000200)="7aab31495d15f0fb03564ebd4ff6daf0793b73a851a866ed2569dcf1460e706356d295b4"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x58a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x40}]}}}]}, 0x38}}, 0x4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) 2m39.323029713s ago: executing program 3 (id=189): syz_open_dev$vim2m(0x0, 0x47b, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x60) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) r5 = getpid() prlimit64(r5, 0x2, &(0x7f00000007c0)={0xa29, 0xc}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x21, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, r0, 0xc0771000) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m35.532709905s ago: executing program 3 (id=201): prlimit64(0x0, 0xe, &(0x7f00000012c0)={0xffff, 0x20000000000008b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="efc028527d610ed9ae02cbcf1800040000e16f92189d17de0020000000000007000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) gettid() r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000)={0x2d, 0x0, 0x8000}, 0xc) bind$xdp(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r6) 2m34.351515897s ago: executing program 3 (id=206): r0 = syz_open_dev$video4linux(0x0, 0x80000004, 0x800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x7e, 0x2c47f4, 0x5c8, 0xa, 0x6}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2004}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000580)={0x40f0f000, 0x101, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x8, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x10, [0x0, 0x0, 0x13, 0x2]}) 2m19.28476036s ago: executing program 32 (id=206): r0 = syz_open_dev$video4linux(0x0, 0x80000004, 0x800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x7e, 0x2c47f4, 0x5c8, 0xa, 0x6}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2004}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000580)={0x40f0f000, 0x101, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x8, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x10, [0x0, 0x0, 0x13, 0x2]}) 4.847113854s ago: executing program 2 (id=745): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r0, &(0x7f0000001180)={0x0, 0x100000, 0x0}, 0x0) 4.684324636s ago: executing program 2 (id=746): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) getpeername$ax25(r2, &(0x7f00000001c0)={{0x3, @default}, [@null, @remote, @default, @default, @default, @remote, @rose, @rose]}, &(0x7f0000000240)=0x48) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r10 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r10, &(0x7f00000002c0)=""/75, 0x4b, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4}, r8}}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000680)={0x80000000, 0xfffffffffffffead, 0x0, 0x0, 0x0, 0x0}) 4.543802045s ago: executing program 5 (id=749): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e617400"], 0xf0}}, 0x0) ioprio_set$uid(0x0, 0xee00, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) wait4(0x0, 0x0, 0x8, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0xa4, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=r0], 0x30}}], 0x2, 0x0) 4.463658369s ago: executing program 2 (id=750): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x4000000, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0), 0x0, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0xf000) 4.393988144s ago: executing program 5 (id=752): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd2ced000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) socket$key(0xf, 0x3, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, 0x0) r4 = getpid() ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r4, 0x0, 0x4004) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x101a02, 0xc8) sendfile(r5, r5, 0x0, 0x101) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756c7435736b61aa1e8ecb670b3d7469633a2c00"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000085e049d2000000000000109022400010000800f0904000004030000000921faff0901220700090581030002c904003881608c47107d1f770f9703b190faed5f29fa1c460848b316a9ea0989a090445616f66fe9ffc07ab48edb5dba3d67887c22eec74e76154e46f74f70e90c6e2fa66c7d0587889ca7d19011000000000000000000000000002df54a5fd84e"], 0x0) memfd_secret(0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_4={0x3, 0x1, 0x6, "0082714e"}]}}, 0x0}, 0x0) 4.370158415s ago: executing program 2 (id=753): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x49e, &(0x7f0000000500)={0x0, 0x69af, 0x3180, 0x8000, 0x27e}, &(0x7f0000000100)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x680102, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x82, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x6) sendmmsg$inet(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000180)="17", 0x59a, 0x0, 0x0, 0xffffffffffffffa1) socket$nl_generic(0x10, 0x3, 0x10) 3.717724733s ago: executing program 0 (id=758): syz_emit_vhci(0x0, 0x16) prlimit64(0x0, 0x1, &(0x7f00000001c0)={0x7, 0x400}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget$private(0x0, 0x2, 0x14) semget$private(0x0, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000001000)=""/216) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 3.643397986s ago: executing program 1 (id=759): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0xc0000, 0x143, 0xc}, 0x18) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.410288685s ago: executing program 2 (id=760): setrlimit(0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='gfs2\x00', 0x5, 0x0) (fail_nth: 8) 3.074059361s ago: executing program 0 (id=762): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd01c8c1c2c57f657a625a688871958b0a40088fca4f15e71a6dac908872ebd", @ANYRESHEX, @ANYBLOB=',rootmode=0000000000', @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc", 0xa) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="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", 0x112}, {&(0x7f0000000a80)="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", 0x323}], 0x2}, 0x404c080) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216342ba80000", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380), 0x18}], 0x49249249249269e, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 2.605998899s ago: executing program 2 (id=763): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/201, 0xc9}], 0x1}, 0x100) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x9) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xe4}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007e9eb4f5d3053800f51601020301090212000100000000090400000008c538002f9c2c9105fc9df89662dade"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012009703000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 2.605035735s ago: executing program 1 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x50, r1, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f4ae834f73"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) (fail_nth: 8) 2.503334792s ago: executing program 0 (id=765): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) close_range(r4, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) fsmount(0xffffffffffffffff, 0x0, 0xc) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1ffffc, 0x200000, 0x0, 0x0, 0xfffffff1}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40}}, 0x50) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ed1bcb12b48042bde7db4e183e2b99604f52fa7fb7d7b24f3c012ada2c0abf6a833555b062c3ecbdcca38e013cf97b009c4b24a18a3986e1f2aed497acf2fd883308134d4b703f1f5b431c96515186de6eff3629c27c37b8b40c6a655a79c14b1629f9203ca67dd83c7e3ad162e62f", 0x6f}], 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f00000007c0)={{r6}, "f639a3e1165950c2fedfbdd270085147faa70f499001ae181db86dac466dd023faf236fc4c661b82b9e307ca383f1da98d131d2700e68004d215a1371a5f1cdcb959c58f0ec3e076ff3b676f13049657257dd6a94abba5815ea65c305295e3e0bdfbf44d4c3d73288b46c28b742f12b91b0b6d722a7e5c8d93f1442c21fc62d9f2a205230f5b31a7b8bec1b555771edcab892610f6129add858ec4a55d0bdbd1b9e41f6226fe5186fd6b1c6a54c5c566f29a2624a98da529a43a6fe941ebc9360f7328faed78227f6f8023c91101cf53761df9c89044173b31eb38487c87799151bdd2e599fda2c1b5ee0c4683897133824bd11254ef18b1c814d2d21cbebae701c8cff7d41253981a3dfb3c1f0b607774b3d54a9ceec3be4170fd78977252ec175ab8ef6246e39d1d42d8fe4651826400fc212ab26831bcacd2fec1efcfef4935d8e11a05d9a6b82cf865735269c4c1a30d50fe4c2043471d7b9ac0bd1f469f8fd9652cfb2f41c5728acd63e5ef11a04197b64c409306a5ec42f132788ffa246e9b4d2a5906cd75ccbf8aa47c73f6e191c955555f11860cd4c27e2b398acccf3f6f76e3dd9aa09b197e09c442a8307c5cf36b0154d4d2e832f069a59d5dd813b163d94580eda93c7af6c04d574121f3f98cabe0aefae388d9e9416ee03afaef901d9bd2040f7fe89e171b9b97b5b8b0c33a707af151768c9d760397de5a347b487657c9ee7a45ff90e5daf9b22da4839e00047db5d255ce916b448b0757c6404a8e352de6531bad5380992227ccb2c3cbe12b3d3b10531e53f3a94f32e9e070b9484b6bf91b09c78478947350972541a6d2690772c8cc93989e4394d43e41bbfa46ef66579de24226db4d0bc80f6641469e22f52eaa475e7edf3614d1b5130b93779402b35b16c089f30c2971963988388bc34d11d90aa08a6df6a503994fb03a56596419408786473c319130d0e2f14c1518c19f831bfe4175af5b592689ee775140b73ec8fd5e2ff57bddd4af16f31e1ed504c4dd7b3d2dbe22e14ab91b1396feafbb3ce0a29b469b9f96e5ff17a679b62e92e49eec047662bd78a772877294e39d977843d774f8bae0585ca3c027156f9b015694a4ea39ffce1be47c64b3f6c7faf2f6d851c54eb434558cd6ab3d5d4457c672fe8e4c998bc816a9a05d04809dc7c53aded2080d60392dd9a31c63bb8b5a9f5b11cdd2db564bb1310b7f260976ca3d1ac660e6d194da63a034b5b66ed0918c541b5b24b32354e47d1bfb7e9bff8e853b114864a156dd7c65531a1308b5a2466be418c29387b5fcf860e06e6119a6c926b7923799efe0490ec85af3be8a54a6845c87a501e2fcefb0766f71cbb14214f0e1488d880fd8954b6bc6ca862d9d814b456de9a02027f46dcfd4848f6c492f0a925248fcb8639f55419bacddec530eccc3ec765ec5c6d820b2ce5615ef9a0b2c843a058380260021d8efe465ffe5f26c4b2c0a64615f7db634b7728befb51bef00d01ee1f94d255d066f5d3fa2a7a9ecd9602baf8f23158f87c63c5af9165cd6f1e62d64b42760cb6150213ef118b817b16a6f7e11f817870e1f65d913544919a0105db7b64ffddfd68e1e260ef380107095f251161fe2bb66740045a4fe78df70c8aea44d467bb02fdfc65fc73cca958f309b584ba60f6545c3d45c53209b6274ac9c3b28fb06941da28641ca211991f34b2bd6dc84b58750835539adf1ac43679fad814fedc5fe17b7b610eea771be3840c66dbf23a94a5e7759421a3051dd6106f6ddac4a998aa6570c1053ba5a091533dcb6f25e6638a5f1d50337506c4f534934b38f56f6a903a41b6c2eb03a8e48837c7a32dc8026abc66635a6b623ba69a95b00e03e332dcd28d69161f37af86b3dfedd04db98df781a055cee5de4898f75a7c64e260914a72d3ff2888bfafbc2f55d8f222dcfd253d4e505dc8991fcef2562295f6a54bb483634d57415abddbd8b4a5d85d13479438985e52101e9586235e3a6866bacb867a3d2449c6b70766ebc613a6d63ef1b0e336064278c77a868983dfc92787fb382a97f5fb7f37bad2f4688f286d92d111444abfd0b083cdff2d91dbfb13f25ea3d06f225cb3946c89e8b52d1d5336be0f99552b59f73e382079de21d4a3c89fd65727f0ee5619b35f5249a7e92a842f96b15b926b61ce1129b4ccccc973b6c2f9298b06057ddd5c9d6f94b16af7f066c18746fcdaf42a11bd7d60c8b53c727ecec754d94d328016928524a7c28d4ac030252b842da90fe0d4ab439b741a331d97b24f7f2affd29a77505d36c8d2646bbe3fd432f8c93b87f35c879deb6224fa7c23739e4eacef6dc28fa8ac489dd208973bac1238a8f05abaedc6c43abab2f3ae9a1c9278dcaedc3b98de573ca9cfb347fa3fecc5bf941625c9b211661cd2f516c2f72527ce0a42912d7174ff4a9008ed2e88293b4000c1cbd8cfd3e4283b903a0326bb9f18c19ac74e52b33df93fa8c5f3d4b96244318b6904d309f1750e49ac0c0f519f2690872b2a3f52dc45aa2cfc039ced32f80c30fe2915fc27a993d609cf2568348d0aed45ec723a9504cc3bdb2e8d25d5204203d68847a9a04747d1e24cf855d742001da5c9e43cbaffd12856346b767c42405636f1f30f7c6c15f535a0e630bfc35991340276a2c15a7dbd7cb50272e421c4c7df1aab863c384d0495ffe6a71e0c7220002b143acba3748fa6e286de09b0d895f8684fa6b03bd0beeb2494b2217048871e9adba701f438ba755effeb88571547d3961533399d3b0a261be95865855f40458ba2b434330a0822551344edc0ddc934f750176b9496549c407bdf7a95fddcaa807ea821076fdfc8d25178dbadbe57be2588cb29e8c4c61303282e80295b98673f2889d02076cf2ce21251ca66a11710af09f87a6440d2478409885c6aa2ef2556a83e59ca7aa51a547ef628c85afa1ae7b86d4e8763600c3a50e9d9798ccbfc8bb5650cd6f5577b3768524d057a308773ebb8d0738fa77f7e3559cc85f5afa87099ec39f09bbca6813351927dd4735600cf3016882d66e707bb17f0c17e523763cc068e2c9f1e8bececb19b481e2fad60e3d9774e1233570bbbd40089d76b2b2d100223fafc00d416a8c26b21511d3252365fb14511c06cc4ce1aeb5ae19c9820ccde15ae08e939fa4ee221a10d429cdd198e16692d862ba5f361f1dd2ea048dd9398b53dad3d803852b4887ae0b8ca7144b952d3fb1e69e564da457a89e9f08c7cc564e9ac0cb052efedde144f716229508e96b3159d8224173a1fc4a932449213f9431a7d2e00dfad44d86d3c7ec7f53a8c56955aa4a831001e0efa5312486daaf6667e302963e0f3c32e1af4f5d0df95b6da1b2091537a990778ed9ca56ab6d6b80e7a907bbb1c6b6851d8b6f3c8ce6cc185cdd6957bcbf977de9d6b2a6fc83b5444d2b40895642d904842c544ea7f1d7c5dc5fe815b8442b3f3ab65b3f981adaec958667867c272381640e01e6d1e3c8c7e39e021a1ca476895b4c2952fa8f4f7aa3ef28e757f47b23ca022b0b743b7091652a2aed910916cee93d11d7db117d5219af8d468b273fd22ca732718888453c485ec885224fa8424d0f1ff43a62856bd9b8e706d59c0ed216ab25d8005cfb6629ff3c228a9bb55633d5484fd04dd84b1a0bb47e29578f4fafd9dde29a4a98f9dd97f096e8caf27dad649d6ff469d5b83c665237709b9dbcbbd421147c128c4ef3b34532c8c0f83ec89a36c34f95965d750da4d8365cc537e1a04ad5464bf512c4f5ce7ffc4a4b7c2f4c7ec5a60fcc68bf062e0e9eab2224029977602283589eba842b032f65e0709d51ec1d09fd41a53431d69b8c3d69fc97ddbfd37d54a8e1258ffe5e69d2c4ebe1bf0988ef70a668d09e696a2e51bd9e66a3818a5fee90b7fd7a5e98630874873bb025a24834a3525b5613e9bc5d23ca50cc37e8e518a8f1343ce5fd024867486fa359e54289aa84ec086b09f0ae755a585fe244179f5e99bcf5beb353b64bc4803075a8e4ce3d5546b893dcc778bdd06708fe1621682f3fdef26e6ede5f76ad229add6bbcd4d5ebd3b06ff41c1312792bb8f0458440ff03f7ee4df18ebd3ff5655a732adc4968dbe8b37e4a61c79ed982bfb05858577f028fcee6c619aafec28175c493f786df26b996d6db7ad097d250f738fd184ed535be6a51b11fa08c11ca34bdfd3ad1eabf82bd1b69136b98c120ecaef916646be2573e470e451db5f7d661336b40e9d4908b2c4bb0252057e27751fb956fbc8802453af5252ac6cfa77418497e0d1432dee23d04b5db3c0df8b490fecd931ff980b2436bcb2ee89c5d80ac0bcf02bf053d789bc3612525cacc5671892bc80a518e23ee2388ae6638d1a781b1ddd3671a0289e5dd15a7cfda15c7ac3ce9e4545fa27f71a525e5dd47a70d78dfda279ebb48ee6b39fa961e32a254540b66f301111e4a9c369244c45660894bad2aa709abd8bcdef4228e9d8f56a18b327486d7af92db24d608e5161ed1afcb0f81a531a3990e444d101ea9faad9c5f575fde8f7fbcbdaa2dbea66c4d4436ee662c67ee07129b10a2c14cbd5c48e6eb493a0fc720dd72c7f0e32a0baa605c56b0fe8eadc2e1f0fc167e6b0b549797213779b636fb988559ac47fa719d872ef616a2a53b244808734994d14cebd241eb796c0265b3ed630e41341abbacaa49a0ae08cbd5c52eb188dff70997e4343a3f808924aaa12acd77fa2c34e911ac8c5ffa799b6e72222c8c5951da6b049e74290b10cb641e177ce77e411e1b5716c6ed4f841e88a7baf8925b618209a898744561c5f2d090ef84d3693c42fe66a146ae394ef09e85fd26b6a62641b91faebf6b8fc5c905a368ce7a9248d9d961108717341742c42cf64a6e009d81a3e785d9aee130e9d570818c7cb22b7094561c4879cb1333b47b526d2d9e49d1b9e679fd2633eb6c66f1ff00e801307e8cb2c2a35a15268378a30891f11251abc8e52c200daf08550daf52afd6c32f2869cdd60c5cb52e00955cb52f5b3527189243ed7e67f32ef17b71e2b25a2568345e5eb507ffe8b33dec2535ab7e78559fb37dcc96f89ac46d37b71c6cf9972414bf8fbb956eaac172f83a2d5719271f4d8bcc89fd87f469352370b85c22b28418a91379b7bea81925fe420155819c597d2b140ba6c4bae3a4180859fd645e89491f66284580156385f70e088b47358e610dcbbd13d0d90159412ca9ec493e548d798bc6307049632ce3072c4dab903a17b4ee29bdc401186ca267ac67f094e67bc84bf4feb98809cfa51d5eedc676494aa236ab7053e0be1445d2c5eea3c0e30d28196fc4aa51daf4183eaddef50b8fce0ee3544ed6ce9cfe330b7e2d67faf868c99a94f82f8e543af9a7be96fde6e1d92217693663bc94be7f521a5f5c19db9465d679dbe5935a1cf88d0df3551b722591a644a0513af87b5eca97fd9b62a2604913d92347f628723018a8188277022f695626dccde761f76d91c08604602191ea12fb7f142999a55a6b792ba5b783d0037c5564302aaa7fd9eba60f97b5b7142ad55eac54cd86b86946bae2dc5b67202e53a168c509390e2722db808674697873ba571c0d497570cb645935459b18c0921800f03b8114c84afb8414cbecaf566ecab4160c491fa0135c603ec25216f02361c0395f7f7ada5f94a1315602b947b0437d5aaaa2d15d9a42f97b94ca019d2cd6d8db546f1be098800c28703de568301e6b6b82ed11602a2956ed2e057b9b4f4f7442da607829aa7b343a492956752f3f5fe30177f04839d2"}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) eventfd2(0xc44, 0x800) 2.502510408s ago: executing program 1 (id=766): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000015001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 2.330759904s ago: executing program 1 (id=768): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x378}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@mcast1, 0x0, 0xa}}, @migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xcc}}, 0x0) fsopen(&(0x7f0000000000)='openpromfs\x00', 0x1) 2.259318228s ago: executing program 1 (id=770): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000000c0)={{0x2, 0x1}, {0x2, 0xe}, 0xe000, 0x2, 0xd9}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) io_setup(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup2(r3, r2) syz_open_dev$ptys(0xc, 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x28, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) 2.175570189s ago: executing program 1 (id=771): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7c}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902"], 0x0) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r6, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7700ac3caf7e", @ANYRESHEX=r6, @ANYBLOB=',cache=fscache,\x00']) openat(r6, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r8) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) 1.582792251s ago: executing program 0 (id=774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001380)={0x34, r1, 0x5, 0x70bd2d, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x30048011}, 0x0) 1.50781142s ago: executing program 0 (id=775): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0xd], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x3000000}, 0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) 1.421808425s ago: executing program 0 (id=776): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x24) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2800}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}], [{@fsname={'fsname', 0x3d, '$\'(]*('}}, {@smackfsdef={'smackfsdef', 0x3d, 'wlan0\x00'}}, {@obj_type={'obj_type', 0x3d, '\''}}, {@smackfsdef={'smackfsdef', 0x3d, 'syzkaller0\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x57, 0x30, 0x64, 0x33, 0x63, 0x31, 0x37, 0x33], 0x2d, [0x65, 0x9c4f025dec2cdd9e, 0x31], 0x2d, [0x65, 0x33, 0x31, 0x61], 0x2d, [0x39, 0x39, 0x34, 0x36], 0x2d, [0x31, 0x30, 0x35, 0x34, 0x61, 0x39, 0x31, 0x32]}}}, {@obj_type={'obj_type', 0x3d, '/dev/net/tun\x00'}}, {@appraise}, {@obj_role={'obj_role', 0x3d, ']-^){'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, 'syzkaller0\x00'}}]}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x48, r5, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xfffffffc}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff9d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x8a}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xed}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}]}]}, 0x48}}, 0x90) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) setresuid(0xee01, 0x0, 0x0) getpid() setrlimit(0x6, &(0x7f00000000c0)={0x6, 0xfffffffffffff801}) 1.286625185s ago: executing program 5 (id=778): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}]}, 0x28}, 0x1, 0x30000, 0x0, 0x1}, 0x10) 1.024503599s ago: executing program 5 (id=779): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580005001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006200000418e01400004fcff", 0x58}], 0x1) 934.884932ms ago: executing program 4 (id=780): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1e047d, 0xcc) (fail_nth: 8) 833.729738ms ago: executing program 5 (id=781): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000000c0)={{0x2, 0x1}, {0x2, 0xe}, 0xe000, 0x2, 0xd9}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) io_setup(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup2(r3, r2) syz_open_dev$ptys(0xc, 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x28, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) 583.632614ms ago: executing program 4 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000170000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a30000000000800024035c5484805e0ba19030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b"], 0xfc}, 0x1, 0x0, 0x0, 0x50010}, 0x24008114) 450.697449ms ago: executing program 4 (id=783): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x20001000}, 0x0, 0x0}}], 0x58}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030090781200183f250000000000000000010004e00000017f00000100186371ae9b1c0369023310d19d472f0e36604a76aec06102d8a20d90761b743f63ac4110bbb8349e41e8995786d15f0fecc57762743c800ad7d934c3f67a6e27a9bb9ad92dd0fb21748b3f2698955f5a55146a164af04932c0b759d410b4240a24c9583025ee4dc45a50de89367a39c2794c1cd1c48f78f4"], 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sched_setscheduler(r3, 0x0, &(0x7f0000000140)=0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x20001000}, 0x0, 0x0}}], 0x58}, 0x0) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030090781200183f250000000000000000010004e00000017f00000100186371ae9b1c0369023310d19d472f0e36604a76aec06102d8a20d90761b743f63ac4110bbb8349e41e8995786d15f0fecc57762743c800ad7d934c3f67a6e27a9bb9ad92dd0fb21748b3f2698955f5a55146a164af04932c0b759d410b4240a24c9583025ee4dc45a50de89367a39c2794c1cd1c48f78f4"], 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async) sched_setscheduler(r3, 0x0, &(0x7f0000000140)=0x10) (async) 383.109573ms ago: executing program 4 (id=784): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_virt_wifi\x00', {0x2, 0x4e20, @rand_addr=0xfffffff7}}) (fail_nth: 8) 83.224654ms ago: executing program 4 (id=785): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd01c8c1c2c57f657a625a688871958b0a40088fca4f15e71a6dac908872ebd", @ANYRESHEX, @ANYBLOB=',rootmode=0000000000', @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc", 0xa) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xf8) 42.263506ms ago: executing program 4 (id=786): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0xd], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x3000000}, 0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) 0s ago: executing program 5 (id=787): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x80000, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 0 [ 173.901520][ T7143] do_syscall_64+0xcd/0x4e0 [ 173.901534][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.901546][ T7143] RIP: 0033:0x7f52b478eec9 [ 173.901555][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.901565][ T7143] RSP: 002b:00007f52b5661038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.901576][ T7143] RAX: ffffffffffffffda RBX: 00007f52b49e5fa0 RCX: 00007f52b478eec9 [ 173.901582][ T7143] RDX: 0000000004000014 RSI: 0000200000000500 RDI: 0000000000000003 [ 173.901588][ T7143] RBP: 00007f52b5661090 R08: 0000000000000000 R09: 0000000000000000 [ 173.901594][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.901600][ T7143] R13: 00007f52b49e6038 R14: 00007f52b49e5fa0 R15: 00007ffd89738ca8 [ 173.901612][ T7143] [ 174.313202][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 174.352890][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.369683][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.389999][ T9] usb 6-1: Product: syz [ 174.396432][ T9] usb 6-1: Manufacturer: syz [ 174.401666][ T9] usb 6-1: SerialNumber: syz [ 174.442873][ T9] usb 6-1: config 0 descriptor?? [ 175.452452][ T9] usb 6-1: can't set config #0, error -71 [ 175.482716][ T9] usb 6-1: USB disconnect, device number 2 [ 175.523469][ T30] audit: type=1326 audit(1759317001.190:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 175.849630][ T30] audit: type=1326 audit(1759317001.190:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 176.201891][ T7163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7163 comm=syz.5.300 [ 176.252208][ T30] audit: type=1326 audit(1759317001.190:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 176.374413][ T30] audit: type=1326 audit(1759317001.190:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 176.397739][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.472534][ T30] audit: type=1326 audit(1759317001.190:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd99e790de7 code=0x7ffc0000 [ 176.583420][ T30] audit: type=1326 audit(1759317001.200:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd99e790d5c code=0x7ffc0000 [ 176.607124][ T30] audit: type=1326 audit(1759317001.200:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd99e790c94 code=0x7ffc0000 [ 176.630293][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.636711][ T30] audit: type=1326 audit(1759317001.200:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd99e790c94 code=0x7ffc0000 [ 176.717355][ T30] audit: type=1326 audit(1759317001.200:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd99e78db2a code=0x7ffc0000 [ 177.167302][ T30] audit: type=1326 audit(1759317001.200:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 178.512861][ T7180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7180 comm=syz.4.305 [ 178.822683][ T7187] overlayfs: failed to resolve './file0/file0': -2 [ 179.070145][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 179.917384][ T7208] FAULT_INJECTION: forcing a failure. [ 179.917384][ T7208] name failslab, interval 1, probability 0, space 0, times 0 [ 179.948582][ T7206] binder_alloc: 7204: binder_alloc_buf, no vma [ 180.006381][ T7208] CPU: 1 UID: 0 PID: 7208 Comm: syz.5.312 Not tainted syzkaller #0 PREEMPT(full) [ 180.006401][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.006407][ T7208] Call Trace: [ 180.006411][ T7208] [ 180.006415][ T7208] dump_stack_lvl+0x16c/0x1f0 [ 180.006433][ T7208] should_fail_ex+0x512/0x640 [ 180.006445][ T7208] ? __kmalloc_noprof+0xbf/0x510 [ 180.006462][ T7208] ? ethnl_default_set_doit+0x170/0x9d0 [ 180.006475][ T7208] should_failslab+0xc2/0x120 [ 180.006485][ T7208] __kmalloc_noprof+0xd2/0x510 [ 180.006499][ T7208] ? __nla_parse+0x40/0x60 [ 180.006516][ T7208] ethnl_default_set_doit+0x170/0x9d0 [ 180.006531][ T7208] genl_family_rcv_msg_doit+0x209/0x2f0 [ 180.006548][ T7208] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 180.006568][ T7208] ? bpf_lsm_capable+0x9/0x10 [ 180.006580][ T7208] ? security_capable+0x7e/0x260 [ 180.006592][ T7208] ? ns_capable+0xd7/0x110 [ 180.006606][ T7208] genl_rcv_msg+0x55c/0x800 [ 180.006623][ T7208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.006639][ T7208] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 180.006656][ T7208] netlink_rcv_skb+0x158/0x420 [ 180.006669][ T7208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.006685][ T7208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.006704][ T7208] ? netlink_deliver_tap+0x1ae/0xd30 [ 180.006718][ T7208] genl_rcv+0x28/0x40 [ 180.006731][ T7208] netlink_unicast+0x5a7/0x870 [ 180.006747][ T7208] ? __pfx_netlink_unicast+0x10/0x10 [ 180.006760][ T7208] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 180.006777][ T7208] netlink_sendmsg+0x8d1/0xdd0 [ 180.006792][ T7208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.006810][ T7208] ____sys_sendmsg+0xa98/0xc70 [ 180.006827][ T7208] ? copy_msghdr_from_user+0x10a/0x160 [ 180.006839][ T7208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.006860][ T7208] ___sys_sendmsg+0x134/0x1d0 [ 180.006873][ T7208] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.006900][ T7208] __sys_sendmsg+0x16d/0x220 [ 180.006913][ T7208] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.006933][ T7208] do_syscall_64+0xcd/0x4e0 [ 180.006947][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.006963][ T7208] RIP: 0033:0x7fe69698eec9 [ 180.006972][ T7208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.006982][ T7208] RSP: 002b:00007fe6978e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.006992][ T7208] RAX: ffffffffffffffda RBX: 00007fe696be5fa0 RCX: 00007fe69698eec9 [ 180.006998][ T7208] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 180.007004][ T7208] RBP: 00007fe6978e1090 R08: 0000000000000000 R09: 0000000000000000 [ 180.007010][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.007015][ T7208] R13: 00007fe696be6038 R14: 00007fe696be5fa0 R15: 00007ffd07a04398 [ 180.007028][ T7208] [ 180.282892][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.247148][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 181.247167][ T30] audit: type=1400 audit(1759317006.810:742): avc: denied { name_bind } for pid=7218 comm="syz.1.316" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 181.719246][ T30] audit: type=1400 audit(1759317007.050:743): avc: denied { mount } for pid=7218 comm="syz.1.316" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 181.750892][ T7225] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 181.760277][ T7219] binder_alloc: 7215: binder_alloc_buf, no vma [ 182.012783][ T7230] overlayfs: missing 'lowerdir' [ 183.255203][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 184.793161][ T7259] netlink: 830 bytes leftover after parsing attributes in process `syz.5.325'. [ 185.501028][ T30] audit: type=1400 audit(1759317011.090:744): avc: denied { setopt } for pid=7261 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.702412][ T44] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.925099][ T7268] syz.1.328 uses obsolete (PF_INET,SOCK_PACKET) [ 186.127334][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 186.201204][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 186.230711][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.314485][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.367334][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.399330][ T44] usb 1-1: Product: syz [ 186.403592][ T44] usb 1-1: Manufacturer: syz [ 186.449647][ T44] usb 1-1: SerialNumber: syz [ 186.528316][ T44] usb 1-1: config 0 descriptor?? [ 186.566996][ T44] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.575948][ T7259] infiniband syz!: set active [ 186.584603][ T7259] infiniband syz!: added team_slave_0 [ 186.611478][ T7259] syz!: rxe_create_cq: returned err = -12 [ 186.619905][ T7259] infiniband syz!: Couldn't create ib_mad CQ [ 186.638243][ T44] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 187.206883][ T7259] infiniband syz!: Couldn't open port 1 [ 187.543742][ T44] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 187.606031][ T7259] RDS/IB: syz!: added [ 187.634927][ T7259] smc: adding ib device syz! with port count 1 [ 187.805754][ T44] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 187.827054][ T7259] smc: ib device syz! port 1 has pnetid [ 188.064976][ T44] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 188.124851][ T44] em28xx 1-1:0.0: No AC97 audio processor [ 188.188848][ T44] usb 1-1: USB disconnect, device number 10 [ 188.240088][ T44] em28xx 1-1:0.0: Disconnecting em28xx [ 188.311366][ T44] em28xx 1-1:0.0: Freeing device [ 188.996668][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 189.532415][ T7308] FAULT_INJECTION: forcing a failure. [ 189.532415][ T7308] name failslab, interval 1, probability 0, space 0, times 0 [ 189.545342][ T7308] CPU: 1 UID: 0 PID: 7308 Comm: syz.0.338 Not tainted syzkaller #0 PREEMPT(full) [ 189.545368][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.545379][ T7308] Call Trace: [ 189.545385][ T7308] [ 189.545392][ T7308] dump_stack_lvl+0x16c/0x1f0 [ 189.545421][ T7308] should_fail_ex+0x512/0x640 [ 189.545447][ T7308] should_failslab+0xc2/0x120 [ 189.545464][ T7308] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 189.545492][ T7308] ? __alloc_skb+0x2b2/0x380 [ 189.545515][ T7308] __alloc_skb+0x2b2/0x380 [ 189.545534][ T7308] ? __pfx___alloc_skb+0x10/0x10 [ 189.545555][ T7308] ? find_held_lock+0x2b/0x80 [ 189.545584][ T7308] __neigh_notify+0xe6/0x380 [ 189.545610][ T7308] __neigh_update+0x1593/0x2ca0 [ 189.545645][ T7308] ndisc_router_discovery+0xd8a/0x3dc0 [ 189.545675][ T7308] ? find_held_lock+0x2b/0x80 [ 189.545699][ T7308] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 189.545722][ T7308] ? __lock_acquire+0x62e/0x1ce0 [ 189.545754][ T7308] ? skb_checksum+0x81f/0x980 [ 189.545778][ T7308] ndisc_rcv+0x40c/0x7a0 [ 189.545801][ T7308] icmpv6_rcv+0x17c6/0x1c50 [ 189.545825][ T7308] ? __pfx_icmpv6_rcv+0x10/0x10 [ 189.545844][ T7308] ip6_protocol_deliver_rcu+0xf86/0x1520 [ 189.545884][ T7308] ip6_input_finish+0x1e4/0x4b0 [ 189.545907][ T7308] ip6_input+0x105/0x2f0 [ 189.545928][ T7308] ip6_mc_input+0x4eb/0xeb0 [ 189.545951][ T7308] ? __pfx_ip6_mc_input+0x10/0x10 [ 189.545973][ T7308] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 189.546002][ T7308] ipv6_rcv+0x494/0x650 [ 189.546022][ T7308] ? __pfx_ipv6_rcv+0x10/0x10 [ 189.546041][ T7308] __netif_receive_skb_one_core+0x12d/0x1e0 [ 189.546060][ T7308] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 189.546079][ T7308] ? lock_acquire+0x179/0x350 [ 189.546098][ T7308] ? __phys_addr+0xe8/0x180 [ 189.546126][ T7308] __netif_receive_skb+0x1d/0x160 [ 189.546144][ T7308] netif_receive_skb+0x137/0x7b0 [ 189.546161][ T7308] ? __pfx_netif_receive_skb+0x10/0x10 [ 189.546188][ T7308] tun_rx_batched.isra.0+0x3ee/0x740 [ 189.546218][ T7308] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 189.546249][ T7308] ? tun_get_user+0x1df6/0x3cd0 [ 189.546272][ T7308] ? rcu_is_watching+0x12/0xc0 [ 189.546300][ T7308] tun_get_user+0x28bb/0x3cd0 [ 189.546337][ T7308] ? __pfx_tun_get_user+0x10/0x10 [ 189.546363][ T7308] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 189.546394][ T7308] ? find_held_lock+0x2b/0x80 [ 189.546416][ T7308] ? tun_get+0x191/0x370 [ 189.546445][ T7308] tun_chr_write_iter+0xdc/0x210 [ 189.546473][ T7308] vfs_write+0x7d0/0x11d0 [ 189.546499][ T7308] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 189.546528][ T7308] ? __pfx_vfs_write+0x10/0x10 [ 189.546550][ T7308] ? find_held_lock+0x2b/0x80 [ 189.546588][ T7308] ksys_write+0x12a/0x250 [ 189.546612][ T7308] ? __pfx_ksys_write+0x10/0x10 [ 189.546643][ T7308] do_syscall_64+0xcd/0x4e0 [ 189.546667][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.546684][ T7308] RIP: 0033:0x7f16dd98d97f [ 189.546698][ T7308] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 189.546715][ T7308] RSP: 002b:00007f16de792000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 189.546731][ T7308] RAX: ffffffffffffffda RBX: 00007f16ddbe5fa0 RCX: 00007f16dd98d97f [ 189.546742][ T7308] RDX: 00000000000000ae RSI: 0000200000000000 RDI: 00000000000000c8 [ 189.546752][ T7308] RBP: 00007f16de792090 R08: 0000000000000000 R09: 0000000000000000 [ 189.546761][ T7308] R10: 00000000000000ae R11: 0000000000000293 R12: 0000000000000001 [ 189.546771][ T7308] R13: 00007f16ddbe6038 R14: 00007f16ddbe5fa0 R15: 00007ffd42774c68 [ 189.546794][ T7308] [ 190.354530][ T7312] FAULT_INJECTION: forcing a failure. [ 190.354530][ T7312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.428624][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 190.465259][ T7312] CPU: 0 UID: 0 PID: 7312 Comm: syz.4.341 Not tainted syzkaller #0 PREEMPT(full) [ 190.465288][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.465298][ T7312] Call Trace: [ 190.465304][ T7312] [ 190.465312][ T7312] dump_stack_lvl+0x16c/0x1f0 [ 190.465342][ T7312] should_fail_ex+0x512/0x640 [ 190.465368][ T7312] _copy_from_user+0x2e/0xd0 [ 190.465391][ T7312] __io_register_rsrc_update+0xd12/0x1110 [ 190.465420][ T7312] ? __pfx___io_register_rsrc_update+0x10/0x10 [ 190.465439][ T7312] ? find_held_lock+0x2b/0x80 [ 190.465460][ T7312] ? __might_fault+0xe3/0x190 [ 190.465480][ T7312] ? __might_fault+0xe3/0x190 [ 190.465501][ T7312] ? __might_fault+0x13b/0x190 [ 190.465532][ T7312] io_register_files_update+0x108/0x160 [ 190.465553][ T7312] ? __pfx_io_register_files_update+0x10/0x10 [ 190.465577][ T7312] ? __pfx___mutex_trylock_common+0x10/0x10 [ 190.465595][ T7312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.465619][ T7312] __io_uring_register+0x16a9/0x2440 [ 190.465638][ T7312] ? trace_contention_end+0xdd/0x130 [ 190.465657][ T7312] ? __pfx___io_uring_register+0x10/0x10 [ 190.465682][ T7312] ? __pfx___mutex_lock+0x10/0x10 [ 190.465710][ T7312] ? __fget_files+0x20e/0x3c0 [ 190.465744][ T7312] __x64_sys_io_uring_register+0x169/0x280 [ 190.465767][ T7312] do_syscall_64+0xcd/0x4e0 [ 190.465792][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.465809][ T7312] RIP: 0033:0x7f3ef738eec9 [ 190.465824][ T7312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.465839][ T7312] RSP: 002b:00007f3ef815f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 190.465856][ T7312] RAX: ffffffffffffffda RBX: 00007f3ef75e5fa0 RCX: 00007f3ef738eec9 [ 190.465867][ T7312] RDX: 0000200000000240 RSI: 0000000000000006 RDI: 0000000000000003 [ 190.465876][ T7312] RBP: 00007f3ef815f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.465886][ T7312] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 190.465895][ T7312] R13: 00007f3ef75e6038 R14: 00007f3ef75e5fa0 R15: 00007ffd988c2728 [ 190.465918][ T7312] [ 190.527649][ T30] audit: type=1400 audit(1759317016.040:745): avc: denied { sqpoll } for pid=7309 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 191.225178][ T7332] hsr0: entered promiscuous mode [ 191.343724][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 191.350136][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 191.356197][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 191.363322][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 191.376371][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 191.566435][ T7331] netlink: 176 bytes leftover after parsing attributes in process `syz.2.348'. [ 191.641981][ T7331] netlink: 176 bytes leftover after parsing attributes in process `syz.2.348'. [ 191.757429][ T7326] hsr0: left promiscuous mode [ 192.109275][ T30] audit: type=1400 audit(1759317017.790:746): avc: denied { write } for pid=7330 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.958128][ T30] audit: type=1400 audit(1759317018.380:747): avc: denied { write } for pid=7337 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.188334][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 194.199551][ T30] audit: type=1400 audit(1759317019.890:748): avc: denied { ioctl } for pid=7351 comm="syz.2.354" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 194.225140][ T7352] input: syz1 as /devices/virtual/input/input8 [ 194.352055][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.358556][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.745367][ T30] audit: type=1400 audit(1759317020.410:749): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2914 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.807515][ T5907] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 197.201190][ T5907] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 197.291848][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.367320][ T5907] usb 1-1: Product: syz [ 197.381862][ T5907] usb 1-1: Manufacturer: syz [ 197.404129][ T5907] usb 1-1: SerialNumber: syz [ 197.564138][ T7389] FAULT_INJECTION: forcing a failure. [ 197.564138][ T7389] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 197.578014][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.5.361 Not tainted syzkaller #0 PREEMPT(full) [ 197.578040][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.578050][ T7389] Call Trace: [ 197.578056][ T7389] [ 197.578063][ T7389] dump_stack_lvl+0x16c/0x1f0 [ 197.578090][ T7389] should_fail_ex+0x512/0x640 [ 197.578115][ T7389] should_fail_alloc_page+0xe7/0x130 [ 197.578132][ T7389] prepare_alloc_pages+0x3c2/0x610 [ 197.578154][ T7389] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 197.578175][ T7389] ? __lock_acquire+0x62e/0x1ce0 [ 197.578187][ T7389] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.578211][ T7389] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.578232][ T7389] ? policy_nodemask+0xea/0x4e0 [ 197.578259][ T7389] alloc_pages_mpol+0x1fb/0x550 [ 197.578284][ T7389] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 197.578306][ T7389] ? blk_cgroup_congested+0x140/0x270 [ 197.578325][ T7389] alloc_pages_noprof+0x131/0x390 [ 197.578334][ T7389] pte_alloc_one+0x1c/0x3a0 [ 197.578349][ T7389] do_huge_pmd_anonymous_page+0x2bb/0x2080 [ 197.578368][ T7389] __handle_mm_fault+0x1ccd/0x2a50 [ 197.578396][ T7389] ? __pfx___handle_mm_fault+0x10/0x10 [ 197.578414][ T7389] ? sched_clock_cpu+0x6c/0x530 [ 197.578453][ T7389] handle_mm_fault+0x589/0xd10 [ 197.578469][ T7389] __get_user_pages+0x550/0x34a0 [ 197.578484][ T7389] ? down_read_killable+0x220/0x4b0 [ 197.578500][ T7389] ? __pfx___get_user_pages+0x10/0x10 [ 197.578521][ T7389] __gup_longterm_locked+0x2dd/0x17e0 [ 197.578546][ T7389] ? __pfx___gup_longterm_locked+0x10/0x10 [ 197.578563][ T7389] ? sanity_check_pinned_pages+0x35c/0x11d0 [ 197.578580][ T7389] ? sanity_check_pinned_pages+0x371/0x11d0 [ 197.578595][ T7389] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 197.578608][ T7389] gup_fast_fallback+0xf78/0x23f0 [ 197.578629][ T7389] ? __pfx_gup_fast_fallback+0x10/0x10 [ 197.578641][ T7389] ? ___kmalloc_large_node+0x114/0x160 [ 197.578653][ T7389] ? lockdep_hardirqs_on+0x7c/0x110 [ 197.578674][ T7389] ? rcu_is_watching+0x12/0xc0 [ 197.578699][ T7389] pin_user_pages_fast+0xa7/0xf0 [ 197.578716][ T7389] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 197.578743][ T7389] io_pin_pages+0xe1/0x1e0 [ 197.578755][ T7389] io_sqe_buffer_register+0x16f/0x2010 [ 197.578776][ T7389] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 197.578789][ T7389] ? rcu_is_watching+0x12/0xc0 [ 197.578810][ T7389] ? iovec_from_user+0xbb/0x140 [ 197.578834][ T7389] io_sqe_buffers_register+0x1ed/0x860 [ 197.578859][ T7389] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 197.578881][ T7389] ? __mutex_trylock_common+0xe9/0x250 [ 197.578897][ T7389] ? __pfx___mutex_trylock_common+0x10/0x10 [ 197.578910][ T7389] __io_uring_register+0x22e2/0x2440 [ 197.578921][ T7389] ? trace_contention_end+0xdd/0x130 [ 197.578932][ T7389] ? __pfx___io_uring_register+0x10/0x10 [ 197.578949][ T7389] ? __pfx___mutex_lock+0x10/0x10 [ 197.578976][ T7389] ? __fget_files+0x20e/0x3c0 [ 197.579006][ T7389] __x64_sys_io_uring_register+0x169/0x280 [ 197.579025][ T7389] do_syscall_64+0xcd/0x4e0 [ 197.579040][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.579051][ T7389] RIP: 0033:0x7fe69698eec9 [ 197.579062][ T7389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.579073][ T7389] RSP: 002b:00007fe6978c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 197.579083][ T7389] RAX: ffffffffffffffda RBX: 00007fe696be6090 RCX: 00007fe69698eec9 [ 197.579093][ T7389] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 197.579102][ T7389] RBP: 00007fe6978c0090 R08: 0000000000000000 R09: 0000000000000000 [ 197.579111][ T7389] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 197.579120][ T7389] R13: 00007fe696be6128 R14: 00007fe696be6090 R15: 00007ffd07a04398 [ 197.579142][ T7389] [ 199.651036][ T5907] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 199.673314][ T30] audit: type=1400 audit(1759317025.350:750): avc: denied { append } for pid=7404 comm="syz.4.366" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 200.127562][ T5907] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 200.177419][ T30] audit: type=1400 audit(1759317025.350:751): avc: denied { ioctl } for pid=7404 comm="syz.4.366" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 200.374299][ T30] audit: type=1400 audit(1759317025.360:752): avc: denied { mount } for pid=7404 comm="syz.4.366" name="/" dev="autofs" ino=15884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 200.606060][ T5907] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 200.662335][ T5907] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 200.680067][ T30] audit: type=1400 audit(1759317025.970:753): avc: denied { ioctl } for pid=7406 comm="syz.5.367" path="socket:[15199]" dev="sockfs" ino=15199 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 200.756886][ T5907] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 200.868740][ T5907] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 200.900959][ T7415] FAULT_INJECTION: forcing a failure. [ 200.900959][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 200.938385][ T5907] usb 1-1: USB disconnect, device number 11 [ 200.977354][ T7415] CPU: 0 UID: 0 PID: 7415 Comm: syz.5.368 Not tainted syzkaller #0 PREEMPT(full) [ 200.977381][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 200.977391][ T7415] Call Trace: [ 200.977397][ T7415] [ 200.977404][ T7415] dump_stack_lvl+0x16c/0x1f0 [ 200.977434][ T7415] should_fail_ex+0x512/0x640 [ 200.977454][ T7415] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 200.977482][ T7415] should_failslab+0xc2/0x120 [ 200.977498][ T7415] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 200.977522][ T7415] ? __d_alloc+0x32/0xae0 [ 200.977542][ T7415] __d_alloc+0x32/0xae0 [ 200.977557][ T7415] ? __lock_acquire+0xb97/0x1ce0 [ 200.977577][ T7415] d_alloc_parallel+0x111/0x1480 [ 200.977597][ T7415] ? kasan_save_free_info+0x3b/0x60 [ 200.977616][ T7415] ? __kasan_slab_free+0x60/0x70 [ 200.977639][ T7415] ? walk_component+0x1a5/0x5b0 [ 200.977660][ T7415] ? link_path_walk+0x511/0xe20 [ 200.977680][ T7415] ? path_openat+0x1b0/0x2cb0 [ 200.977708][ T7415] ? do_sys_openat2+0x11b/0x1d0 [ 200.977729][ T7415] ? __lock_acquire+0xb97/0x1ce0 [ 200.977744][ T7415] ? __pfx_d_alloc_parallel+0x10/0x10 [ 200.977766][ T7415] ? lockdep_init_map_type+0x5c/0x280 [ 200.977785][ T7415] ? lockdep_init_map_type+0x5c/0x280 [ 200.977810][ T7415] __lookup_slow+0x193/0x460 [ 200.977830][ T7415] ? __pfx___lookup_slow+0x10/0x10 [ 200.977864][ T7415] ? lookup_fast+0x156/0x610 [ 200.977885][ T7415] ? __pfx_proc_pid_permission+0x10/0x10 [ 200.977905][ T7415] walk_component+0x353/0x5b0 [ 200.977930][ T7415] link_path_walk+0x627/0xe20 [ 200.977960][ T7415] path_openat+0x1b0/0x2cb0 [ 200.977982][ T7415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.978007][ T7415] ? __pfx_path_openat+0x10/0x10 [ 200.978037][ T7415] do_filp_open+0x20b/0x470 [ 200.978062][ T7415] ? __pfx_do_filp_open+0x10/0x10 [ 200.978095][ T7415] ? __pfx_kfree_link+0x10/0x10 [ 200.978124][ T7415] ? alloc_fd+0x471/0x7d0 [ 200.978154][ T7415] do_sys_openat2+0x11b/0x1d0 [ 200.978172][ T7415] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.978193][ T7415] ? __fget_files+0x20e/0x3c0 [ 200.978221][ T7415] __x64_sys_openat+0x174/0x210 [ 200.978240][ T7415] ? __pfx___x64_sys_openat+0x10/0x10 [ 200.978258][ T7415] ? ksys_write+0x1ac/0x250 [ 200.978289][ T7415] do_syscall_64+0xcd/0x4e0 [ 200.978313][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.978329][ T7415] RIP: 0033:0x7fe69698d710 [ 200.978344][ T7415] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 200.978360][ T7415] RSP: 002b:00007fe6978e0f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 200.978377][ T7415] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe69698d710 [ 200.978388][ T7415] RDX: 0000000000000000 RSI: 00007fe696a1207e RDI: 00000000ffffff9c [ 200.978398][ T7415] RBP: 00007fe696a1207e R08: 0000000000000000 R09: 0000000000000000 [ 200.978408][ T7415] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 200.978417][ T7415] R13: 00007fe696be6038 R14: 00007fe696be5fa0 R15: 00007ffd07a04398 [ 200.978439][ T7415] [ 201.366596][ T7405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.757231][ T30] audit: type=1400 audit(1759317027.400:754): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 201.777183][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.787383][ T9] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 202.955431][ T30] audit: type=1400 audit(1759317028.640:755): avc: denied { connect } for pid=7427 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.258645][ T9] usb 1-1: config 3 has an invalid interface number: 113 but max is 1 [ 203.267076][ T7432] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 203.275576][ T7432] netlink: 232 bytes leftover after parsing attributes in process `syz.1.374'. [ 203.275604][ T9] usb 1-1: config 3 has an invalid interface number: 225 but max is 1 [ 203.297561][ T9] usb 1-1: config 3 has no interface number 0 [ 203.303874][ T9] usb 1-1: config 3 has no interface number 1 [ 203.310438][ T9] usb 1-1: config 3 interface 113 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 8 [ 203.327315][ T9] usb 1-1: config 3 interface 113 has no altsetting 0 [ 203.334262][ T9] usb 1-1: config 3 interface 225 has no altsetting 0 [ 203.342720][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 203.393006][ T9] usb 1-1: string descriptor 0 read error: -22 [ 203.401631][ T9] usb 1-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=11.9b [ 203.464212][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.528385][ T7438] netlink: 128 bytes leftover after parsing attributes in process `syz.4.377'. [ 203.549366][ T7438] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 203.591145][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.376'. [ 203.727530][ T9] usb 1-1: USB disconnect, device number 12 [ 204.547018][ T30] audit: type=1326 audit(1759317030.140:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 204.570271][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.606877][ T5938] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 204.661439][ T30] audit: type=1326 audit(1759317030.140:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 204.694945][ T30] audit: type=1326 audit(1759317030.140:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 204.800540][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.376'. [ 204.810343][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.823279][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.832642][ T30] audit: type=1326 audit(1759317030.140:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 204.855841][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.970641][ T5938] usb 6-1: Using ep0 maxpacket: 8 [ 204.979967][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.426770][ T30] audit: type=1326 audit(1759317030.140:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 205.450393][ T30] audit: type=1326 audit(1759317030.140:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd99e790de7 code=0x7ffc0000 [ 205.473516][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.493606][ T5938] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 205.508989][ T5972] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.527263][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.650061][ T5938] usb 6-1: Product: syz [ 205.661905][ T5938] usb 6-1: Manufacturer: syz [ 205.666555][ T5938] usb 6-1: SerialNumber: syz [ 205.677368][ T30] audit: type=1326 audit(1759317030.140:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd99e790d5c code=0x7ffc0000 [ 205.735549][ T5938] usb 6-1: config 0 descriptor?? [ 205.871306][ T30] audit: type=1326 audit(1759317030.140:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd99e790c94 code=0x7ffc0000 [ 206.110857][ T5938] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 206.138217][ T30] audit: type=1326 audit(1759317030.140:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd99e790c94 code=0x7ffc0000 [ 206.807746][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.376'. [ 206.814896][ T5938] gspca_sunplus: reg_w_riv err -110 [ 206.822114][ T5938] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 206.850136][ T30] audit: type=1326 audit(1759317030.140:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd99e78db2a code=0x7ffc0000 [ 206.873359][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.963759][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.376'. [ 206.984186][ T30] audit: type=1326 audit(1759317030.140:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 207.007702][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.147696][ T30] audit: type=1326 audit(1759317030.140:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 207.170906][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.196273][ T44] usb 6-1: USB disconnect, device number 3 [ 207.329891][ T7453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.637149][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a91e800: rx timeout, send abort [ 207.647262][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a91cc00: rx timeout, send abort [ 207.655805][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a91e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 207.671309][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a91cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 208.445591][ T7478] netlink: 40 bytes leftover after parsing attributes in process `syz.5.388'. [ 209.207403][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 209.708286][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 209.855585][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 209.939503][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.099713][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.415273][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.469708][ T9] usb 1-1: Product: syz [ 210.527723][ T9] usb 1-1: Manufacturer: syz [ 210.532385][ T9] usb 1-1: SerialNumber: syz [ 210.579353][ T9] usb 1-1: config 0 descriptor?? [ 210.615524][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.702683][ T7503] geneve1: entered allmulticast mode [ 210.714363][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 211.138660][ T7511] binder: 7510:7511 unknown command 1078485781 [ 211.155567][ T7511] binder: 7510:7511 ioctl c0306201 2000000001c0 returned -22 [ 211.199014][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 211.206964][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 211.595603][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 211.639385][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 211.717913][ T9] usb 1-1: USB disconnect, device number 13 [ 211.743409][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 211.778968][ T9] em28xx 1-1:0.0: Freeing device [ 212.803251][ T7527] smc: removing ib device syz! [ 214.294126][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 214.294149][ T30] audit: type=1400 audit(1759317039.610:796): avc: denied { ioctl } for pid=7529 comm="syz.1.402" path="socket:[16665]" dev="sockfs" ino=16665 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.513595][ T30] audit: type=1400 audit(1759317040.200:797): avc: denied { create } for pid=7528 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 214.865843][ T30] audit: type=1400 audit(1759317040.200:798): avc: denied { write } for pid=7528 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 215.287310][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 215.550250][ T24] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 215.648019][ T24] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.658435][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 215.667482][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 215.676712][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.738389][ T24] usb 6-1: config 0 descriptor?? [ 216.322075][ T30] audit: type=1400 audit(1759317042.010:799): avc: denied { write } for pid=7559 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.341234][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.472541][ T24] kovaplus 0003:1E7D:2D50.0005: item fetching failed at offset 4/5 [ 216.492517][ T30] audit: type=1400 audit(1759317042.160:800): avc: denied { write } for pid=7561 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.520176][ T24] kovaplus 0003:1E7D:2D50.0005: parse failed [ 216.536476][ T24] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -22 [ 216.647807][ T837] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 216.790291][ T30] audit: type=1400 audit(1759317042.480:801): avc: denied { create } for pid=7570 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 216.849450][ T837] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 217.358542][ T837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.366663][ T837] usb 3-1: Product: syz [ 217.379766][ T30] audit: type=1400 audit(1759317042.500:802): avc: denied { write } for pid=7570 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 217.399270][ T837] usb 3-1: Manufacturer: syz [ 217.405420][ T837] usb 3-1: SerialNumber: syz [ 217.427086][ T7543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.481468][ T7543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.727672][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 217.861284][ T30] audit: type=1400 audit(1759317043.530:803): avc: denied { append } for pid=7542 comm="syz.5.406" name="video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 218.044241][ T10] usb 6-1: USB disconnect, device number 4 [ 218.063946][ T837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 218.106494][ T837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 218.130488][ T30] audit: type=1400 audit(1759317043.810:804): avc: denied { wake_alarm } for pid=7584 comm="syz.4.417" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.163135][ T837] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 218.189491][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.258399][ T24] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 218.270371][ T837] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 218.290284][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.326052][ T837] usb 3-1: USB disconnect, device number 11 [ 218.335557][ T24] usb 2-1: config 0 descriptor?? [ 218.856680][ T7577] loop2: detected capacity change from 0 to 7 [ 218.883350][ T5826] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 218.894435][ T5826] loop2: partition table partially beyond EOD, truncated [ 218.949911][ T5826] loop2: p1 size 2094915316 extends beyond EOD, truncated [ 218.990485][ T7597] Mount JFS Failure: -5 [ 218.995815][ T7597] jfs_mount failed w/return code = -5 [ 219.468425][ T7577] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 219.532797][ T7577] loop2: partition table partially beyond EOD, truncated [ 219.592860][ T7577] loop2: p1 size 2094915316 extends beyond EOD, truncated [ 220.407558][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 220.437294][ T5196] loop2: partition table partially beyond EOD, truncated [ 220.510820][ T5196] loop2: p1 size 2094915316 extends beyond EOD, truncated [ 220.929355][ T7622] fuse: Bad value for 'user_id' [ 220.934318][ T7622] fuse: Bad value for 'user_id' [ 221.257449][ T44] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 221.571899][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 221.601460][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 221.609410][ T44] usb 3-1: device descriptor read/64, error -71 [ 221.725860][ T30] audit: type=1400 audit(1759317047.410:805): avc: denied { create } for pid=7624 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 221.842105][ T6059] udevd[6059]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 221.864134][ T24] usb 2-1: USB disconnect, device number 6 [ 221.890400][ T44] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 222.067569][ T44] usb 3-1: device descriptor read/64, error -71 [ 222.473620][ T30] audit: type=1400 audit(1759317048.150:806): avc: denied { relabelfrom } for pid=7628 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 222.527792][ T44] usb usb3-port1: attempt power cycle [ 222.637449][ T30] audit: type=1400 audit(1759317048.150:807): avc: denied { relabelto } for pid=7628 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 222.737538][ T5938] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 222.817303][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 222.912613][ T5938] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.946977][ T44] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 222.997479][ T44] usb 3-1: device descriptor read/8, error -71 [ 223.021749][ T5938] usb 1-1: not running at top speed; connect to a high speed hub [ 223.027347][ T7642] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 223.060307][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 223.073905][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 223.088104][ T5938] usb 1-1: config 56 has an invalid interface number: 90 but max is 0 [ 223.099543][ T7642] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 223.109300][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 223.111923][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 223.177365][ T5938] usb 1-1: config 56 has no interface number 0 [ 223.197289][ T5938] usb 1-1: config 56 interface 90 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 223.210000][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.229296][ T9] usb 2-1: Product: syz [ 223.237827][ T5938] usb 1-1: config 56 interface 90 has no altsetting 0 [ 223.244713][ T9] usb 2-1: Manufacturer: syz [ 223.249809][ T9] usb 2-1: SerialNumber: syz [ 223.269691][ T44] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 223.289951][ T9] usb 2-1: config 0 descriptor?? [ 223.300623][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 223.327334][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 223.348149][ T5938] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=c4.0e [ 223.363397][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.376344][ T5938] usb 1-1: Product: syz [ 223.382509][ T5938] usb 1-1: Manufacturer: syz [ 223.389244][ T5938] usb 1-1: SerialNumber: syz [ 223.406331][ T7635] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 223.534226][ T44] usb 3-1: device descriptor read/8, error -71 [ 223.779261][ T44] usb usb3-port1: unable to enumerate USB device [ 223.904149][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 224.004343][ T7648] Mount JFS Failure: -5 [ 224.008789][ T7648] jfs_mount failed w/return code = -5 [ 224.116780][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 224.513730][ T7650] binder_alloc: 7644: binder_alloc_buf, no vma [ 224.544052][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 224.556418][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 224.662609][ T9] usb 2-1: USB disconnect, device number 7 [ 224.674711][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 224.703627][ T9] em28xx 2-1:0.0: Freeing device [ 225.271245][ T7661] Mount JFS Failure: -5 [ 225.275627][ T7661] jfs_mount failed w/return code = -5 [ 225.389392][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 225.660546][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 225.693987][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.735465][ T7658] netlink: 44 bytes leftover after parsing attributes in process `syz.4.435'. [ 225.761976][ T7658] netlink: 59 bytes leftover after parsing attributes in process `syz.4.435'. [ 225.833187][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.854105][ T7658] netlink: 59 bytes leftover after parsing attributes in process `syz.4.435'. [ 225.990823][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 226.032431][ T5938] mos7840 1-1:56.90: missing endpoints [ 226.048438][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.085588][ T5938] usb 1-1: USB disconnect, device number 14 [ 226.106097][ T10] usb 3-1: Product: syz [ 226.123636][ T10] usb 3-1: Manufacturer: syz [ 226.152297][ T10] usb 3-1: SerialNumber: syz [ 226.194724][ T30] audit: type=1400 audit(1759317051.880:808): avc: denied { mounton } for pid=7669 comm="syz.0.439" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 226.232105][ T7671] qnx4: unable to read the superblock [ 226.252781][ T10] usb 3-1: config 0 descriptor?? [ 226.899973][ T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 226.906230][ T10] gspca_stv06xx: st6422 sensor detected [ 227.639688][ T30] audit: type=1400 audit(1759317053.330:809): avc: denied { mounton } for pid=7683 comm="syz.5.443" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 227.720404][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.443'. [ 228.359590][ T30] audit: type=1400 audit(1759317053.380:810): avc: denied { mount } for pid=7683 comm="syz.5.443" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 228.374484][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 228.518817][ T30] audit: type=1400 audit(1759317054.000:811): avc: denied { unmount } for pid=6931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 228.691723][ T10] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 228.739169][ T30] audit: type=1400 audit(1759317054.230:812): avc: denied { write } for pid=7694 comm="syz.1.448" name="mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.767476][ T10] usb 3-1: USB disconnect, device number 16 [ 228.777444][ T5885] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 228.808615][ T44] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 229.164963][ T5885] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.210170][ T5885] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 229.223762][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 229.264951][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 229.265916][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.304357][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.328222][ T10] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 229.347105][ T44] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 229.371816][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.406464][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 229.469758][ T44] usb 6-1: Product: syz [ 229.481227][ T44] usb 6-1: Manufacturer: syz [ 229.490963][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 229.497088][ T44] usb 6-1: SerialNumber: syz [ 229.543546][ T44] usb 6-1: config 0 descriptor?? [ 229.555780][ T5885] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.633168][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.651225][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.785939][ T10] usb 3-1: config 0 has no interface number 0 [ 229.796814][ T5885] usb 2-1: Product: syz [ 229.808440][ T44] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 229.834072][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 229.849255][ T44] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 229.849389][ T5885] usb 2-1: Manufacturer: syz [ 229.879531][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 229.901772][ T7695] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 229.944388][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 229.986120][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.029810][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 230.043461][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.082936][ T5885] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 230.255837][ T10] usb 3-1: config 0 descriptor?? [ 230.358243][ T5885] cdc_wdm 2-1:1.0: Unknown control protocol [ 230.384765][ T7702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.397130][ T5885] usb 2-1: USB disconnect, device number 8 [ 230.413697][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 230.443988][ T44] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 230.457339][ T5938] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 230.458079][ T44] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 230.625533][ T24] usb 3-1: USB disconnect, device number 17 [ 230.727295][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 230.782122][ T44] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 230.800313][ T44] em28xx 6-1:0.0: No AC97 audio processor [ 230.853605][ T44] usb 6-1: USB disconnect, device number 5 [ 230.880287][ T44] em28xx 6-1:0.0: Disconnecting em28xx [ 230.922704][ T44] em28xx 6-1:0.0: Freeing device [ 230.974841][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.047765][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.116113][ T5938] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 231.125629][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.134991][ T5938] usb 5-1: Product: syz [ 231.143336][ T5938] usb 5-1: Manufacturer: syz [ 231.153754][ T5938] usb 5-1: SerialNumber: syz [ 231.201781][ T5938] usb 5-1: config 0 descriptor?? [ 231.229544][ T5938] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 231.237959][ T5938] gspca_stv06xx: st6422 sensor detected [ 231.636620][ T7723] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 231.680662][ T7723] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 232.363763][ T30] audit: type=1326 audit(1759317057.990:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 232.443625][ T30] audit: type=1326 audit(1759317057.990:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99e78eec9 code=0x7ffc0000 [ 232.749535][ T7740] overlayfs: missing 'lowerdir' [ 233.286537][ T5938] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 233.366292][ T5938] usb 5-1: USB disconnect, device number 11 [ 234.477492][ T5938] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 234.707585][ T30] audit: type=1400 audit(1759317060.390:815): avc: denied { bind } for pid=7756 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.902259][ T30] audit: type=1400 audit(1759317060.420:816): avc: denied { name_bind } for pid=7756 comm="syz.2.465" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 234.932442][ T5938] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.949888][ T5938] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 235.063888][ T5938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.079330][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 235.091857][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 235.113429][ T5938] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.496912][ T30] audit: type=1400 audit(1759317060.420:817): avc: denied { node_bind } for pid=7756 comm="syz.2.465" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 235.561841][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.618608][ T5938] usb 5-1: Product: syz [ 235.630375][ T5938] usb 5-1: Manufacturer: syz [ 235.709263][ T5938] cdc_wdm 5-1:1.0: skipping garbage [ 235.714651][ T5938] cdc_wdm 5-1:1.0: skipping garbage [ 235.807850][ T5907] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 235.815453][ T44] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 235.867650][ T5938] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 235.897845][ T5938] cdc_wdm 5-1:1.0: Unknown control protocol [ 235.957531][ T5938] usb 5-1: USB disconnect, device number 12 [ 236.007333][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 236.013941][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 236.033884][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.053622][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.080818][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.093827][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.224978][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 236.238172][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.269156][ T5907] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 236.299348][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.345778][ T44] usb 1-1: Product: syz [ 236.363614][ T44] usb 1-1: Manufacturer: syz [ 236.373775][ T5907] usb 2-1: Product: syz [ 236.387334][ T44] usb 1-1: SerialNumber: syz [ 236.391971][ T5907] usb 2-1: Manufacturer: syz [ 236.426814][ T44] usb 1-1: config 0 descriptor?? [ 236.431841][ T5907] usb 2-1: SerialNumber: syz [ 236.474475][ T44] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 236.480856][ T5907] usb 2-1: config 0 descriptor?? [ 236.497311][ T44] gspca_stv06xx: st6422 sensor detected [ 236.517072][ T5907] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 236.533597][ T5907] gspca_stv06xx: st6422 sensor detected [ 236.607274][ T5893] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 236.842308][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 236.908768][ T5893] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.086577][ T5893] usb 6-1: config 0 has no interface number 0 [ 237.102231][ T5893] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 237.121728][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.147400][ T837] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 237.322415][ T5893] usb 6-1: Product: syz [ 237.334626][ T5893] usb 6-1: Manufacturer: syz [ 237.342574][ T5893] usb 6-1: SerialNumber: syz [ 237.395483][ T5893] usb 6-1: config 0 descriptor?? [ 237.432556][ T5893] quatech2 6-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 237.478943][ T837] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 237.494606][ T837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.509111][ T837] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 237.524276][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.533622][ T837] usb 5-1: SerialNumber: syz [ 237.554575][ T837] usb 5-1: 0:2 : does not exist [ 237.559912][ T837] usb 5-1: unit 1 not found! [ 237.671770][ T5893] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 237.778819][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.843279][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.902782][ T7778] capability: warning: `syz.4.470' uses deprecated v2 capabilities in a way that may be insecure [ 237.916159][ T5893] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 237.992116][ T10] usb 5-1: USB disconnect, device number 13 [ 238.071405][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 238.072265][ T5938] usb 6-1: USB disconnect, device number 6 [ 238.090871][ T44] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 238.130728][ T5938] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 238.167927][ T44] usb 1-1: USB disconnect, device number 15 [ 238.221682][ T5938] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 238.269659][ T5938] quatech2 6-1:0.1: device disconnected [ 240.032446][ T5907] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 240.111913][ T7796] FAULT_INJECTION: forcing a failure. [ 240.111913][ T7796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.125118][ T7796] CPU: 0 UID: 0 PID: 7796 Comm: syz.2.476 Not tainted syzkaller #0 PREEMPT(full) [ 240.125143][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.125154][ T7796] Call Trace: [ 240.125160][ T7796] [ 240.125167][ T7796] dump_stack_lvl+0x16c/0x1f0 [ 240.125198][ T7796] should_fail_ex+0x512/0x640 [ 240.125230][ T7796] _copy_to_user+0x32/0xd0 [ 240.125257][ T7796] simple_read_from_buffer+0xcb/0x170 [ 240.125285][ T7796] proc_fail_nth_read+0x197/0x240 [ 240.125305][ T7796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.125325][ T7796] ? vfs_read+0x16b/0xcf0 [ 240.125349][ T7796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.125366][ T7796] vfs_read+0x1e4/0xcf0 [ 240.125393][ T7796] ? __pfx___mutex_lock+0x10/0x10 [ 240.125416][ T7796] ? __pfx_vfs_read+0x10/0x10 [ 240.125446][ T7796] ? __fget_files+0x20e/0x3c0 [ 240.125479][ T7796] ksys_read+0x12a/0x250 [ 240.125503][ T7796] ? __pfx_ksys_read+0x10/0x10 [ 240.125534][ T7796] do_syscall_64+0xcd/0x4e0 [ 240.125559][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.125577][ T7796] RIP: 0033:0x7f52b478d8dc [ 240.125591][ T7796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.125608][ T7796] RSP: 002b:00007f52b5640030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.125625][ T7796] RAX: ffffffffffffffda RBX: 00007f52b49e6090 RCX: 00007f52b478d8dc [ 240.125635][ T7796] RDX: 000000000000000f RSI: 00007f52b56400a0 RDI: 0000000000000007 [ 240.125645][ T7796] RBP: 00007f52b5640090 R08: 0000000000000000 R09: 0000000000000000 [ 240.125655][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.125665][ T7796] R13: 00007f52b49e6128 R14: 00007f52b49e6090 R15: 00007ffd89738ca8 [ 240.125688][ T7796] [ 240.534095][ T7798] FAULT_INJECTION: forcing a failure. [ 240.534095][ T7798] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.534120][ T7798] CPU: 1 UID: 0 PID: 7798 Comm: syz.5.478 Not tainted syzkaller #0 PREEMPT(full) [ 240.534132][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.534139][ T7798] Call Trace: [ 240.534143][ T7798] [ 240.534147][ T7798] dump_stack_lvl+0x16c/0x1f0 [ 240.534165][ T7798] should_fail_ex+0x512/0x640 [ 240.534181][ T7798] should_fail_alloc_page+0xe7/0x130 [ 240.534193][ T7798] prepare_alloc_pages+0x3c2/0x610 [ 240.534212][ T7798] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 240.534232][ T7798] ? __handle_mm_fault+0x5a8/0x2a50 [ 240.534248][ T7798] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 240.534264][ T7798] ? __lock_acquire+0x62e/0x1ce0 [ 240.534278][ T7798] ? __pfx_css_rstat_updated+0x10/0x10 [ 240.534297][ T7798] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.534311][ T7798] ? policy_nodemask+0xea/0x4e0 [ 240.534330][ T7798] alloc_pages_mpol+0x1fb/0x550 [ 240.534347][ T7798] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 240.534366][ T7798] ? fbcon_set_font+0x42e/0xc90 [ 240.534376][ T7798] ___kmalloc_large_node+0xed/0x160 [ 240.534389][ T7798] ? fbcon_set_font+0x42e/0xc90 [ 240.534398][ T7798] __kmalloc_large_node_noprof+0x1c/0x70 [ 240.534411][ T7798] __kmalloc_noprof.cold+0xc/0x61 [ 240.534430][ T7798] fbcon_set_font+0x42e/0xc90 [ 240.534441][ T7798] ? rcu_is_watching+0x12/0xc0 [ 240.534465][ T7798] ? __pfx_fbcon_set_font+0x10/0x10 [ 240.534475][ T7798] con_font_op+0x7fe/0xf50 [ 240.534491][ T7798] ? __pfx_con_font_op+0x10/0x10 [ 240.534504][ T7798] ? __might_fault+0xe3/0x190 [ 240.534518][ T7798] ? __might_fault+0xe3/0x190 [ 240.534531][ T7798] ? __might_fault+0x13b/0x190 [ 240.534550][ T7798] vt_ioctl+0x48f/0x30a0 [ 240.534565][ T7798] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.534580][ T7798] ? __pfx_vt_ioctl+0x10/0x10 [ 240.534598][ T7798] ? tomoyo_path_number_perm+0x18d/0x580 [ 240.534615][ T7798] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.534629][ T7798] ? tty_jobctrl_ioctl+0x152/0xe00 [ 240.534646][ T7798] ? __pfx_vt_ioctl+0x10/0x10 [ 240.534660][ T7798] tty_ioctl+0x661/0x1680 [ 240.534672][ T7798] ? __pfx_tty_ioctl+0x10/0x10 [ 240.534685][ T7798] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 240.534702][ T7798] ? hook_file_ioctl_common+0x145/0x410 [ 240.534721][ T7798] ? selinux_file_ioctl+0x180/0x270 [ 240.534732][ T7798] ? selinux_file_ioctl+0xb4/0x270 [ 240.534745][ T7798] ? __pfx_tty_ioctl+0x10/0x10 [ 240.534757][ T7798] __x64_sys_ioctl+0x18b/0x210 [ 240.534771][ T7798] do_syscall_64+0xcd/0x4e0 [ 240.534788][ T7798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.534798][ T7798] RIP: 0033:0x7fe69698eec9 [ 240.534807][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.534817][ T7798] RSP: 002b:00007fe6978e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.534827][ T7798] RAX: ffffffffffffffda RBX: 00007fe696be5fa0 RCX: 00007fe69698eec9 [ 240.534833][ T7798] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003 [ 240.534839][ T7798] RBP: 00007fe6978e1090 R08: 0000000000000000 R09: 0000000000000000 [ 240.534845][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.534851][ T7798] R13: 00007fe696be6038 R14: 00007fe696be5fa0 R15: 00007ffd07a04398 [ 240.534864][ T7798] [ 241.089541][ T30] audit: type=1404 audit(1759317066.740:818): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 241.153793][ T5907] usb 2-1: USB disconnect, device number 9 [ 241.319009][ T30] audit: type=1400 audit(1759317067.010:819): avc: denied { create } for pid=7800 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 241.334264][ T30] audit: type=1400 audit(1759317067.020:820): avc: denied { read write } for pid=5830 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 241.707870][ T30] audit: type=1400 audit(1759317067.050:821): avc: denied { create } for pid=7801 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 241.707942][ T30] audit: type=1400 audit(1759317067.050:822): avc: denied { allowed } for pid=7801 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 241.707976][ T30] audit: type=1400 audit(1759317067.050:823): avc: denied { create } for pid=7801 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 241.708145][ T30] audit: type=1400 audit(1759317067.050:824): avc: denied { write } for pid=7801 comm="syz.0.477" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 241.708182][ T30] audit: type=1400 audit(1759317067.050:825): avc: denied { create } for pid=7801 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 241.708216][ T30] audit: type=1400 audit(1759317067.070:826): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop0" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 241.708256][ T30] audit: type=1400 audit(1759317067.170:827): avc: denied { setopt } for pid=7800 comm="syz.1.479" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 244.937319][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 244.943415][ T7827] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 244.957364][ T7827] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 245.303983][ T7827] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.348660][ T7827] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 245.454544][ T7827] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 245.482345][ T7827] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 245.546033][ T7827] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 245.574403][ T7827] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 245.943148][ T7910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=7910 comm=syz.5.499 [ 245.992511][ T7827] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 246.006535][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.499'. [ 246.024363][ T7827] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 246.037905][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.499'. [ 246.118373][ T30] kauditd_printk_skb: 356 callbacks suppressed [ 246.118387][ T30] audit: type=1400 audit(1759317071.800:1184): avc: denied { getattr } for pid=7914 comm="mkdir" path="/run" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 246.192481][ T30] audit: type=1400 audit(1759317071.840:1185): avc: denied { create } for pid=7911 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 246.287681][ T30] audit: type=1400 audit(1759317071.850:1186): avc: denied { create } for pid=7911 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 246.685556][ T30] audit: type=1400 audit(1759317071.850:1187): avc: denied { allowed } for pid=7911 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 246.914187][ T30] audit: type=1400 audit(1759317071.850:1188): avc: denied { read } for pid=7911 comm="syz.4.506" dev="nsfs" ino=4026533318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 247.215132][ T30] audit: type=1400 audit(1759317071.850:1189): avc: denied { mounton } for pid=7911 comm="syz.4.506" path="/102/file0" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 247.375847][ T30] audit: type=1400 audit(1759317071.870:1190): avc: denied { search } for pid=7908 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 247.483258][ T30] audit: type=1400 audit(1759317071.870:1191): avc: denied { search } for pid=7908 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 247.566585][ T7935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.576824][ T7935] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 247.825791][ T6762] syz.3.206: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 247.851251][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz.3.206 Not tainted syzkaller #0 PREEMPT(full) [ 247.851271][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.851277][ T6762] Call Trace: [ 247.851282][ T6762] [ 247.851286][ T6762] dump_stack_lvl+0x16c/0x1f0 [ 247.851305][ T6762] warn_alloc+0x248/0x3a0 [ 247.851323][ T6762] ? __pfx_warn_alloc+0x10/0x10 [ 247.851343][ T6762] ? relay_open_buf.part.0+0x18f/0xc30 [ 247.851356][ T6762] ? __vmalloc_node_noprof+0xad/0xf0 [ 247.851376][ T6762] __vmalloc_node_range_noprof+0x1019/0x14b0 [ 247.851389][ T6762] ? blk_trace_setup+0xed/0x1b0 [ 247.851402][ T6762] ? relay_open_buf.part.0+0x18f/0xc30 [ 247.851416][ T6762] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 247.851431][ T6762] ? ___kmalloc_large_node+0xed/0x160 [ 247.851446][ T6762] __kvmalloc_node_noprof+0x30a/0x620 [ 247.851460][ T6762] ? relay_open_buf.part.0+0x18f/0xc30 [ 247.851472][ T6762] ? trace_kmalloc+0x2b/0xd0 [ 247.851481][ T6762] ? __kmalloc_noprof.cold+0x5c/0x61 [ 247.851497][ T6762] ? relay_open_buf.part.0+0x18f/0xc30 [ 247.851511][ T6762] ? relay_open_buf.part.0+0x18f/0xc30 [ 247.851521][ T6762] relay_open_buf.part.0+0x18f/0xc30 [ 247.851537][ T6762] relay_open+0x653/0xad0 [ 247.851549][ T6762] ? debugfs_create_file_full+0x41/0x60 [ 247.851564][ T6762] do_blk_trace_setup+0x4c5/0xb00 [ 247.851582][ T6762] blk_trace_setup+0xed/0x1b0 [ 247.851592][ T6762] ? __pfx_blk_trace_setup+0x10/0x10 [ 247.851603][ T6762] ? __pfx_snprintf+0x10/0x10 [ 247.851619][ T6762] ? do_vfs_ioctl+0x128/0x14f0 [ 247.851634][ T6762] blk_trace_ioctl+0x146/0x280 [ 247.851645][ T6762] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 247.851657][ T6762] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.851672][ T6762] blkdev_ioctl+0x108/0x6d0 [ 247.851689][ T6762] ? __pfx_blkdev_ioctl+0x10/0x10 [ 247.851703][ T6762] ? do_vfs_ioctl+0x128/0x14f0 [ 247.851715][ T6762] ? do_vfs_ioctl+0x178/0x14f0 [ 247.851728][ T6762] ? __pfx_blkdev_ioctl+0x10/0x10 [ 247.851743][ T6762] __x64_sys_ioctl+0x18b/0x210 [ 247.851757][ T6762] do_syscall_64+0xcd/0x4e0 [ 247.851772][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.851782][ T6762] RIP: 0033:0x7fc7c1d8eec9 [ 247.851798][ T6762] Code: Unable to access opcode bytes at 0x7fc7c1d8ee9f. [ 247.851803][ T6762] RSP: 002b:00007fc7c2c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.851813][ T6762] RAX: ffffffffffffffda RBX: 00007fc7c1fe6090 RCX: 00007fc7c1d8eec9 [ 247.851820][ T6762] RDX: 00002000000004c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 247.851826][ T6762] RBP: 00007fc7c1e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 247.851832][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.851837][ T6762] R13: 00007fc7c1fe6128 R14: 00007fc7c1fe6090 R15: 00007fffd44a5578 [ 247.851850][ T6762] [ 247.851854][ T6762] Mem-Info: [ 248.128264][ T6762] active_anon:9469 inactive_anon:45 isolated_anon:0 [ 248.128264][ T6762] active_file:6738 inactive_file:317 isolated_file:0 [ 248.128264][ T6762] unevictable:768 dirty:452 writeback:0 [ 248.128264][ T6762] slab_reclaimable:8098 slab_unreclaimable:100086 [ 248.128264][ T6762] mapped:40012 shmem:1735 pagetables:3687 [ 248.128264][ T6762] sec_pagetables:0 bounce:0 [ 248.128264][ T6762] kernel_misc_reclaimable:0 [ 248.128264][ T6762] free:139922 free_pcp:34822 free_cma:0 [ 248.195838][ T7827] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 248.202937][ T7827] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 248.220704][ T6762] Node 0 active_anon:24kB inactive_anon:172kB active_file:12kB inactive_file:176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147488kB dirty:24kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12244kB pagetables:4260kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 248.337400][ T6762] Node 1 active_anon:36652kB inactive_anon:8kB active_file:26940kB inactive_file:1092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12560kB dirty:1784kB writeback:0kB shmem:5404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:524kB pagetables:10488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 248.416452][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 248.565492][ T6762] Node 0 DMA free:10116kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 248.650694][ T6762] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 248.691552][ T6762] Node 0 DMA32 free:41164kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:8192KB free_highatomic:32KB active_anon:16kB inactive_anon:172kB active_file:12kB inactive_file:176kB unevictable:1536kB writepending:24kB present:3129332kB managed:2547824kB mlocked:0kB bounce:0kB free_pcp:16728kB local_pcp:8768kB free_cma:0kB [ 248.785559][ T6762] lowmem_reserve[]: 0 0 0 0 0 [ 248.790531][ T6762] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 248.860919][ T6762] lowmem_reserve[]: 0 0 0 0 0 [ 248.880243][ T6762] Node 1 Normal free:508200kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24656kB inactive_anon:8kB active_file:26940kB inactive_file:1092kB unevictable:1536kB writepending:1784kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:136092kB local_pcp:78944kB free_cma:0kB [ 248.966983][ T6762] lowmem_reserve[]: 0 0 0 0 0 [ 248.978991][ T6762] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10116kB [ 249.025054][ T6762] Node 0 DMA32: 189*4kB (UME) 257*8kB (UME) 207*16kB (ME) 175*32kB (UMEH) 100*64kB (ME) 62*128kB (ME) 37*256kB (UM) 5*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 41164kB [ 249.045227][ T6762] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 249.085648][ T6762] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (ME) 0*32kB 0*64kB 2*128kB (UM) 3*256kB (UME) 1*512kB (U) 2*1024kB (ME) 0*2048kB 123*4096kB (M) = 507432kB [ 249.140218][ T6762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.194720][ T6762] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 249.218836][ T6762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.268420][ T6762] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 249.324259][ T6762] 11486 total pagecache pages [ 249.345581][ T6762] 2700 pages in swap cache [ 249.361113][ T6762] Free swap = 92312kB [ 249.379562][ T6762] Total swap = 124996kB [ 249.396991][ T6762] 2097051 pages RAM [ 249.411127][ T6762] 0 pages HighMem/MovableOnly [ 249.430144][ T6762] 428453 pages reserved [ 249.461026][ T6762] 0 pages cma reserved [ 250.457319][ T5835] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 250.680040][ T7985] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 250.746619][ T7988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.521'. [ 250.942272][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 251.167454][ T7985] macvlan2: entered promiscuous mode [ 251.172993][ T7985] macvlan2: entered allmulticast mode [ 251.194283][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 251.194298][ T30] audit: type=1400 audit(1759317076.880:1434): avc: denied { execute } for pid=7980 comm="syz.1.521" path="/124/net_prio.prioidx" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 251.232593][ T30] audit: type=1400 audit(1759317076.920:1435): avc: denied { read write } for pid=7995 comm="syz.0.524" name="video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 251.306619][ T30] audit: type=1400 audit(1759317076.990:1436): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop0" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 251.488711][ T30] audit: type=1400 audit(1759317077.080:1437): avc: denied { write } for pid=7997 comm="syz.0.525" name="comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 251.593123][ T30] audit: type=1400 audit(1759317077.080:1438): avc: denied { read } for pid=7997 comm="syz.0.525" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 251.662577][ T30] audit: type=1400 audit(1759317077.080:1439): avc: denied { prog_load } for pid=7997 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 251.682013][ T30] audit: type=1400 audit(1759317077.080:1440): avc: denied { create } for pid=7997 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 251.701687][ T30] audit: type=1400 audit(1759317077.080:1441): avc: denied { read } for pid=7997 comm="syz.0.525" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 251.744833][ T30] audit: type=1400 audit(1759317077.080:1442): avc: denied { read } for pid=7997 comm="syz.0.525" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 251.884805][ T30] audit: type=1400 audit(1759317077.080:1443): avc: denied { prog_load } for pid=7997 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 251.943933][ T837] libceph: connect (1)[c::]:6789 error -101 [ 251.950550][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 252.218837][ T837] libceph: connect (1)[c::]:6789 error -101 [ 252.225002][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 252.917809][ T8006] ceph: No mds server is up or the cluster is laggy [ 253.463954][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 253.496227][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 254.081481][ T8052] FAULT_INJECTION: forcing a failure. [ 254.081481][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 254.185953][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.0.542 Not tainted syzkaller #0 PREEMPT(full) [ 254.185980][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.185989][ T8052] Call Trace: [ 254.185995][ T8052] [ 254.186001][ T8052] dump_stack_lvl+0x16c/0x1f0 [ 254.186030][ T8052] should_fail_ex+0x512/0x640 [ 254.186054][ T8052] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 254.186082][ T8052] should_failslab+0xc2/0x120 [ 254.186096][ T8052] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 254.186117][ T8052] ? security_file_alloc+0x34/0x2b0 [ 254.186144][ T8052] security_file_alloc+0x34/0x2b0 [ 254.186166][ T8052] init_file+0x93/0x4c0 [ 254.186185][ T8052] alloc_empty_file+0x73/0x1e0 [ 254.186205][ T8052] path_openat+0xda/0x2cb0 [ 254.186237][ T8052] ? stack_trace_save+0x8e/0xc0 [ 254.186262][ T8052] ? __pfx_path_openat+0x10/0x10 [ 254.186287][ T8052] ? stack_depot_save_flags+0x29/0x9c0 [ 254.186313][ T8052] do_filp_open+0x20b/0x470 [ 254.186355][ T8052] ? kasan_save_track+0x14/0x30 [ 254.186380][ T8052] ? __pfx_do_filp_open+0x10/0x10 [ 254.186404][ T8052] ? __x64_sys_execveat+0xc4/0x120 [ 254.186428][ T8052] ? do_syscall_64+0xcd/0x4e0 [ 254.186449][ T8052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.186499][ T8052] do_open_execat+0xf9/0x3a0 [ 254.186522][ T8052] ? __pfx_do_open_execat+0x10/0x10 [ 254.186556][ T8052] alloc_bprm+0x2d/0x710 [ 254.186582][ T8052] do_execveat_common.isra.0+0x1ce/0x610 [ 254.186612][ T8052] __x64_sys_execveat+0xda/0x120 [ 254.186640][ T8052] do_syscall_64+0xcd/0x4e0 [ 254.186664][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.186680][ T8052] RIP: 0033:0x7f16dd98eec9 [ 254.186694][ T8052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.186710][ T8052] RSP: 002b:00007f16de771038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 254.186728][ T8052] RAX: ffffffffffffffda RBX: 00007f16ddbe6090 RCX: 00007f16dd98eec9 [ 254.186739][ T8052] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 254.186749][ T8052] RBP: 00007f16de771090 R08: 0000000000001000 R09: 0000000000000000 [ 254.186758][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.186768][ T8052] R13: 00007f16ddbe6128 R14: 00007f16ddbe6090 R15: 00007ffd42774c68 [ 254.186790][ T8052] [ 255.291993][ T8066] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 255.508962][ T8070] bridge_slave_0: left allmulticast mode [ 255.509212][ T8073] netlink: 'syz.4.550': attribute type 10 has an invalid length. [ 255.547654][ T8070] bridge_slave_0: left promiscuous mode [ 255.591256][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.620725][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 255.739303][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.745739][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.758144][ T8070] bridge_slave_1: left allmulticast mode [ 255.776053][ T8070] bridge_slave_1: left promiscuous mode [ 255.812919][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.858920][ T8070] bond0: (slave bond_slave_0): Releasing backup interface [ 255.923207][ T8070] bond0: (slave bond_slave_1): Releasing backup interface [ 256.019732][ T8070] team0: Port device team_slave_0 removed [ 256.122437][ T8070] team0: Port device team_slave_1 removed [ 256.138769][ T8070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.146282][ T8070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.159564][ T8070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.176273][ T8070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.223894][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.232642][ T8073] team0: Port device bond0 added [ 256.265260][ T30] kauditd_printk_skb: 179 callbacks suppressed [ 256.265271][ T30] audit: type=1400 audit(1759317081.950:1623): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop0" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.316246][ T8074] netdevsim netdevsim5: Direct firmware load for . [ 256.316246][ T8074] failed with error -2 [ 256.395640][ T30] audit: type=1400 audit(1759317082.020:1624): avc: denied { create } for pid=8087 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 256.417780][ T30] audit: type=1400 audit(1759317082.020:1625): avc: denied { read write } for pid=8087 comm="syz.0.557" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 256.481639][ T30] audit: type=1400 audit(1759317082.030:1626): avc: denied { read write } for pid=8087 comm="syz.0.557" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 256.627438][ T30] audit: type=1400 audit(1759317082.130:1627): avc: denied { allowed } for pid=8087 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 256.744733][ T30] audit: type=1400 audit(1759317082.130:1628): avc: denied { create } for pid=8087 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 256.904189][ T30] audit: type=1400 audit(1759317082.130:1629): avc: denied { read write } for pid=8087 comm="syz.0.557" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 257.130428][ T30] audit: type=1400 audit(1759317082.130:1630): avc: denied { create } for pid=8087 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 257.344003][ T30] audit: type=1400 audit(1759317082.240:1631): avc: denied { firmware_load } for pid=8072 comm="syz.5.552" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 257.509894][ T30] audit: type=1400 audit(1759317082.260:1632): avc: denied { read write } for pid=6931 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 258.046541][ T8128] FAULT_INJECTION: forcing a failure. [ 258.046541][ T8128] name failslab, interval 1, probability 0, space 0, times 0 [ 258.046573][ T8128] CPU: 1 UID: 0 PID: 8128 Comm: syz.1.571 Not tainted syzkaller #0 PREEMPT(full) [ 258.046586][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.046592][ T8128] Call Trace: [ 258.046596][ T8128] [ 258.046601][ T8128] dump_stack_lvl+0x16c/0x1f0 [ 258.046619][ T8128] should_fail_ex+0x512/0x640 [ 258.046634][ T8128] ? fs_reclaim_acquire+0xae/0x150 [ 258.046647][ T8128] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 258.046661][ T8128] should_failslab+0xc2/0x120 [ 258.046671][ T8128] __kmalloc_noprof+0xd2/0x510 [ 258.046690][ T8128] tomoyo_realpath_from_path+0xc2/0x6e0 [ 258.046704][ T8128] ? tomoyo_profile+0x47/0x60 [ 258.046720][ T8128] tomoyo_path_number_perm+0x245/0x580 [ 258.046730][ T8128] ? tomoyo_path_number_perm+0x237/0x580 [ 258.046742][ T8128] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.046754][ T8128] ? find_held_lock+0x2b/0x80 [ 258.046780][ T8128] ? find_held_lock+0x2b/0x80 [ 258.046793][ T8128] ? hook_file_ioctl_common+0x145/0x410 [ 258.046811][ T8128] ? __fget_files+0x20e/0x3c0 [ 258.046829][ T8128] security_file_ioctl+0x9b/0x240 [ 258.046843][ T8128] __x64_sys_ioctl+0xb7/0x210 [ 258.046858][ T8128] do_syscall_64+0xcd/0x4e0 [ 258.046872][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.046883][ T8128] RIP: 0033:0x7fd99e78eec9 [ 258.046892][ T8128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.046902][ T8128] RSP: 002b:00007fd99f57e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.046912][ T8128] RAX: ffffffffffffffda RBX: 00007fd99e9e6090 RCX: 00007fd99e78eec9 [ 258.046919][ T8128] RDX: 0000200000000280 RSI: 0000000000005415 RDI: 0000000000000005 [ 258.046925][ T8128] RBP: 00007fd99f57e090 R08: 0000000000000000 R09: 0000000000000000 [ 258.046930][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.046936][ T8128] R13: 00007fd99e9e6128 R14: 00007fd99e9e6090 R15: 00007fff0e8e4298 [ 258.046949][ T8128] [ 258.046976][ T8128] ERROR: Out of memory at tomoyo_realpath_from_path. [ 258.288812][ T8131] netlink: 'syz.4.572': attribute type 1 has an invalid length. [ 258.349925][ T8132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44560 sclass=netlink_route_socket pid=8132 comm=syz.4.572 [ 258.482097][ T8129] netlink: 'syz.2.570': attribute type 20 has an invalid length. [ 258.482128][ T8129] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.482544][ T8129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.482622][ T8129] IPv6: NLM_F_CREATE should be set when creating new route [ 258.513650][ T8131] bond1: entered promiscuous mode [ 258.513879][ T8131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.961046][ T8158] netlink: 'syz.2.581': attribute type 10 has an invalid length. [ 260.013883][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 260.165586][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 262.831318][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 262.831335][ T30] audit: type=1400 audit(1759317088.520:1799): avc: denied { read write } for pid=6931 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.861916][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.927448][ T30] audit: type=1400 audit(1759317088.610:1800): avc: denied { read } for pid=8170 comm="syz.5.585" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 262.950156][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.002013][ T30] audit: type=1400 audit(1759317088.650:1801): avc: denied { prog_load } for pid=8170 comm="syz.5.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 263.031049][ T30] audit: type=1400 audit(1759317088.650:1802): avc: denied { create } for pid=8170 comm="syz.5.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 263.052698][ T30] audit: type=1400 audit(1759317088.650:1803): avc: denied { map_create } for pid=8170 comm="syz.5.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 263.077878][ T30] audit: type=1400 audit(1759317088.660:1804): avc: denied { prog_load } for pid=8170 comm="syz.5.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 263.144626][ T30] audit: type=1400 audit(1759317088.670:1805): avc: denied { read write } for pid=6931 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 263.186497][ T30] audit: type=1400 audit(1759317088.720:1806): avc: denied { name_bind } for pid=8172 comm="syz.5.586" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 263.216194][ T30] audit: type=1400 audit(1759317088.790:1807): avc: denied { map_create } for pid=8172 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 263.236803][ T30] audit: type=1400 audit(1759317088.790:1808): avc: denied { execmem } for pid=8172 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 264.461880][ T8158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.476547][ T8158] team0: Port device bond0 added [ 264.573960][ T8188] FAULT_INJECTION: forcing a failure. [ 264.573960][ T8188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.590676][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.2.592 Not tainted syzkaller #0 PREEMPT(full) [ 264.590695][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.590702][ T8188] Call Trace: [ 264.590706][ T8188] [ 264.590712][ T8188] dump_stack_lvl+0x16c/0x1f0 [ 264.590733][ T8188] should_fail_ex+0x512/0x640 [ 264.590748][ T8188] _copy_from_user+0x2e/0xd0 [ 264.590763][ T8188] memdup_user+0x6b/0xe0 [ 264.590780][ T8188] proc_pid_attr_write+0x22e/0x790 [ 264.590794][ T8188] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 264.590805][ T8188] vfs_write+0x29d/0x11d0 [ 264.590824][ T8188] ? __pfx___mutex_lock+0x10/0x10 [ 264.590838][ T8188] ? __pfx_vfs_write+0x10/0x10 [ 264.590869][ T8188] ? __fget_files+0x20e/0x3c0 [ 264.590889][ T8188] ksys_write+0x12a/0x250 [ 264.590904][ T8188] ? __pfx_ksys_write+0x10/0x10 [ 264.590927][ T8188] do_syscall_64+0xcd/0x4e0 [ 264.590943][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.590954][ T8188] RIP: 0033:0x7f52b478eec9 [ 264.590965][ T8188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.590979][ T8188] RSP: 002b:00007f52b5661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.590995][ T8188] RAX: ffffffffffffffda RBX: 00007f52b49e5fa0 RCX: 00007f52b478eec9 [ 264.591002][ T8188] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000003 [ 264.591008][ T8188] RBP: 00007f52b5661090 R08: 0000000000000000 R09: 0000000000000000 [ 264.591014][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.591020][ T8188] R13: 00007f52b49e6038 R14: 00007f52b49e5fa0 R15: 00007ffd89738ca8 [ 264.591033][ T8188] [ 265.036543][ T8199] netlink: 'syz.1.596': attribute type 10 has an invalid length. [ 267.798484][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 267.882504][ T30] kauditd_printk_skb: 286 callbacks suppressed [ 267.882522][ T30] audit: type=1400 audit(1759317093.570:2095): avc: denied { allowed } for pid=8269 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 267.966722][ T30] audit: type=1400 audit(1759317093.570:2096): avc: denied { create } for pid=8269 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 267.995325][ T30] audit: type=1400 audit(1759317093.570:2097): avc: denied { name_bind } for pid=8269 comm="syz.0.622" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 268.077776][ T30] audit: type=1400 audit(1759317093.610:2098): avc: denied { create } for pid=8269 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 268.137775][ T30] audit: type=1400 audit(1759317093.630:2099): avc: denied { allowed } for pid=8274 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 268.157458][ T30] audit: type=1400 audit(1759317093.650:2100): avc: denied { create } for pid=8274 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 268.177534][ T30] audit: type=1400 audit(1759317093.740:2101): avc: denied { mounton } for pid=8274 comm="syz.4.626" path="/125/file0" dev="tmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 268.200102][ T30] audit: type=1400 audit(1759317093.800:2102): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop0" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.227362][ T30] audit: type=1400 audit(1759317093.810:2103): avc: denied { write } for pid=8274 comm="syz.4.626" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 268.252089][ T30] audit: type=1400 audit(1759317093.810:2104): avc: denied { create } for pid=8274 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 268.528163][ T8288] IPVS: length: 90 != 112 [ 269.366762][ T1105] Bluetooth: hci6: Frame reassembly failed (-84) [ 269.630833][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 271.416359][ T8351] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[8351] [ 271.418941][ T5837] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 271.426933][ T5835] Bluetooth: hci6: command 0x1003 tx timeout [ 273.031477][ T30] kauditd_printk_skb: 227 callbacks suppressed [ 273.031494][ T30] audit: type=1400 audit(1759317098.720:2332): avc: denied { read write } for pid=5827 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.209647][ T30] audit: type=1400 audit(1759317098.850:2333): avc: denied { prog_load } for pid=8383 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 273.492537][ T30] audit: type=1400 audit(1759317098.850:2334): avc: denied { execmem } for pid=8383 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 273.593010][ T30] audit: type=1400 audit(1759317098.870:2335): avc: denied { create } for pid=8383 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 273.693444][ T30] audit: type=1400 audit(1759317098.870:2336): avc: denied { prog_load } for pid=8371 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 273.808304][ T30] audit: type=1400 audit(1759317098.940:2337): avc: denied { read write } for pid=5827 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 274.019940][ T30] audit: type=1400 audit(1759317099.200:2338): avc: denied { create } for pid=8371 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 274.101015][ T30] audit: type=1400 audit(1759317099.230:2339): avc: denied { create } for pid=8387 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 274.353770][ T30] audit: type=1400 audit(1759317099.230:2340): avc: denied { read write } for pid=8387 comm="syz.1.663" name="vmci" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 274.385871][ T8304] syz.4.635 (8304) used greatest stack depth: 20088 bytes left [ 274.466049][ T30] audit: type=1400 audit(1759317099.230:2341): avc: denied { read write } for pid=8387 comm="syz.1.663" name="video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 275.798705][ T8426] netlink: 32 bytes leftover after parsing attributes in process `syz.4.676'. [ 275.832291][ T8429] ALSA: mixer_oss: invalid OSS volume '' [ 276.206171][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 276.995236][ T8453] capability: warning: `syz.0.681' uses 32-bit capabilities (legacy support in use) [ 277.231954][ T8460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.689'. [ 277.367285][ T8460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.689'. [ 277.402175][ T8460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.689'. [ 278.042708][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 278.042727][ T30] audit: type=1400 audit(1759317103.720:2491): avc: denied { map_create } for pid=8467 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 278.870935][ T30] audit: type=1400 audit(1759317103.720:2492): avc: denied { create } for pid=8467 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 279.040075][ T30] audit: type=1400 audit(1759317103.720:2493): avc: denied { create } for pid=8467 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 279.116397][ T30] audit: type=1400 audit(1759317103.720:2494): avc: denied { read } for pid=8467 comm="syz.1.691" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 279.179252][ T30] audit: type=1400 audit(1759317103.730:2495): avc: denied { read write } for pid=5827 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 279.235118][ T30] audit: type=1400 audit(1759317103.780:2496): avc: denied { read write } for pid=8471 comm="syz.1.692" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 279.289961][ T30] audit: type=1400 audit(1759317103.780:2497): avc: denied { create } for pid=8471 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 279.414541][ T30] audit: type=1400 audit(1759317103.790:2498): avc: denied { read } for pid=8471 comm="syz.1.692" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 279.564337][ T30] audit: type=1400 audit(1759317103.790:2499): avc: denied { mount } for pid=8471 comm="syz.1.692" name="/" dev="configfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=0 [ 279.611339][ T8498] FAULT_INJECTION: forcing a failure. [ 279.611339][ T8498] name failslab, interval 1, probability 0, space 0, times 0 [ 279.676438][ T8498] CPU: 0 UID: 0 PID: 8498 Comm: syz.2.701 Not tainted syzkaller #0 PREEMPT(full) [ 279.676464][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.676472][ T8498] Call Trace: [ 279.676477][ T8498] [ 279.676483][ T8498] dump_stack_lvl+0x16c/0x1f0 [ 279.676507][ T8498] should_fail_ex+0x512/0x640 [ 279.676530][ T8498] should_failslab+0xc2/0x120 [ 279.676546][ T8498] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 279.676572][ T8498] ? sidtab_sid2str_get+0x17a/0x680 [ 279.676598][ T8498] kmemdup_noprof+0x29/0x60 [ 279.676622][ T8498] sidtab_sid2str_get+0x17a/0x680 [ 279.676645][ T8498] sidtab_entry_to_string+0x33/0x110 [ 279.676665][ T8498] security_sid_to_context_core+0x35c/0x640 [ 279.676688][ T8498] avc_audit_post_callback+0x109/0x8f0 [ 279.676710][ T8498] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 279.676732][ T8498] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 279.676754][ T8498] ? skb_put+0x138/0x1b0 [ 279.676778][ T8498] ? audit_log_n_string+0x253/0x550 [ 279.676804][ T8498] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 279.676826][ T8498] common_lsm_audit+0x24b/0x300 [ 279.676847][ T8498] ? __pfx_common_lsm_audit+0x10/0x10 [ 279.676873][ T8498] slow_avc_audit+0x186/0x210 [ 279.676896][ T8498] ? __pfx_slow_avc_audit+0x10/0x10 [ 279.676931][ T8498] audit_inode_permission+0x1ec/0x2b0 [ 279.676965][ T8498] ? __pfx_audit_inode_permission+0x10/0x10 [ 279.676988][ T8498] ? avc_has_perm_noaudit+0x306/0x3b0 [ 279.677003][ T8498] ? avc_has_perm_noaudit+0x149/0x3b0 [ 279.677020][ T8498] selinux_inode_permission+0xcfa/0x10c0 [ 279.677037][ T8498] ? __pfx_selinux_inode_permission+0x10/0x10 [ 279.677048][ T8498] ? find_held_lock+0x2b/0x80 [ 279.677063][ T8498] ? devcgroup_check_permission+0x171/0x420 [ 279.677075][ T8498] ? match_exception_partial+0x239/0x2d0 [ 279.677090][ T8498] security_inode_permission+0xda/0x260 [ 279.677104][ T8498] inode_permission+0x14e/0x630 [ 279.677126][ T8498] may_open+0x111/0x470 [ 279.677145][ T8498] path_openat+0x1354/0x2cb0 [ 279.677175][ T8498] ? __pfx_path_openat+0x10/0x10 [ 279.677195][ T8498] do_filp_open+0x20b/0x470 [ 279.677211][ T8498] ? __pfx_do_filp_open+0x10/0x10 [ 279.677237][ T8498] ? alloc_fd+0x471/0x7d0 [ 279.677255][ T8498] do_sys_openat2+0x11b/0x1d0 [ 279.677268][ T8498] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.677281][ T8498] ? __fget_files+0x20e/0x3c0 [ 279.677298][ T8498] __x64_sys_openat+0x174/0x210 [ 279.677310][ T8498] ? __pfx___x64_sys_openat+0x10/0x10 [ 279.677321][ T8498] ? ksys_write+0x1ac/0x250 [ 279.677341][ T8498] do_syscall_64+0xcd/0x4e0 [ 279.677356][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.677367][ T8498] RIP: 0033:0x7f52b478d710 [ 279.677376][ T8498] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 279.677386][ T8498] RSP: 002b:00007f52b5660b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 279.677397][ T8498] RAX: ffffffffffffffda RBX: 0000000000101a02 RCX: 00007f52b478d710 [ 279.677404][ T8498] RDX: 0000000000101a02 RSI: 00007f52b5660c10 RDI: 00000000ffffff9c [ 279.677410][ T8498] RBP: 00007f52b5660c10 R08: 0000000000000000 R09: 002367732f766564 [ 279.677416][ T8498] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 279.677422][ T8498] R13: 00007f52b49e6038 R14: 00007f52b49e5fa0 R15: 00007ffd89738ca8 [ 279.677435][ T8498] [ 280.413903][ T30] audit: type=1400 audit(1759317103.790:2500): avc: denied { create } for pid=8471 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 281.621160][ T8545] netlink: 'syz.0.718': attribute type 10 has an invalid length. [ 281.670940][ T8547] netlink: 40 bytes leftover after parsing attributes in process `syz.1.717'. [ 281.759395][ T8545] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 282.019059][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.722'. [ 282.107967][ T8563] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 282.150196][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 282.349488][ T8565] netlink: 830 bytes leftover after parsing attributes in process `syz.1.723'. [ 282.370893][ T8564] CUSE: info not properly terminated [ 282.654237][ T8573] netlink: 'syz.2.726': attribute type 12 has an invalid length. [ 283.142182][ T30] kauditd_printk_skb: 221 callbacks suppressed [ 283.142200][ T30] audit: type=1400 audit(1759317108.830:2722): avc: denied { read write } for pid=5827 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 283.213480][ T30] audit: type=1400 audit(1759317108.890:2723): avc: denied { read write } for pid=8578 comm="syz.1.730" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 283.287277][ T30] audit: type=1400 audit(1759317108.890:2724): avc: denied { create } for pid=8578 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 283.317036][ T30] audit: type=1400 audit(1759317108.950:2725): avc: denied { read write } for pid=6931 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 283.377605][ T30] audit: type=1400 audit(1759317108.970:2726): avc: denied { read write } for pid=5830 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 283.469104][ T30] audit: type=1400 audit(1759317109.000:2727): avc: denied { prog_load } for pid=8580 comm="syz.5.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 283.517422][ T30] audit: type=1400 audit(1759317109.000:2728): avc: denied { prog_load } for pid=8580 comm="syz.5.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 283.571903][ T30] audit: type=1400 audit(1759317109.000:2729): avc: denied { prog_load } for pid=8580 comm="syz.5.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 283.753290][ T30] audit: type=1400 audit(1759317109.010:2730): avc: denied { prog_load } for pid=8580 comm="syz.5.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 283.777389][ T30] audit: type=1400 audit(1759317109.030:2731): avc: denied { read } for pid=8580 comm="syz.5.731" dev="nsfs" ino=4026533875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 284.475589][ T8616] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 284.482562][ T8616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.502636][ T8605] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.551762][ T8616] vhci_hcd vhci_hcd.0: Device attached [ 284.779228][ T44] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 284.807329][ T8620] vhci_hcd: connection closed [ 284.827700][ T36] vhci_hcd: stop threads [ 284.869445][ T36] vhci_hcd: release socket [ 284.889730][ T36] vhci_hcd: disconnect device [ 286.198111][ T8670] FAULT_INJECTION: forcing a failure. [ 286.198111][ T8670] name failslab, interval 1, probability 0, space 0, times 0 [ 286.383567][ T8670] CPU: 1 UID: 0 PID: 8670 Comm: syz.2.760 Not tainted syzkaller #0 PREEMPT(full) [ 286.383592][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.383602][ T8670] Call Trace: [ 286.383608][ T8670] [ 286.383614][ T8670] dump_stack_lvl+0x16c/0x1f0 [ 286.383641][ T8670] should_fail_ex+0x512/0x640 [ 286.383665][ T8670] ? fs_reclaim_acquire+0xae/0x150 [ 286.383686][ T8670] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 286.383706][ T8670] should_failslab+0xc2/0x120 [ 286.383722][ T8670] __kmalloc_noprof+0xd2/0x510 [ 286.383747][ T8670] ? trace_kmalloc+0x2b/0xd0 [ 286.383761][ T8670] ? __kmalloc_noprof+0x242/0x510 [ 286.383784][ T8670] tomoyo_realpath_from_path+0xc2/0x6e0 [ 286.383806][ T8670] ? tomoyo_fill_path_info+0x233/0x420 [ 286.383822][ T8670] tomoyo_mount_acl+0x1ae/0x850 [ 286.383840][ T8670] ? bpf_ksym_find+0x127/0x1c0 [ 286.383862][ T8670] ? is_bpf_text_address+0x94/0x1a0 [ 286.383881][ T8670] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 286.383898][ T8670] ? __kernel_text_address+0xd/0x40 [ 286.383915][ T8670] ? unwind_get_return_address+0x59/0xa0 [ 286.383934][ T8670] ? arch_stack_walk+0xa6/0x100 [ 286.383971][ T8670] ? tomoyo_domain+0xbb/0x150 [ 286.383992][ T8670] ? tomoyo_profile+0x47/0x60 [ 286.384015][ T8670] tomoyo_mount_permission+0x16d/0x420 [ 286.384032][ T8670] ? tomoyo_mount_permission+0x14f/0x420 [ 286.384051][ T8670] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 286.384083][ T8670] security_sb_mount+0x9b/0x260 [ 286.384104][ T8670] path_mount+0x15f/0x2060 [ 286.384127][ T8670] ? __pfx_path_mount+0x10/0x10 [ 286.384146][ T8670] ? kmem_cache_free+0x2d1/0x4d0 [ 286.384167][ T8670] ? putname+0x154/0x1a0 [ 286.384187][ T8670] ? putname+0x154/0x1a0 [ 286.384205][ T8670] ? __x64_sys_mount+0x28d/0x310 [ 286.384220][ T8670] __x64_sys_mount+0x28d/0x310 [ 286.384238][ T8670] ? __pfx___x64_sys_mount+0x10/0x10 [ 286.384263][ T8670] do_syscall_64+0xcd/0x4e0 [ 286.384288][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.384306][ T8670] RIP: 0033:0x7f52b478eec9 [ 286.384320][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.384337][ T8670] RSP: 002b:00007f52b5661038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 286.384353][ T8670] RAX: ffffffffffffffda RBX: 00007f52b49e5fa0 RCX: 00007f52b478eec9 [ 286.384363][ T8670] RDX: 0000200000000300 RSI: 0000200000000040 RDI: 0000200000000100 [ 286.384373][ T8670] RBP: 00007f52b5661090 R08: 0000000000000000 R09: 0000000000000000 [ 286.384382][ T8670] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 286.384391][ T8670] R13: 00007f52b49e6038 R14: 00007f52b49e5fa0 R15: 00007ffd89738ca8 [ 286.384410][ T8670] [ 286.384417][ T8670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.061729][ T10] libceph: connect (1)[c::]:6789 error -101 [ 287.067919][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 287.348868][ T973] libceph: connect (1)[c::]:6789 error -101 [ 287.354971][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 287.817548][ T8685] ceph: No mds server is up or the cluster is laggy [ 288.171715][ T30] kauditd_printk_skb: 288 callbacks suppressed [ 288.171732][ T30] audit: type=1400 audit(1759317113.860:3020): avc: denied { read write } for pid=6931 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 288.238353][ T30] audit: type=1400 audit(1759317113.930:3021): avc: denied { create } for pid=8716 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 288.302733][ T30] audit: type=1400 audit(1759317113.990:3022): avc: denied { create } for pid=8716 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 288.348196][ T30] audit: type=1400 audit(1759317114.030:3023): avc: denied { read write } for pid=6931 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 288.391727][ T30] audit: type=1400 audit(1759317114.060:3024): avc: denied { execmem } for pid=8714 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 288.414613][ T30] audit: type=1400 audit(1759317114.060:3025): avc: denied { create } for pid=8714 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 288.436401][ T30] audit: type=1400 audit(1759317114.070:3026): avc: denied { create } for pid=8714 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 288.576325][ T30] audit: type=1400 audit(1759317114.070:3027): avc: denied { create } for pid=8714 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 288.597643][ T30] audit: type=1400 audit(1759317114.070:3028): avc: denied { create } for pid=8714 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 288.666442][ T8724] FAULT_INJECTION: forcing a failure. [ 288.666442][ T8724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.716532][ T30] audit: type=1400 audit(1759317114.070:3029): avc: denied { create } for pid=8714 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 288.740305][ T8724] CPU: 1 UID: 0 PID: 8724 Comm: syz.4.780 Not tainted syzkaller #0 PREEMPT(full) [ 288.740329][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.740336][ T8724] Call Trace: [ 288.740340][ T8724] [ 288.740344][ T8724] dump_stack_lvl+0x16c/0x1f0 [ 288.740363][ T8724] should_fail_ex+0x512/0x640 [ 288.740379][ T8724] _copy_from_user+0x2e/0xd0 [ 288.740394][ T8724] kstrtouint_from_user+0xd6/0x1d0 [ 288.740405][ T8724] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 288.740413][ T8724] ? __lock_acquire+0xb97/0x1ce0 [ 288.740431][ T8724] proc_fail_nth_write+0x83/0x220 [ 288.740442][ T8724] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 288.740456][ T8724] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 288.740466][ T8724] vfs_write+0x29d/0x11d0 [ 288.740485][ T8724] ? __pfx___mutex_lock+0x10/0x10 [ 288.740505][ T8724] ? __pfx_vfs_write+0x10/0x10 [ 288.740533][ T8724] ? __fget_files+0x20e/0x3c0 [ 288.740558][ T8724] ksys_write+0x12a/0x250 [ 288.740572][ T8724] ? __pfx_ksys_write+0x10/0x10 [ 288.740591][ T8724] do_syscall_64+0xcd/0x4e0 [ 288.740605][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.740616][ T8724] RIP: 0033:0x7f3ef738d97f [ 288.740626][ T8724] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 288.740636][ T8724] RSP: 002b:00007f3ef815f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 288.740646][ T8724] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ef738d97f [ 288.740653][ T8724] RDX: 0000000000000001 RSI: 00007f3ef815f0a0 RDI: 0000000000000007 [ 288.740659][ T8724] RBP: 00007f3ef815f090 R08: 0000000000000000 R09: 0000000000000000 [ 288.740664][ T8724] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 288.740670][ T8724] R13: 00007f3ef75e6038 R14: 00007f3ef75e5fa0 R15: 00007ffd988c2728 [ 288.740683][ T8724] [ 288.922058][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.116689][ T8737] FAULT_INJECTION: forcing a failure. [ 289.116689][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 289.116760][ T8737] CPU: 0 UID: 0 PID: 8737 Comm: syz.4.784 Not tainted syzkaller #0 PREEMPT(full) [ 289.116772][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.116779][ T8737] Call Trace: [ 289.116782][ T8737] [ 289.116787][ T8737] dump_stack_lvl+0x16c/0x1f0 [ 289.116806][ T8737] should_fail_ex+0x512/0x640 [ 289.116819][ T8737] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 289.116837][ T8737] should_failslab+0xc2/0x120 [ 289.116847][ T8737] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 289.116862][ T8737] ? __alloc_skb+0x2b2/0x380 [ 289.116876][ T8737] __alloc_skb+0x2b2/0x380 [ 289.116887][ T8737] ? __pfx___alloc_skb+0x10/0x10 [ 289.116899][ T8737] ? fib_nlmsg_size+0x90/0xaa0 [ 289.116913][ T8737] rtmsg_fib+0x13e/0x520 [ 289.116923][ T8737] ? __pfx_rtmsg_fib+0x10/0x10 [ 289.116932][ T8737] ? __pfx_fib_metrics_match+0x10/0x10 [ 289.116944][ T8737] ? lockdep_rtnl_is_held+0x26/0x40 [ 289.116954][ T8737] ? fib_find_node+0x22b/0x2b0 [ 289.116966][ T8737] fib_table_delete+0x60c/0x8d0 [ 289.116983][ T8737] ? __pfx_fib_table_delete+0x10/0x10 [ 289.116995][ T8737] ? find_held_lock+0x2b/0x80 [ 289.117011][ T8737] ? fib_magic+0x1a7/0x5c0 [ 289.117024][ T8737] ? fib_new_table+0x109/0x3f0 [ 289.117039][ T8737] fib_magic+0x362/0x5c0 [ 289.117054][ T8737] ? __pfx_fib_magic+0x10/0x10 [ 289.117074][ T8737] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.117089][ T8737] fib_del_ifaddr+0x3b4/0x1510 [ 289.117110][ T8737] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 289.117134][ T8737] fib_inetaddr_event+0xb9/0x270 [ 289.117157][ T8737] notifier_call_chain+0xbc/0x410 [ 289.117171][ T8737] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 289.117197][ T8737] blocking_notifier_call_chain+0x69/0xa0 [ 289.117210][ T8737] __inet_del_ifa+0x3dc/0xf70 [ 289.117229][ T8737] devinet_ioctl+0x15e1/0x1f50 [ 289.117245][ T8737] ? __pfx_devinet_ioctl+0x10/0x10 [ 289.117261][ T8737] ? _copy_from_user+0x59/0xd0 [ 289.117277][ T8737] inet_ioctl+0x3a7/0x3f0 [ 289.117292][ T8737] ? __pfx_inet_ioctl+0x10/0x10 [ 289.117315][ T8737] ? tomoyo_path_number_perm+0x18d/0x580 [ 289.117332][ T8737] sock_do_ioctl+0x118/0x280 [ 289.117347][ T8737] ? __pfx_sock_do_ioctl+0x10/0x10 [ 289.117366][ T8737] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 289.117379][ T8737] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 289.117395][ T8737] sock_ioctl+0x227/0x6b0 [ 289.117411][ T8737] ? __pfx_sock_ioctl+0x10/0x10 [ 289.117425][ T8737] ? hook_file_ioctl_common+0x145/0x410 [ 289.117444][ T8737] ? selinux_file_ioctl+0x180/0x270 [ 289.117455][ T8737] ? selinux_file_ioctl+0xb4/0x270 [ 289.117468][ T8737] ? __pfx_sock_ioctl+0x10/0x10 [ 289.117484][ T8737] __x64_sys_ioctl+0x18b/0x210 [ 289.117498][ T8737] do_syscall_64+0xcd/0x4e0 [ 289.117512][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.117523][ T8737] RIP: 0033:0x7f3ef738eec9 [ 289.117533][ T8737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.117543][ T8737] RSP: 002b:00007f3ef815f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.117553][ T8737] RAX: ffffffffffffffda RBX: 00007f3ef75e5fa0 RCX: 00007f3ef738eec9 [ 289.117559][ T8737] RDX: 0000200000000000 RSI: 0000000000008918 RDI: 0000000000000003 [ 289.117565][ T8737] RBP: 00007f3ef815f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.117571][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.117576][ T8737] R13: 00007f3ef75e6038 R14: 00007f3ef75e5fa0 R15: 00007ffd988c2728 [ 289.117589][ T8737] [ 289.657324][ T31] INFO: task syz.3.206:6763 blocked for more than 143 seconds. [ 289.657350][ T31] Not tainted syzkaller #0 [ 289.657359][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.657367][ T31] task:syz.3.206 state:D stack:28480 pid:6763 tgid:6760 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 289.657423][ T31] Call Trace: [ 289.657429][ T31] [ 289.657440][ T31] __schedule+0x1190/0x5de0 [ 289.657480][ T31] ? __pfx___schedule+0x10/0x10 [ 289.657504][ T31] ? find_held_lock+0x2b/0x80 [ 289.657527][ T31] ? schedule+0x2d7/0x3a0 [ 289.657548][ T31] ? blk_trace_ioctl+0x23a/0x280 [ 289.657568][ T31] schedule+0xe7/0x3a0 [ 289.657587][ T31] schedule_preempt_disabled+0x13/0x30 [ 289.657607][ T31] __mutex_lock+0x818/0x1060 [ 289.657631][ T31] ? find_held_lock+0x2b/0x80 [ 289.657651][ T31] ? blk_trace_ioctl+0x23a/0x280 [ 289.657673][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 289.657695][ T31] ? avc_has_extended_perms+0x47c/0x1090 [ 289.657729][ T31] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 289.657761][ T31] ? blk_trace_ioctl+0x23a/0x280 [ 289.657777][ T31] blk_trace_ioctl+0x23a/0x280 [ 289.657794][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 289.657817][ T31] blkdev_common_ioctl+0xf29/0x2470 [ 289.657841][ T31] ? __handle_mm_fault+0x5a8/0x2a50 [ 289.657868][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 289.657905][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.657931][ T31] ? do_vfs_ioctl+0x128/0x14f0 [ 289.657955][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 289.657977][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 289.658013][ T31] blkdev_ioctl+0x1cb/0x6d0 [ 289.658037][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 289.658062][ T31] ? selinux_file_ioctl+0x180/0x270 [ 289.658083][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 289.658106][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 289.658133][ T31] __x64_sys_ioctl+0x18b/0x210 [ 289.658158][ T31] do_syscall_64+0xcd/0x4e0 [ 289.658184][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.658203][ T31] RIP: 0033:0x7fc7c1d8eec9 [ 289.658219][ T31] RSP: 002b:00007fc7c2c4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.658238][ T31] RAX: ffffffffffffffda RBX: 00007fc7c1fe6180 RCX: 00007fc7c1d8eec9 [ 289.658250][ T31] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000006 [ 289.658261][ T31] RBP: 00007fc7c1e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 289.658273][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.658284][ T31] R13: 00007fc7c1fe6218 R14: 00007fc7c1fe6180 R15: 00007fffd44a5578 [ 289.658308][ T31] [ 289.658330][ T31] [ 289.658330][ T31] Showing all locks held in the system: [ 289.658339][ T31] 2 locks held by kworker/1:0H/25: [ 289.658352][ T31] 1 lock held by khungtaskd/31: [ 289.658361][ T31] #0: ffffffff8e1c34a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 289.658405][ T31] 5 locks held by kworker/1:1/44: [ 289.658414][ T31] #0: ffff888020ee3d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 289.658459][ T31] #1: ffffc90000b47d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 289.658501][ T31] #2: ffff888029b94198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 289.658547][ T31] #3: ffff888029b97518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 289.658593][ T31] #4: ffff8880293b5268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 289.658663][ T31] 2 locks held by getty/5583: [ 289.658672][ T31] #0: ffff888034de20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 289.658714][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 289.658774][ T31] 3 locks held by syz.3.206/6762: [ 289.658784][ T31] 1 lock held by syz.3.206/6763: [ 289.658793][ T31] #0: ffff888143b6a698 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x23a/0x280 [ 289.658838][ T31] 2 locks held by syz.0.776/8718: [ 289.658848][ T31] #0: ffffffff8fec80c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 289.658905][ T31] #1: ffffffff8e1cea38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 289.658949][ T31] 2 locks held by syz.0.776/8722: [ 289.658959][ T31] 1 lock held by syz.5.787/8741: [ 289.658969][ T31] #0: ffffffff8fec80c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 289.659018][ T31] 3 locks held by syz-executor/8742: [ 289.659027][ T31] [ 289.659032][ T31] ============================================= [ 289.659032][ T31] [ 289.659040][ T31] NMI backtrace for cpu 1 [ 289.659050][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 289.659068][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.659077][ T31] Call Trace: [ 289.659083][ T31] [ 289.659089][ T31] dump_stack_lvl+0x116/0x1f0 [ 289.659112][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 289.659139][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.659157][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 289.659183][ T31] watchdog+0xf0e/0x1260 [ 289.659207][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.659227][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.659248][ T31] ? __kthread_parkme+0x19e/0x250 [ 289.659273][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.659292][ T31] kthread+0x3c5/0x780 [ 289.659308][ T31] ? __pfx_kthread+0x10/0x10 [ 289.659325][ T31] ? rcu_is_watching+0x12/0xc0 [ 289.659345][ T31] ? __pfx_kthread+0x10/0x10 [ 289.659363][ T31] ret_from_fork+0x56a/0x730 [ 289.659379][ T31] ? __pfx_kthread+0x10/0x10 [ 289.659395][ T31] ret_from_fork_asm+0x1a/0x30 [ 289.659425][ T31] [ 289.659430][ T31] Sending NMI from CPU 1 to CPUs 0: [ 289.659454][ C0] NMI backtrace for cpu 0 [ 289.659463][ C0] CPU: 0 UID: 0 PID: 8742 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 289.659481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.659488][ C0] RIP: 0010:check_preemption_disabled+0x2e/0xe0 [ 289.659507][ C0] Code: 48 83 ec 08 65 8b 1d 55 99 2a 08 65 8b 05 4a 99 2a 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c 58 c4 02 74 ea 48 89 fd 65 48 8b 05 0a 99 2a 08 f6 40 2f 04 74 09 [ 289.659519][ C0] RSP: 0018:ffffc90003cc7710 EFLAGS: 00000046 [ 289.659529][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: ffffc90003cc7744 [ 289.659538][ C0] RDX: 0000000000000000 RSI: ffffffff8daa81e2 RDI: ffffffff8bd007c0 [ 289.659546][ C0] RBP: ffffc90003cc77e0 R08: 8f98732f2e8fc3da R09: 0000000000000001 [ 289.659554][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff8217e30f [ 289.659562][ C0] R13: 0000000000000283 R14: ffff8881a1294900 R15: 000000000000000d [ 289.659571][ C0] FS: 0000555558eb2500(0000) GS:ffff888124e71000(0000) knlGS:0000000000000000 [ 289.659584][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.659593][ C0] CR2: 00007f3ef73b6c60 CR3: 000000003446b000 CR4: 00000000003526f0 [ 289.659601][ C0] Call Trace: [ 289.659605][ C0] [ 289.659609][ C0] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 289.659628][ C0] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 289.659651][ C0] lock_release+0x9c/0x2f0 [ 289.659664][ C0] kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 289.659682][ C0] ? proc_alloc_inode+0x25/0x200 [ 289.659700][ C0] ? __pfx_proc_alloc_inode+0x10/0x10 [ 289.659714][ C0] proc_alloc_inode+0x25/0x200 [ 289.659727][ C0] alloc_inode+0x64/0x240 [ 289.659742][ C0] new_inode+0x22/0x1c0 [ 289.659756][ C0] proc_pid_make_inode+0x22/0x160 [ 289.659772][ C0] proc_pident_instantiate+0x85/0x310 [ 289.659788][ C0] proc_pident_lookup+0x1f5/0x270 [ 289.659803][ C0] ? __pfx_proc_tgid_base_lookup+0x10/0x10 [ 289.659818][ C0] lookup_open.isra.0+0x4da/0x1580 [ 289.659838][ C0] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 289.659859][ C0] ? mnt_get_write_access+0x20c/0x300 [ 289.659877][ C0] path_openat+0x893/0x2cb0 [ 289.659898][ C0] ? __pfx_path_openat+0x10/0x10 [ 289.659918][ C0] do_filp_open+0x20b/0x470 [ 289.659936][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 289.659958][ C0] ? __pfx_kfree_link+0x10/0x10 [ 289.659976][ C0] ? alloc_fd+0x471/0x7d0 [ 289.659997][ C0] do_sys_openat2+0x11b/0x1d0 [ 289.660012][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.660025][ C0] ? find_held_lock+0x2b/0x80 [ 289.660042][ C0] ? handle_mm_fault+0x2ab/0xd10 [ 289.660059][ C0] __x64_sys_openat+0x174/0x210 [ 289.660073][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 289.660088][ C0] ? do_user_addr_fault+0x843/0x1370 [ 289.660106][ C0] do_syscall_64+0xcd/0x4e0 [ 289.660122][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.660135][ C0] RIP: 0033:0x7f3ef738d710 [ 289.660144][ C0] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 289.660155][ C0] RSP: 002b:00007ffd988c2530 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 289.660167][ C0] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007f3ef738d710 [ 289.660175][ C0] RDX: 0000000000080001 RSI: 00007f3ef7413818 RDI: 00000000ffffff9c [ 289.660183][ C0] RBP: 00007f3ef7413818 R08: 0000000000000000 R09: 0000000000000000 [ 289.660191][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 289.660198][ C0] R13: 00007ffd988c25d0 R14: 0000000000046a44 R15: 00007ffd988c2b40 [ 289.660211][ C0] [ 289.660451][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 289.660462][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 289.660480][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.660489][ T31] Call Trace: [ 289.660495][ T31] [ 289.660501][ T31] dump_stack_lvl+0x3d/0x1f0 [ 289.660523][ T31] vpanic+0x6e8/0x7a0 [ 289.660540][ T31] ? __pfx_vpanic+0x10/0x10 [ 289.660557][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.660578][ T31] panic+0xca/0xd0 [ 289.660593][ T31] ? __pfx_panic+0x10/0x10 [ 289.660607][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 289.660627][ T31] ? irq_work_queue+0xce/0x100 [ 289.660649][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.660664][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 289.660685][ T31] ? watchdog+0xd78/0x1260 [ 289.660706][ T31] ? watchdog+0xd6b/0x1260 [ 289.660728][ T31] watchdog+0xd89/0x1260 [ 289.660752][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.660771][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.660791][ T31] ? __kthread_parkme+0x19e/0x250 [ 289.660818][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.660836][ T31] kthread+0x3c5/0x780 [ 289.660852][ T31] ? __pfx_kthread+0x10/0x10 [ 289.660869][ T31] ? rcu_is_watching+0x12/0xc0 [ 289.660889][ T31] ? __pfx_kthread+0x10/0x10 [ 289.660912][ T31] ret_from_fork+0x56a/0x730 [ 289.660926][ T31] ? __pfx_kthread+0x10/0x10 [ 289.660943][ T31] ret_from_fork_asm+0x1a/0x30 [ 289.660972][ T31] [ 289.661204][ T31] Kernel Offset: disabled