last executing test programs:
6m44.516054102s ago: executing program 3 (id=1133):
r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000380)={0x80000000, 0x0, "2b7e29de2357569e20430e5d1ef3a72172bc82909cd3571d31c999b267ce31b6", 0x400, 0x36, 0x8000, 0x4, 0x80000001, 0x7, 0x10001, 0xfff, [0x123e, 0x4, 0x2, 0x8001]})
r1 = syz_open_dev$audion(&(0x7f0000000000), 0xd1a2, 0x620100)
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x2, 0x3, 0x5, 0x1})
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x2, 0x8)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)=@ethtool_coalesce={0xe, 0x65, 0xd9, 0x9, 0x8001, 0x8, 0x23a, 0x8001, 0xffffffff, 0xfffffffb, 0x7, 0x5, 0x7, 0xe, 0x6, 0x3, 0x10, 0xe6e3, 0x81, 0x9, 0x6, 0x6, 0x6}})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x0, 0x1, 0x1, {0x0, 0x1}, {0x45, 0x2}, @const={0x3, {0x401, 0x5, 0x9, 0x3}}})
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x300}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x42, r8, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0)
close(r6)
6m43.544503373s ago: executing program 3 (id=1136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
r4 = io_uring_setup(0x3bf0, &(0x7f0000000000)={0x0, 0x935c, 0x0, 0x5, 0x3dc})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
sync()
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0)
6m41.537295165s ago: executing program 3 (id=1148):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '.-,$:)'}], 0xa, "04d16c21707b376d3131cabfd494"}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = semget$private(0x0, 0x3, 0x0)
semop(r2, 0x0, 0x0)
semop(r2, 0x0, 0x0)
semop(r2, 0x0, 0x0)
openat$incfs(r1, 0x0, 0x101000, 0x80)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r3, 0x4020744f, &(0x7f0000000000)=0x10000)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
write$binfmt_aout(r4, &(0x7f0000000f80)=ANY=[], 0xfce1)
6m40.552057353s ago: executing program 3 (id=1153):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "8032d851"}, &(0x7f0000000080)=0x28)
6m40.428863622s ago: executing program 3 (id=1156):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, 0x0)
6m40.203943511s ago: executing program 3 (id=1158):
syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x137, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x125, 0x1, 0x1, 0x5, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x8e, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0xfffff000, 0x3, 0x8001, 0x8}, [@acm={0x4, 0x24, 0x2, 0x9}, @acm={0x4, 0x24, 0x2, 0x5}, @mdlm_detail={0xe2, 0x24, 0x13, 0xff, "a570ca0601f9589f904f883febaf31f7da56fcfb217a91f1e1a6ec4147c8ce349230ce8c54269b1df5c706e93f5326da2772fb4e1b0650bfede5e29f8a16b48355de8512952f28782c1b78f4879885e158754c3ec5ae497d8e773db37d0eae5c2bd4a8b92e9e6bd20ee9ff1efdf81a29c114c7d42e9dc7a34ac016bb09d4db54169d02fcaa42fd6fe21f5d7876821b4dccb7f35eefcd94929b92cea50f474692fb5e8661e7199f8b8c68ae90b77c3f186cc255b1a2a87afe4dae6673e92e3fbddaba3e4f12dfde8d66ae913cf564c6f2ff1972247498cd2c3a1a6fa62cda"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xff, 0xff, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x3, 0x40, 0x3, 0x10, 0x40}, 0x4e, &(0x7f0000000040)={0x5, 0xf, 0x4e, 0x5, [@generic={0x14, 0x10, 0xb, "15ebedab4c879683180b0e1bde91674c91"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x2, 0x3, 0x1e00}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ff, 0xff00, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x0, 0x1d, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "61152708409c3cf15ce152105c24a6f4"}]}, 0x4, [{0xb9, &(0x7f0000000280)=ANY=[@ANYBLOB="b9031350710d7f9193bb956c1625b9c8b8c422961da7d5fdfe3881cfe7de05e11fbb926cf72637b3068b44a00ec8d5950b298bfb72144f07d693984e730d45d5c603b52eba5b20e1b454bf1895079e91db2ae58593b1520d39d2b0a71fead988e43bf1e6883c3710e89b592b0c93a460026957bbe0109e0738e8c532b7f4f0b20a5db28b8882e756d5e1198395376ad2e18a267d7a0c8effe5fab5120a4de70676c538fc6ae527126dd0ba2243b4076f8dc8e69b32c2133744"]}, {0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="07037f3d344f8d76"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x416}}, {0x1c, &(0x7f0000000380)=@string={0x1c, 0x3, "f81584e1ad530eddce34e48a0e7c86cc49ec3cfbdb66fb29a31d"}}]})
gettid()
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
bind$bt_l2cap(r1, 0x0, 0x0)
listen(r0, 0x9)
accept4$vsock_stream(r1, 0x0, 0x0, 0x80000)
shutdown(r1, 0x1)
userfaultfd(0x801)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl2\x00', 0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
get_robust_list(0x0, 0x0, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x3)
r4 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0)
recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x300, 0x48, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs(0x0, 0x0)
6m24.314400557s ago: executing program 32 (id=1158):
syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x137, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x125, 0x1, 0x1, 0x5, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x8e, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0xfffff000, 0x3, 0x8001, 0x8}, [@acm={0x4, 0x24, 0x2, 0x9}, @acm={0x4, 0x24, 0x2, 0x5}, @mdlm_detail={0xe2, 0x24, 0x13, 0xff, "a570ca0601f9589f904f883febaf31f7da56fcfb217a91f1e1a6ec4147c8ce349230ce8c54269b1df5c706e93f5326da2772fb4e1b0650bfede5e29f8a16b48355de8512952f28782c1b78f4879885e158754c3ec5ae497d8e773db37d0eae5c2bd4a8b92e9e6bd20ee9ff1efdf81a29c114c7d42e9dc7a34ac016bb09d4db54169d02fcaa42fd6fe21f5d7876821b4dccb7f35eefcd94929b92cea50f474692fb5e8661e7199f8b8c68ae90b77c3f186cc255b1a2a87afe4dae6673e92e3fbddaba3e4f12dfde8d66ae913cf564c6f2ff1972247498cd2c3a1a6fa62cda"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xff, 0xff, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x3, 0x40, 0x3, 0x10, 0x40}, 0x4e, &(0x7f0000000040)={0x5, 0xf, 0x4e, 0x5, [@generic={0x14, 0x10, 0xb, "15ebedab4c879683180b0e1bde91674c91"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x2, 0x3, 0x1e00}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7ff, 0xff00, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x0, 0x1d, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "61152708409c3cf15ce152105c24a6f4"}]}, 0x4, [{0xb9, &(0x7f0000000280)=ANY=[@ANYBLOB="b9031350710d7f9193bb956c1625b9c8b8c422961da7d5fdfe3881cfe7de05e11fbb926cf72637b3068b44a00ec8d5950b298bfb72144f07d693984e730d45d5c603b52eba5b20e1b454bf1895079e91db2ae58593b1520d39d2b0a71fead988e43bf1e6883c3710e89b592b0c93a460026957bbe0109e0738e8c532b7f4f0b20a5db28b8882e756d5e1198395376ad2e18a267d7a0c8effe5fab5120a4de70676c538fc6ae527126dd0ba2243b4076f8dc8e69b32c2133744"]}, {0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="07037f3d344f8d76"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x416}}, {0x1c, &(0x7f0000000380)=@string={0x1c, 0x3, "f81584e1ad530eddce34e48a0e7c86cc49ec3cfbdb66fb29a31d"}}]})
gettid()
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
bind$bt_l2cap(r1, 0x0, 0x0)
listen(r0, 0x9)
accept4$vsock_stream(r1, 0x0, 0x0, 0x80000)
shutdown(r1, 0x1)
userfaultfd(0x801)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl2\x00', 0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
get_robust_list(0x0, 0x0, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x3)
r4 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0)
recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x300, 0x48, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs(0x0, 0x0)
3m44.707708277s ago: executing program 5 (id=1716):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x5, 0x1f}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @local}, 0xff47)
r6 = socket$netlink(0x10, 0x3, 0x4)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00')
readv(r7, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1)
write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
3m44.460760702s ago: executing program 5 (id=1717):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000020603ffffffffffffffe9000000000314000300686173683a69702c706f72742c6970000900020073797a310000000014000780050015000c0000000800124000080000050005000a00000005000400000000000500010007"], 0x60}}, 0x10)
3m40.481426646s ago: executing program 5 (id=1731):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
getrandom(&(0x7f0000000340)=""/169, 0xa9, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x7d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
3m40.343987277s ago: executing program 5 (id=1734):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x1ff, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg2\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f00000004c0)="7772c13362d0287947ac41d3d10b93f10e1e02fb3f80bcb9ed9365f4d6bcbfaa7fc8a31bc2d2e25a55a9fff8d686dcebbaab267e0b0347d8e0dd2dfaa9cd", 0x3e, 0x8000000, &(0x7f0000000480)={0x11, 0x1c, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, "e6dd3c3d"}, 0xb20f, 0x1, {0x0}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xa, 0x0, [0x0, 0x0, 0x11, 0x3]}})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x8001, 0x0, 0xc79})
acct(&(0x7f0000000380)='./file0\x00')
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r5, @ANYRES32=r9, @ANYBLOB="00000000000000000400c18e373239c6547fe1ed9309ed256f8f545fed83d9a73f5e29808017253eb2b6c5dd0f2051a4dbcb77e725bc10e96ced38444ea90f94c04963949daa0314fb1d56d5b40872afbac37061"], 0x24}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e21, @loopback}, 0xffffffa1)
3m39.590014581s ago: executing program 5 (id=1735):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x1)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r5, 0x0)
r6 = syz_io_uring_setup(0x461b, &(0x7f0000000580)={0x0, 0xe7a7, 0x2, 0x0, 0x40000127, 0x0, r1}, &(0x7f0000000240), &(0x7f0000001880))
sendmmsg$unix(r4, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="f9ef1bf352844f6d", 0x8}, {&(0x7f0000000280)="57facffa176f28f22d3859f55c2400f664187fab8e87e5a4eb060d3ee6cf758e170fd72dac48f0489d312b948f127e14e6152e00ad2ab5fe42fadce08feff38d070bf54de86d730e375611060e0d7bb8097bd9fb7bc854533917f0f8b833fcf843306b8c34191624dd65ac70a6e9aca7c3ce83f01f", 0x75}, {&(0x7f0000000300)="a2f6807e83fdd09372", 0x9}, {&(0x7f0000000340)="777c36994795c56efd6e41e6bdcc880c33192d2f5affc5019a7bf77c40f1110148e066aae78cc7cf696af68a0a71df3f68c1a2526053743461e5b85f8e066bbb429f0aacaff989a32d155ada58fdf53a66c2033e06a081b88e288fef6546645d493e908f8bab0afe0c080afff5a73f4d5d2b2753d01eff64156623824a", 0x7d}, {&(0x7f00000003c0)="03bbae898fdc98c0cc3fbfd588d94541d80127c072fe2d555cd90e38165118950ef77fd8275a83006a157f81c99002de0a36294a00dc9cd8e78061f6dcc27bacfdbcfac2b288eb839d72313dce268a6a4f5ff9f282d3803ddd922cd64e9785150e04e237b6ed934146b861e4ca3269d9ff6a5b81b15d699e4328a64b3285ca01b0b8aebc181b2096bb84ebeb44217d67cd718871a5b8127e7cec3a32e5fbd0a461118ecc68897a85da38c78275e521b2ccc8fb2b9109dbfad95afdcc30136e8c00f9acfe2778e7c42e9f96", 0xcb}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000034000040000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5], 0x138, 0x40800}}, {{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000bc0)="a3b13fd87a2f5b859180a127a1e550fd10c871abd19c1f2655c83f3028bbe26c42e72a4e18c8be5e03a1bdc99144825c86aff99f6e70e6a5ef0dfbdd2f8f37db3d48a52c194aa5332632b656fe336a57f3eb4a9f1ba7525f475a17c7ad862945b5c77d125b9aee9d314a3a04044d68eb8b5fb655f09fde086800c2973860", 0x7e}, {&(0x7f0000000c40)="c91080a5abd1d94809e6126ff3a521be26943df4566f99995094c7225761fb4d2fc230e475f0aae3a236b1ac7640d58638df558d1159489f7f96f7e3b5f08afae1d5d7220ba9e07b5024c8248af92b8800a32ec2b71051c7e6726dfeb9ce30429560c45b99a107ec66b906796b7f9c7add95fcc7d6a5d475d0d010f4387472b2f12fc574fe08441b4fcc8ca6eaa281fafba2aa9fc66c13cf592d53e75fb88dfcbd7e6af8333e761e5f7c3828aa38ce987406f462441d916695f52963957a74326215fa5bd765ab702a", 0xc9}, {&(0x7f0000000d40)="5d3f96fc9bc0bd4c58fdcc34e47adbfa496d9c7622e14eee998e8dc9537cf30a120ba97e20011c3c97e8f73afb17a3607813d48bd127b6f5b2bc3c167d7f4ecf7447341d0de477af65887d5fa9e109ebb4b6f00ebc2cf02c0a9ad86a41a952aef6ab1b9cf8dfc20619c0b044cd92e2a01fe0a412063c67c3b7492b1d525d21583fe4176e6cb05631ca79", 0x8a}, {&(0x7f0000000e00)="56c49494c94cd9556268fce954a0efab5d58fe45ad195495b745fd635ce80a6c455730a6ac2a28dd7445a49d0664bc587156ca224f3272944cf840e02356bfe6cb2403", 0x43}], 0x4, &(0x7f0000000600)=[@rights={{0x30, 0x1, 0x1, [r3, r0, r5, r5, r1, r0, r3, r4]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, r4]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0xb0, 0x40000}}, {{&(0x7f0000000f80)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001000)="9aa5b0303437ac9d698d481ecb0f755eb1658735173bf9f8f61c8d75ffdc2976203a4a975dd19d0e081f0e4d29a367789fd7a55134e1f909ee9634eec485790a6527fcaff98f706b65881bd31f050e2297824d669443abadd4e82569bfbc7d95fcc49277bcf085d15906dd350ad43d3e682377eb084037d18db83feccb595450f84c02f126729866b8608adcb5a238b772c5cd1b09dae86aa42bd546a32734f5", 0xa0}, {&(0x7f0000002300)="9c56697cd876ceefb8d0032510dbe8baff68d24d9c814f03cc713674380b79e04c51d143f4f8b70124b8a5bdf8951758d2d8f552be7678b5024d593437ff4014d8562b6d9dab3a3d5353416c57c058ff103cb9631444010ffd23f14312cd07ba2ee8bbb4a940898a71d9d775e0f6070c4394106fc89e61d2408126320d86fe0e56690cdca14edb0af888446c21cc950012c3535800c9ff125d21eca7cb29520e78bb40c562df4c8a84cc0fc6892d55850b9bf421fdbeae77711fd6dbfe4b7e1aad1a24de1a5a8b7e5791446a2767ec81521c49323eee5547c5faeeb001b88b5c8d4da9bd5f3c0287a91a852dd0683738dff210ceb35e2d0a0a0d0046b4738b79618ba68cc31f98fcd0a98fd47bcbdd2f74ad066da9088e818661d62a36bf438d85be23ad63d4fa9e9fdb5eceddf6da3775dde5f7a25d512c6884901fdfe9d2aecf0c77f0707e42f37c25a7ad45c94b6cba1faccea39176814c0c0378666a94e6ff48fd7cefd3bd30a13dbaa44073b0cf7a57c5dc012ded987c564c66e8978361f7531aad865f346d936fc4b2dae9300a0b32c4035433da957980a56b3ec7941282b4959a50d99f567ee67c19101c61f149a2a1b1436a9322255076af612fdd86ba4248918a8b06cd438195348d63d3b331e9131cd436e7007d33baba8b61b183df24b9583b5dfda2706861664fd95ddc906f46b3abf570f14c2e939093f864e6326e637b333b790129101c23dd36c1f10da5365461ab4502bc8c2625d1405d54eb6532d8c6b0e6c48c5b9e159359362f95c5f5f53a1c14e66af92faec629f8cc5ee7764baf02e72de20bbd4891a5b7edb8a9f5e1959b548896a35a9dfc9501e8c3249b854572812f52503214544f25944fd19699fe3ed68aa2d8b2f2b0b953fd214b9bbad4b82f1151221344fbffef553aeda5d924ff1436bbeca3fbb11afe0960369f62ae8f712ee8baedfd2c97c7a54f3b17a9de51e89d796f298ee617d790d905574bf2ccf505fcfdc556a6693b211bcab21030ec5d474e69b4a3bb8b72291d3dc5b46baf41df89c1a0db872161c446327dba213a705ac45c0f2c8fa2e7d598d134a993f87ff5bd5bf51dbde87d708126906039e1b3eb20ffeb1a6f5c506e0b318350aeec299c9300f74e8cbdc2b070349770c61cf7abbe7a0ba0cd1eb5c47c3f8354313da3bd00ef27ff16fe61d8bf6eb629aadd0cf23be35271bc1d1e19785e36b8002e9824322678d668d9c47696ca91458dd3f30890297b68d497dcaa52727ef96df8dd756500a68fe98bf1c9db06433e1726e59896e242f32ecdaebe62b1de155866f2915c639ae9c4fd87b8280c0542f42511bd3aec325368c07dc6ed4cb8077c9c828adb34146a0197e751e89fe15978df65715b4963aeed29ca33743577386f645af0b6121c8e8ceb957d5be2411ae84544ba602f2ddea31b33e478dbcdce93c191ee4040751f49f094317839827814271ba546330b564d9a6f38b2cab81aeb3faef66db634787e420f82581f4e578796eda7cf4ebb82af3d41a1d52a8cd2cec3be68131fe05b792afa4634c3f32e4aa22eefeb9480baf87be5944622e9e96523de360257072fa77d0e2bbeafb29764453054b1594b4a16c62db0dbc8a258f5739780632f3e0ec20ac772704867b91582de476f95ae6db9e2574fb15152f240ff53c8a3532bd398e6bb6668579274b1acef8934b600967fc5e64adcc3914ab47554640d6d0087a28d55cc9783e6b646532624628d27c5245594089d8359b612a8f1b7946f8d5faedc7f0521190f9c38849b15dd5a0dcda88af4f6b4fa44efaa59732d744d2d59766bc0831f9085ab1f7c5f0b5e6ace5b3720806d36d0847445092c17a20c89b1c089bb8a0265dae8074986fd602159ef04f06c2cc01dd4b907c8767669702942a3110188d352e5ae0d3e1d82c4234c6ffe61009317696d8627c998ec4be0b23da375eb67bad78322cb180fff36ee71768cf8ec1a5d41ff61838ee1c455a8a7d707d8779ee572396974ed1e56fa6fcf0b2d77cf44b2f39d99f6b93fdf379695c46b1bba16bd677afcd04df18fabf5c5e7f0b6ff33c59e1093a24ad121afad8c6970433b7c156e091f1ea87ee58d89d6d51f7f38a73f157d54ae23c98c24091d1050151f6f0ee0c171dcf7408799d662bc2d5d9ae2b6002f67022a15f8797743d1cb2f431d03ba3d3914bb17ae19a7a1951af331aecfd8970248a2063a4073d4d0f31e72680d1829fd54ab7b876006ba76db8bbd30c07a9d4a4d62393d107cafe6da9a6ec80e0138bdff4b82d6a5974ecd5ed7f57a64a020796f9e2d5ec33a439560929278cc9ae282ad426fde1f5737ffd812ae9e3172f26f627a0e7cb66a66f0b99b7a443aab9986f77035b112112a571549794cc97245082d33553275dacb493627bd0407a522e73b25a82a74b7518d4050af0139a751df20af83f3e6b3256c65ffe1bee2783674d9d39f827afaf7a2309df41745b8c7ff93b628e115cb9798e0e6f2a8f0a7cf92d68d6b3821d276d6f3a864d1c061d3027030c0e3dbc4aafaa3e8c3033a4974e114f1b34aae7a0ec397b17a20e09504f2af691f251c1a2f44236fc0c932b68edd566ec669c86738f82687260fec67ce3ba5456210f6ee6569525b90de4acf16d6cfe97717981d4a5871cf9023c253f0e2167378f724d3f0c4391f5a150ae94c40f5ceaa8cc891967bb6e000c948510f278cd95a11eaa909f888949cb0030b5bf9b8e9776f9e10596be125c83a620e65a04f6de79f213c53ce6817d14d9eae2052474bb61a56c24ac9aa36bbd56d752c49b1d411f40b26f4f4032bb76ad8bcc91df82faebae2582ab165521a3e00e2d9ba03ba97f42a21d2ff7ba73cd98a7e213becb20c2351e4d7c410af2aa49b8d40c64c156da2cfb697e2f1adbf22383b5da35061bf6bd9a0ac9bb0a21c89a14adc172be51363f83ae37e06d32d8f8feab4239a2d4facaef2ef4ec45b17ffdfaf0a3d011ffaeb72e578890d45f735efaed8ab33e5ccfbe659ab92c6ed3d46df79371800e4e1f18fdcef1587b5ec93dd008c059e2e22929fc6680bb86acd2aeda1ec95e2fc09ea009d62899928490de1724e63d30861bb18a520e48346c45d2aa156a95bf22788eb4ef634054fedd73b9bcc65ecd2448d367009b1a55e9135eebf2890f175aa79549958aa5c3daf876f4ff7da8c21b2314b4225cc07b1c9e9dcca2b2c9707ac65244849e34ddf9754ea9969d02b386ca9055579e748f4f3064bcf874f6f42e482fd1c2e0eeccdb3324abd757cebf540e1592043d733a0aff8c98a1b7d53d355a61fff0d119a9261ff01d8bfb5ebca678e5ef0dd141cfbea724756e947d9c30f6478458bcf34b60308a6ae42e0ca6c581bbde9bb6b317216b896c2b149dcf3c9a7c091534e7b89f07790545a4b0ab42f8f6b9d9f87c601d5cd28e1f23c6fbd533eadce0a8c7b793400e07c7f4203a866d15239968810c0373674b0aef3a8351858aa7d0e733f13240e2c41772592d309bfa635a668049673b02b2c7ee2d964ca6860273542d1ff749b1f3bff1d5f9c01720bea140e8b5c06f7d87f7783b4e6329ddb543aae60a461cdf538c4e4160f764b757eb42a09151afa63503ab93e12d88ee55923e2ff1a4292b46b21ce9a265c3a4447e6d845a7a321a776072750fde94b074e144603eb0a88b493a713ad028e38fe49b07264b4d161e1da92c27082bf92b030ef58bb58d475f16992d6f9e5e66049500a9b7f5f5a9f95e7748ef5370f27d255ccac19f1944ff3f46601ab9b5fa3486c2c04f1971392c26c6b86301e1827ca4e1ba65af49165b8dd048d69be6a01319d1ccfe7927813b0eab98162fe94d9b7cac2a4cd08f627e44d5be1d97531ffb15510d4607c5a0488635a770973c4989b954a2d1df12950b1b8321c11fbf7692ec932eead9f29623d0cd0e21a688602106d73ae37d46ae86a26e24a8c16a24b43fb39bef425018c6e4be120d63d9761996cb3b97af7ed56952fb6268b82a00effef0bc840904f3152dcfb1344449fb0d49df24215f42f13719f519348032f358e2d1b1cf8cdd4e752e0bf3f1a5a67b281472dfe51fb09bcfa4aabbdfbdd2cc5e72918384daf5e1f4479b90218de68e47d775ef7683391a55c0b63608335196947162dff4dc8e95eda0f71bad501427ea2557ec7965296146a8122575198ac7617a86337a14567d9bba125de507823e347bc6d5185eb9a1fc2f3ca84eeba1a51c27236f416e3c08dea959637d5a31df29005a38b5e51f4ea58e3af652c39032f353a1d112ff2bf5232a3f4a1da643aa4383955ae67e29f09debd4ed48b803ad93ba6f5846e6f0ade98181a8a80a46e4cc8516e79d219332ecee57073f3dffc3d973fd4b84feda8188313128f8b55eb00363432dcc8b52c6f6c52fa5aaf45b7ab9be9ab7d9f1cec0792e923057a7ba00a8ac9dc7cc0599ac92017c4d54e91a5dc31357236146cf66c0c3504ead0d46c121e0a0b17529042138b664853287419ad2c6450a49f0c55391b6432b35d6d8121b75c5c30eb58509ef181221fbc633940c853c7e37c67b378effd4492da102a5ca707011e9075ba59434e771fc437d96d335157ecb0e08a30063682c0bcfde1eca78e1f4fe5ab33b381519742d33547655fbd09942271e4b657c469df834460ce7e51e07806c157773036305d6044656b4155083c40e0f54ff4983eb0d21f59f1a3fe4ac38d6596ef2cf4faf4ffb2a320a1d926cff62c1ebb91285d7ae7b87898d3e26df1a9793d59d0b530238a82bf1ac96923e07bf1176a7b3d3415c33648c8180e97e3510905562e7434af1c1dc6e405c487d1a1c1e6081501379b13e6f23e49e5eeec2e01c28b9bc25b8f6d70e26b0229d34ca8a2c194f087798c98c825ee4a1ea66698ce1fc6d86df77ab78da30f4ed37855fdc040a37eb1c03d792316ba88f55119df8523aec39bba407006d51285c03f4eceef95ffd2fc508ffd2c1b57e59249c0204185e73b699606f5d5662902d48e6d17cf0a0dc2f30b6c4315b4e9badd849fe7b9864f38791bba7830bb7776e28982bd6e9a1318551581d68428ac28afa68d27dbffb743be1d2c6bec711c64daf361a74df28085c32ccf981ca4332545648520ea17769e408d8ab3eae8aed3f0f49de468cc6ffdc5560a87c427f7531f178ac21afbf627ca11bf96fd0f836e0e9306525ce89d6e49ffb5538a698f35733d59ead5efb5ee85752b7b1023897d1d9d3edad61a459fae51e6e5587019a034069b01d4122ee6ebe228d25073c0d7f69b458384d6b2b0fc7372f557972dd82b4f39af988960ba43870fce1e0047effa2c6585d5f230e3c7858a14dc19f41d91d891df100220651a50780417d947bb3536e8cd757ba14b6e1df47377f61d865f0479c5686dfb8fe512c7cf7c567c3d81c101079b31754c7c0cf5cba28c627f77001af778c7de629074d9b8b0f15bfe809b566eb20c05eec57ed9294cd818ab8329d90dda0173d11c05ff05df8203f02fda87f604a16e3a082011ce14b86700b368fa5e3cdffca62d22b74fed30694c5c5b576ab86aef8e667be4deefefb382b9d1206be84c1492683eff67f7aa0b685c423386099081dd4c005de3f3a8f76ceb0f46b81830eafbd0d1dc68a4723a82c315818d193e8d6b1a00a55f1a188ccf6fd9ec4f88db0526e4ab8f8fbb3c9df160fcf1fb95a09e61f1de9af5c15d492cdee75a6748608ef23f56f2fbf7471b1ef0dd8034a0a4f3a8dfa7e94129052365629bcfb7ec3b530e43e8d482178645f0ffb40239050bec", 0x1000}, {&(0x7f00000010c0)="8beae536de728f9aa0872a49f41007bd7cfca1b41222bec6cf098d789adab2207205d3", 0x23}, {&(0x7f0000001100)="4740bb98f39a476f85cb74af9076dbec39f140a817e8c466dc884815b9c93ce175cec1407d54d9e756c39841898c2f4989362668f950f752bbaef93b77995818f3ea83336a70adaeab92e6d04f0c538d751b786e5e69d1d7be38d61c0c2ad050cce1631e9d7f2fc26bd6b447cca27be76088f4ae84882daf52da59a18f9bc659994dd79c880f66587dda96a36e9e879a62752b493726494f2699ff19f94a71112fbae7c6ea4a8f24d71c59aa194bdb67c91cc231818e003c44253b4b6b10e850248bdf5546cf8ade8a087939b4e9dd1900a81f548d9eec5081b6dd2c1a445f704038639ac365c530345ff1aaeb2c", 0xee}, {&(0x7f0000001200)="f52075795a2dbb9692d1591595d2a3fa50a5df0caeddb52b2b248adf1bc30c25300d311394e5b68d793feca6adfd3af1b3b6a9161377a979a457c56b3606bda276d65d71f2a056f44b8e3bcdec0ba64aa42e9f30d8b288c79467aa2cd397d9b34a58363f6f5e732d85bc33a968b7d7b64e29536fd13aeddcbe3db59e0f1bff2b54d868bf0bba38e37ca5c80033a22f505ae7308e812e5bd2092a46d1f9e8", 0x9e}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="789dccd361b886", 0x7}, {&(0x7f0000001340)="416c83e114954bb8b28d2501f6c404b2ce546340f0576c28db2434004d5210b7", 0x20}, {&(0x7f0000001380)="d5da626c89d00d208edfbea692ab65a6", 0x10}, {&(0x7f00000013c0)="d43ba5de3067935240b84cf3edf7a72f93c5d0fb10459968b736c06d3133f93b62c7b70ece55b207355904c1f95c68d6074d6c11898dc9a131b3c2817b844683ff56bc5c146c4d90038025a8f4e7fa6d67a3299e62fc5672ec9efdeef4edbbb402c0c7cc048f3cfc4aa9965842fe00a66603a71371482ff0e00ec96c19adbb17cab264a8399a3ab203c2df196fe24bd087dfe3", 0x93}], 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="24000000000000000100000001000000e5f4ea1fd7ed08ad4a3530b52f2e7c8638f4f475c5fd990b802ea60aefdcdc", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x90}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001580)="b14c803985ce89f809dd5b6e8aea6b42e33f46715bfaf16d01f6b6797ade94", 0x1f}, {&(0x7f00000015c0)="f1845769af769c9c27d5575ddbad7fa7d95a9ca880212f9efe01ef33680957f154bc6312b3a65c08696ac73f9181777d7aa4081c16897f137f012bab5cbb1c84681acfca9919c8cb8b957ff3d771836f0954f4f2efac588ff5bb1b0f0da24542da61dea2f2", 0x65}, {&(0x7f0000001640)="4f08ffba987e571e0a51bafa0e3f994cb111c561b80602ed418343a27b66b32818cf643cb6c1b5da5b28b8110e1408009b7b889f97419b96a6519e225dec1b91fba7ef0bcea2610dd2dfd94953ee216d0cd9a29973bbc90ce87756566aab605194e11aadd6b7c6836fda3a7efb0e2ad19ffd2ff0fc90cc6cc0e286", 0x7b}, {&(0x7f00000016c0)="3c65b8a8a93876721e3925a03e5fdbdcf21b6ffaa9fe457ca6222cc92ec06575f98389c67e9581f6376743baaf263bde2512fc35a6a31005af5ee617840c2788f3b5b52ba2e5fd2dbdb5c5e69746feb64ee9c812dcd4b22ff97b0bcf434e862f8b4efa231f8c25ca61fdae311a813189ffa488dc038aa7e31566d2143c6db1be5f34d4a51e9c28485fef41a6b021bb60b22445b01d0f48c6cfdc36de17f24f1a0977fa136c3c67f2", 0xa8}], 0x4, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r5]}}, @rights={{0x24, 0x1, 0x1, [r5, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0, 0x20004000}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000003300)="74de2e2852954811e71c912cb464de222ef3274888d64f0ae209466137397e5b8287853819d2f04cfdbc952e50f631ccd2fc49a1ca998a0ba25c26f8107045a9d2db96ee1066f72adb50c01a020588f6a381cd667e20eff530b808e0f2271b2d6314a7acfae206c95c552bcbefc92aa002c470d7ba4feb8317c7db026eef1e212a2739085abbd55d63ba969e1f12145eacf54c76db8542a0f1e8715f1fa2df1fa38f37ab40acd4d032d4ecf409e0d0f4d8f51b628ec27a822cbc19e5cb663c3a5b4ee27a400a60a05d014f390a50b6ffdbe3adb63faa017ef8fee82ab18a99a54c2e53d470089c05e783041f9b634ab6216adbe6f5ee8640a69415138169fed76cc03a17a4e75dd480eb7779b93b404829579df68c0dedc4982cc39b7f1d961c8ebf82edcbcae5d3b64110e879fa3d3802f9bf195125ff4326f97c0d5fc6981b1933680786ae567cb2f8cdb6a2ded48f4c998f96cb0a1dfa2216367b5cb4764221ee55708191fe6e9d47cdcc55b8611ef39f5480daab21ab4120739ed3352b05f1286a9e131fad08ac1ca70fca938731e249cd7a5b327a7c2350096b539ca470b80f145f731dbe5b145b05749588f060f43c7b4077fe53bc33bd78ea790d14737172c2c44cfc31580bc66cd41da926a3e4b47fbc4976058bec90cc2153ed8520bd260be3873f8c063b4b2cbcda57a5afff9721a957630f9966ae3c7f0fbd8613e7b7d424a6a670879577d30b764ce9a90ff69e9b48d36e9f71753d39b7c30a5d8b99fc3d52bb75def52a017486efe3e04c6299611ad1a8f89da1a1e0f8de0e09846116533f6ef67a6e4dd057383282a5d08da80b336829742f5d7b8a85ac09496e7bc1e12c131c0517b343ebe03bd6a5364936dd46d19ce077e3a90405d414e3a679d76e52caf81f67d74fc4950402fd023bca35389e2b5064d215b87f0f3c5a0d7838dee0535d56cde36a0b71db9348f2867692806312ef131d3cf89bb1b654759ce876227dc8b0125f8968b4a4ae1737e24a7d14387f4920e6c9dac33cca50ca1ebdd9771ed36945822fec34684c3216099ce668c9e07eefadab4c5fba76483f364262552c33416e52a3465fdfb25e08031962e620289c43af5c9f72b28645f8f170dea6a973cba0c0ae47896dc2e540394f3be753396edcdd54b2ff1f95300ea037096ab6d78f7ba2c13c434395307460470c42c5ae9c0f846152c1370aef650aa44df2903ca960a6d735c5c5f533a10b714eef1ad7b431da4fc30876576464b83602a82ba4522187cc22ff430c16dc65922894520e1f18e4e4ae8a2d1f1b316a4250e38f1bdd483189b796549f88f39c0f03e8fe4e7f6c045fc7c0e71eb43647f6f8247ed1b037e1ea91b0fdd0a9f3ca1dc22143290ad185fe5c9edfa99f3fa1815d9dc1402c65c7f6936e4b6eac9a9898190cf29bf7b94fee8288d8d904412a6910032725f5daf42140d54f1b6b85bb76ba61a9e866fee63d1c54745223d1cbc8655e18793363b0847a4899566bfa77adba55ac355f5c6de102350f8e800b4b1cd77b745a74ba099a2f0aa4cf94c72f498e6c794f3e3eb821d0faca567de74884edb2b24d4413e38fd89eaae019e504a6ed21602fad1e9ddf8ef8cf2280cd9d48c30964f8ccde334fd5b2ec56a3c7fe1a50d4512342f4c267c5010e4d9178f3b9d2978acc7d6de83b1de10dd2efa8da7675b80c034a3ac4bb0e64a09e0d04b47d3c1705036533b0ef3f02968d54fd6d253cc9c05f4893e0e6f065c5e17622cb38708d1a6390e120499360a0ddacdb09d6bafbc812a4ff7b7f75a3aba57b25d376786c6a4868da245a5f5e1c21cb8ab8bde9731617391216edbdf28ba390076e319938295afac5874ff1c0028b89061b49dc9dde619a1a2c8b48b713e92189b75125d828157ae28b59166b8141a489a73185a15cf349226555f9e980ed0fcb0a919fbaa0bbbd90e1ff81afac295f8100ab6b0eda4f91f37082028b25f0d80a56e24d97942ccf6ecde569fcbab563ba1cd9301742d2d5aa33e64ef5471d6443ff088406ace09fe4b5ffab08973fc1f1c0fffb974627dc01ce3bfd54ecfc38fa4d276806f5b563f111f981d459d3401975026c56efba35408373f8b55afbf20d346fcd676e1381cf6002e63372dbbedcb5f4ccc29c397b74c5cfd4c07fbb0f171d5aba4916a55ad6883316ca4333981835d75f76bae9b46d3aeb1b477cd0571281b0e16844c64e1afca89dbbc334975a253153dd62332b80c3e3edd16aa2cb2b8878e69edd0ac76210c0f99325c084b922d15d177320cfc9d00ee2ee448583cff3b835acc651cd3e43a62a4904eb72ca42c5f249a306b9a4cdfe53f601d0fa2b49660984880eb24178eacb9be191ea50b81038f9ccf4893d50d01a798a3bc0aed6f455a571b78dde4463f0f2c5dce5948d8e74fe56ea1f570685f9765f14260a76aeb1aee48b3abf90a7daa73505e13ca03b48c935a3d401d1a0f151f7daa1de62390bd14ebc99698f5926e50cfdc3f02784441e8ab00844372503f5800454b196878b578f19a764b0e3b1e1936f64e98d9313c64d61e01f919797b76950384d9671ef647a1f1d655c79eeb2d4d1cec437bd79a2c88c5a2f01ec0e639c3a57639395be6e40f2144cc956448dae177dd5024274afb0820943e18663a439a1e6572f9a3dc75fdcfaf3242f6cfe100f103c8cdd2b4bc40063e42b0198b5ed94f3e0fbdbfe1ca49dcc41f3bfbf55818ad615752604e7e52228dfccc0a1df85021aa2a1dee8610f47d61597663b9bbb2fc468e05b96b198bad9f2333e4c71dfd5a7ef252d4814b9147a01568734a59fbf9527b5e2bc8cfd767fab429332ff980e10371fedd2ddf60512a2e63a9cac065a94beb793514ea42366cc4fdd4e6e027041c3f8ac8bf0ff2995bd43e32e9a3441f514b1911fd27e6b1a76a0ad379dddcb69b110f699097cb152f218136bf18ba96aae5003c7de1eaf5fa1d9552f48aec6de02340524e8b6495cba32e81f803f5a170d5760575ba8bb67da1b9d17c349bd2e9a2fbc8b8b550a589176f850a6d8d1b91b2f8f11f7b1144934df3f77e9cf672291ec6e457011131b608cc9bd5ce984ef18114fb86050cf1d9025e1902af74db65e8e5cc4e2f2ad84389fc653c79f0abc3c73fef65c81de10a7237a557f213ffeb72015085d0366f91d985d88515c529fe9b51877ec1b73b948ffaa7e367599eadf8dbf66449ab0b7f7950e2f1491825ec94757e79ed27f43637201b427e7c6086bb20d38c2053101ab3040cf144ae704cf516daae2da1e819b433d598eaf5b4c6cc2623f045db82bab1d7a556ca3bf0809ec59bfcfac51b223920a6462cb2c87cde85cd4169ab719eefa003a3b4671b706877823af98be8e94df36dea085930cad95e3b7e6744f2018bdcc7faa32ada7bb2e4383d8ec3629ea290eafb9f7101f4f8d1ef38c17cf7aa6aecdf24bbb9e2c5a4f66110efc6c421c4c9a2c5a9641e783add0bdf853651ce7e7696f3f417522b8a1030b7464fbf066bf036a8c688562ecd7b1c655397bd235d69078658f327b8b944b60cd5d674a241f311275e550329bc4b3351b8ae8b5ad08bfffffc14caf600692a74c66c38f84b737edb517ab25ffa730b9f7e5a894dac9ae9d6f56ac2fe8c748bfd17cde2335ea7cb1afe9f2d72afc9a8264f65520d82378e2f84d4582014e7fef3d7adc636d3f507aee7ab3f627f7bf36b5d4bff3995e2fb76bbd60ea3f6039aa793a018468cc496e3dac8834afb2136823d92d7cd1770dd112e27aa7bd3fb4b635518ec5c0c6f56a5d769b5fb7b1c74c00893f2842fe95ff3a6362be6f5255fc113c777053fcdd16a0129aa1615f734ec857592674056c1b6bb5ad4e3fe3042b65b4ba3f3785fe2db9fd6f0f52742c8e607fbd8d665e0faa435e22a1917be9a8786a83b0b1754d7a48cdb1c467fadabb72e078c7d7eedc8dfcfad56944ea7c1485eba878db8e98e9f74d77ab3dbcca7499f9ebfc2f4a0bfe8cbfd3e898fe9e8c3ad5f650b8541f2dbfae55644ffdd0a6c23775fcbb9272cd0e0189db8d4373869ed7b09d1f83a1ae5891382510c1b4c38aed32d3f97c6e650b70d97d3e7fdf5d08351722669a12579e32c5cc9c4c99fbb0aa3cacb4a99c5db925b157851c5cf542425bc8bf0fd09b806e2ee76a207fb913ee7c3ae23b1b620d1c7ea54c107196f9513c62bb4c62f8cb67ea30a6cb276c97c955656a5337195d12c9a028d98323e787e6ee05aae30ca0ffc15be3239beba0b4d4d2fd0405a96067a42b3d95f8057b96a9a7b6740ec9a2547e722eaf6e75c047e52a5f7f679935e7fa0b13ce0ce8b8de239514711a36243de2581615a87567ea078f6044fed82a6c6f2f4c41c73fd894ea51bb33b598671221c0c049c4f3c6b6a82c2648cd85bdf12ae1f99b5e9d0329829a1beda4e8b35e3425a041788e10868d5da5df83a16fa541982ba268002a4d7db68b3169247cb796d8246e38d643b1caf2ec143782ad4b61ae93e50b6b788ece7197315a4b47abfddb53209fc1ec986233ec38f2c8e9c6f13035e90fbc34f052ea7933b509ddc013a69d0b47276bb944d5c1eb03ceb52b512990df76a0a6984dbe32b3c274c5e54778533c42a6fc1503b765137cf6ee1ba77e9a98d9d13d2e799599f36e6220fcc65cdd05e2f88fbabfeba54c74492d0413edc584ac80b237b838263d9608abd0885b6a871dd4401204989a808c86ebd18b213c1b410d29222a3f155e72b7d69a7cc2a479cf28bf962250b0cbddf9f689b3b33baaf23d5e49665aa174c315536eb692dbd457d17e7bf05988f77aa1e289c779101d55fd79b8ff68eb3ec87aeee6507e54f61701fa164aad019630f6e350a02fd7c2fa73ac3a0182460b42f63103afb0ac648bcda3ed8b8a030aff694dd0878a1ec7a63d989c3582b78de64b5a22eb02f1e9ad99a966c34c66e898c07ab63e51267c694f5c83dbab70d342a2007af7ee752adb264be2450267ce117c9a763dcd95b03285e857dec3c735affc641d02119f1952ecbfba685cd0b4557b7f9ea1136d4e9cdc49cc1d7a3808443fb01734b9b9ecf0434a079d238c5d56f31a7570b135eeaa055b26000a437e8d2c86ad2d6f45d707e1c2fef528431a08d21e7bc6ba589c7f4bbf683dd9c5be957f4d74fce263aa1fb3854373c6d9090df9fc4d7ac960e7bd0fafa11004cba32e9edec4e1de8eb892bce780485facea17f3e75e169dbf1c35ef96e46705e0b72e9708051060799cb6c029546628cb1391ffe85be4a94c0a018ff72588a677a8f2b2c882f527cb9755b6c326fadb613a2e56f09bba16a55aead8e7271d4e7dd00c1578108f62bf5f53ad012775c8bfa756f0ed61298bd3819553b51953dc33c21a5928975290ed34711e1d4b8bcafbb9fe99c3564d37fbaed586dc12a4e28f86be333c92453f1fb47607958ea1de663cd6f96a0141c5992f8d96dc98c5cfd74fd21cd961eec3ed7894a61a5fde661ebf747c472d2cc7071ea844103b948e1bb27c28cee5d7a3c03a950f067f54e3253a07c2846062c1670f2bd1ea3d7c9a037011b9c985a9e4507ebbfd22b43aab85572a197069e61dfacfc5bcde12c05dbe1fa1ed8e6420bb168f45f485b93517d1beb02521bcb84c0a6bd9150a90ae079c8e29e46e9eedc07da3dc800ae77f119ef149d43b8ffb06442194cf6fc28ee51a29b41d3d401a0f0cbc5be4ee31d41ee5adc6f06518406625bad2ffe702aabbd4029e87f39d12d5ef5f4f394140a356e7322c6729af21715793710abb53cd4258e20459bbae583f", 0x1000}, {&(0x7f0000001800)="7feca05f0bca284639e97ae36bbb8904d38b703911b2a8ded77462efb7f07456d879219a2d9ee8cc6c93162e83731ffd7dfef823a69ccdbcd9994a3ecbe15a0b68fe7998654271", 0x47}], 0x2, 0x0, 0x0, 0x6c84984e2e6998e2}}], 0x5, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x6, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r8 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x40b02)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x7c80, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
3m38.640161872s ago: executing program 5 (id=1744):
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040efc03140c"], 0xff)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x1}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000)
3m37.737282107s ago: executing program 33 (id=1744):
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040efc03140c"], 0xff)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x1}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000)
7.965244304s ago: executing program 6 (id=2419):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0xfffffffd, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040)
syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
io_uring_setup(0x2ba3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
preadv2(r2, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map, 0x13, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], <r4=>0x0}, 0x40)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup=r6, r0, 0x34, 0x0, 0x0, @void, @value=r0, @void, @void, r4}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
preadv2(r10, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0)
7.230199634s ago: executing program 6 (id=2424):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12a70420e3050205035d0102030109021200010000000009040000004abb1000"], 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="ab9bcfbd850ccbb3aad7ffc90f0aeb0af5dbce120d555f32e81d1d16df579c8b7c20aeda96fbd665", 0x28, 0x0, 0x0, 0x0)
4.201616751s ago: executing program 0 (id=2433):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
close(r0)
3.000100601s ago: executing program 6 (id=2436):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x858d, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000080)={0x1})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f00000007c0)="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", 0xfff}], 0x2)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0)=0x7933, 0x4)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800580001c0"])
r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000480)={0x0, "06d2539afe974b31ec39a20c65877a283d74e3bd0e53a97c6cd19eaae8211620", 0x1, 0x20, 0x80000000, 0x2, 0x2, 0x4, 0x5, 0x8000})
2.872300615s ago: executing program 1 (id=2437):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec22c9ee00"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004000000060000000800000000000000", @ANYBLOB="0000000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r4, @ANYBLOB="0000001305000001000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x428cdddc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
2.803721168s ago: executing program 0 (id=2440):
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000100)=""/186}, 0x20) (fail_nth: 3)
2.511807058s ago: executing program 2 (id=2441):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
setresgid(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_dev$dri(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/\n\x00\x00\x00\x00\x00\x00\x00\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xfcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
r4 = creat(&(0x7f00000004c0)='./file0\x00', 0x124)
capset(&(0x7f00000001c0)={0x399f1316}, 0x0)
pipe2$9p(&(0x7f0000001900)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, 0x0, 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,j'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x181100, 0x10)
syz_usb_connect(0x3, 0xfe0f, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x29, 0x4, 0x78, 0x10, 0x7c9, 0xb100, 0x546a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1c, 0x4, 0x0, 0x81, 0x10, 0x3e, [{{0x9, 0x4, 0xde, 0x6, 0xa, 0x97, 0xae, 0x2f, 0x7f, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0xcc, 0x96, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xd9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x7, 0x8, 0x9, [@generic={0xa, 0x22, "b08d4d9deb0769c0"}, @generic={0x5b, 0x0, "3035b9222d317a6538ccccf4766e77e9a84fd6ccc55a87553e86583dfb4b691801e1f68797d60d900b1c12f555b6c67da13580e16f0f77fc198d0d71f2c2578823c0ef33b99611aec7b6a34af61f2006045926fe17e942555e"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x7, 0xfc, 0x7f, [@generic={0x16, 0x5, "0e17c53223dfdde015c6a1c3ad12062875da3cea"}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x8, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1}]}}, {{0x9, 0x5, 0x7, 0x3, 0x18, 0x4, 0x3, 0x6, [@generic={0x12, 0xc, "f60db353ce1c6ff39e8b15246e7fbc8e"}, @generic={0xed, 0x23, "c26420775f1d04278bf1c6a39ac33f5d6b4453866da66afdddec6640616ed697336f0488125e2c6485e4df9cbb48d75150e7e0a54ad1d687f80e66d7657ad0be1a3a692ea38e82f71455d08026b74795a6c22233972c85d8d28e037f01bb5acff53f5ab3a8a0107c14e30a3825a2e2ad9dd8202a9d5134326ca0c0ee1b4c2b64265f9d1714b3ebbbfc7705c034e09ed8ada31d426fe5113103f92960a3d41783bd0377d7d08827653626fd62c09edeb81fbe8cff9185f2d609029adece5ec2c6fb2d84cba88283e69bc960079fda9569e939b3f7b02277566e9fb6465a9a20969581c67f8c71bc0a22a5b6"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x13, 0x2, 0xf}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0xfc, 0x4, 0xa, [@generic={0x80, 0x22, "de4d763f58a205ca198e185c9a3e060ccd36ad0f1d1cdb5714c2ba7ed7ceda2b31eccf0e44727864790da783d90add6857344853b2b8b777ea5daa260d5270728e79b7745d02b14c750028343d0417c4ce3650a9644122174abd58398b939fd8d85da18a8871d91e523cedc60ccaaa95c6b7efb3761b759ee9c9ad25e398"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xb0, 0x10, 0x0, [@generic={0x40, 0xd, "f7d0bf67596ccc24efcd46679c71925d9a87eb0a573d0ffa06bd01b100a49b9af97d5fd09bf86fbbe7ed225ad84f015adf866a92edb2115b1cb44f499e03"}, @generic={0x9c, 0x23, "8b568e4ab964e543e55990ef92d7a0b1887f987bde62397ad0fd0d122c4f47d5173e25efcf16d5f918fc8ff399515137640f6a4d91d5293d294c9b32414ad7d0505d72dad59542f1b4927365ead8827e3433749fad772b9692b397053f241e555b87137493d2e16411ebe3618bc3aaa265ad191ca0d30ca588a09145e66de821455047f26a0452a91cbcc4f19f7dacd434021bdd4ad04d0e4c95"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x8, 0x82, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x9, 0x7f, [@generic={0xfc, 0x0, "e2e550e2f8b70721186c85fb18e0881b5eb6921ea861c98b1a74c6ce2d7ecb261fee51593e7baccf9344e742f91807f61e4fc238fd5a10657fd392b9c004df3ae3db946ecfcecf55491155a5f00f329039ecdbf0bfc437119a0bcdcb4e9735168e8c7b656fad662e99b6175d2b13000504b7d8e33fe97a38d3bf4e63eeb5dcd2158e28711f57a4698de82ca551c3ffffec20296e09bab5a5bd6d9cfa2fa3a01c1e221d9cf122b8602f3c56198a54570d0cf945a2049561fe4e2d10396a7596afd22459a6f1778d7ad0d8ac8d082f91543f324c02b613ceaf5eefb635dde37f55aea8490d66fa80aef5c7b23911070b3493468a543136eebf5b77"}]}}]}}, {{0x9, 0x4, 0x9e, 0x4, 0x10, 0xc4, 0x88, 0x5a, 0xa, [@generic={0xbd, 0x7, "3c06938077ab85e19ba69793c64839614bc25cdf06efc05bdadb203afaa3bbf46556eecad1d947577f4f3f8009130eb31f00c2dc98f50ae2dea32db130bfc72805356dbdd028afdcb4a44258026b4e44893579f44fb0260cc0b6c8b0d9edc36148f061a95507f61e2c8eb80eb4929981e31a125d0fe7874a000e963906f402c2e4a5fe6b3854335d273a7ddcb6d2694d7ef552ab330750d8feb773cb800012f6f4b8608da6b42bc61915d997be87ccadba7171389648f8048d522e"}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x6}, [@extension_unit={0x8, 0x24, 0x8, 0x4, 0x78, 0x1, '\"'}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0xe3cc, 0x70, "8421"}]}], [{{0x9, 0x5, 0x2, 0x2, 0x40, 0x7, 0x0, 0x5, [@generic={0x7e, 0x5, "e251aa97551a52048adc5543aef66562c33fb081e09e291410da0021da3fa8ef1d073ed1c586db05f0937b360efcf10fd6a2ad78e82e24c4f2411b62b0bc22e11ec905d6a7dedbbedbcb9bd38ee4477c000cb2b3a12fdd55249a3a056f88d016aab0e8431b176c6e74665bdcb9cf9a1940d7de565274cc3a8e9d45b2"}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x40, 0x9, 0x6, 0xa, [@generic={0x32, 0x3, "cf1cb852f140e46b9811384bd61693ae6cf1590900ee1b2f6dc9cb9a4e0f135ee370cc903f8c42f63e52ea65b59ebd6e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x5, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf8, 0x6}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x1, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x70, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x7}, @generic={0x42, 0x6, "958ba26403c70a5161126e7ae0f7c4f9d890d3037c16ebf37a709685f47e31456f9e98fbc0423a191cc7e92b47d86e5af6dd49424fe7e1c9199386dda4ee98bb"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x0, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x8, 0x7f, 0xa}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x0, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xb, 0x5}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0xdd, 0x4, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xf8, 0x1, 0x9, [@generic={0x12, 0x24, "697e22de92a524f0f7b6f6e00477ac7a"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x6, 0x2, 0xe}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x80, 0x6, 0x9}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x1, 0x9, 0x2}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x6, 0xff}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x40, 0x3, 0x8}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0xfb, 0x6, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x5, 0x5}, @generic={0x1d, 0x7, "4d56bb314e8748652c76e6644edb41ed2ee9b71f0a12c7c7472983"}]}}]}}, {{0x9, 0x4, 0xca, 0x0, 0x0, 0x4e, 0x77, 0xcf, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x3}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x7, '\x00B'}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0xa, 0x3, 0x9, 0x1, 0x4, 0x8], 0x5}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x7fff, 0x6}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0xd, "a38bbd63cdb2"}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "552159ef4c"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7f, 0x40, 0x4}, [@obex={0x5, 0x24, 0x15, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x9, 0x8b0}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}]}]}}, {{0x9, 0x4, 0xad, 0x4, 0x3, 0x72, 0xe5, 0x94, 0xa, [], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x5, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x6}, @generic={0x37, 0x2, "5d8cfc0e1687a94c0a484a26f92bfce99b480822e585996b692820c10a23d5370f3d92c6d44109f3069956e4ca45eba4cf2c8ac09f"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x0, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x22}, @generic={0x68, 0x22, "b7418f4963622bc31d413c10e4aad92dee1d8a4ee9e220dfc38248e4ee6cb301a393e187760adcc9ea5d7072911e6ce404b78300dc70168f7e7d18f38c81abfee210a06879b7f2b8c7bda2d7d92dacc58116fb1353aed94dd9c4d63f85f69e9f6507758eab3b"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x81, 0xfc, 0x10, [@generic={0xba, 0xa, "3203a4da6e912f4ee06c96a815c7ed27d82181c8980cba93f20666f847fa6fd15a69682caf43718ab8c3fdd292086b1e2fe494f9ca3c625052eea63dfdcc8b176f8d29c111d1b4fbe5fc0fba825b2d1a60a27f395026c6e7feb4b6cc7426d310f52f522afeca91558288f86f21c48400996ae526e9dd7d8b95573e4322fb49de97b7e371084f8c531a9d591924622283a012d020dba42e514555283bf6d32fb291cc816a36536fee3f8f426344fdf7202bc7cdc28a6ae7b3"}, @generic={0xfd, 0x7, "466fe0c0ae6f3d002b33ba219f47c41633912653e5b6cacce520b16e9707bc66a012a0c5711d21c55d3ce697f59469c0ef73b84c3888f833e8a728039cba53b2c9d2592bb370e6b113da85feed7f0b6f4f18e6e4ea8ae1eb3e58fc243187ab66f1ef6d4af1b1738d8c86c0257173b1a8087f97fea021c478e690dd3e628fc4d8f8e3b5e89d26693192be0580f488dec3e51e65f6a316100b5971f81dd009047a24a8eda5327c23b08346bdd8b1f9bf3e7a1e4f1335219fc964bf1abe4462ce780632c0caf12ec9215ac1e2fee22d206077df4299ad394db044b64e01db38f22657a0e8539fd880d4ce25aa5143ccbac7ce68abe0f9242e5cf771f3"}]}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00039711c68af9d488d264f177ef1a0ee4bd30dcfda67186b2ec0f15b6ea3f04d320cb1aa8e34aff57a6ac588c6192adc6af81fe5c9b2c8b06547f1c0f01fedfcb6d4590eda1a0536b623532ac5471d05c095252c8d6da397a66c07e8884f21e78170600f0e3254f006a1a05b5b462515e3a1f1529432678fc08af30bbd5c021cc25ca6a2bf24e88a70afb7829b4d83817e0b1e43097730d93d8241a32a92116fce08490ec1e00"/192]}, {0x0, &(0x7f00000006c0)=@lang_id={0x0, 0x3, 0x416}}, {0x0, &(0x7f0000000700)=@lang_id={0x0, 0x3, 0x801}}, {0x0, &(0x7f0000000840)=@lang_id={0x0, 0x3, 0xd}}, {0x0, &(0x7f0000000980)=@string={0x0, 0x3, "8b8879e21283c9b2708511da1582f367a9312bae5398446a7b6d8ea4a57141d9618377fab57c0cb59d1644c5465ca318375557ce4535c9cb4954de71ffad2477d579f616e61af199e318b1516a543e9fc3141ce5f74d0f8aabeb64cc784502b1ee2efcd1a32960fa4cf9980252bc6ebf08507672a75822d907950e51a426ac87bdc9fdb2a656ad751b4713f9d23757e482b61793e37c65f98975b4a38259ca75a945ce2922429115d36700d58bc3423802b38124e2fef8c5c4bbffd9bf3a18752c9d9d231bca1bfa543a4cd5b8d99aa9722aa831360d8557504de0114562bc91bbf8372ce132b9d55ed8551df5f6db7059e3fc8bf50d69fa"}}]})
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000051}, 0x4004800)
fsopen(&(0x7f0000000740)='logfs\x00', 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="38010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d333000000ac1414aa00000000000000000000000000000200000000000000000000000000c4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000020001006000000000000000480001006469676573745f6e756c6c00"/240], 0x138}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r4)
2.244308062s ago: executing program 1 (id=2442):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80)
1.603647312s ago: executing program 1 (id=2443):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
preadv2(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x9, 0x6, 0x0) (fail_nth: 3)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
1.528078148s ago: executing program 0 (id=2444):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000))
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000300)={0x0, 0xc0, 0x80, 0x20243843, 0x0, [0x2], [0x80ffff, 0x0, 0xfe], [0x3, 0x0, 0x7, 0xfffffffe], [0x400000000000001, 0x0, 0x2f97, 0x5c]})
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10000000000a)
mkdir(0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x20042)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000000))
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x7c3a02, 0x0)
fcntl$getownex(r5, 0x10, 0x0)
r6 = inotify_init()
inotify_add_watch(r6, 0x0, 0x4000001)
inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0xc5000152)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
syz_io_uring_setup(0x80005a71, &(0x7f0000000140)={0x0, 0xfad9, 0x2000, 0x5}, &(0x7f0000000240)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x20, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', &(0x7f00000002c0)='./file0/../file0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
1.485464236s ago: executing program 2 (id=2445):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/sctp\x00')
getdents64(r4, 0x0, 0x0)
getdents64(r4, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
1.385381499s ago: executing program 1 (id=2446):
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x3ff, 0x48000)
r1 = socket(0x2, 0x3, 0x3)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
syz_emit_ethernet(0x1e9, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "ffee61", 0x1b3, 0x2c, 0x1, @remote, @local, {[@dstopts={0x2c, 0x31, '\x00', [@generic={0x6, 0xa9, "06ec6696d48c4e718be30feac0c1ba01b38f71888e12c88910d499922852a7b1c15b6b41c56bab900e093592e74071298b495296977505102679db810bb3fb5caf941f47a542bd5280270e06f5e32cc857670bcfdb68d8ee780ce03433b9487641539717f9049afe2027af6fe32d39d40cbca42478e080743cfcf0a3bd0f629bda0fc3b9abe58e5117f31ccf1e4800e8b534652063f8d1bf4378623af64df0bb05bd67273ab7b19067"}, @generic={0x5, 0x9b, "0dff32cf25fcc00a7d981af41b74afa72b90f772d617bf20f724134f4aeb16ce8b8337bec48991e2042c6312b2cf133f4a2c7ffa82c753bd512a406fa064e3715d7240e412735d5feac39a5aea91199761698344097d7a7a421ae1fd6d5a35bf8446bfd2fabab90914d113ae777fed1d9f0a8e3a87e220a1c6977b0feab1b185edaab219e17949726f7058f0673f514a47e3377314a8a66a81c1d9"}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x3, 0x8, [0x3, 0x10000]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1]}], "54efe5eb8a86577c5235c7502851c8fbc3e2ea0994c2f74d584641"}}}}}, 0x0)
sendto$unix(r1, 0x0, 0x0, 0x40240, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
1.236268857s ago: executing program 1 (id=2448):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
1.139076693s ago: executing program 1 (id=2449):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f0000000780)}, 0x20)
listen(r1, 0x4000000)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d58090444"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@md5={0x1, "6182f484e34698f9ae9915cd8569c4a1"}, 0x11, 0x3)
r4 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0)
ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f00000000c0)=@bcast)
697.84682ms ago: executing program 6 (id=2452):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec22c9ee00"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004000000060000000800000000000000", @ANYBLOB="0000000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r4, @ANYBLOB="0000001305000001000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x428cdddc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
696.04898ms ago: executing program 4 (id=2453):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="09000000010000", 0x7)
628.199261ms ago: executing program 2 (id=2454):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r4=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000080)={0x1, r4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='\f\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000fcdbdf250500000018000180140002006d616373656330000000000000000000"], 0x2c}}, 0x0)
listen(r0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000000c0)=0x6, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e00000004fcff", 0x58}], 0x1)
608.446002ms ago: executing program 0 (id=2455):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES8=r2, @ANYRESDEC=r3], 0xffdd)
602.810707ms ago: executing program 4 (id=2456):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="09000000010000", 0x7) (fail_nth: 3)
511.928437ms ago: executing program 4 (id=2457):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000080)={'erspan0\x00', <r2=>0x0, 0x1, 0x20, 0x21, 0x0, {{0x7, 0x4, 0x1, 0x2b, 0x1c, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @empty, {[@rr={0x7, 0x7, 0xdc, [@dev={0xac, 0x14, 0x14, 0x3b}]}]}}}}})
r3 = getuid()
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={<r4=>0x0, @dev}, &(0x7f0000000140)=0xc)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@getpolicy={0x13c, 0x15, 0x400, 0x70bd2a, 0x25dfdbff, {{@in=@local, @in=@local, 0x4e21, 0x4, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x1b, r2, r3}, 0x6e6bb5, 0x5f8c6bfe40bfc6a5}, [@sa={0xe4, 0x6, {{@in6=@empty, @in=@private=0xa010100, 0x4e20, 0x0, 0x4e24, 0x400, 0xa, 0xa0, 0x40, 0x2, r4}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x6c}, @in=@loopback, {0x7, 0x3, 0x401, 0x6, 0x5, 0x400, 0x2, 0x2}, {0x2, 0xbfd7, 0xe}, {0x0, 0x6, 0x40}, 0x70bd27, 0x3500, 0xa, 0x1, 0x1, 0x10}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4060881}, 0x4004)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x3ffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x22084, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x37}]}, 0x50}}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=<r9=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x3, &(0x7f0000000440))
511.578439ms ago: executing program 2 (id=2458):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x18}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
504.245494ms ago: executing program 6 (id=2459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x531, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffe0}}}, 0x24}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0, 0x5, 0xff, 0xfd55}, {0x14, 0x8, 0x3, 0x3}, {0x0, 0x6, 0x2, 0x3}, {0x8, 0x2, 0x9, 0x1}, {0x9, 0x2, 0x4, 0x10}]}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team0\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x531, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffe0}}}, 0x24}}, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0, 0x5, 0xff, 0xfd55}, {0x14, 0x8, 0x3, 0x3}, {0x0, 0x6, 0x2, 0x3}, {0x8, 0x2, 0x9, 0x1}, {0x9, 0x2, 0x4, 0x10}]}, 0x10) (async)
442.928051ms ago: executing program 4 (id=2460):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0)
listen(r1, 0x4)
setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x4)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
eventfd(0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x6, &(0x7f0000001040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r3 = socket(0x2, 0x80805, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]})
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0xffd7, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
socket(0x10, 0x803, 0x0)
427.401864ms ago: executing program 2 (id=2461):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce)
clock_getres(0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f000090e000/0x3000)=nil)
mlockall(0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1})
348.055999ms ago: executing program 6 (id=2462):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001180), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040884)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd28, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
syz_open_dev$mouse(&(0x7f0000000080), 0x101, 0x185083)
clock_settime(0x0, &(0x7f0000000180)={0x77359400})
347.277092ms ago: executing program 0 (id=2463):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async)
r0 = socket(0x29, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async)
setresuid(0x0, 0xee01, 0xee00)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r1 = getpid()
r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x7, 0x80) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000780)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, &(0x7f0000000280)) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x2100)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f0000000180))
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x4}, 'syz1\x00', 0x26}) (async)
ioctl$UI_DEV_CREATE(r7, 0x5501)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x8080, 0x0)
ioctl$sock_SIOCADDDLCI(r8, 0x5452, &(0x7f0000000100)={'veth1\x00'})
301.271922ms ago: executing program 0 (id=2464):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
clock_settime(0x0, &(0x7f0000000180)={0x77359400})
287.902179ms ago: executing program 2 (id=2465):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
link(&(0x7f0000000180)='./file1\x00', 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
unshare(0x24040000)
r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f0000001200)=<r4=>0x0, &(0x7f0000001040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r7=>r3}, './file1\x00'})
futimesat(r7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)={{0x0, 0xea60}, {0x0, 0xea60}})
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6003, @fd_index=0x1, 0x12, 0x0, 0x0, 0xd, 0x1, {0x0, r6}})
io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0)
276.902181ms ago: executing program 4 (id=2466):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
unlink(&(0x7f0000000140)='./cgroup\x00') (fail_nth: 3)
0s ago: executing program 4 (id=2467):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000140)={0x1f, @fixed}, 0x8)
r1 = dup2(r0, r0)
getsockopt$rose(r1, 0x104, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0)
kernel console output (not intermixed with test programs):
611.229769][T11655] Bluetooth: hci3: command tx timeout
[ 611.393284][T12409] netlink: 'syz.2.1771': attribute type 1 has an invalid length.
[ 611.396828][ T5828] hid-generic 0005:0458:0009.000A: item fetching failed at offset 6/7
[ 611.410553][ T5828] hid-generic 0005:0458:0009.000A: probe with driver hid-generic failed with error -22
[ 611.418689][T12409] netlink: 69172 bytes leftover after parsing attributes in process `syz.2.1771'.
[ 611.643755][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 611.694957][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 611.815691][ T5828] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 612.009758][ T5828] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 612.075514][ T5828] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 612.169124][ T5828] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 612.222856][ T5828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 612.283594][ T5828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 612.356519][ T5828] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 612.381030][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 612.441724][ T5828] usb 1-1: Product: syz
[ 612.446002][ T5828] usb 1-1: Manufacturer: syz
[ 612.467951][ T5828] cdc_wdm 1-1:1.0: skipping garbage
[ 612.475999][ T5828] cdc_wdm 1-1:1.0: skipping garbage
[ 612.487370][ T5828] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 612.495202][ T5828] cdc_wdm 1-1:1.0: Unknown control protocol
[ 612.999797][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 613.006656][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 613.013825][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 613.020279][ T5870] usb 1-1: USB disconnect, device number 47
[ 613.020417][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 613.032384][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 613.311657][T11655] Bluetooth: hci3: command tx timeout
[ 613.352126][T12292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 613.379744][T12292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 613.395653][T12292] bridge_slave_0: entered allmulticast mode
[ 613.412514][T12292] bridge_slave_0: entered promiscuous mode
[ 613.572420][T12292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 614.190451][T12292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 614.211566][T12292] bridge_slave_1: entered allmulticast mode
[ 614.218685][T12292] bridge_slave_1: entered promiscuous mode
[ 614.369362][ T29] audit: type=1400 audit(1740217177.062:776): avc: denied { ioctl } for pid=12411 comm="syz.0.1772" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 614.416289][T12292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 614.452019][T12292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 615.031945][T12292] team0: Port device team_slave_0 added
[ 615.148953][T12450] /dev/nullb0: Can't open blockdev
[ 615.169252][T12292] team0: Port device team_slave_1 added
[ 615.378901][T12292] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 615.410537][T12292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 615.480027][T12292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 615.512247][T12292] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 615.551719][T12292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 615.610488][T12292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 615.633892][T12461] syz.4.1784 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 615.682895][T12462] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1782'.
[ 615.744690][T12292] hsr_slave_0: entered promiscuous mode
[ 615.753122][T12292] hsr_slave_1: entered promiscuous mode
[ 615.759148][T12292] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 615.767865][T12292] Cannot create hsr debugfs directory
[ 616.177975][T12292] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 616.204007][T12292] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 616.248858][T12292] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 616.415543][T12292] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 616.609292][ T2150] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 616.861200][T12292] 8021q: adding VLAN 0 to HW filter on device bond0
[ 616.880293][T12292] 8021q: adding VLAN 0 to HW filter on device team0
[ 616.906940][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 616.914067][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 616.938026][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 616.945152][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 616.978745][ T2150] usb 5-1: Using ep0 maxpacket: 16
[ 616.994112][ T2150] usb 5-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config
[ 617.050621][ T2150] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 617.068038][ T2150] usb 5-1: config 0 interface 0 has no altsetting 0
[ 617.079890][T12292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 617.092221][ T2150] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 617.105494][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 617.136384][ T2150] usb 5-1: config 0 descriptor??
[ 617.149344][T12048] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 617.310001][T12048] usb 1-1: Using ep0 maxpacket: 8
[ 617.320940][T12048] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 617.338909][T12048] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 617.350210][T12048] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 617.385582][T12048] usb 1-1: Product: syz
[ 617.403804][T12048] usb 1-1: Manufacturer: syz
[ 617.414841][T12048] usb 1-1: SerialNumber: syz
[ 617.478347][T12292] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 617.673978][T12048] usb 1-1: Handspring Visor / Palm OS: port 0, is for HotSync use
[ 617.691894][T12048] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[ 617.712233][T12048] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[ 618.039916][T12048] usb 1-1: palm_os_3_probe - error -110 getting bytes available request
[ 618.054791][T12048] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[ 618.079629][T12292] veth0_vlan: entered promiscuous mode
[ 618.101832][T12292] veth1_vlan: entered promiscuous mode
[ 618.114759][T12048] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 618.154908][T12292] veth0_macvtap: entered promiscuous mode
[ 618.157087][T12048] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 618.182024][T12292] veth1_macvtap: entered promiscuous mode
[ 618.232790][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 618.264369][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 618.294480][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 618.325642][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 618.372601][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 618.398997][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 618.414539][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 618.426537][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 619.084644][T12292] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 619.221835][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 619.254942][ T2150] usb 5-1: string descriptor 0 read error: -71
[ 619.290920][ T2150] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 619.298321][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 619.339245][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 619.342760][ T2150] usb 5-1: USB disconnect, device number 40
[ 619.379704][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 619.423389][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 619.463191][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 619.489942][T12292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 619.509310][T12292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 619.531156][T12292] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 619.541065][T12292] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 619.568379][T12292] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 619.587708][T12292] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 619.597689][T12292] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 619.635922][ T29] audit: type=1400 audit(1740217182.362:777): avc: denied { getopt } for pid=12540 comm="syz.4.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 619.686359][ T5871] usb 1-1: USB disconnect, device number 48
[ 620.301704][ T5871] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 620.424519][ T5871] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 620.473706][ T5871] visor 1-1:1.0: device disconnected
[ 620.504762][ T3417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 620.529385][ T3417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 620.560844][ T29] audit: type=1400 audit(1740217183.272:778): avc: denied { associate } for pid=12550 comm="syz.2.1793" name="bus" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[ 620.634891][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 620.644676][ T29] audit: type=1400 audit(1740217183.282:779): avc: denied { mounton } for pid=12550 comm="syz.2.1793" path="/bus" dev="rootfs" ino=30958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 620.688123][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 621.022953][T12563] Bluetooth: MGMT ver 1.23
[ 621.730142][T12570] tipc: Started in network mode
[ 621.735133][T12570] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[ 621.743004][T12570] tipc: Enabled bearer <eth:macvlan1>, priority 10
[ 622.618248][T12581] syz.6.1746: attempt to access beyond end of device
[ 622.618248][T12581] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0
[ 622.636119][T12581] syz.6.1746: attempt to access beyond end of device
[ 622.636119][T12581] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0
[ 622.665597][T12581] Mount JFS Failure: -5
[ 622.938728][ T5872] tipc: Node number set to 10463914
[ 624.351990][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 624.358453][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 624.435048][ T29] audit: type=1400 audit(1740217187.162:780): avc: denied { setopt } for pid=12604 comm="syz.4.1801" lport=39241 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 625.499477][T12048] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 625.696873][T12048] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[ 625.761256][T12048] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 625.957287][T12048] usb 5-1: config 0 has no interface number 0
[ 625.964682][T12048] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 625.975133][T12048] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 625.994988][T12048] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 626.032942][T12048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 626.051374][T12048] usb 5-1: Product: syz
[ 626.060872][T12048] usb 5-1: Manufacturer: syz
[ 626.169407][T12048] usb 5-1: SerialNumber: syz
[ 626.181559][T12048] usb 5-1: config 0 descriptor??
[ 626.213314][ T29] audit: type=1400 audit(1740217188.942:781): avc: denied { setopt } for pid=12655 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 626.367662][ T29] audit: type=1400 audit(1740217189.092:782): avc: denied { getopt } for pid=12655 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 626.752791][ T29] audit: type=1400 audit(1740217189.482:783): avc: denied { load_policy } for pid=12679 comm="syz.6.1819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 626.752880][T12680] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[ 626.799814][T12680] SELinux: failed to load policy
[ 626.821207][T12048] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.117/input/input10
[ 626.848193][ T29] audit: type=1400 audit(1740217189.572:784): avc: denied { read } for pid=5179 comm="acpid" name="mouse1" dev="devtmpfs" ino=2924 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 626.873872][ T29] audit: type=1400 audit(1740217189.572:785): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2924 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 626.908899][ T29] audit: type=1400 audit(1740217189.632:786): avc: denied { remount } for pid=12679 comm="syz.6.1819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 627.114196][ T29] audit: type=1400 audit(1740217189.832:787): avc: denied { listen } for pid=12636 comm="syz.4.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 627.243879][T12688] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1821'.
[ 627.288158][ T29] audit: type=1400 audit(1740217189.872:788): avc: denied { accept } for pid=12636 comm="syz.4.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 627.649832][ T5871] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 627.807251][ T5871] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 627.828679][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12864, setting to 1024
[ 627.852276][ T5871] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 627.874533][ T5871] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 627.887612][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 627.898441][ T5871] usb 7-1: Product: syz
[ 627.906646][ T5871] usb 7-1: Manufacturer: syz
[ 627.914266][ T5871] usb 7-1: SerialNumber: syz
[ 627.933659][ T5871] usb 7-1: config 0 descriptor??
[ 627.941479][T12692] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 627.949112][T12692] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 627.977959][ T29] audit: type=1400 audit(1740217190.702:789): avc: denied { getopt } for pid=12698 comm="syz.2.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 628.167201][T12692] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 628.175096][T12692] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 628.279928][ T46] usb 5-1: USB disconnect, device number 41
[ 628.388763][T12692] netlink: 'syz.6.1822': attribute type 2 has an invalid length.
[ 628.397311][T12692] netlink: 'syz.6.1822': attribute type 9 has an invalid length.
[ 628.416803][ T5871] Error reading MAC address
[ 628.444116][ T5871] usb 7-1: USB disconnect, device number 2
[ 628.628893][T12709] 9pnet_fd: Insufficient options for proto=fd
[ 630.567688][ T29] audit: type=1400 audit(1740217193.292:790): avc: denied { map } for pid=12727 comm="syz.6.1831" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 631.261310][T12744] overlayfs: failed to clone upperpath
[ 632.630332][ T29] kauditd_printk_skb: 7 callbacks suppressed
[ 632.630349][ T29] audit: type=1400 audit(1740217195.362:798): avc: denied { getopt } for pid=12751 comm="syz.1.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 634.041212][T12781] FAULT_INJECTION: forcing a failure.
[ 634.041212][T12781] name failslab, interval 1, probability 0, space 0, times 0
[ 634.179873][T12781] CPU: 0 UID: 0 PID: 12781 Comm: syz.0.1842 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 634.179902][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 634.179913][T12781] Call Trace:
[ 634.179918][T12781] <TASK>
[ 634.179926][T12781] dump_stack_lvl+0x16c/0x1f0
[ 634.179953][T12781] should_fail_ex+0x50a/0x650
[ 634.179978][T12781] ? fs_reclaim_acquire+0xae/0x150
[ 634.180004][T12781] ? copy_mount_options+0x55/0x190
[ 634.180024][T12781] should_failslab+0xc2/0x120
[ 634.180044][T12781] __kmalloc_cache_noprof+0x68/0x410
[ 634.180073][T12781] ? _copy_from_user+0x59/0xd0
[ 634.180094][T12781] copy_mount_options+0x55/0x190
[ 634.180118][T12781] __x64_sys_mount+0x1ad/0x310
[ 634.180138][T12781] ? __pfx___x64_sys_mount+0x10/0x10
[ 634.180166][T12781] do_syscall_64+0xcd/0x250
[ 634.180189][T12781] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 634.180214][T12781] RIP: 0033:0x7f4854b8d169
[ 634.180238][T12781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 634.180261][T12781] RSP: 002b:00007f4855a5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 634.180280][T12781] RAX: ffffffffffffffda RBX: 00007f4854da5fa0 RCX: 00007f4854b8d169
[ 634.180292][T12781] RDX: 0000400000004380 RSI: 0000400000000180 RDI: 0000000000000000
[ 634.180303][T12781] RBP: 00007f4855a5c090 R08: 0000400000000300 R09: 0000000000000000
[ 634.180314][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 634.180325][T12781] R13: 0000000000000000 R14: 00007f4854da5fa0 R15: 00007fff5f6c7ae8
[ 634.180348][T12781] </TASK>
[ 634.801101][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'.
[ 634.850879][T12792] netlink: 'syz.0.1845': attribute type 1 has an invalid length.
[ 634.933119][T12793] syz.6.1843: attempt to access beyond end of device
[ 634.933119][T12793] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0
[ 634.946388][T12793] syz.6.1843: attempt to access beyond end of device
[ 634.946388][T12793] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0
[ 634.959504][T12793] Mount JFS Failure: -5
[ 635.028340][T12792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1845'.
[ 636.428148][T12808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1849'.
[ 638.227765][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'.
[ 638.684545][ T29] audit: type=1400 audit(1740217201.412:799): avc: denied { write } for pid=12852 comm="syz.6.1858" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 638.712155][ T29] audit: type=1400 audit(1740217201.412:800): avc: denied { map } for pid=12852 comm="syz.6.1858" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 638.772814][ T29] audit: type=1400 audit(1740217201.412:801): avc: denied { execute } for pid=12852 comm="syz.6.1858" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 638.891344][ T29] audit: type=1400 audit(1740217201.622:802): avc: denied { ioctl } for pid=12852 comm="syz.6.1858" path="socket:[30352]" dev="sockfs" ino=30352 ioctlcmd=0x7c80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 639.069618][T12868] overlayfs: failed to clone upperpath
[ 639.075919][T11655] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 639.085956][ T5831] Bluetooth: hci5: command 0x1003 tx timeout
[ 640.289365][T10459] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 640.376006][T12901] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1866'.
[ 640.451883][T10459] usb 7-1: Using ep0 maxpacket: 8
[ 640.458991][T10459] usb 7-1: config 2 has an invalid interface number: 31 but max is 0
[ 640.477605][T10459] usb 7-1: config 2 has no interface number 0
[ 640.498882][T10459] usb 7-1: config 2 interface 31 has no altsetting 0
[ 640.527829][T10459] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 640.547783][T10459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 640.570126][T10459] usb 7-1: Product: syz
[ 640.574331][T10459] usb 7-1: Manufacturer: syz
[ 640.594834][T10459] usb 7-1: SerialNumber: syz
[ 641.131965][T10459] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22
[ 641.199974][T10459] usb 7-1: USB disconnect, device number 3
[ 641.269294][ T5828] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 642.051983][ T5828] usb 5-1: Using ep0 maxpacket: 8
[ 642.129801][ T5828] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 642.170962][ T5828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 642.196513][ T5828] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 642.234011][ T5828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 642.239081][ T29] audit: type=1400 audit(1740217204.962:803): avc: denied { accept } for pid=12934 comm="syz.2.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 642.512507][ T5828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 642.571194][T12947] syz.0.1867: attempt to access beyond end of device
[ 642.571194][T12947] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[ 642.584575][ T5828] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 642.617075][T12947] syz.0.1867: attempt to access beyond end of device
[ 642.617075][T12947] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0
[ 642.633809][ T5828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 642.679299][ T5828] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 642.706554][ T5828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 642.748633][ T5828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 642.787073][T12947] Mount JFS Failure: -5
[ 642.812329][ T5828] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 642.871843][ T5828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 643.230711][T12961] overlayfs: failed to clone upperpath
[ 643.750206][ T5828] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 643.766823][ T5828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 643.778095][ T5828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 644.169336][ T5828] usb 5-1: string descriptor 0 read error: -71
[ 644.175565][ T5828] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 644.222860][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 644.263031][ T5828] usb 5-1: can't set config #168, error -71
[ 644.506225][ T5828] usb 5-1: USB disconnect, device number 42
[ 646.536005][T13004] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1888'.
[ 648.311492][T13038] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 648.643437][T13022] overlayfs: failed to clone upperpath
[ 649.052029][T13045] SELinux: policydb string does not match my string SE Linux
[ 649.078872][T13045] SELinux: failed to load policy
[ 651.646027][ T29] audit: type=1401 audit(1740217214.372:804): op=fscreate invalid_context="}"
[ 653.224838][T13087] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[ 653.238547][ T29] audit: type=1400 audit(1740217215.972:805): avc: denied { relabelto } for pid=13086 comm="syz.0.1903" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0"
[ 653.267003][ T29] audit: type=1400 audit(1740217215.972:806): avc: denied { associate } for pid=13086 comm="syz.0.1903" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0"
[ 653.572627][T13099] Bluetooth: MGMT ver 1.23
[ 653.643020][T13099] loop1: detected capacity change from 0 to 7
[ 653.683401][T13099] Dev loop1: unable to read RDB block 7
[ 653.718359][T13099] loop1: unable to read partition table
[ 653.727703][T13099] loop1: partition table beyond EOD, truncated
[ 653.755559][T13099] loop_reread_partitions: partition scan of loop1 (�被x������ ) failed (rc=-5)
[ 653.767697][T13104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1905'.
[ 655.352465][T13134] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[ 655.365324][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1911'.
[ 655.374967][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1911'.
[ 655.418571][T13134] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 656.744501][T13152] FAULT_INJECTION: forcing a failure.
[ 656.744501][T13152] name failslab, interval 1, probability 0, space 0, times 0
[ 656.781987][T13152] CPU: 1 UID: 0 PID: 13152 Comm: syz.6.1915 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 656.782015][T13152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 656.782025][T13152] Call Trace:
[ 656.782030][T13152] <TASK>
[ 656.782038][T13152] dump_stack_lvl+0x16c/0x1f0
[ 656.782065][T13152] should_fail_ex+0x50a/0x650
[ 656.782089][T13152] ? fs_reclaim_acquire+0xae/0x150
[ 656.782116][T13152] should_failslab+0xc2/0x120
[ 656.782137][T13152] kmem_cache_alloc_node_noprof+0x72/0x3c0
[ 656.782156][T13152] ? __alloc_skb+0x2b1/0x380
[ 656.782183][T13152] __alloc_skb+0x2b1/0x380
[ 656.782204][T13152] ? __pfx___alloc_skb+0x10/0x10
[ 656.782225][T13152] ? __pfx_mark_lock+0x10/0x10
[ 656.782256][T13152] tipc_buf_acquire+0x26/0xe0
[ 656.782280][T13152] tipc_msg_build+0x10c/0x1120
[ 656.782306][T13152] ? tipc_nametbl_lookup_mcast_nodes+0x20f/0x370
[ 656.782326][T13152] ? __pfx_lock_release+0x10/0x10
[ 656.782350][T13152] ? __pfx_tipc_msg_build+0x10/0x10
[ 656.782382][T13152] ? tipc_nametbl_lookup_mcast_nodes+0x214/0x370
[ 656.782406][T13152] tipc_sendmcast+0x79e/0xba0
[ 656.782427][T13152] ? __lock_acquire+0xcc5/0x3c40
[ 656.782459][T13152] ? __pfx_tipc_sendmcast+0x10/0x10
[ 656.782479][T13152] ? hlock_class+0x4e/0x130
[ 656.782494][T13152] ? mark_lock+0xb5/0xc60
[ 656.782509][T13152] ? mark_lock+0xb5/0xc60
[ 656.782527][T13152] ? __pfx_mark_lock+0x10/0x10
[ 656.782547][T13152] ? __pfx_mark_lock+0x10/0x10
[ 656.782569][T13152] ? __pfx_woken_wake_function+0x10/0x10
[ 656.782590][T13152] ? find_held_lock+0x2d/0x110
[ 656.782620][T13152] ? hlock_class+0x4e/0x130
[ 656.782638][T13152] ? __lock_acquire+0x15a9/0x3c40
[ 656.782665][T13152] __tipc_sendmsg+0x135d/0x1990
[ 656.782696][T13152] ? __pfx___tipc_sendmsg+0x10/0x10
[ 656.782719][T13152] ? __pfx_mark_lock+0x10/0x10
[ 656.782743][T13152] ? lock_acquire.part.0+0x11b/0x380
[ 656.782769][T13152] ? find_held_lock+0x2d/0x110
[ 656.782800][T13152] ? mark_held_locks+0x9f/0xe0
[ 656.782836][T13152] tipc_sendmsg+0x4f/0x70
[ 656.782858][T13152] ____sys_sendmsg+0xaaf/0xc90
[ 656.782877][T13152] ? copy_msghdr_from_user+0x10b/0x160
[ 656.782899][T13152] ? __pfx_____sys_sendmsg+0x10/0x10
[ 656.782932][T13152] ___sys_sendmsg+0x135/0x1e0
[ 656.782956][T13152] ? __pfx____sys_sendmsg+0x10/0x10
[ 656.782992][T13152] ? __pfx_lock_release+0x10/0x10
[ 656.783014][T13152] ? trace_lock_acquire+0x14e/0x1f0
[ 656.783044][T13152] ? __fget_files+0x206/0x3a0
[ 656.783069][T13152] __sys_sendmsg+0x16e/0x220
[ 656.783092][T13152] ? __pfx___sys_sendmsg+0x10/0x10
[ 656.783135][T13152] do_syscall_64+0xcd/0x250
[ 656.783158][T13152] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 656.783182][T13152] RIP: 0033:0x7f3304d8d169
[ 656.783196][T13152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 656.783212][T13152] RSP: 002b:00007f3305c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 656.783230][T13152] RAX: ffffffffffffffda RBX: 00007f3304fa5fa0 RCX: 00007f3304d8d169
[ 656.783243][T13152] RDX: 0000000000000000 RSI: 00004000000006c0 RDI: 0000000000000003
[ 656.783253][T13152] RBP: 00007f3305c47090 R08: 0000000000000000 R09: 0000000000000000
[ 656.783264][T13152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 656.783275][T13152] R13: 0000000000000000 R14: 00007f3304fa5fa0 R15: 00007ffd3846bde8
[ 656.783300][T13152] </TASK>
[ 659.882819][T13181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1925'.
[ 660.130194][T10459] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 660.149364][ T29] audit: type=1400 audit(1740217222.872:807): avc: denied { write } for pid=13189 comm="syz.0.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 660.291467][T10459] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 660.300383][T10459] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 660.396712][T13192] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 661.154253][T10459] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 661.163597][T10459] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 661.174613][T10459] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 661.209776][T10459] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 661.218851][T10459] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 661.247323][T10459] usb 7-1: Product: syz
[ 661.266237][T10459] usb 7-1: Manufacturer: syz
[ 661.293186][T10459] cdc_wdm 7-1:1.0: skipping garbage
[ 661.301889][T10459] cdc_wdm 7-1:1.0: skipping garbage
[ 661.313746][T10459] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 661.325510][T10459] cdc_wdm 7-1:1.0: Unknown control protocol
[ 661.724657][T10459] usb 7-1: USB disconnect, device number 4
[ 663.228746][T13236] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1938'.
[ 663.260244][ T29] audit: type=1400 audit(1740217225.982:808): avc: denied { listen } for pid=13232 comm="syz.4.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 663.473579][T13244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1942'.
[ 663.519761][T13246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1942'.
[ 665.133794][T13279] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 665.293500][T13285] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 665.302932][T13285] overlayfs: missing 'lowerdir'
[ 666.448919][ T29] audit: type=1400 audit(1740217229.072:809): avc: denied { connect } for pid=13298 comm="syz.0.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 667.062438][ T29] audit: type=1400 audit(1740217229.072:810): avc: denied { read } for pid=13298 comm="syz.0.1958" path="socket:[33018]" dev="sockfs" ino=33018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 667.856583][ T29] audit: type=1400 audit(1740217230.582:811): avc: denied { getattr } for pid=13325 comm="syz.6.1968" path="socket:[32222]" dev="sockfs" ino=32222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 668.429207][ T5871] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 668.625652][T13333] FAULT_INJECTION: forcing a failure.
[ 668.625652][T13333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 668.651961][T13333] CPU: 1 UID: 0 PID: 13333 Comm: syz.6.1970 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 668.651985][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 668.651995][T13333] Call Trace:
[ 668.652000][T13333] <TASK>
[ 668.652007][T13333] dump_stack_lvl+0x16c/0x1f0
[ 668.652034][T13333] should_fail_ex+0x50a/0x650
[ 668.652061][T13333] _copy_from_user+0x2e/0xd0
[ 668.652078][T13333] ____sys_sendmsg+0x590/0xc90
[ 668.652104][T13333] ? __pfx_____sys_sendmsg+0x10/0x10
[ 668.652119][T13333] ? __lock_acquire+0xcc5/0x3c40
[ 668.652153][T13333] ___sys_sendmsg+0x135/0x1e0
[ 668.652178][T13333] ? __pfx____sys_sendmsg+0x10/0x10
[ 668.652210][T13333] ? trace_lock_acquire+0x14e/0x1f0
[ 668.652245][T13333] __sys_sendmmsg+0x201/0x420
[ 668.652270][T13333] ? __pfx___sys_sendmmsg+0x10/0x10
[ 668.652301][T13333] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 668.652333][T13333] ? fput+0x67/0x440
[ 668.652353][T13333] ? ksys_write+0x1ba/0x250
[ 668.652378][T13333] ? __pfx_ksys_write+0x10/0x10
[ 668.652407][T13333] __x64_sys_sendmmsg+0x9c/0x100
[ 668.652428][T13333] ? lockdep_hardirqs_on+0x7c/0x110
[ 668.652441][T13333] do_syscall_64+0xcd/0x250
[ 668.652455][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 668.652470][T13333] RIP: 0033:0x7f3304d8d169
[ 668.652480][T13333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 668.652490][T13333] RSP: 002b:00007f3305c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 668.652501][T13333] RAX: ffffffffffffffda RBX: 00007f3304fa5fa0 RCX: 00007f3304d8d169
[ 668.652508][T13333] RDX: 0000000000000001 RSI: 0000400000003a80 RDI: 0000000000000003
[ 668.652514][T13333] RBP: 00007f3305c47090 R08: 0000000000000000 R09: 0000000000000000
[ 668.652520][T13333] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[ 668.652526][T13333] R13: 0000000000000000 R14: 00007f3304fa5fa0 R15: 00007ffd3846bde8
[ 668.652539][T13333] </TASK>
[ 668.861491][ T5871] usb 1-1: device descriptor read/64, error -71
[ 669.099369][ T5871] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 669.909840][ T5871] usb 1-1: device descriptor read/64, error -71
[ 670.020393][ T5871] usb usb1-port1: attempt power cycle
[ 670.256531][T13352] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1978'.
[ 670.311804][T13355] xt_l2tp: unknown flags: 17
[ 670.419997][ T5871] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 670.512931][ T5871] usb 1-1: device descriptor read/8, error -71
[ 671.259293][ T5871] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 671.484988][ T5871] usb 1-1: device not accepting address 52, error -71
[ 671.518137][ T5871] usb usb1-port1: unable to enumerate USB device
[ 671.600441][T13371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1984'.
[ 671.633072][T13355] lo speed is unknown, defaulting to 1000
[ 671.699845][T10459] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 671.809821][ T5828] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 671.898709][T10459] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 671.916123][T10459] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 671.931624][T13383] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 671.938584][T10459] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 671.947875][ T5828] usb 7-1: device descriptor read/64, error -71
[ 671.995269][T10459] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 672.057117][T10459] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 672.096381][T10459] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 672.116094][T10459] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 672.140829][T10459] usb 5-1: Product: syz
[ 672.150516][T10459] usb 5-1: Manufacturer: syz
[ 672.172445][T10459] cdc_wdm 5-1:1.0: skipping garbage
[ 672.188916][T10459] cdc_wdm 5-1:1.0: skipping garbage
[ 672.210321][ T5828] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 672.266509][T10459] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 672.291111][T10459] cdc_wdm 5-1:1.0: Unknown control protocol
[ 672.389300][ T5828] usb 7-1: device descriptor read/64, error -71
[ 672.583723][ T5828] usb usb7-port1: attempt power cycle
[ 672.718120][ T46] usb 5-1: USB disconnect, device number 43
[ 672.839478][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1990'.
[ 673.400590][ T5828] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 673.459283][ T5828] usb 7-1: device descriptor read/8, error -71
[ 673.573534][T13410] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1995'.
[ 673.729513][ T5828] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 673.783681][ T5828] usb 7-1: device descriptor read/8, error -71
[ 673.909632][ T5828] usb usb7-port1: unable to enumerate USB device
[ 674.328597][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'.
[ 674.337712][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'.
[ 674.346675][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'.
[ 676.039275][T13432] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2003'.
[ 676.210556][ T29] audit: type=1400 audit(1740217238.932:812): avc: denied { append } for pid=13437 comm="syz.6.2005" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 677.241584][ T29] audit: type=1400 audit(1740217239.542:813): avc: denied { write } for pid=13437 comm="syz.6.2005" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 677.557618][ T29] audit: type=1400 audit(1740217240.182:814): avc: denied { ioctl } for pid=13437 comm="syz.6.2005" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 677.599448][T12048] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 677.726159][T13447] netlink: 'syz.1.2007': attribute type 3 has an invalid length.
[ 677.784064][T12048] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 677.815504][T12048] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 255, changing to 11
[ 677.915457][T12048] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024
[ 677.932214][T12048] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 677.944189][T12048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 677.964492][T13432] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 677.977020][T12048] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 677.996724][T12048] usb 5-1: invalid MIDI out EP 0
[ 678.701656][ T29] audit: type=1400 audit(1740217241.422:815): avc: denied { getopt } for pid=13431 comm="syz.4.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 678.837793][T13467] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2015'.
[ 678.879830][ T5828] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 678.891549][T12048] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 678.911054][T12048] usb 5-1: USB disconnect, device number 44
[ 679.088869][ T5828] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 679.097761][ T5828] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 679.255527][ T5828] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 679.275096][ T5828] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 679.286599][T13475] udevd[13475]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 679.309322][ T5828] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 679.333035][ T5828] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 679.344851][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 679.372666][ T5828] usb 7-1: Product: syz
[ 679.380352][ T5828] usb 7-1: Manufacturer: syz
[ 679.393268][ T5828] cdc_wdm 7-1:1.0: skipping garbage
[ 679.400054][ T5828] cdc_wdm 7-1:1.0: skipping garbage
[ 679.427211][ T5828] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 679.444799][ T5828] cdc_wdm 7-1:1.0: Unknown control protocol
[ 680.102938][T12048] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[ 680.281390][ T5828] usb 7-1: USB disconnect, device number 9
[ 680.358373][T12048] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 680.367591][T12048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 680.390430][T12048] usb 5-1: Product: syz
[ 680.409443][T12048] usb 5-1: Manufacturer: syz
[ 680.415136][T12048] usb 5-1: SerialNumber: syz
[ 680.428693][T12048] usb 5-1: config 0 descriptor??
[ 680.435934][T13481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 680.491842][T13501] netlink: 'syz.1.2023': attribute type 1 has an invalid length.
[ 680.562170][T13501] bond1: entered promiscuous mode
[ 680.571211][T13501] 8021q: adding VLAN 0 to HW filter on device bond1
[ 680.646998][T13505] 8021q: adding VLAN 0 to HW filter on device bond2
[ 680.706519][T13505] bond1: (slave bond2): making interface the new active one
[ 680.723771][T12048] airspy 5-1:0.0: usb_control_msg() failed -71 request 09
[ 680.739415][T13505] bond2: entered promiscuous mode
[ 680.755645][T13505] bond1: (slave bond2): Enslaving as an active interface with an up link
[ 680.757296][T12048] airspy 5-1:0.0: Could not detect board
[ 680.798458][T12048] airspy 5-1:0.0: probe with driver airspy failed with error -71
[ 680.848377][T12048] usb 5-1: USB disconnect, device number 45
[ 680.905741][T13509] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2025'.
[ 680.996704][T13511] veth0_to_bond: entered promiscuous mode
[ 681.003547][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'.
[ 681.174260][T13511] veth0_to_bond (unregistering): left promiscuous mode
[ 681.300889][T13511] bond0: (slave bond_slave_0): Releasing backup interface
[ 681.402873][T13520] overlayfs: failed to clone upperpath
[ 681.932470][T13513] veth0_to_bond: entered promiscuous mode
[ 681.999450][T13513] veth0_to_bond: left promiscuous mode
[ 682.305364][ T29] audit: type=1400 audit(1740217245.032:816): avc: denied { setopt } for pid=13531 comm="syz.1.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 682.318958][T13532] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2034'.
[ 683.193688][ T29] audit: type=1400 audit(1740217245.902:817): avc: denied { search } for pid=13540 comm="syz.4.2036" name="/" dev="configfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 683.870542][ T29] audit: type=1326 audit(1740217246.592:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c57d8d169 code=0x7ffc0000
[ 683.925542][ T29] audit: type=1326 audit(1740217246.602:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f6c57d8d169 code=0x7ffc0000
[ 685.795634][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 685.802021][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 686.455589][ T29] audit: type=1400 audit(1740217249.182:820): avc: denied { ioctl } for pid=13576 comm="syz.6.2046" path="socket:[32597]" dev="sockfs" ino=32597 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 686.934286][T13594] overlayfs: failed to clone upperpath
[ 687.637969][T13598] veth0_to_team: entered promiscuous mode
[ 687.643840][T13598] veth0_to_team: entered allmulticast mode
[ 687.773866][T13606] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2053'.
[ 688.093897][T13611] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2052'.
[ 688.128762][T13607] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2052'.
[ 689.155425][T13627] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2058'.
[ 689.179504][ T29] audit: type=1401 audit(1740217251.902:821): op=fscreate invalid_context="}"
[ 689.409486][ T46] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 689.699290][ T46] usb 5-1: device descriptor read/64, error -71
[ 689.800665][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2060'.
[ 689.809785][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2060'.
[ 689.819507][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2060'.
[ 689.963241][ T46] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 690.263937][ T46] usb 5-1: device descriptor read/64, error -71
[ 690.490117][ T46] usb usb5-port1: attempt power cycle
[ 690.592306][T13645] bridge: RTM_NEWNEIGH with invalid state 0x21c
[ 690.841644][ T46] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 690.880826][ T46] usb 5-1: device descriptor read/8, error -71
[ 691.123840][T13652] lo speed is unknown, defaulting to 1000
[ 691.199319][ T46] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 691.215343][T13658] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2067'.
[ 691.253665][ T46] usb 5-1: device descriptor read/8, error -71
[ 691.539873][ T46] usb usb5-port1: unable to enumerate USB device
[ 691.599310][T13618] syz.0.2056 (13618) used greatest stack depth: 20880 bytes left
[ 691.694476][T13661] batadv0: entered promiscuous mode
[ 691.705776][T13661] batadv_slave_0: entered promiscuous mode
[ 691.720022][T13661] batadv_slave_0: left promiscuous mode
[ 691.729848][T13661] batadv0: left promiscuous mode
[ 691.756047][T13663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2069'.
[ 692.384150][T13671] FAULT_INJECTION: forcing a failure.
[ 692.384150][T13671] name failslab, interval 1, probability 0, space 0, times 0
[ 692.511722][T13671] CPU: 0 UID: 0 PID: 13671 Comm: syz.0.2072 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 692.511750][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 692.511760][T13671] Call Trace:
[ 692.511766][T13671] <TASK>
[ 692.511774][T13671] dump_stack_lvl+0x16c/0x1f0
[ 692.511800][T13671] should_fail_ex+0x50a/0x650
[ 692.511824][T13671] ? fs_reclaim_acquire+0xae/0x150
[ 692.511852][T13671] should_failslab+0xc2/0x120
[ 692.511873][T13671] kmem_cache_alloc_node_noprof+0x72/0x3c0
[ 692.511893][T13671] ? __alloc_skb+0x2b1/0x380
[ 692.511915][T13671] ? __pfx_mark_lock+0x10/0x10
[ 692.511941][T13671] __alloc_skb+0x2b1/0x380
[ 692.511963][T13671] ? __pfx___alloc_skb+0x10/0x10
[ 692.511984][T13671] ? find_held_lock+0x2d/0x110
[ 692.512007][T13671] ? __might_fault+0x13b/0x190
[ 692.512031][T13671] alloc_skb_with_frags+0xe4/0x850
[ 692.512059][T13671] ? __might_fault+0xe3/0x190
[ 692.512082][T13671] sock_alloc_send_pskb+0x7f1/0x980
[ 692.512106][T13671] ? _copy_from_iter+0x15e/0x1560
[ 692.512130][T13671] ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 692.512150][T13671] ? __lock_acquire+0xcc5/0x3c40
[ 692.512176][T13671] ? hlock_class+0x4e/0x130
[ 692.512194][T13671] ? __lock_acquire+0xcc5/0x3c40
[ 692.512217][T13671] ? iov_iter_advance+0x7d/0x6c0
[ 692.512237][T13671] tun_get_user+0xd3b/0x3e50
[ 692.512274][T13671] ? __pfx_tun_get_user+0x10/0x10
[ 692.512297][T13671] ? find_held_lock+0x2d/0x110
[ 692.512321][T13671] ? __pfx_lock_release+0x10/0x10
[ 692.512357][T13671] tun_chr_write_iter+0xdc/0x210
[ 692.512385][T13671] vfs_write+0x5ae/0x1150
[ 692.512413][T13671] ? __pfx_tun_chr_write_iter+0x10/0x10
[ 692.512442][T13671] ? __pfx_vfs_write+0x10/0x10
[ 692.512469][T13671] ? __fget_files+0x40/0x3a0
[ 692.512500][T13671] ksys_write+0x12b/0x250
[ 692.512525][T13671] ? __pfx_ksys_write+0x10/0x10
[ 692.512558][T13671] do_syscall_64+0xcd/0x250
[ 692.512588][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 692.512612][T13671] RIP: 0033:0x7f4854b8d169
[ 692.512627][T13671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 692.512644][T13671] RSP: 002b:00007f4855a5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 692.512662][T13671] RAX: ffffffffffffffda RBX: 00007f4854da5fa0 RCX: 00007f4854b8d169
[ 692.512675][T13671] RDX: 00000000000011d0 RSI: 0000400000000040 RDI: 0000000000000003
[ 692.512686][T13671] RBP: 00007f4855a5c090 R08: 0000000000000000 R09: 0000000000000000
[ 692.512698][T13671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 692.512709][T13671] R13: 0000000000000000 R14: 00007f4854da5fa0 R15: 00007fff5f6c7ae8
[ 692.512733][T13671] </TASK>
[ 692.549951][T13674] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 692.550862][ C0] vkms_vblank_simulate: vblank timer overrun
[ 692.794602][ C0] vkms_vblank_simulate: vblank timer overrun
[ 692.800582][ C0] hrtimer: interrupt took 281432888 ns
[ 692.900614][ C0] vkms_vblank_simulate: vblank timer overrun
[ 693.740114][ T29] audit: type=1400 audit(1740217256.442:822): avc: denied { read } for pid=13688 comm="syz.6.2079" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 694.339976][ T46] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 694.619999][ T46] usb 1-1: Using ep0 maxpacket: 32
[ 694.763706][ T46] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 694.848772][ T46] usb 1-1: config 0 has no interface number 0
[ 694.939294][ T46] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 694.948406][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 695.010235][ T46] usb 1-1: Product: syz
[ 695.016023][ T46] usb 1-1: Manufacturer: syz
[ 695.027439][ T46] usb 1-1: SerialNumber: syz
[ 695.094828][ T46] usb 1-1: config 0 descriptor??
[ 695.140663][ T46] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 695.603407][ T29] audit: type=1400 audit(1740217258.332:823): avc: denied { map } for pid=13711 comm="syz.2.2083" path="pipe:[33793]" dev="pipefs" ino=33793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 695.626325][ C0] vkms_vblank_simulate: vblank timer overrun
[ 695.777140][ T46] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 696.051841][T13714] overlayfs: failed to clone upperpath
[ 696.311224][ T29] audit: type=1400 audit(1740217258.592:824): avc: denied { write } for pid=13686 comm="syz.0.2077" path="socket:[32748]" dev="sockfs" ino=32748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 696.469944][ T46] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 696.684441][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2084'.
[ 696.735409][T13719] netlink: 'syz.1.2084': attribute type 12 has an invalid length.
[ 696.748240][T13719] netlink: 'syz.1.2084': attribute type 29 has an invalid length.
[ 696.756830][T13719] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2084'.
[ 696.766734][T13721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2085'.
[ 696.772097][ T29] audit: type=1400 audit(1740217259.502:825): avc: denied { bind } for pid=13718 comm="syz.1.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 696.804187][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'.
[ 697.344585][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 697.385816][ T46] usb 1-1: USB disconnect, device number 53
[ 697.404105][ T46] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 697.428846][ T46] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 697.448293][ T46] quatech2 1-1:0.51: device disconnected
[ 697.482766][T13733] bpf: Bad value for 'uid'
[ 697.497720][ T29] audit: type=1400 audit(1740217260.222:826): avc: denied { write } for pid=13731 comm="syz.1.2090" path="socket:[33823]" dev="sockfs" ino=33823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 697.636888][T13737] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 697.646184][T13737] overlayfs: missing 'lowerdir'
[ 699.511873][T13757] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2094'.
[ 699.610557][T13754] nvme_fabrics: unknown parameter or missing value '1844674407370955' in ctrl creation request
[ 699.725945][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'.
[ 699.735028][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'.
[ 699.744500][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'.
[ 700.309321][ T5870] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 700.601603][ T5870] usb 1-1: device descriptor read/64, error -71
[ 701.439303][ T5870] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 702.021007][ T2150] Process accounting resumed
[ 702.022514][T13797] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2106'.
[ 702.032480][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2107'.
[ 702.540235][T13806] overlayfs: failed to clone upperpath
[ 703.282025][T10459] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 703.473206][T10459] usb 5-1: Using ep0 maxpacket: 32
[ 703.502267][T10459] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 703.538821][T10459] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 703.548886][T10459] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 703.802367][T10459] usb 5-1: Product: syz
[ 703.852354][ T29] audit: type=1400 audit(1740217266.582:827): avc: denied { read } for pid=13827 comm="syz.1.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 703.855887][T10459] usb 5-1: Manufacturer: syz
[ 703.936430][T10459] usb 5-1: SerialNumber: syz
[ 703.956427][T10459] usb 5-1: config 0 descriptor??
[ 703.982775][T13811] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 704.000369][T10459] hub 5-1:0.0: bad descriptor, ignoring hub
[ 704.006668][T10459] hub 5-1:0.0: probe with driver hub failed with error -5
[ 704.085925][T13831] 9pnet_fd: Insufficient options for proto=fd
[ 704.266054][ T29] audit: type=1400 audit(1740217266.992:828): avc: denied { accept } for pid=13833 comm="syz.1.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[ 704.692029][T13811] usb 5-1: reset high-speed USB device number 50 using dummy_hcd
[ 704.720553][T13844] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2119'.
[ 704.742265][T13811] usb 5-1: device reset changed ep0 maxpacket size!
[ 704.785413][T10459] usb 5-1: USB disconnect, device number 50
[ 705.029938][T13849] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2122'.
[ 705.129440][ T46] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 705.189926][T10459] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 705.269307][ T46] usb 7-1: device descriptor read/64, error -71
[ 705.380335][T10459] usb 5-1: Using ep0 maxpacket: 16
[ 705.410552][T10459] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 705.420190][T10459] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 705.427972][T10459] usb 5-1: can't read configurations, error -71
[ 705.539336][ T46] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 705.679360][ T46] usb 7-1: device descriptor read/64, error -71
[ 705.799556][ T46] usb usb7-port1: attempt power cycle
[ 705.828232][T13854] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2124'.
[ 706.159322][ T46] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 706.221581][ T46] usb 7-1: device descriptor read/8, error -71
[ 706.869283][ T46] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 707.072562][ T46] usb 7-1: device descriptor read/8, error -71
[ 707.201128][ T46] usb usb7-port1: unable to enumerate USB device
[ 707.581993][T13866] syz.4.2128: attempt to access beyond end of device
[ 707.581993][T13866] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[ 707.651523][T13866] syz.4.2128: attempt to access beyond end of device
[ 707.651523][T13866] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[ 707.737239][T13866] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 707.786118][T13866] syz.4.2128: attempt to access beyond end of device
[ 707.786118][T13866] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[ 707.819928][T13872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2128'.
[ 707.856949][T13866] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 707.902843][T13866] syz.4.2128: attempt to access beyond end of device
[ 707.902843][T13866] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[ 707.998505][T13866] syz.4.2128: attempt to access beyond end of device
[ 707.998505][T13866] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[ 708.270163][T13866] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 708.326710][T13866] syz.4.2128: attempt to access beyond end of device
[ 708.326710][T13866] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 708.446272][T13866] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 708.589929][T13866] syz.4.2128: attempt to access beyond end of device
[ 708.589929][T13866] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[ 708.791159][T13866] syz.4.2128: attempt to access beyond end of device
[ 708.791159][T13866] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 708.969328][T13866] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 708.978955][T13866] syz.4.2128: attempt to access beyond end of device
[ 708.978955][T13866] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 709.054066][T13866] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 709.081700][T13866] syz.4.2128: attempt to access beyond end of device
[ 709.081700][T13866] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[ 709.116469][T13866] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 709.160935][T13866] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 709.204199][T13866] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[ 709.750076][T10459] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 710.518695][T10459] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 710.553144][T10459] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 710.616518][T10459] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 710.640775][T10459] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 710.677310][T10459] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 710.723612][T10459] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 710.752863][T10459] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 710.785343][T10459] usb 5-1: Product: syz
[ 710.815337][T10459] usb 5-1: Manufacturer: syz
[ 710.844865][T10459] cdc_wdm 5-1:1.0: skipping garbage
[ 710.874106][T10459] cdc_wdm 5-1:1.0: skipping garbage
[ 710.904741][T10459] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 710.922140][T10459] cdc_wdm 5-1:1.0: Unknown control protocol
[ 711.085496][ T2150] usb 5-1: USB disconnect, device number 53
[ 711.425999][T13911] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2140'.
[ 711.436542][ T29] audit: type=1400 audit(1740217274.152:829): avc: denied { write } for pid=13912 comm="syz.6.2139" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 711.460634][ C1] vkms_vblank_simulate: vblank timer overrun
[ 711.506736][ T29] audit: type=1400 audit(1740217274.152:830): avc: denied { open } for pid=13912 comm="syz.6.2139" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 711.531225][ C1] vkms_vblank_simulate: vblank timer overrun
[ 715.953542][T13974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 716.481627][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2157'.
[ 716.531664][T13975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 747.241758][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 747.248070][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 749.195349][T14006] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.2166'.
[ 750.158864][ T46] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 750.260458][T14018] lo speed is unknown, defaulting to 1000
[ 750.790718][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 750.801835][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 750.812002][ T46] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 750.821116][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 750.829378][ T5870] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 750.840765][ T46] usb 1-1: config 0 descriptor??
[ 750.999557][ T5870] usb 7-1: Using ep0 maxpacket: 8
[ 751.006233][ T5870] usb 7-1: config 0 interface 0 altsetting 112 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 751.018072][ T5870] usb 7-1: config 0 interface 0 altsetting 112 endpoint 0x81 has invalid wMaxPacketSize 0
[ 751.028537][ T5870] usb 7-1: config 0 interface 0 has no altsetting 0
[ 751.047325][ T5870] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice=11.00
[ 751.058625][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 751.107413][ T46] usbhid 1-1:0.0: can't add hid device: -71
[ 751.114470][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 751.125461][ T5870] usb 7-1: config 0 descriptor??
[ 751.136892][ T46] usb 1-1: USB disconnect, device number 56
[ 753.208580][ T5870] usbhid 7-1:0.0: can't add hid device: -71
[ 753.215617][ T5870] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 753.234285][ T5870] usb 7-1: USB disconnect, device number 14
[ 754.429297][ T5831] Bluetooth: hci3: command 0x0406 tx timeout
[ 764.672715][T14040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'.
[ 764.899335][ T5871] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 764.949248][ T5870] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 765.005512][T14051] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2172'.
[ 765.065314][ T29] audit: type=1400 audit(1740217327.792:831): avc: denied { accept } for pid=14048 comm="syz.1.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 765.112109][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 765.128477][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 765.138792][ T5871] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 765.147969][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 765.228381][ T5871] usb 7-1: config 0 descriptor??
[ 765.321086][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 765.332171][ T5870] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 765.351872][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 765.361099][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 765.370815][ T5870] usb 5-1: Product: syz
[ 765.375074][ T5870] usb 5-1: Manufacturer: syz
[ 765.381142][ T5870] usb 5-1: SerialNumber: syz
[ 766.001055][T14058] lo speed is unknown, defaulting to 1000
[ 766.253229][T14038] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 766.883700][T14038] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 767.097751][ T5870] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 767.106557][ T5870] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 767.106685][ T5871] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000B/input/input12
[ 767.121412][ T5870] cdc_mbim 5-1:1.0: setting rx_max = 2048
[ 767.219517][ T29] audit: type=1400 audit(1740217329.942:832): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2991 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 767.248220][ T5871] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000B/input/input13
[ 767.269269][ T5871] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000B/input/input14
[ 767.288555][ T5871] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000B/input/input15
[ 767.307269][ T5870] cdc_mbim 5-1:1.0: setting tx_max = 184
[ 767.317935][ T5871] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0
[ 767.331497][ T5870] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[ 767.458749][ T5870] wwan wwan0: port wwan0mbim0 attached
[ 767.826808][ T5870] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42
[ 767.869604][ T5870] usb 5-1: USB disconnect, device number 54
[ 767.876366][ T5870] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[ 768.081491][ T5870] wwan wwan0: port wwan0mbim0 disconnected
[ 768.920795][ T5871] usb 7-1: reset high-speed USB device number 15 using dummy_hcd
[ 768.967423][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2185'.
[ 769.673561][T14102] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2186'.
[ 769.989567][T14110] FAULT_INJECTION: forcing a failure.
[ 769.989567][T14110] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 770.059702][T14110] CPU: 0 UID: 0 PID: 14110 Comm: syz.6.2188 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 770.059730][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 770.059741][T14110] Call Trace:
[ 770.059746][T14110] <TASK>
[ 770.059755][T14110] dump_stack_lvl+0x16c/0x1f0
[ 770.059781][T14110] should_fail_ex+0x50a/0x650
[ 770.059811][T14110] _copy_to_user+0x32/0xd0
[ 770.059832][T14110] simple_read_from_buffer+0xd0/0x160
[ 770.059865][T14110] proc_fail_nth_read+0x198/0x270
[ 770.059891][T14110] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 770.059918][T14110] ? rw_verify_area+0xcf/0x680
[ 770.059941][T14110] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 770.059964][T14110] vfs_read+0x1df/0xbf0
[ 770.059989][T14110] ? __fget_files+0x1fc/0x3a0
[ 770.060007][T14110] ? __pfx___mutex_lock+0x10/0x10
[ 770.060028][T14110] ? __pfx_vfs_read+0x10/0x10
[ 770.060062][T14110] ? __fget_files+0x206/0x3a0
[ 770.060089][T14110] ksys_read+0x12b/0x250
[ 770.060113][T14110] ? __pfx_ksys_read+0x10/0x10
[ 770.060147][T14110] do_syscall_64+0xcd/0x250
[ 770.060170][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 770.060194][T14110] RIP: 0033:0x7f3304d8bb7c
[ 770.060209][T14110] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 770.060226][T14110] RSP: 002b:00007f3305c26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 770.060244][T14110] RAX: ffffffffffffffda RBX: 00007f3304fa6080 RCX: 00007f3304d8bb7c
[ 770.060256][T14110] RDX: 000000000000000f RSI: 00007f3305c260a0 RDI: 0000000000000006
[ 770.060267][T14110] RBP: 00007f3305c26090 R08: 0000000000000000 R09: 0000000000000000
[ 770.060278][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 770.060289][T14110] R13: 0000000000000001 R14: 00007f3304fa6080 R15: 00007ffd3846bde8
[ 770.060315][T14110] </TASK>
[ 770.397899][T14116] nvme_fabrics: unknown parameter or missing value '1844674407370955' in ctrl creation request
[ 770.540980][ T865] usb 7-1: USB disconnect, device number 15
[ 770.850501][T14119] netlink: 'syz.2.2192': attribute type 27 has an invalid length.
[ 771.844135][T14132] Unknown options in mask 5
[ 772.531331][ T865] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 772.608232][T14145] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 772.617759][T14145] overlayfs: missing 'lowerdir'
[ 772.859495][ T865] usb 7-1: Using ep0 maxpacket: 16
[ 772.866300][ T865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 772.899699][ T865] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 772.939328][ T865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 772.947351][ T865] usb 7-1: Product: syz
[ 772.972296][ T865] usb 7-1: Manufacturer: syz
[ 773.003879][ T865] usb 7-1: SerialNumber: syz
[ 773.049386][ T865] usb 7-1: config 0 descriptor??
[ 773.062837][ T865] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 773.093120][ T865] em28xx 7-1:0.0: DVB interface 0 found: bulk
[ 773.469298][ T29] audit: type=1400 audit(1740217336.002:833): avc: denied { setopt } for pid=14143 comm="syz.6.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 773.700752][ T865] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 774.017598][T14173] 9pnet_fd: Insufficient options for proto=fd
[ 774.209166][ T29] audit: type=1400 audit(1740217336.922:834): avc: granted { setsecparam } for pid=14176 comm="syz.0.2211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[ 774.479819][ T865] em28xx 7-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65)
[ 774.509850][ T865] em28xx 7-1:0.0: board has no eeprom
[ 774.714081][ T29] audit: type=1400 audit(1740217337.432:835): avc: denied { write } for pid=14143 comm="syz.6.2201" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 774.808831][ T865] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 774.852114][T14190] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 774.861389][T14190] overlayfs: missing 'lowerdir'
[ 774.929663][ T865] em28xx 7-1:0.0: dvb set to bulk mode.
[ 774.940641][ T5871] em28xx 7-1:0.0: Binding DVB extension
[ 774.976049][ T865] usb 7-1: USB disconnect, device number 16
[ 775.037700][ T865] em28xx 7-1:0.0: Disconnecting em28xx
[ 775.244525][ T5871] em28xx 7-1:0.0: Registering input extension
[ 775.282346][ T865] em28xx 7-1:0.0: Closing input extension
[ 775.415360][ T865] em28xx 7-1:0.0: Freeing device
[ 775.666554][ T29] audit: type=1400 audit(1740217338.382:836): avc: denied { cmd } for pid=14206 comm="syz.1.2220" path="socket:[34619]" dev="sockfs" ino=34619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 775.869298][ T5871] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 776.039769][ T5871] usb 5-1: Using ep0 maxpacket: 16
[ 776.101655][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 776.119498][ T5870] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 776.134172][ T5871] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[ 776.170536][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 776.188034][ T5871] usb 5-1: Product: syz
[ 776.196985][ T5871] usb 5-1: Manufacturer: syz
[ 776.212095][ T5871] usb 5-1: SerialNumber: syz
[ 776.236734][ T5871] usb 5-1: config 0 descriptor??
[ 776.395992][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 776.420858][ T5870] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f
[ 776.443872][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 776.455127][ T5870] usb 1-1: config 0 descriptor??
[ 776.462351][ T5870] usb 1-1: bad CDC descriptors
[ 776.467792][ T5870] cdc_acm 1-1:0.0: Control and data interfaces are not separated!
[ 776.476073][ T5870] cdc_acm 1-1:0.0: This needs exactly 3 endpoints
[ 776.520761][ T5870] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22
[ 776.667793][T14228] overlayfs: failed to clone upperpath
[ 776.733368][ T46] usb 5-1: USB disconnect, device number 55
[ 776.854157][ T29] audit: type=1400 audit(1740217339.582:837): avc: denied { read } for pid=14208 comm="syz.0.2221" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 777.050015][T14234] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 777.316157][ T865] TC_ACT_REPEAT abuse ?
[ 777.355769][ T5871] usb 1-1: USB disconnect, device number 57
[ 778.345912][T14262] netlink: 456 bytes leftover after parsing attributes in process `syz.2.2240'.
[ 779.310264][T14269] trusted_key: encrypted_key: insufficient parameters specified
[ 779.351639][T14271] vlan2: entered allmulticast mode
[ 779.356776][T14271] geneve0: entered allmulticast mode
[ 779.422670][T14273] bridge0: port 3(vlan3) entered blocking state
[ 779.432311][ T29] audit: type=1400 audit(1740217342.162:838): avc: denied { write } for pid=14274 comm="syz.4.2246" lport=47599 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 779.462525][ T5870] TC_ACT_REPEAT abuse ?
[ 779.462783][T14273] bridge0: port 3(vlan3) entered disabled state
[ 779.462927][T14273] vlan3: entered allmulticast mode
[ 779.462938][T14273] bridge0: entered allmulticast mode
[ 779.495042][T14273] vlan3: left allmulticast mode
[ 779.495067][T14273] bridge0: left allmulticast mode
[ 779.499872][ T29] audit: type=1400 audit(1740217342.162:839): avc: denied { getopt } for pid=14274 comm="syz.4.2246" lport=47599 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 779.559455][ T5870] TC_ACT_REPEAT abuse ?
[ 780.832613][ T52] TC_ACT_REPEAT abuse ?
[ 781.559384][T14290] overlayfs: failed to clone upperpath
[ 781.900296][ T3489] TC_ACT_REPEAT abuse ?
[ 781.905450][ T3489] TC_ACT_REPEAT abuse ?
[ 782.040818][ T29] audit: type=1400 audit(1740217344.772:840): avc: denied { setopt } for pid=14297 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 782.207647][T14307] CUSE: info not properly terminated
[ 782.597967][ T5870] TC_ACT_REPEAT abuse ?
[ 782.724264][ T29] audit: type=1400 audit(1740217344.822:841): avc: denied { read } for pid=14301 comm="syz.4.2253" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 782.852475][T14319] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped).
[ 782.866538][ T29] audit: type=1400 audit(1740217345.592:842): avc: denied { relabelto } for pid=14313 comm="syz.0.2257" name="bus" dev="tmpfs" ino=2106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_disk_exec_t:s0"
[ 782.988319][ T29] audit: type=1400 audit(1740217345.632:843): avc: denied { associate } for pid=14313 comm="syz.0.2257" name="bus" dev="tmpfs" ino=2106 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devicekit_disk_exec_t:s0"
[ 783.211515][T14331] ubi: mtd0 is already attached to ubi31
[ 784.767001][T14345] nvme_fabrics: unknown parameter or missing value '1844674407370955' in ctrl creation request
[ 785.119389][ T46] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 785.226926][T14365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2272'.
[ 785.238295][T14365] unsupported nlmsg_type 40
[ 785.289651][ T5870] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 785.547245][ T46] usb 1-1: config 7 descriptor has 1 excess byte, ignoring
[ 785.556916][ T46] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2
[ 785.608527][ T46] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[ 785.638283][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 785.659304][ T46] usb 1-1: Product: syz
[ 785.664783][ T46] usb 1-1: Manufacturer: syz
[ 785.672185][ T46] usb 1-1: SerialNumber: syz
[ 785.686621][ T46] rndis_host 1-1:7.0: skipping garbage
[ 785.703528][ T46] usb 1-1: bad CDC descriptors
[ 785.725477][ T5870] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 785.734841][ T46] option 1-1:7.0: GSM modem (1-port) converter detected
[ 785.852367][T14375] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2276'.
[ 785.867230][ T29] audit: type=1400 audit(1740217348.582:844): avc: denied { nlmsg_read } for pid=14374 comm="syz.1.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 785.925618][ T5870] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 785.940380][ T46] usb 1-1: USB disconnect, device number 58
[ 785.947072][ T46] option 1-1:7.0: device disconnected
[ 785.954456][ T5870] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 785.967262][ T5870] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 785.994119][T14381] kAFS: unparsable volume name
[ 786.189521][ C0] TC_ACT_REPEAT abuse ?
[ 786.531646][ T5870] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 786.543059][ T5870] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 786.553289][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 786.634291][ T5870] usb 7-1: Product: syz
[ 786.638740][ T5870] usb 7-1: Manufacturer: syz
[ 786.648174][ T5870] cdc_wdm 7-1:1.0: skipping garbage
[ 786.653456][ T5870] cdc_wdm 7-1:1.0: skipping garbage
[ 786.659927][ T5870] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 786.665835][ T5870] cdc_wdm 7-1:1.0: Unknown control protocol
[ 786.910185][ T5871] TC_ACT_REPEAT abuse ?
[ 786.917432][T14388] nvme_fabrics: unknown parameter or missing value '1844674407370955' in ctrl creation request
[ 787.020993][T14361] cdc_wdm 7-1:1.0: Error submitting int urb - -90
[ 787.041306][ T2150] usb 7-1: USB disconnect, device number 17
[ 787.060777][ T46] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 787.230578][T14412] netlink: 'syz.4.2281': attribute type 1 has an invalid length.
[ 787.238347][T14412] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2281'.
[ 787.262209][ T46] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 787.272551][ T46] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 787.287921][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 787.297012][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 787.312724][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 787.325871][ T46] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 787.337289][ T46] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 787.345558][ T46] usb 1-1: Product: syz
[ 787.349967][ T46] usb 1-1: Manufacturer: syz
[ 787.358880][ T46] cdc_wdm 1-1:1.0: skipping garbage
[ 787.364154][ T46] cdc_wdm 1-1:1.0: skipping garbage
[ 787.373369][ T46] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 787.379666][ T46] cdc_wdm 1-1:1.0: Unknown control protocol
[ 787.595903][ T46] usb 1-1: USB disconnect, device number 59
[ 789.053889][T14439] Malformed UNC in devname
[ 789.053889][T14439]
[ 789.062836][T14439] CIFS: VFS: Malformed UNC in devname
[ 789.290801][T14442] FAULT_INJECTION: forcing a failure.
[ 789.290801][T14442] name failslab, interval 1, probability 0, space 0, times 0
[ 789.402719][T14442] CPU: 0 UID: 0 PID: 14442 Comm: syz.0.2291 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 789.402746][T14442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 789.402757][T14442] Call Trace:
[ 789.402763][T14442] <TASK>
[ 789.402770][T14442] dump_stack_lvl+0x16c/0x1f0
[ 789.402798][T14442] should_fail_ex+0x50a/0x650
[ 789.402824][T14442] ? fs_reclaim_acquire+0xae/0x150
[ 789.402850][T14442] should_failslab+0xc2/0x120
[ 789.402871][T14442] kmem_cache_alloc_noprof+0x6e/0x3d0
[ 789.402891][T14442] ? getname_flags.part.0+0x4c/0x550
[ 789.402918][T14442] getname_flags.part.0+0x4c/0x550
[ 789.402944][T14442] getname_flags+0x93/0xf0
[ 789.402969][T14442] user_path_at+0x24/0x60
[ 789.402986][T14442] __x64_sys_mount+0x1fd/0x310
[ 789.403006][T14442] ? __pfx___x64_sys_mount+0x10/0x10
[ 789.403033][T14442] do_syscall_64+0xcd/0x250
[ 789.403056][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 789.403080][T14442] RIP: 0033:0x7f4854b8d169
[ 789.403094][T14442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 789.403111][T14442] RSP: 002b:00007f4855a5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 789.403129][T14442] RAX: ffffffffffffffda RBX: 00007f4854da5fa0 RCX: 00007f4854b8d169
[ 789.403141][T14442] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000000
[ 789.403151][T14442] RBP: 00007f4855a5c090 R08: 0000400000000080 R09: 0000000000000000
[ 789.403161][T14442] R10: 00000000002a00a9 R11: 0000000000000246 R12: 0000000000000001
[ 789.403170][T14442] R13: 0000000000000000 R14: 00007f4854da5fa0 R15: 00007fff5f6c7ae8
[ 789.403192][T14442] </TASK>
[ 789.605710][T14450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=14450 comm=syz.2.2295
[ 789.878242][T14448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 789.975915][T14461] TC_ACT_REPEAT abuse ?
[ 789.976770][ T29] audit: type=1400 audit(1740217352.702:845): avc: denied { block_suspend } for pid=14455 comm="syz.2.2297" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 789.983269][T14461] TC_ACT_REPEAT abuse ?
[ 790.032294][T14461] TC_ACT_REPEAT abuse ?
[ 790.048985][T14461] TC_ACT_REPEAT abuse ?
[ 790.061171][T14458] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 790.072958][T14458] netlink: 'syz.0.2296': attribute type 3 has an invalid length.
[ 790.080771][T14458] netlink: 'syz.0.2296': attribute type 2 has an invalid length.
[ 790.088469][T14458] netlink: 198084 bytes leftover after parsing attributes in process `syz.0.2296'.
[ 790.280384][T14461] TC_ACT_REPEAT abuse ?
[ 790.284861][T14461] TC_ACT_REPEAT abuse ?
[ 790.289466][T14462] TC_ACT_REPEAT abuse ?
[ 790.296854][T14465] TC_ACT_REPEAT abuse ?
[ 790.320794][T14465] TC_ACT_REPEAT abuse ?
[ 790.342388][T14465] TC_ACT_REPEAT abuse ?
[ 790.629284][ T2150] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 790.819444][ T2150] usb 5-1: Using ep0 maxpacket: 8
[ 790.826290][ T2150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 790.899260][ T2150] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 790.908378][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 790.929926][ T2150] usb 5-1: config 0 descriptor??
[ 790.936390][T14472] tmpfs: Bad value for 'nr_inodes'
[ 790.983459][T14474] overlayfs: failed to clone lowerpath
[ 792.323399][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2305'.
[ 792.472088][T14486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2306'.
[ 792.569791][ T2150] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.03 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[ 792.666813][ T29] audit: type=1400 audit(1740217355.392:846): avc: denied { setattr } for pid=14494 comm="syz.1.2307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 792.985829][T14506] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2311'.
[ 793.019977][T14506] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2311'.
[ 793.617646][ T5871] usb 5-1: USB disconnect, device number 56
[ 793.717908][T14517] veth1_to_hsr: default FDB implementation only supports local addresses
[ 793.740432][T14519] overlayfs: failed to clone lowerpath
[ 794.355850][ T5871] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 794.826339][ T5871] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 794.935391][ T5871] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 794.986894][ T5871] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 795.593333][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 795.714593][T14517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 795.726894][ T5871] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 796.104159][ T5870] usb 5-1: USB disconnect, device number 57
[ 796.215128][T14563] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2329'.
[ 796.231040][T14563] overlayfs: missing 'lowerdir'
[ 796.343567][T14570] Malformed UNC in devname
[ 796.343567][T14570]
[ 796.351103][T14570] CIFS: VFS: Malformed UNC in devname
[ 796.536482][ T5871] net_ratelimit: 189 callbacks suppressed
[ 796.536498][ T5871] TC_ACT_REPEAT abuse ?
[ 796.935934][ T29] audit: type=1400 audit(1740217359.662:847): avc: denied { read } for pid=14573 comm="syz.2.2333" laddr=127.0.0.1 lport=36666 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 797.984553][T14611] netlink: 'syz.1.2342': attribute type 2 has an invalid length.
[ 798.331552][ T29] audit: type=1326 audit(1740217361.052:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4854b8d169 code=0x7ffc0000
[ 798.537636][ T29] audit: type=1326 audit(1740217361.092:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4854b8d169 code=0x7ffc0000
[ 798.600453][ T29] audit: type=1326 audit(1740217361.102:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4854b8d169 code=0x7ffc0000
[ 798.650335][ T29] audit: type=1326 audit(1740217361.102:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4854b8d169 code=0x7ffc0000
[ 798.825371][ T29] audit: type=1326 audit(1740217361.102:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4854b8d169 code=0x7ffc0000
[ 798.869454][ T29] audit: type=1326 audit(1740217361.122:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4854b8d169 code=0x7ffc0000
[ 798.973999][ T29] audit: type=1326 audit(1740217361.122:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4854b8d169 code=0x7ffc0000
[ 799.094059][ T29] audit: type=1326 audit(1740217361.122:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4854b8d169 code=0x7ffc0000
[ 799.117835][ T29] audit: type=1326 audit(1740217361.142:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f4854b8d169 code=0x7ffc0000
[ 799.149554][ T29] audit: type=1326 audit(1740217361.142:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4854b8d169 code=0x7ffc0000
[ 799.782429][T14640] random: crng reseeded on system resumption
[ 800.585201][T14649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=14649 comm=syz.1.2352
[ 800.852841][T14660] FAULT_INJECTION: forcing a failure.
[ 800.852841][T14660] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 800.877188][T14660] CPU: 1 UID: 0 PID: 14660 Comm: syz.4.2355 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 800.877216][T14660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 800.877226][T14660] Call Trace:
[ 800.877232][T14660] <TASK>
[ 800.877239][T14660] dump_stack_lvl+0x16c/0x1f0
[ 800.877270][T14660] should_fail_ex+0x50a/0x650
[ 800.877299][T14660] _copy_from_iter+0x465/0x1560
[ 800.877324][T14660] ? __pfx__copy_from_iter+0x10/0x10
[ 800.877341][T14660] ? __virt_addr_valid+0x1a4/0x590
[ 800.877365][T14660] ? __virt_addr_valid+0x5e/0x590
[ 800.877382][T14660] ? __phys_addr_symbol+0x30/0x80
[ 800.877400][T14660] ? __check_object_size+0x488/0x710
[ 800.877425][T14660] skb_copy_datagram_from_iter+0x124/0x710
[ 800.877448][T14660] ? __local_bh_enable_ip+0xa4/0x120
[ 800.877473][T14660] ? lockdep_hardirqs_on+0x7c/0x110
[ 800.877493][T14660] ? __local_bh_enable_ip+0xa4/0x120
[ 800.877521][T14660] tun_get_user+0x199c/0x3e50
[ 800.877561][T14660] ? __pfx_tun_get_user+0x10/0x10
[ 800.877586][T14660] ? find_held_lock+0x2d/0x110
[ 800.877611][T14660] ? __pfx_lock_release+0x10/0x10
[ 800.877648][T14660] tun_chr_write_iter+0xdc/0x210
[ 800.877674][T14660] do_iter_readv_writev+0x655/0x950
[ 800.877701][T14660] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 800.877725][T14660] ? avc_policy_seqno+0x9/0x20
[ 800.877742][T14660] ? selinux_file_permission+0x11f/0x580
[ 800.877772][T14660] ? bpf_lsm_file_permission+0x9/0x10
[ 800.877791][T14660] ? security_file_permission+0x71/0x210
[ 800.877817][T14660] ? rw_verify_area+0xcf/0x680
[ 800.877842][T14660] vfs_writev+0x363/0xdd0
[ 800.877864][T14660] ? find_held_lock+0x2d/0x110
[ 800.877889][T14660] ? __pfx_vfs_writev+0x10/0x10
[ 800.877918][T14660] ? find_held_lock+0x2d/0x110
[ 800.877942][T14660] ? __pfx_lock_release+0x10/0x10
[ 800.877963][T14660] ? trace_lock_acquire+0x14e/0x1f0
[ 800.877992][T14660] ? __fget_files+0x206/0x3a0
[ 800.878017][T14660] ? do_writev+0x133/0x340
[ 800.878039][T14660] do_writev+0x133/0x340
[ 800.878064][T14660] ? __pfx_do_writev+0x10/0x10
[ 800.878096][T14660] do_syscall_64+0xcd/0x250
[ 800.878119][T14660] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 800.878143][T14660] RIP: 0033:0x7f4efa38d169
[ 800.878158][T14660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 800.878176][T14660] RSP: 002b:00007f4efb2c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 800.878195][T14660] RAX: ffffffffffffffda RBX: 00007f4efa5a5fa0 RCX: 00007f4efa38d169
[ 800.878207][T14660] RDX: 0000000000000002 RSI: 00004000000002c0 RDI: 0000000000000003
[ 800.878218][T14660] RBP: 00007f4efb2c0090 R08: 0000000000000000 R09: 0000000000000000
[ 800.878228][T14660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 800.878238][T14660] R13: 0000000000000000 R14: 00007f4efa5a5fa0 R15: 00007ffdcd4f9018
[ 800.878264][T14660] </TASK>
[ 800.988163][T14650] mmap: syz.0.2354 (14650): VmData 26103808 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[ 803.735338][T14702] overlayfs: failed to set uuid (410/file1, err=-1); falling back to uuid=null.
[ 803.766064][T14702] overlayfs: failed to verify upper root origin
[ 803.894351][T14704] fuse: Bad value for 'fd'
[ 804.033830][T14709] FAULT_INJECTION: forcing a failure.
[ 804.033830][T14709] name failslab, interval 1, probability 0, space 0, times 0
[ 804.056853][T14709] CPU: 0 UID: 0 PID: 14709 Comm: syz.4.2370 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 804.056880][T14709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 804.056890][T14709] Call Trace:
[ 804.056895][T14709] <TASK>
[ 804.056902][T14709] dump_stack_lvl+0x16c/0x1f0
[ 804.056927][T14709] should_fail_ex+0x50a/0x650
[ 804.056952][T14709] ? fs_reclaim_acquire+0xae/0x150
[ 804.056979][T14709] ? copy_mount_options+0x55/0x190
[ 804.056999][T14709] should_failslab+0xc2/0x120
[ 804.057019][T14709] __kmalloc_cache_noprof+0x68/0x410
[ 804.057048][T14709] ? _copy_from_user+0x59/0xd0
[ 804.057067][T14709] copy_mount_options+0x55/0x190
[ 804.057091][T14709] __x64_sys_mount+0x1ad/0x310
[ 804.057112][T14709] ? __pfx___x64_sys_mount+0x10/0x10
[ 804.057138][T14709] do_syscall_64+0xcd/0x250
[ 804.057161][T14709] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 804.057184][T14709] RIP: 0033:0x7f4efa38d169
[ 804.057199][T14709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 804.057215][T14709] RSP: 002b:00007f4efb2c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 804.057233][T14709] RAX: ffffffffffffffda RBX: 00007f4efa5a5fa0 RCX: 00007f4efa38d169
[ 804.057245][T14709] RDX: 0000400000000080 RSI: 00004000000000c0 RDI: 0000000000000000
[ 804.057256][T14709] RBP: 00007f4efb2c0090 R08: 0000400000000a00 R09: 0000000000000000
[ 804.057267][T14709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 804.057278][T14709] R13: 0000000000000000 R14: 00007f4efa5a5fa0 R15: 00007ffdcd4f9018
[ 804.057302][T14709] </TASK>
[ 804.493142][T12048] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 804.632862][T14721] netlink: 'syz.6.2373': attribute type 11 has an invalid length.
[ 804.664258][T12048] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 804.676429][T12048] usb 1-1: config 1 has no interface number 1
[ 805.239882][T12048] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 805.262142][T12048] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[ 805.275297][T12048] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 805.284613][T12048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 805.293809][T12048] usb 1-1: Product: syz
[ 805.297996][T12048] usb 1-1: Manufacturer: syz
[ 805.304485][T12048] usb 1-1: SerialNumber: syz
[ 805.322017][T14711] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 805.616097][T12048] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[ 805.624660][T12048] usb 1-1: 2:1 : unsupported sample bitwidth 8 in 132 bytes
[ 805.667756][T12048] usb 1-1: USB disconnect, device number 60
[ 806.269755][ T5871] TC_ACT_REPEAT abuse ?
[ 806.387304][T14735] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 806.396323][T14735] overlayfs: missing 'lowerdir'
[ 806.476136][T14740] nvme_fabrics: missing parameter 'transport=%s'
[ 806.489268][T14740] nvme_fabrics: missing parameter 'nqn=%s'
[ 807.824275][T14760] xt_time: unknown flags 0xc
[ 807.848562][ T29] kauditd_printk_skb: 12 callbacks suppressed
[ 807.848579][ T29] audit: type=1400 audit(1740217370.552:870): avc: denied { getopt } for pid=14758 comm="syz.6.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 807.876401][T14762] FAULT_INJECTION: forcing a failure.
[ 807.876401][T14762] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 807.909278][T14762] CPU: 0 UID: 0 PID: 14762 Comm: syz.4.2384 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 807.909304][T14762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 807.909314][T14762] Call Trace:
[ 807.909320][T14762] <TASK>
[ 807.909327][T14762] dump_stack_lvl+0x16c/0x1f0
[ 807.909353][T14762] should_fail_ex+0x50a/0x650
[ 807.909382][T14762] _copy_from_user+0x2e/0xd0
[ 807.909401][T14762] copy_msghdr_from_user+0x99/0x160
[ 807.909426][T14762] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 807.909462][T14762] ___sys_sendmsg+0xff/0x1e0
[ 807.909487][T14762] ? __pfx____sys_sendmsg+0x10/0x10
[ 807.909520][T14762] ? __pfx_lock_release+0x10/0x10
[ 807.909544][T14762] ? trace_lock_acquire+0x14e/0x1f0
[ 807.909573][T14762] ? __fget_files+0x206/0x3a0
[ 807.909598][T14762] __sys_sendmsg+0x16e/0x220
[ 807.909622][T14762] ? __pfx___sys_sendmsg+0x10/0x10
[ 807.909662][T14762] do_syscall_64+0xcd/0x250
[ 807.909686][T14762] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 807.909709][T14762] RIP: 0033:0x7f4efa38d169
[ 807.909724][T14762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 807.909742][T14762] RSP: 002b:00007f4efb29f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 807.909759][T14762] RAX: ffffffffffffffda RBX: 00007f4efa5a6080 RCX: 00007f4efa38d169
[ 807.909772][T14762] RDX: 00000000040cc854 RSI: 0000400000000440 RDI: 0000000000000003
[ 807.909783][T14762] RBP: 00007f4efb29f090 R08: 0000000000000000 R09: 0000000000000000
[ 807.909795][T14762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 807.909805][T14762] R13: 0000000000000000 R14: 00007f4efa5a6080 R15: 00007ffdcd4f9018
[ 807.909830][T14762] </TASK>
[ 808.799732][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 808.809198][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 809.076909][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2392'.
[ 809.127558][T14784] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 809.136723][T14784] overlayfs: missing 'lowerdir'
[ 809.789311][ T5872] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 809.905036][T14802] netlink: 'syz.1.2397': attribute type 10 has an invalid length.
[ 809.949067][T14802] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 809.962982][ T5872] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 809.976252][ T5872] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 809.990112][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 809.999625][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 810.037667][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 810.180691][ T5872] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 810.190835][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 810.199060][ T5872] usb 5-1: Product: syz
[ 810.210993][ T5872] usb 5-1: Manufacturer: syz
[ 810.230999][ T5872] cdc_wdm 5-1:1.0: skipping garbage
[ 810.248912][ T5872] cdc_wdm 5-1:1.0: skipping garbage
[ 810.262972][ T5872] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 810.282822][ T5872] cdc_wdm 5-1:1.0: Unknown control protocol
[ 810.386089][T14809] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2401'.
[ 810.454148][T12048] usb 5-1: USB disconnect, device number 58
[ 810.589503][ C0] TC_ACT_REPEAT abuse ?
[ 810.624082][T14820] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 810.633083][T14820] overlayfs: missing 'lowerdir'
[ 811.116536][T14828] FAULT_INJECTION: forcing a failure.
[ 811.116536][T14828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 811.202471][T14828] CPU: 0 UID: 0 PID: 14828 Comm: syz.4.2406 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 811.202497][T14828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 811.202507][T14828] Call Trace:
[ 811.202513][T14828] <TASK>
[ 811.202523][T14828] dump_stack_lvl+0x16c/0x1f0
[ 811.202550][T14828] should_fail_ex+0x50a/0x650
[ 811.202580][T14828] _copy_from_user+0x2e/0xd0
[ 811.202599][T14828] copy_msghdr_from_user+0x99/0x160
[ 811.202623][T14828] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 811.202660][T14828] ___sys_sendmsg+0xff/0x1e0
[ 811.202684][T14828] ? __pfx____sys_sendmsg+0x10/0x10
[ 811.202718][T14828] ? __pfx_lock_release+0x10/0x10
[ 811.202742][T14828] ? trace_lock_acquire+0x14e/0x1f0
[ 811.202771][T14828] ? __fget_files+0x206/0x3a0
[ 811.202796][T14828] __sys_sendmsg+0x16e/0x220
[ 811.202819][T14828] ? __pfx___sys_sendmsg+0x10/0x10
[ 811.202859][T14828] do_syscall_64+0xcd/0x250
[ 811.202883][T14828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 811.202906][T14828] RIP: 0033:0x7f4efa38d169
[ 811.202921][T14828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 811.202938][T14828] RSP: 002b:00007f4efb2c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 811.202955][T14828] RAX: ffffffffffffffda RBX: 00007f4efa5a5fa0 RCX: 00007f4efa38d169
[ 811.202967][T14828] RDX: 0000000000000000 RSI: 0000400000000480 RDI: 0000000000000005
[ 811.202979][T14828] RBP: 00007f4efb2c0090 R08: 0000000000000000 R09: 0000000000000000
[ 811.202989][T14828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 811.203000][T14828] R13: 0000000000000000 R14: 00007f4efa5a5fa0 R15: 00007ffdcd4f9018
[ 811.203024][T14828] </TASK>
[ 811.506485][ T29] audit: type=1400 audit(1740217374.232:871): avc: denied { getopt } for pid=14833 comm="syz.4.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 812.679164][ T5831] Bluetooth: hci3: command 0x0406 tx timeout
[ 812.857552][T14844] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 812.972306][ T29] audit: type=1400 audit(1740217375.672:872): avc: denied { read } for pid=14832 comm="syz.6.2407" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 813.222030][ T29] audit: type=1400 audit(1740217375.672:873): avc: denied { open } for pid=14832 comm="syz.6.2407" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 813.273882][ T29] audit: type=1400 audit(1740217375.682:874): avc: denied { ioctl } for pid=14832 comm="syz.6.2407" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 813.421368][ T29] audit: type=1400 audit(1740217376.142:875): avc: denied { setopt } for pid=14850 comm="syz.1.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 813.498602][T14854] PKCS7: Unknown OID: [4] (bad)
[ 813.515379][T14854] PKCS7: Only support pkcs7_signedData type
[ 813.916593][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'.
[ 814.009224][T12048] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 814.369501][T12048] usb 5-1: Using ep0 maxpacket: 8
[ 814.377793][T12048] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 814.409207][T12048] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[ 814.419065][T12048] usb 5-1: config 0 interface 0 has no altsetting 0
[ 814.430556][T12048] usb 5-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00
[ 814.440461][T14881] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2415'.
[ 814.474465][T12048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 814.490988][T12048] usb 5-1: config 0 descriptor??
[ 814.553432][T14885] PKCS7: Unknown OID: [5] 0.0
[ 814.558176][T14885] PKCS7: Only support pkcs7_signedData type
[ 814.849237][ T5872] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 814.989288][ T5872] usb 1-1: device descriptor read/64, error -71
[ 815.070001][ T5871] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 815.219771][ T5871] usb 7-1: device descriptor read/64, error -71
[ 815.229257][ T5872] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 815.235578][T14896] dvmrp0: entered allmulticast mode
[ 815.429764][ T5872] usb 1-1: device descriptor read/64, error -71
[ 815.499407][ T5871] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 815.615123][ T5872] usb usb1-port1: attempt power cycle
[ 815.759719][ T5871] usb 7-1: device descriptor read/64, error -71
[ 815.806531][ T865] TC_ACT_REPEAT abuse ?
[ 816.369953][ T5871] usb usb7-port1: attempt power cycle
[ 816.409614][T14905] netlink: 'syz.1.2429': attribute type 10 has an invalid length.
[ 816.429454][ T5872] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 816.443599][T14905] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 816.469810][ T5872] usb 1-1: device descriptor read/8, error -71
[ 816.709350][ T5872] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 816.782659][ T5871] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 816.807170][T12048] usbhid 5-1:0.0: can't add hid device: -71
[ 816.819227][T12048] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 817.370151][ T5871] usb 7-1: device descriptor read/8, error -71
[ 817.393567][T12048] usb 5-1: USB disconnect, device number 59
[ 817.461967][ T5872] usb 1-1: device descriptor read/8, error -71
[ 817.720413][ T5871] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 817.735416][ T5872] usb usb1-port1: unable to enumerate USB device
[ 818.742951][ T5871] usb 7-1: device descriptor read/8, error -71
[ 818.939797][ T5871] usb usb7-port1: unable to enumerate USB device
[ 819.070464][T14940] FAULT_INJECTION: forcing a failure.
[ 819.070464][T14940] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 819.111293][T14940] CPU: 0 UID: 0 PID: 14940 Comm: syz.0.2440 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 819.111321][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 819.111331][T14940] Call Trace:
[ 819.111336][T14940] <TASK>
[ 819.111344][T14940] dump_stack_lvl+0x16c/0x1f0
[ 819.111371][T14940] should_fail_ex+0x50a/0x650
[ 819.111400][T14940] _copy_from_user+0x2e/0xd0
[ 819.111419][T14940] vmemdup_user+0x6c/0x100
[ 819.111445][T14940] __sys_bpf+0x3b8c/0x49c0
[ 819.111467][T14940] ? __pfx___sys_bpf+0x10/0x10
[ 819.111485][T14940] ? vfs_write+0x306/0x1150
[ 819.111516][T14940] ? __mutex_unlock_slowpath+0x164/0x6a0
[ 819.111552][T14940] ? fput+0x67/0x440
[ 819.111573][T14940] ? ksys_write+0x1ba/0x250
[ 819.111597][T14940] ? __pfx_ksys_write+0x10/0x10
[ 819.111627][T14940] __x64_sys_bpf+0x78/0xc0
[ 819.111646][T14940] ? lockdep_hardirqs_on+0x7c/0x110
[ 819.111666][T14940] do_syscall_64+0xcd/0x250
[ 819.111689][T14940] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 819.111713][T14940] RIP: 0033:0x7f4854b8d169
[ 819.111727][T14940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 819.111744][T14940] RSP: 002b:00007f4855a5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 819.111761][T14940] RAX: ffffffffffffffda RBX: 00007f4854da5fa0 RCX: 00007f4854b8d169
[ 819.111779][T14940] RDX: 0000000000000020 RSI: 00004000000001c0 RDI: 0000000000000004
[ 819.111790][T14940] RBP: 00007f4855a5c090 R08: 0000000000000000 R09: 0000000000000000
[ 819.111801][T14940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 819.111812][T14940] R13: 0000000000000000 R14: 00007f4854da5fa0 R15: 00007fff5f6c7ae8
[ 819.111836][T14940] </TASK>
Feb 22 09:43:02 syzkaller kern.notice kernel: [ 819.070464][T14940] FAULT_INJEC[ 819.599345][ T29] audit: type=1404 audit(1740217382.302:876): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
TION: forcing a failure.
Feb 22 09:43:02 syzkaller kern.notice kernel: [ 819.070464][T14940] name fail_usercopy, interval 1, probability 0, space 0, times 0
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111293][T14940] CPU: 0 UID: 0 PID: 14940 Comm: syz.0.2440 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111321][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111331][T14940] Call Trace:
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111336][T14940] <TASK>
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111344][T14940] dump_stack_lvl+0x16c/0x1f0
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111371][T14940] should_fail_ex+0x50a/0x650
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111400][T14940] _copy_from_user+0x2e/0xd0
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111419][T14940] vmemdup_user+0x6c/0x100
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111445][T14940] __sys_bpf+0x3b8c/0x49c0
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111467][T14940] ? __pfx___sys_bpf+0x10/0x10
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111485][T14940] ? vfs_write+0x306/0x1150
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111516][T14940] ? __mutex_unlock_slowpath+0x164/0x6a0
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111552][T14940] ? fput+0x67/0x440
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111573][T14940] ? ksys_write+0x1ba/0x250
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111597][T14940] ? __pfx_ksys_write+0x10/0x10
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111627][T14940] __x64_sys_bpf+0x78/0xc0
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111646][T14940] ? lockdep_hardirqs_on+0x7c/0x110
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111666][T14940] do_syscall_64+0xcd/0x250
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111689][T14940] entry_SYSCALL_64_after_hwframe+0x77/0x7f
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111713][T14940] RIP: 0033:0x7f4854b8d169
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111727][T14940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111744][T14940] RSP: 002b:00007f4855a5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
Feb 22 09:43:02 syzkaller kern.warn kerne[ 820.187841][ T29] audit: type=1400 audit(1740217382.322:877): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
l: [ 819.111761][T14940] RAX: ffffffffffffffda RBX: 00007f4854da5fa0 RCX: 00007f4854b8d169
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111779][T14940] RDX: 0000000000000020 RSI: 00004000000001c0 RDI: 0000000000000004
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111790][T14940] RBP: 00007f4855a5c090 R08: 0000000000000000 R09: 0000000000000000
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111801][T14940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111812][T14940[ 820.259204][ T29] audit: type=1400 audit(1740217382.322:878): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
] R13: 0000000000000000 R14: 00007f4854da5fa0 R15: 00007fff5f6c7ae8
Feb 22 09:43:02 syzkaller kern.warn kernel: [ 819.111836][T14940] </TASK>
Feb 22 09:43:02 syzkaller kern.notice kernel: [ 819.599345][ T29] audit: type=1404 audit(1740217382.302:876): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
Feb 22 09:43:02 syzkaller kern.notice kernel: [ 820.187841][ T29] audit: type=1400 audit(1740217382.322:877): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
Feb 22 09:43:03 syzkaller kern.notice kernel: [ 820.259204][ T29] audit: type=1400 audit(1740217382.322:878): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
[ 820.379282][ T29] audit: type=1400 audit(1740217382.322:879): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Feb 22 09:43:03 syzkaller kern.notice kernel: [ 820.379282][ T29] audit: type=1400 audit(1740217382.322:879): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
[ 820.445810][ T29] audit: type=1400 audit(1740217382.322:880): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Feb 22 09:43:03 syzkaller kern.notice kernel: [ 820.445810][ T29] audit: type=1400 audit(1740217382.322:880): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
[ 820.509317][ T29] audit: type=1400 audit(1740217382.322:881): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Feb 22 09:43:03 syzkaller kern.notice kernel: [ 820.509317][ T29] audit: type=1400 audit(1740217382.322:881): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
[ 820.569223][ T29] audit: type=1400 audit(1740217382.322:882): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Feb 22 09:43:03 syzkaller kern.notice kernel: [ 820.569223][ T29] audit: type=1400 audit(1740217382.322:882): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
[ 820.628038][ T29] audit: type=1400 audit(1740217382.322:883): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Feb 22 09:43:03 syzkaller kern.notice kernel: [ 820.628038][ T29] audit: type=1400 audit(1740217382.322:883): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
[ 820.696709][ T29] audit: type=1400 audit(1740217382.322:884): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Feb 22 09:43:03 syzkaller kern.notice kernel: [ 820.696709][ T29] audit: type[ 820.725480][ T29] audit: type=1400 audit(1740217382.322:885): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
=1400 audit(1740217382.322:884): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
Feb 22 09:43:03 syzkaller kern.notice kernel: [ 820.725480][ T29] audit: type=1400 audit(1740217382.322:885): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
[ 820.873209][T14966] FAULT_INJECTION: forcing a failure.
[ 820.873209][T14966] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 820.910151][T14966] CPU: 1 UID: 0 PID: 14966 Comm: syz.4.2451 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 820.910179][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 820.910190][T14966] Call Trace:
[ 820.910196][T14966] <TASK>
[ 820.910203][T14966] dump_stack_lvl+0x16c/0x1f0
[ 820.910230][T14966] should_fail_ex+0x50a/0x650
[ 820.910259][T14966] strncpy_from_user+0x3b/0x2d0
[ 820.910286][T14966] getname_flags.part.0+0x8f/0x550
[ 820.910312][T14966] getname+0x8d/0xe0
[ 820.910336][T14966] path_removexattrat+0x3a2/0x5d0
[ 820.910364][T14966] ? __pfx_path_removexattrat+0x10/0x10
[ 820.910412][T14966] ? ksys_write+0x1ba/0x250
[ 820.910437][T14966] ? __pfx_ksys_write+0x10/0x10
[ 820.910467][T14966] __x64_sys_removexattr+0x5b/0x80
[ 820.910487][T14966] do_syscall_64+0xcd/0x250
[ 820.910510][T14966] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 820.910534][T14966] RIP: 0033:0x7f4efa38d169
[ 820.910549][T14966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 820.910565][T14966] RSP: 002b:00007f4efb2c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5
[ 820.910583][T14966] RAX: ffffffffffffffda RBX: 00007f4efa5a5fa0 RCX: 00007f4efa38d169
[ 820.910596][T14966] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000400000000040
[ 820.910608][T14966] RBP: 00007f4efb2c0090 R08: 0000000000000000 R09: 0000000000000000
[ 820.910619][T14966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 820.910629][T14966] R13: 0000000000000000 R14: 00007f4efa5a5fa0 R15: 00007ffdcd4f9018
[ 820.910654][T14966] </TASK>
Feb 22 09:43:03 syzkaller kern.notice kernel: [ 820.873209][T14966] FAULT_INJECTION: forcing a failure.
Feb 22 09:43:03 syzkaller kern.notice kernel: [ 820.873209][T14966] name fail_usercopy, interval 1, probability 0, space 0, times 0
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910151][T14966] CPU: 1 UID: 0 PID: 14966 Comm: syz.4.2451 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910179][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910190][T14966] Call Trace:
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910196][T14966] <TASK>
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910203][T14966] dump_stack_lvl+0x16c/0x1f0
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910230][T14966] should_fail_ex+0x50a/0x650
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910259][T14966] strncpy_from_user+0x3b/0x2d0
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910286][T14966] getname_flags.part.0+0x8f/0x550
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910312][T14966] getname+0x8d/0xe0
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910336][T14966] path_removexattrat+0x3a2/0x5d0
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910364][T14966] ? __pfx_path_removexattrat+0x10/0x10
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910412][T14966] ? ksys_write+0x1ba/0x250
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910437][T14966] ? __pfx_ksys_write+0x10/0x10
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910467][T14966] __x64_sys_removexattr+0x5b/0x80
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910487][T14966] do_syscall_64+0xcd/0x250
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910510][T14966] entry_SYSCALL_64_after_hwframe+0x77/0x7f
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910534][T14966] RIP: 0033:0x7f4efa38d169
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910549][T14966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910565][T14966] RSP: 002b:00007f4efb2c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910583][T14966] RAX: ffffffffffffffda RBX: 00007f4efa5a5fa0 RCX: 00007f4efa38d169
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910596][T14966] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000400000000040
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910608][T14966] RBP: 00007f4efb2c0090 R08: 0000000000000000 R09: 0000000000000000
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910619][T14966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910629][T14966] R13: 0000000000000000 R14: 00007f4efa5a5fa0 R15: 00007ffdcd4f9018
Feb 22 09:43:03 syzkaller kern.warn kernel: [ 820.910654][T14966] </TASK>
[ 841.949382][ C0] TC_ACT_REPEAT abuse ?
[ 900.829458][ C0] TC_ACT_REPEAT abuse ?
[ 905.949304][ C0] TC_ACT_REPEAT abuse ?
[ 926.609055][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 926.616120][ C0] rcu: 1-...!: (1 GPs behind) idle=dbcc/1/0x4000000000000000 softirq=55998/55999 fqs=2
[ 926.627385][ C0] rcu: (detected by 0, t=10502 jiffies, g=53241, q=101 ncpus=2)
[ 926.635121][ C0] Sending NMI from CPU 0 to CPUs 1:
[ 926.635155][ C1] NMI backtrace for cpu 1
[ 926.635167][ C1] CPU: 1 UID: 0 PID: 5819 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 926.635188][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 926.635199][ C1] RIP: 0010:rcu_is_watching+0x5c/0xc0
[ 926.635225][ C1] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5c 48 03 1c ed e0 2c ab 8d 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b
[ 926.635241][ C1] RSP: 0018:ffffc90000a18c90 EFLAGS: 00000802
[ 926.635256][ C1] RAX: dffffc0000000000 RBX: ffff8880b8737c28 RCX: ffffffff81969fc9
[ 926.635268][ C1] RDX: 1ffff110170e6f85 RSI: ffffffff8bd35580 RDI: ffffffff8dab2ce8
[ 926.635280][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20c4aa2
[ 926.635291][ C1] R10: ffffffff90625517 R11: 0000000000000004 R12: ffff88805c604300
[ 926.635303][ C1] R13: ffff88805d0a0000 R14: ffff88805c604340 R15: ffff88805d0a1c00
[ 926.635315][ C1] FS: 000055557aa0e500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 926.635332][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 926.635344][ C1] CR2: 00007ffdcd4f7ff8 CR3: 000000006080e000 CR4: 00000000003526f0
[ 926.635355][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 926.635366][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 926.635377][ C1] Call Trace:
[ 926.635384][ C1] <NMI>
[ 926.635393][ C1] ? nmi_cpu_backtrace+0x1d8/0x390
[ 926.635424][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20
[ 926.635447][ C1] ? nmi_handle+0x1ac/0x5d0
[ 926.635473][ C1] ? rcu_is_watching+0x5c/0xc0
[ 926.635492][ C1] ? default_do_nmi+0x6a/0x160
[ 926.635518][ C1] ? exc_nmi+0x170/0x1e0
[ 926.635543][ C1] ? end_repeat_nmi+0xf/0x53
[ 926.635571][ C1] ? lock_release+0xa9/0x6f0
[ 926.635596][ C1] ? rcu_is_watching+0x5c/0xc0
[ 926.635615][ C1] ? rcu_is_watching+0x5c/0xc0
[ 926.635634][ C1] ? rcu_is_watching+0x5c/0xc0
[ 926.635653][ C1] </NMI>
[ 926.635658][ C1] <IRQ>
[ 926.635664][ C1] lock_release+0x4e2/0x6f0
[ 926.635687][ C1] ? advance_sched+0x611/0xc60
[ 926.635713][ C1] ? __pfx_lock_release+0x10/0x10
[ 926.635737][ C1] ? do_raw_spin_lock+0x12d/0x2c0
[ 926.635753][ C1] ? taprio_set_budgets+0x1e2/0x310
[ 926.635780][ C1] _raw_spin_unlock+0x16/0x50
[ 926.635797][ C1] advance_sched+0x611/0xc60
[ 926.635828][ C1] ? __pfx_advance_sched+0x10/0x10
[ 926.635854][ C1] __hrtimer_run_queues+0x20a/0xae0
[ 926.635875][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 926.635892][ C1] ? read_tsc+0x9/0x20
[ 926.635918][ C1] hrtimer_interrupt+0x392/0x8e0
[ 926.635942][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400
[ 926.635971][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0
[ 926.635991][ C1] </IRQ>
[ 926.635996][ C1] <TASK>
[ 926.636002][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 926.636028][ C1] RIP: 0010:lock_release+0xd3/0x6f0
[ 926.636052][ C1] Code: 48 0f a3 2d 3f b5 cb 0e 0f 82 26 04 00 00 48 c7 c5 34 88 62 90 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 0f b6 14 02 <48> 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 fb 04 00 00 8b
[ 926.636069][ C1] RSP: 0018:ffffc90003a97c08 EFLAGS: 00000a07
[ 926.636082][ C1] RAX: dffffc0000000000 RBX: 1ffff92000752f83 RCX: ffffffff81969fc9
[ 926.636094][ C1] RDX: 0000000000000000 RSI: ffffffff8bd35580 RDI: ffffffff8dab2ce8
[ 926.636106][ C1] RBP: ffffffff90628834 R08: 0000000000000000 R09: fffffbfff20c4aa2
[ 926.636117][ C1] R10: ffffffff90625517 R11: 0000000000000003 R12: ffffffff8e1bcbc0
[ 926.636129][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffff888049264e48
[ 926.636143][ C1] ? lock_release+0xa9/0x6f0
[ 926.636168][ C1] ? lock_release+0x4e2/0x6f0
[ 926.636191][ C1] ? __virt_addr_valid+0x2b4/0x590
[ 926.636209][ C1] ? __pfx_lock_release+0x10/0x10
[ 926.636233][ C1] ? trace_lock_acquire+0x14e/0x1f0
[ 926.636253][ C1] ? __pfx_debug_object_active_state+0x10/0x10
[ 926.636274][ C1] ? __virt_addr_valid+0x1a4/0x590
[ 926.636292][ C1] ? lock_acquire+0x2f/0xb0
[ 926.636314][ C1] ? __virt_addr_valid+0x1a4/0x590
[ 926.636334][ C1] __virt_addr_valid+0x2b9/0x590
[ 926.636352][ C1] ? __pfx___d_free+0x10/0x10
[ 926.636370][ C1] kasan_addr_to_slab+0xd/0x80
[ 926.636387][ C1] kasan_record_aux_stack+0xe/0xd0
[ 926.636411][ C1] __call_rcu_common.constprop.0+0x9a/0x870
[ 926.636438][ C1] ? __dentry_kill+0x2ab/0x600
[ 926.636460][ C1] dentry_free+0xc2/0x160
[ 926.636478][ C1] __dentry_kill+0x498/0x600
[ 926.636500][ C1] dput.part.0+0x4b1/0x9b0
[ 926.636522][ C1] dput+0x1f/0x30
[ 926.636541][ C1] do_unlinkat+0x580/0x760
[ 926.636560][ C1] ? __virt_addr_valid+0x5e/0x590
[ 926.636578][ C1] ? __pfx_do_unlinkat+0x10/0x10
[ 926.636595][ C1] ? __check_object_size+0x488/0x710
[ 926.636620][ C1] ? getname_flags.part.0+0x1c5/0x550
[ 926.636645][ C1] __x64_sys_unlink+0xc5/0x110
[ 926.636663][ C1] do_syscall_64+0xcd/0x250
[ 926.636685][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 926.636710][ C1] RIP: 0033:0x7f4efa38c717
[ 926.636725][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 926.636741][ C1] RSP: 002b:00007ffdcd4f82a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[ 926.636756][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4efa38c717
[ 926.636767][ C1] RDX: 00007ffdcd4f82d0 RSI: 00007ffdcd4f8360 RDI: 00007ffdcd4f8360
[ 926.636779][ C1] RBP: 00007ffdcd4f8360 R08: 0000000000000000 R09: 0000000000000000
[ 926.636790][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdcd4f93f0
[ 926.636801][ C1] R13: 00007f4efa40e08c R14: 00000000000c893f R15: 00007ffdcd4f9430
[ 926.636818][ C1] </TASK>
[ 926.637148][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g53241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 927.212829][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 927.222797][ C0] rcu: RCU grace-period kthread stack dump:
[ 927.228678][ C0] task:rcu_preempt state:R running task stack:28064 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000
[ 927.242190][ C0] Call Trace:
[ 927.245466][ C0] <TASK>
[ 927.248398][ C0] __schedule+0xf43/0x5890
[ 927.252823][ C0] ? __pfx___lock_acquire+0x10/0x10
[ 927.258042][ C0] ? __pfx___schedule+0x10/0x10
[ 927.262918][ C0] ? schedule+0x298/0x350
[ 927.267256][ C0] ? __pfx_lock_release+0x10/0x10
[ 927.272305][ C0] ? lock_acquire+0x2f/0xb0
[ 927.276825][ C0] ? schedule+0x1fd/0x350
[ 927.281170][ C0] schedule+0xe7/0x350
[ 927.285248][ C0] schedule_timeout+0x124/0x280
[ 927.290114][ C0] ? __pfx_schedule_timeout+0x10/0x10
[ 927.295500][ C0] ? __pfx_process_timeout+0x10/0x10
[ 927.300793][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 927.306734][ C0] ? prepare_to_swait_event+0xf3/0x470
[ 927.312221][ C0] rcu_gp_fqs_loop+0x1eb/0xb00
[ 927.317004][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 927.322308][ C0] ? rcu_gp_init+0xc82/0x1630
[ 927.327007][ C0] ? _raw_spin_unlock_irq+0x2e/0x50
[ 927.332213][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 927.338027][ C0] rcu_gp_kthread+0x271/0x380
[ 927.342717][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10
[ 927.347928][ C0] ? lockdep_hardirqs_on+0x7c/0x110
[ 927.353131][ C0] ? __kthread_parkme+0x148/0x220
[ 927.358158][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10
[ 927.363367][ C0] kthread+0x3af/0x750
[ 927.367448][ C0] ? __pfx_kthread+0x10/0x10
[ 927.372053][ C0] ? __pfx_kthread+0x10/0x10
[ 927.376650][ C0] ret_from_fork+0x45/0x80
[ 927.381074][ C0] ? __pfx_kthread+0x10/0x10
[ 927.385669][ C0] ret_from_fork_asm+0x1a/0x30
[ 927.390450][ C0] </TASK>
[ 927.393477][ C0] rcu: Stack dump where RCU GP kthread last ran:
[ 927.399794][ C0] CPU: 0 UID: 0 PID: 3508 Comm: kworker/u8:9 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0
[ 927.410643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 927.420699][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 927.427210][ C0] RIP: 0010:smp_call_function_many_cond+0x4bf/0x12c0
[ 927.433889][ C0] Code: e5 01 89 ee e8 a2 09 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 <e8> 7c 0e 0c 00 f3 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8
[ 927.453513][ C0] RSP: 0018:ffffc9000dc97928 EFLAGS: 00000202
[ 927.459605][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a80 RCX: ffffffff81add08a
[ 927.467587][ C0] RDX: ffff8880334c4880 RSI: 0000000000000000 RDI: 0000000000000005
[ 927.475567][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[ 927.483545][ C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170e8951
[ 927.491517][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88
[ 927.499491][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 927.508422][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 927.515008][ C0] CR2: 00004000000a7030 CR3: 000000000df80000 CR4: 00000000003526f0
[ 927.522985][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 927.530952][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 927.538944][ C0] Call Trace:
[ 927.542220][ C0] <IRQ>
[ 927.545062][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450
[ 927.551399][ C0] ? do_raw_spin_unlock+0x172/0x230
[ 927.556607][ C0] ? rcu_sched_clock_irq+0x247a/0x3310
[ 927.562085][ C0] ? timekeeping_advance+0x72e/0xa90
[ 927.567376][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10
[ 927.573014][ C0] ? __asan_memcpy+0x3c/0x60
[ 927.577626][ C0] ? rcu_is_watching+0x12/0xc0
[ 927.582396][ C0] ? update_process_times+0x178/0x2d0
[ 927.587798][ C0] ? __pfx_update_process_times+0x10/0x10
[ 927.593539][ C0] ? __pfx_tick_nohz_handler+0x10/0x10
[ 927.599013][ C0] ? update_wall_time+0x1c/0x40
[ 927.603881][ C0] ? tick_nohz_handler+0x376/0x530
[ 927.609004][ C0] ? __pfx_tick_nohz_handler+0x10/0x10
[ 927.614468][ C0] ? __hrtimer_run_queues+0x5fb/0xae0
[ 927.619850][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 927.625576][ C0] ? read_tsc+0x9/0x20
[ 927.629656][ C0] ? hrtimer_interrupt+0x392/0x8e0
[ 927.634782][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400
[ 927.640948][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0
[ 927.646797][ C0] </IRQ>
[ 927.649740][ C0] <TASK>
[ 927.652680][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 927.658859][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0
[ 927.664939][ C0] ? smp_call_function_many_cond+0x4bf/0x12c0
[ 927.671018][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0
[ 927.677103][ C0] ? __pfx_do_sync_core+0x10/0x10
[ 927.682131][ C0] on_each_cpu_cond_mask+0x40/0x90
[ 927.687248][ C0] text_poke_bp_batch+0x22b/0x760
[ 927.692285][ C0] ? __pfx___mutex_lock+0x10/0x10
[ 927.697318][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10
[ 927.703322][ C0] ? text_poke_queue+0xef/0x180
[ 927.708186][ C0] ? arch_jump_label_transform_queue+0xc0/0x120
[ 927.714467][ C0] text_poke_finish+0x30/0x40
[ 927.719155][ C0] arch_jump_label_transform_apply+0x1c/0x30
[ 927.725149][ C0] jump_label_update+0x1d7/0x400
[ 927.730109][ C0] static_key_enable_cpuslocked+0x1b7/0x270
[ 927.736018][ C0] static_key_enable+0x1a/0x20
[ 927.740789][ C0] toggle_allocation_gate+0xfc/0x260
[ 927.746082][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10
[ 927.751978][ C0] ? trace_lock_acquire+0x14e/0x1f0
[ 927.757183][ C0] ? process_one_work+0x921/0x1ba0
[ 927.762308][ C0] ? lock_acquire+0x2f/0xb0
[ 927.766820][ C0] ? process_one_work+0x921/0x1ba0
[ 927.771947][ C0] process_one_work+0x9c5/0x1ba0
[ 927.776900][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[ 927.783060][ C0] ? __pfx_process_one_work+0x10/0x10
[ 927.788446][ C0] ? assign_work+0x1a0/0x250
[ 927.793042][ C0] worker_thread+0x6c8/0xf00
[ 927.797647][ C0] ? __kthread_parkme+0x148/0x220
[ 927.802759][ C0] ? __pfx_worker_thread+0x10/0x10
[ 927.807878][ C0] kthread+0x3af/0x750
[ 927.811951][ C0] ? __pfx_kthread+0x10/0x10
[ 927.816542][ C0] ? lock_acquire+0x2f/0xb0
[ 927.821055][ C0] ? __pfx_kthread+0x10/0x10
[ 927.825648][ C0] ret_from_fork+0x45/0x80
[ 927.830079][ C0] ? __pfx_kthread+0x10/0x10
[ 927.834672][ C0] ret_from_fork_asm+0x1a/0x30
[ 927.839451][ C0] </TASK>