last executing test programs: 11m37.409300497s ago: executing program 32 (id=516): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000005, 0x32, 0x0, 0x471ac000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net\x00') exit(0x100000000000035) getdents(r2, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r5, 0x2, 0x13, r4, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000300)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fsopen(&(0x7f00000001c0)='udf\x00', 0x1) mq_open(&(0x7f0000000040)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80802) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) read$msr(r6, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = open(&(0x7f0000000200)='./bus\x00', 0x4140, 0x85) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x84) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r8], 0x2b) sendfile(r10, r8, 0x0, 0x4000000053d2) 11m11.839377397s ago: executing program 33 (id=576): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000003c0)={0x28, 0x7, 0x0, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000480)={0xc}) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f00000014c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f000001a4c0)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f000001a500)) openat$dir(0xffffffffffffff9c, &(0x7f000001a540)='./file0\x00', 0x40, 0x16f) execve(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001480)="b15dd7cf1c000004000000000000", 0x0, 0x5845, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 10m57.485593107s ago: executing program 34 (id=631): socket$netlink(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2100, 0x0) close(r0) socket$kcm(0x23, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000240)={'veth1_vlan\x00', @random="2b0100004ec6"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000010}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000200)=ANY=[]) 8m6.766832565s ago: executing program 6 (id=979): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000080)='mnt\x00', 0x1ff) openat(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x3, 0x0, 0x6400) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) preadv(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x6, 0x0) open(&(0x7f0000000680)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) mount(&(0x7f00000006c0)=@filename='mtd0\x00', &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='jffs2\x00', 0x800000, 0x0) listxattr(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='mnt/ttyUSB0\x00', 0x6082, 0x0) 8m3.138298034s ago: executing program 6 (id=984): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000180)={{0x80a0000, 0x3000, 0x4, 0xb, 0x3, 0x0, 0x45, 0x7, 0x0, 0xc9, 0x19}, {0x41000, 0x54000, 0x0, 0x2, 0x4, 0x7, 0x77, 0x6, 0x5, 0x8, 0x43}, {0x3ff8, 0x8000000, 0x0, 0x5, 0x1, 0x7, 0x0, 0x9, 0xfe, 0x8, 0xb, 0x81}, {0x54000, 0x8000000, 0x3, 0x4, 0x0, 0x2, 0xfd, 0xf8, 0x77, 0x8, 0x9, 0xf1}, {0x4000, 0x2000, 0x9, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x41, 0x83, 0xf7, 0x6}, {0x1000, 0x191bd000, 0xc, 0x3, 0xb5, 0x6, 0x0, 0x7, 0x80, 0x13, 0x5, 0x40}, {0x6000, 0x1, 0xa, 0x5, 0x9, 0x2, 0x4, 0x4, 0x1, 0x7d, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0x2, 0x45, 0xf, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0xa}, {0xffffffff, 0x29ad}, {0x3000, 0x2}, 0x80000021, 0x0, 0xeeef0000, 0x2024, 0x2, 0x0, 0x3000, [0xa4, 0x1000, 0x400000000065, 0x6]}) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000780)={0x1, 0x6, 0x73a, 0xffffffff, 0x7, 0xb, 0x1}) 8m1.047347876s ago: executing program 6 (id=990): unshare(0x20000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80782, 0x0) unshare(0x22020400) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r4, @ANYRES32=r5, @ANYRES8=r4], 0x40}, 0x1, 0x0, 0x0, 0x20004090}, 0x20000040) syz_open_procfs(r2, &(0x7f0000000080)='net/l2cap\x00') ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'team_slave_0\x00', @remote}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000a80)={'team_slave_0\x00', @broadcast}) 8m0.761647089s ago: executing program 6 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000001, 0x8132, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000001, 0x8132, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000001a40)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) (async) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000001a40)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6ee0, 0x7, 0x401c031, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000140)={0x0, 0x4d8b, 0x3a10, 0x3, 0x3}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000007c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r1, 0x0, 0x0, 0x8, 0x1, 0x1, {0x0, 0x0, r1}}) io_uring_enter(r1, 0x3241, 0xb36b, 0x40, 0x0, 0x0) (async) io_uring_enter(r1, 0x3241, 0xb36b, 0x40, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000380)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000600)={0x13, 0x10, 0x7, {0x0, r5, 0x1}}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40241, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0xc201}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000006c0)={0x2, r6}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000006c0)={0x2, r6}) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000700)=0xffff, 0x4) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000"], 0x36) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) 8m0.18536325s ago: executing program 6 (id=992): write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00224c00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a5304150025057508950181020a5404150025057508950181020a550415002505750895018102c0"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m58.973056774s ago: executing program 6 (id=996): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, &(0x7f0000019400)=""/4096, 0x1000) mkdir(0x0, 0x111) close(r0) inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x6c00) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x2, 0x5, 0x5cfa46a0, 0x0, '\x00', 0x6}, 0x4, 0x1, 0x9, r1, 0x0, 0x1000, 'syz1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f000001a680)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 7m58.430905684s ago: executing program 35 (id=996): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, &(0x7f0000019400)=""/4096, 0x1000) mkdir(0x0, 0x111) close(r0) inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x6c00) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x2, 0x5, 0x5cfa46a0, 0x0, '\x00', 0x6}, 0x4, 0x1, 0x9, r1, 0x0, 0x1000, 'syz1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f000001a680)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m45.201260282s ago: executing program 7 (id=1819): syz_emit_vhci(0x0, 0x102) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a440000018010109023b000101000000090400001202060000052406000005240000"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) syz_open_procfs(0x0, &(0x7f0000000700)='net/rpc\x00') write(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x1cd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000180)=""/170, &(0x7f0000000240)=0xaa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002940)={0x11, 0x15, &(0x7f0000002a00)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000002ac0)='GPL\x00', 0x3}, 0x94) 2m38.373589022s ago: executing program 7 (id=1837): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x20000000009, 0x80000100008f}, 0x0) syz_open_dev$radio(&(0x7f0000000840), 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000008c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000940), 0x0, 0x0) pivot_root(&(0x7f0000000980)='./cgroup\x00', &(0x7f00000009c0)='./cgroup\x00') read$msr(r4, &(0x7f0000000a00)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) sched_setaffinity(r3, 0x47, &(0x7f0000019a00)=0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000019a40), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000019a80)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000040000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000019e40)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x9, 0xfffffffffffffff7, 0x80000000, 0x100000001]}, &(0x7f0000019ec0)=0x78) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x200000b, 0x31, 0xffffffffffffffff, 0x2d23000) syz_open_dev$media(&(0x7f0000019f00), 0x0, 0x2) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e26, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="d2a534b308834d054586feb5c9428624db4b878120e41be144acec28b091f1237c91d74cf1ce0c17632e8dce6ac8c6822c2382fc3ac7c89f2d955bc265df5364df0d56866c920de52e29535b686bb2b4e7e485d65da8513267bc112d12e86bf2a6c815e7e152ecfcde4de24108b1", 0x6e}, {&(0x7f00000002c0)="d26f4a894505e4cb435268490fef3ab82e09dc74120d1fe735ac577f50976089bf7b715147d38cf5484e357c07c0184822dfa6ee88a786404855d6086b61189c0602d0056d86a8490a443bfaa3ed6da25bf296a08acb3a3f59b7c9eabd7b51297ab7cffdb4eb9c9f6f44c0ce8390cc64160cf457e992e94b36ea829b521e86b15fbe03b246962339a650eab941391339220bde5e16e11123b7ca6b0a3675dd7fe035187b73d43de9423d1357f4b15883d530e7db10b2f0bac6ee95ca0b7e96589c8ef1fc6c183df637a200ac059e59baa215a117a57000ee2b6f40c4ae379d95eab435556aa89edcd0a7453bdf38c1f8fd4b9a466d2d9517f812a4fbeba1cdcb2429101240e5adcabbfe440e4f326a6f50f59ca934b0c214936df5a338cf4c24e05d0efd8d932a3fd01f6fe596d186e08d2fc77b297f972530a81226294e2fda3d9dec706dbcaa9a1ad5b497d7f8989f6d9e689db0aab831d0b82184e88d6f45924b90744b898912bf3df4e6257723b490e56d93f5f38f4bceb5b43f30da82120d92655f4fc2ec1635a072892a12c462479a4480c46012b9df1f0b9971d0da6c5bfebd60af31c9492d9b3f4da64f7e8a6a760ea96242f9beac499b4e492777c1849ecb0207e1a0b095ac55cf137bd941c13099245069ef52e8a9b0e6c5cab4933962766e47b2ff97c1d0a4f4cc3284a3db70b2eb1fad2ec3b81b2fc65bc354a33caa38c2f6ff1fb9938ae9f0edb9ade42f53b7de7d09ac2ff6de81414917fa0a9ce6515f0f130327f3a0c47c0fcadc315309b06966f945de26b5a445423f22b8474a41f58d12eb8acbf8bdf9087b3b2bb98a802e791f57a86bc325ff6f3fd56b0eb828aea29575fc843902317423459d4e6fbfa3816b70bfbe17bc447d8501e22f0137b56781e8d89a0432bcff4923a5f2b480ee06d502346b0ca8ddeb42afca64179fb1076da91dfe1b19af87df73365ef29f482bea712301f685fcc9f779f9413973c395fee168036c181ede168c8dcd79f5b595f12cd79a1848a7ed9a2c39ffc4e2e0bb73a295a2d263f220d903d79e18c18d4f59d5b6622cdbda6aa9b165d9f3eb26bf5d977100cc722378b4462ad324854974e7bae6a82954f46f83124a73214f23f7baffe3d2f78b87dfa3d29d1f3efdf7cf0f022f96346473b3ad60c6e6885f1b1205d615866cf0837e04371f04e190af232329e39c70f4a89ad5476054c99cc01427ea12a7afd17531daae2661ab625c5e65aa09697adc3a00c04825fa5d6c4d36acaa41de2dfc531504658e12f77d6134ffa61880ad2b5c0b2e236042de25eeabb06f1d0a20a480d684e21c69cdb44f5cbf9e7ad51fa0023cf6240682ee66ead1b5fc3060f5dcaa74ecac0adfafcd68b6254ab01eb8ab49f96128991f33d84477810862780da272bab1fd74d34445a640cd2c82b4ad6cd5c3fb455fd55c7871bf19a20351a17a822ae8341bdbe89d4d69b81c43ba9c1abc4bef75cbc89e278d2a15974f92fdf8687049c5d37a0d469f8de70ce88d82dd505194360b0096ac45a9cea6c3003b2831a538513b3798737fc941c88e31b5334c47d2a774ca3da487ae43ddbd6d8661e26248ba77b30ba719c9c057e0f128f11b8d2ce44b0cb20a7170618c9ea92ef6ec05ddf29b2fabc6d3467b8ad1f683733e9238bdacd953ed0a731f8972113da633d8465adceac30c9e0d0259dbe0301f13bfaceff1d5927b56e5d2bb23b3d8511426829373754292e8564174ba481d395a2f75cfdb0b166434ea9ffde5b55174ab921c061b4da022de1a7ab6736e21ea8db56a7c618b72f64c14eaea2a9ece5cf3b53732a45174a4a45b303ca4f9d79e447aa3e276554fac324c4a211fafd3baf9d2d77c4344bd54bc7f57ed3268daa5e5039d82", 0x53f}], 0x2}}], 0x2, 0x40) lchown(0x0, 0xee00, 0x0) 2m36.51285977s ago: executing program 7 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x17, &(0x7f0000000a80)=ANY=[@ANYBLOB="18ff9000000003e7000000000000200018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000020c50007001a000000bf0900000000000026090600000003e70400000006000000180100002020642500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200010000008500000084000000b70000000000000295"], &(0x7f0000000b40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m33.435172101s ago: executing program 5 (id=1847): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./sys\x00', &(0x7f00000000c0), &(0x7f0000000240)="c1eea05752ef5818b24977584a3c3328b0c5d965573bd6357ad1a3580b7441ce994603fdee35b6152efac4a296991480b4c1a592a81ddf9b47db8bff39fc0a98fa2fc23f5ef1e2591233d8dea90848e29d3a9f550f2d8c6157af6b43f91cb3fb78e60d3393940fda10b971f13a63d64733d75d3325f666f53b16d9b4adbfad9412fc0f7860bd631b5c8cc83ef12026aeb073bc286c06b21d245492bb228b533d9fa7f6d9705e36dbc166d2db2bebbde7c9ef536438a9837c0842ebb1611fdd10895ec176f5a3dbb3bfe7dae22c700495b19108b32d3c9e23e65f8eba10ab400ba2154b30fd669f84b7cf7577dfbd7713", 0xf0, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) close(r1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000400)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6ee724d01add055459d5102ae2d3d05f252b8d49025cea9d06d2914300"}, 0x48, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000640)={0x0, @reserved}) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='27', 0x2) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000007c0), r4) write(r0, &(0x7f0000000140)='5', 0x1) 2m32.35975434s ago: executing program 5 (id=1850): r0 = socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x1001, 0x5c01, 0x0, 0x0, "", [@nested={0x4, 0x2}]}, 0x14}], 0x1, 0x0, 0x0, 0x440d0}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000003880)=@nat={'nat\x00', 0x62, 0x5, 0x1358, 0x0, 0x1218, 0xffffffff, 0x10c8, 0x10c8, 0x12c0, 0x12c0, 0xffffffff, 0x12c0, 0x12c0, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0xc, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@rand_addr=0x64010101, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b8) 2m32.09053926s ago: executing program 5 (id=1852): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x20, 0x700, 0x10000, 0x9, {{0x5, 0x4, 0x3, 0x3e, 0x14, 0x64, 0x0, 0x21, 0x4, 0x0, @remote, @remote}}}}) memfd_create(&(0x7f0000000080)='-&:\n-\xb2];\x0f\xb2\x86NV6&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92\x87#Yg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$vbi(&(0x7f0000000b00), 0x1, 0x2) timer_create(0x0, &(0x7f0000000bc0)={0x0, 0x21, 0x2}, &(0x7f0000000c00)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000c40)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000c80)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x103a42, 0x12a) ftruncate(r6, 0x6000000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000b40)={0x4, [0x1, 0xff0a, 0x7, 0xf58, 0x0, 0x3, 0x2c1b, 0x3, 0x0, 0x9, 0x1000, 0x7, 0x4, 0x0, 0x2, 0xffff, 0x3, 0x6, 0x4003, 0x4, 0x6, 0x0, 0x3, 0x6, 0x3, 0x9e3, 0x8, 0x8000, 0x5, 0xfffe, 0x6ff4, 0x8, 0xfff8, 0xfffc, 0x6, 0x8000, 0x2, 0x7, 0x9, 0xfa0, 0x3, 0xa2e, 0x6a, 0x4, 0x8, 0xc017, 0x1, 0x7], 0x5}) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x364, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x328, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x240, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x230, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x81}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_DYNSET_EXPRESSIONS={0x174, 0xa, 0x0, 0x1, [{0xf0, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xe0, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xdb, 0x3, "18cfe43154c57ec9e235265a511c5e8db339781d7bb589d762b08a93090e2f0824bc36e083883badb8fa447a693ba1971bafdd96b04f1322bb2501476558ba91326f7ac4cbd21440a794581e66874ec05df7ada55fb22264e278aa7f14bb06ace9aaf48b79f7afed8050f2de3ca1498da72a26c2cac190d198fe4f5203f799ce46114e28a2ee18a6d818f679578d24e8de588604095e675812f93fb339a26c374f75983791d75d8ad12a812000a18042b764579251833bb980e338f6e6751ef5010615a85161d29e03a24ae7a063438cc93a2b541bb5fc"}]}}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x7b}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xbce}]}}}]}, @NFTA_DYNSET_EXPR={0x38, 0x7, 0x0, 0x1, {{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, @NFTA_DYNSET_EXPR={0x58, 0x7, 0x0, 0x1, {{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x38c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000940)='./nfsd\x00', &(0x7f0000000980)='nfsd\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r7, &(0x7f0000000a00)='udp 2', 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000029000100f9ff0700fcdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 2m31.318531451s ago: executing program 7 (id=1853): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8f) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000440)=0x20) chdir(&(0x7f0000000740)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cgroup.controllers\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[], [], 0x2c}) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xb3, 0x3a, '#/,%%/$+', 0x3a, 'lowerdir', 0x3a, './file3', 0x3a, [0x4f]}, 0x38) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file1\x00', 0x40, 0x83) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/oops_count', 0x123000, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x1e, &(0x7f0000002d80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="7977b4838ee4", @void, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "eb45dcb56fef19e9"}}}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x40000040, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000500)) pread64(r1, &(0x7f0000000380)=""/89, 0x59, 0x8008) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002b80)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="b909f2e5d55a64dbb5804501ddac1b6378598d85de0526d392c9890b02f234fa00feffffff00000000902bf4de2af52acad4b76b6d186c95aea6faf191738ba361015ff38df178513c8f453d1024774674dc1de3ff42332d0bbeb39dc791f862e6ffa1464de5740f4ec15f4a3896b5e4aaf9783d410889513351c7f861794a1f663013565e324c713cf8a8d22498f81a740f5ffa6395bc89fdc0341ccaf5f62504d6cf6a5f8ca4040fa5683fb054225dfb27a46f626a52efb138367e4a34e4590a4dd9509b499e2ef4d91a496c83c8ba48413da3c32dc3d930e0fdfba3833ef129dc4d7208b755fa07c9c09d340000000000000000", @ANYRES32=r3, @ANYBLOB="02010000ca0107000500270008000000"], 0x28}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='27', 0x2) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f00000002c0)='4', 0x1}], 0x1) 2m30.948693462s ago: executing program 1 (id=1855): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20050, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1a) time(0xfffffffffffffffc) 2m30.314760633s ago: executing program 1 (id=1856): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000d716ca9eb703560b7aab38d07157d6eeff791a084fed17c2f6e82ac916e6d2141f5ef4045ff1227676aae45ed3a317610751f78f9e061b916a738024e899fc679d0dc2a13ad26a547e104ff2b916fd2d9f1eb6", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000500040001000000050002000a000000"], 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x4048) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80080, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000080)=0x1000, 0x4) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00003e2000/0x1000)=nil, 0x1000, 0xc) io_uring_setup(0x8309d, &(0x7f00000002c0)={0x0, 0x8ec6, 0x40, 0x0, 0x16d}) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000480)={'amplc_dio200\x00', [0x140, 0x40, 0x7, 0x40, 0x100, 0x8, 0x8, 0x3, 0xffff2eaa, 0x4000012, 0x4, 0x76428e09, 0x3, 0x1100008, 0x47, 0x209e9c, 0x101, 0x7d, 0xffffffff, 0x784c, 0x40, 0x8, 0x6, 0x7, 0x17e5, 0x200001, 0x8, 0x4, 0x10001fc, 0x1000000, 0xc]}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x13, 0xa, 0x0, 0x10}, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2m28.979105967s ago: executing program 1 (id=1857): r0 = syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000006c0)={0x7f, 0x4d, 0x2baa}) r1 = syz_open_dev$dri(&(0x7f0000000700), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000740)={0x200, 0x4f, 0x4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x2]}, &(0x7f0000000240)=0xfc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'tunl0\x00'}) sendmmsg$inet(r2, &(0x7f00000002c0)=[{{0x0, 0x4b, &(0x7f0000000300), 0x1}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x1007ca6, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000a, 0x5d032, 0xffffffffffffffff, 0x0) mlockall(0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='numa_maps\x00') read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x44080) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000780)={0x1, 0x3, 0x9}) 2m28.6615372s ago: executing program 5 (id=1858): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80580, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) preadv(r1, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000380)=""/24, 0x18}, {0x0}, {&(0x7f00000004c0)=""/8, 0x8}], 0x4, 0x3, 0x0) r2 = syz_io_uring_setup(0x744e, &(0x7f0000000840)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, &(0x7f0000000900), 0x0) r3 = creat(0x0, 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) pipe2$9p(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000b80)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESDEC=r3], 0x15) listen(r1, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000600)=""/6, 0xb8c2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000061190400000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000002700)=ANY=[@ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000003c00)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2m28.267518077s ago: executing program 7 (id=1860): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000008040)='./bus\x00', 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@wr_crn={0x67, 0x20, {0x8, 0x800}}], 0x20}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xfffffffffffffc00}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000400)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000440)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) (async) timer_settime(0x0, 0x1, &(0x7f0000000480)={{}, {0x0, 0x989680}}, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) r1 = getpid() (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x9e247000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x1, 0x0) (async) symlink(0x0, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000008300)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000021300), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xca) mount$overlay(0x0, &(0x7f00000080c0)='./file0\x00', &(0x7f0000008100), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}, {@uuid_null}, {@uuid_auto}], [{@hash}, {@uid_eq={'uid', 0x3d, r5}}]}) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000008180)='./file0\x00', 0x0, 0x0) fchmodat(r6, &(0x7f00000081c0)='./file1\x00', 0x100) 2m27.16020142s ago: executing program 5 (id=1863): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0x2b49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x800000004}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a44000000090a010400000000000000000200000008862e17833a7abe07b021456ad7ca1440000000010900020073797a31000000000900010073797a30000000000800054000000008080003400000008414000000110001"], 0x6c}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x10, 0xffffffffffffffff, 0x42795000) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x2, 0x200400) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)={0x0, @reserved}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, r2, 0x76bdd000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x20902, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x0, 0x110, 0xffffffffffffffff, 0x20000000) setns(0xc9, 0x0) r5 = socket(0x8, 0x2, 0x0) setsockopt(r5, 0x108, 0x42020054, &(0x7f00000002c0)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) r6 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000380)={0x2, 0x0, @name="cc421b71539481e819a2e884a0adf4fd155e4d54c740d0af1729e22ad3c0223d"}) 2m26.802320536s ago: executing program 1 (id=1865): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./sys\x00', &(0x7f00000000c0), &(0x7f0000000240)="c1eea05752ef5818b24977584a3c3328b0c5d965573bd6357ad1a3580b7441ce994603fdee35b6152efac4a296991480b4c1a592a81ddf9b47db8bff39fc0a98fa2fc23f5ef1e2591233d8dea90848e29d3a9f550f2d8c6157af6b43f91cb3fb78e60d3393940fda10b971f13a63d64733d75d3325f666f53b16d9b4adbfad9412fc0f7860bd631b5c8cc83ef12026aeb073bc286c06b21d245492bb228b533d9fa7f6d9705e36dbc166d2db2bebbde7c9ef536438a9837c0842ebb1611fdd10895ec176f5a3dbb3bfe7dae22c700495b19108b32d3c9e23e65f8eba10ab400ba2154b30fd669f84b7cf7577dfbd7713", 0xf0, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) close(r1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000400)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6ee724d01add055459d5102ae2d3d05f252b8d49025cea9d06d2914300"}, 0x48, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000640)={0x0, @reserved}) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='27', 0x2) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000007c0), r4) write(r0, &(0x7f0000000140)='5', 0x1) 2m25.808469905s ago: executing program 7 (id=1866): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) (async) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r2 = socket$inet(0x2, 0x3, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x2, @remote}, 0x10) write(r2, &(0x7f0000000640)="08008edf773c8000", 0xfd) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x46}}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0xc80) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0xc80) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="b2e8d43f4aaacffdcb6f1a4216bb2d7b", 0x10) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="b2e8d43f4aaacffdcb6f1a4216bb2d7b", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000140)="00ebffffff00", 0x10) fanotify_init(0x200, 0x40000) (async) r4 = fanotify_init(0x200, 0x40000) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r5, 0xc0086442, &(0x7f0000000740)) pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0x4800) r7 = socket$kcm(0x2, 0x2, 0x73) r8 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000007c0)={0x2, 0x4e25, @multicast1}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd120005120000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) write(r7, &(0x7f0000000180)="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", 0x4b) 2m25.146640314s ago: executing program 1 (id=1867): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=']) 2m24.977087612s ago: executing program 5 (id=1869): r0 = socket(0x200000000000011, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\'B'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0x0, 0x10, 0x2, "7f87"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, 0x0) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f00000003c0)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000580)=0x8001, 0x4) openat(0xffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$binfmt_script(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="330000000000000008101b0000000000"], 0x28}}, 0x0) 2m24.919530423s ago: executing program 1 (id=1870): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000001080)='./bus\x00', 0xd4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000010c0)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000001240)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001280)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f00000012c0), 0xd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000005a00), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000005a40)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000005a80), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000005ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005b40)={&(0x7f0000005e40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f000001bcc0)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001040)='.pending_reads\x00', 0x20642, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x80086601, 0xffffffffffffffff) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f000001bd00)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f000001bd40)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f000001bd80)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f000001bdc0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r9, &(0x7f0000000040)=""/4096, 0x1000) 2m10.395432232s ago: executing program 36 (id=1866): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) (async) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r2 = socket$inet(0x2, 0x3, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x2, @remote}, 0x10) write(r2, &(0x7f0000000640)="08008edf773c8000", 0xfd) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x46}}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0xc80) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0xc80) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="b2e8d43f4aaacffdcb6f1a4216bb2d7b", 0x10) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="b2e8d43f4aaacffdcb6f1a4216bb2d7b", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000140)="00ebffffff00", 0x10) fanotify_init(0x200, 0x40000) (async) r4 = fanotify_init(0x200, 0x40000) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r5, 0xc0086442, &(0x7f0000000740)) pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0x4800) r7 = socket$kcm(0x2, 0x2, 0x73) r8 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000007c0)={0x2, 0x4e25, @multicast1}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd120005120000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) write(r7, &(0x7f0000000180)="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", 0x4b) 2m9.5454253s ago: executing program 37 (id=1869): r0 = socket(0x200000000000011, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\'B'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0x0, 0x10, 0x2, "7f87"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, 0x0) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f00000003c0)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000580)=0x8001, 0x4) openat(0xffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$binfmt_script(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="330000000000000008101b0000000000"], 0x28}}, 0x0) 2m9.495260594s ago: executing program 38 (id=1870): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000001080)='./bus\x00', 0xd4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000010c0)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000001240)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001280)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f00000012c0), 0xd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000005a00), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000005a40)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000005a80), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000005ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005b40)={&(0x7f0000005e40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f000001bcc0)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001040)='.pending_reads\x00', 0x20642, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x80086601, 0xffffffffffffffff) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f000001bd00)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f000001bd40)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f000001bd80)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f000001bdc0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r9, &(0x7f0000000040)=""/4096, 0x1000) 1m4.879159367s ago: executing program 3 (id=2038): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000180)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000019440), 0x86880) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019300)) syz_ublk_setup_io_uring(0x4956, &(0x7f0000019340)={0x0, 0xd40c, 0x8000, 0x8000000, 0x1f5}, &(0x7f00000193c0), &(0x7f0000019280), 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019540)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000019580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddc, 0x80, 0x2, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x9, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 1m1.65628727s ago: executing program 3 (id=2051): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x103a02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000980)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) 1m1.300613796s ago: executing program 3 (id=2054): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x3) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121602, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={&(0x7f00000003c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0xfffffffffffffff4, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x220}, 0x4000044) ioctl$TIOCSETD(r4, 0x5423, 0x0) rseq(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x3, 0x6, 0x10000, 0x2, 0x5, 0xffffffffffffffff}) syz_open_procfs(r6, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x1) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x118, 0x137db) ptrace(0x8, r7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0xfffffffffffffffe, 0x4e) 58.941437695s ago: executing program 3 (id=2057): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000002400)='./bus\x00', &(0x7f0000002440), 0x8, &(0x7f0000002480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000002580)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x389780, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000300)={@id={0x2, 0x0, @a}}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r1, &(0x7f0000000280)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(r1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x8000, &(0x7f0000000100)={0xb, 0x0, 0x100000}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xbfffff, 0x0, 0x11050, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) writev(r1, &(0x7f0000000180), 0x0) 58.10483491s ago: executing program 3 (id=2061): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys_sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000240)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x8080000, {0x3}, 0x2000000, 0x802}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000876c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ccffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe2d012b6255614c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d73000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r4 = fsopen(&(0x7f0000002340)='nfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000002380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000023c0)=0x8) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000002400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000002440), 0x0, 0x0) read$msr(r7, &(0x7f0000002480)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f000001b480)='source\x00', &(0x7f000001b4c0)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f000001b500)='addr\x00', &(0x7f000001b540)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f000001b580)='vers\x00', &(0x7f000001b5c0)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000140)='select \n', 0x10) getsockname$packet(r3, &(0x7f00000022c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002300)=0x14) write(r3, &(0x7f0000000180)='file read @etc/passwd /as/\\{id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 55.741884961s ago: executing program 3 (id=2066): socket$nl_route(0x10, 0x3, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000000)={0x66, 0x1, 0x20}, 0x20, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030db3fb83ef0400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000058000000400aaa4aaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000440), 0x4000000000001f2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xfffb, 0x90}, 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000080)=""/184, &(0x7f0000000140)=0xb8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x40) 40.50667619s ago: executing program 39 (id=2066): socket$nl_route(0x10, 0x3, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000000)={0x66, 0x1, 0x20}, 0x20, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030db3fb83ef0400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000058000000400aaa4aaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000440), 0x4000000000001f2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xfffb, 0x90}, 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000080)=""/184, &(0x7f0000000140)=0xb8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x40) 13.091714246s ago: executing program 9 (id=2161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4004012}, 0x4044044) 11.540875879s ago: executing program 9 (id=2163): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) syz_open_procfs(0x0, &(0x7f0000000700)='net/rpc\x00') write(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_debugfs/asoc/components\x00', 0x0, 0x1cd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000180)=""/170, &(0x7f0000000240)=0xaa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002940)={0x11, 0x15, &(0x7f0000002a00)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000002ac0)='GPL\x00', 0x3}, 0x94) 10.472003767s ago: executing program 9 (id=2165): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200113000000f83cbb"], 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x4000003, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x4c}}, 0x40c0) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000003c0), 0x2e9, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x144, 0x16, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xc, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x2, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @lastused={0xc, 0xf, 0xfffffffffffffe0c}]}, 0x144}}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000007c0), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000b40)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000b80)={0x0, @bt={0x4ff, 0x2d3, 0x0, 0x280001, 0xdd9f84, 0x1, 0x9, 0x1d, 0x2, 0x8, 0x721, 0x13, 0x6, 0x7f, 0x3b, 0x6, {0x0, 0x6fd8e84b}, 0xff, 0xed}}) 9.228331845s ago: executing program 2 (id=2167): mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./mnt\x00', 0x1ff) semtimedop(0x0, 0x0, 0xffffff0b, 0x0) mount(0x0, &(0x7f0000019340)='./mnt\x00', &(0x7f0000019380)='tmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) r0 = syz_create_resource$futex(&(0x7f0000000080)=0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x10100, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) stat(&(0x7f0000000200)='./mnt/file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0xee01, r3}}, './mnt/file0\x00'}) futex(r0, 0x6, 0x1, 0x0, r0, 0x2) futex$unlock_wake_list64(r0, 0x201, 0x93, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)=0x67, 0x6) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000193c0)='\x00', 0x89901) fchdir(r4) close(r4) chdir(&(0x7f0000019400)='./mnt\x00') r5 = open(&(0x7f0000019440)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) 8.772163842s ago: executing program 8 (id=2168): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f864ce, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x8b}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) syz_emit_ethernet(0x22, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'pimreg\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c000100040000000000000007000000", @ANYRES32=r4, @ANYBLOB="8000f2040a000200aaaaaaaaaa1be3ff050005"], 0x30}, 0x1, 0x1000000}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000980)=0x6) getuid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000a80), 0x400000000000041, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000001c0)={{0x5, 0x8001}, {0x2, 0x8}, 0x7fffffff, 0x1}) recvmmsg(r5, &(0x7f0000000b00), 0x10106, 0x2, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) 8.566154331s ago: executing program 4 (id=2170): shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='-', 0x1}]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x9) accept$inet(r2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0x1, 0x1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 8.264524844s ago: executing program 2 (id=2172): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000200000040cd0607013e1bea1c03010902350001010080fa0904000005ff000000070581024000010705010240000107058302400001070503", @ANYRES64], 0x0) r0 = socket$inet6(0xa, 0x80002, 0x1) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4001, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @empty, 0x3ff}, 0x1c) r1 = socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0xffffffffffffffff) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019580)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000195c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000019600)='./dev\x00', 0x40, 0x3bf) execve(&(0x7f0000019640)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x0) mount(&(0x7f00000196c0)=@filename='mtd0\x00', &(0x7f0000019700)='./file0\x00', &(0x7f0000019740)='jffs2\x00', 0x800000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a0000000000000000000000085b3b83c5da7320a1427b0000002607a8e84791dc4dd6dca306c7909cc58e5ccb52f3bc0b14b85cc25bcc4429767d388a7deb57c61f7029298360d5be524abcd3331f0807321a0d9fc603c79bb7714eb69e233219e9bb8d21df81254a4f9403db52e9ae5ef2b441746733b4faa61383591253a9546637328d6c60c5d5b421ffc0925aaf4350fea5d20ca1e3a62bbeeee643bb5dc930523368054ddba5c85f108f26e87f9c34e877db8fc363b59b41f53dd071b5e8cf", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000019800)=ANY=[@ANYBLOB="0500000004000000060000000b00000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000040000000000000000"], 0x50) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) 7.656024457s ago: executing program 0 (id=2174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) close(r0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x2, 0x70bd2d, 0x25dfdbfc, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.269360428s ago: executing program 9 (id=2175): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)='2', 0x1}, {&(0x7f0000000740)='-', 0x1}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20000040) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x10, 0x3c, 0x0, @private0, @local, {[@srh={0x2f, 0x0, 0x4, 0x0, 0xe5, 0x70, 0xc9}], {0x4e24, 0x0, 0x8}}}}}}, 0x0) read$msr(r2, &(0x7f00000025c0)=""/102368, 0x18fe0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000040000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES8=r3, @ANYRES32, @ANYBLOB="030000000300eeff020000000000000000000000000000000000000020e89a9bdfb5e257de65061a2ccec92c911cdf9b0afd2a687a5830d4ebf0570a444b00000000942291fbf983b3704f92449f2e4275cedeae71c59d3351ddc65b2e33af9c68799f509809cfae8e7b4d58e896e506946002bd335c2e7ce9d3912fe5cc9f6a90d134172804140eb5bddc1a42bcf2c67c67bdc0e2ba9ce7db6d7be006b9745677b2f9b4a7d901a29d38d5b3bff5e2bafc016c4f01f3de1caee2e6585da9b76ff3d404a1811061ad4796ec773370d999bdc037d1b0cd"], 0x50) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x40104d01, &(0x7f0000000680)="00000200000000000000020001") sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x40}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) bpf$PROG_LOAD(0x5, &(0x7f000001b640)={0x7, 0x1e, &(0x7f0000000480)=ANY=[@ANYBLOB="180000003e060000000000000104000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c0000000422fe374fb7000000000000008500000040000000bf00b7020000000000008500000084400000b700000000000000baf000000000000000"], &(0x7f000001b7c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x181) 6.103178527s ago: executing program 4 (id=2176): r0 = syz_io_uring_setup(0xf06, &(0x7f0000003100)={0x0, 0xfffffffe, 0x800, 0x1, 0x800000c0}, &(0x7f0000003180)=0x0, &(0x7f00000031c0)=0x0, &(0x7f0000003200)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000003240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 6.068217329s ago: executing program 0 (id=2177): r0 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0xa, 0x80000082) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0x78) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000140)={0x3f, 0x0, [{0xc0010015, 0x0, 0x7f}, {0xa06}, {0xa0e, 0x0, 0xf5}]}) r7 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) syz_kvm_add_vcpu$x86(r9, &(0x7f00000004c0)={0x0, &(0x7f0000000240)=[@nested_amd_invlpga={0x17d, 0x20, {0x8080000, 0x5869}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x29, 0x6, 0x5, 0x9774}}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @nested_amd_invlpga={0x17d, 0x20, {0x1ffe, 0x8f46}}, @out_dx={0x6a, 0x28, {0x1485, 0x3, 0x8}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xbf, 0x7, 0x6}}, @wr_drn={0x68, 0x20, {0x7}}, @nested_amd_clgi={0x17f, 0x10}, @nested_set_state_pages={0x140, 0x28, {0x1, 0x0, @gpa=0xffffffff}}, @wrmsr={0x65, 0x20, {0xb0b}}, @nested_amd_invlpga={0x17d, 0x20, {0x54000, 0x2db9}}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd1000, 0xb5d}}, @wrmsr={0x65, 0x20, {0x400000b6, 0x88c}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x3, 0x7b}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x5f, 0xf}}], 0x248}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000040)=0x1210, 0x4) setsockopt$WPAN_WANTLQI(r10, 0x0, 0x3, &(0x7f0000006240)=0x1, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000062c0), r10) 5.997247883s ago: executing program 4 (id=2178): move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000/0x800000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019880)={&(0x7f00000198c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x5f, 0x71, 0x2e, 0x61, 0x0, 0x30, 0x61]}}, 0x0, 0x2d, 0x0, 0x1, 0x6b}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) r1 = socket$kcm(0x11, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000019340)={0x0, 0x80000, r1}) sendmsg$tipc(r2, &(0x7f0000019840)={&(0x7f0000019380)=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x3}}, 0x10, &(0x7f0000019700)=[{&(0x7f00000193c0)="f0", 0x1}, {&(0x7f0000019400)="90a720879fdd1a191bb852c31e6a31737600490b3494bd0b8eaf3e21b5bf1dcdd969153ee3ecaa75fbf8815e46e6984d6247fba7e0f10d1b630f09e840f304ca38e706cc0c2657303c", 0x49}, {&(0x7f0000019480)="efea43e802eb7b316579691847eb870ee19ddd8c2133e2f6bbeaaf994b242754f02bd3834bca0a318f70b4f9207ad9c725c2d4ab3276b40f967c49ea946fa928c7f9ae4b81019349888181c7f164f03075b54ffe5fc2ba8aa2a83575de53dfc03e5f", 0x62}, {&(0x7f0000019500)="8545e68f7a553346957ff79620acca7aea25f01a7764c285b11ea3b64e8f3c8a3775389661c6feef8ed1f18b4ae2f2452b816e13b1f52d0ba99a0b89dabded97a40eda0691caa8a57ad71c89ebbf1531e38e9968571957e989d5e196a7904f874f9ca669a3c70e7d29b69bb85800ab5755051479689a13837ab49ef3b3bbc41e4d617418", 0x84}, {&(0x7f00000195c0)="ceb97d998db6396baf81bb6752a053457696b569496ff65e16fcbb61d049d9de09dff0339b26a7e71d1970bf5dd1d65274071f662b51d4033bddcd89289bd26e432e40426717c8c0d0b4b7bc3bc883c177fd35a89ad56b136411f7ae781c0a764780e6a724", 0x65}, {&(0x7f0000019640)="ecf0daca7a625b46ed354d4a0b44dfe59febdefb1051701790b9f5deec805ea1bd4a768ee1614371dd3b86ca2ce1d059b5da93458ea88c66ece8967d4c5784637f914a8768b8f8ee66b207727dbafd79a951c03a10e4f85bcd44f5223ae8e723a5d323b287e2dd5223365f329486d1891c4363c15c", 0x75}, {&(0x7f00000196c0)="a32eb4", 0x3}], 0x7, &(0x7f0000019800)="1e0080122a9fa76be993ab5e3421b1a43f1c31ac95edec15e3b111d1bdcdf9916ca186cf178b8f993c956e9392b06b6a1c062c722c", 0x35, 0x20000088}, 0x80) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x56, &(0x7f0000019e00)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004d8c00480000000000069078ac1e0001ac1414118907a2ffffffff4410050300000000000000050000000086060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="652b08cc5c97ae49e3e7d080e5769c9e9fa4fa6bde04d5cf4c461fafe2d691677d736168214044e37ba33175442fe7e8d1011882e199e6c0eabc3cb80de609c003a96cc87c06ff965b64ecb603ab8d008c03d069ea2ac1d89321d595105e77fba3066413dad208e980e95356e37d27cdb85c3ce2455ad6afac043482dc6b6ba9ebbab22cdd1623e7a32df55341514c7441347d38c1489cb5c1d26a2a041ac05648c97fd966a55a77659cea7f04a3ea6b9e9fc046e319218d4c1c5b988be72910b061d5a955383fb76d8b1c7d70809bff95c6db83a702302312d92e4ce8ed40d7a3ddedfe05f9e01e4df85a679e780374ed7a"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019900)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000019940)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000019980)={0x11, 0x14, &(0x7f0000019a40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000019b00)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@caif=@dgm={0x25, 0x80e}, 0x80, &(0x7f000001a000)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000019f40)="59d6239a06260786c326c52734854c3e1fc2af679a52a0fd216184540b0d7fd81aa57c7d4d3c2bd9afa43f3fe665826e56447faf8cfc3462e8b886a85c75169f1fa34ff99ddf635622619baba55fd7ed4e0c8207eec0e9cd7d9569ef8d8b7d81190c0bdd95231f82688923d1e070", 0x6e}, {&(0x7f0000019fc0)="161a4eafc4cae650c5d727ce4e1a760f86a87f72411ff0c25a7f9acb5215", 0x1e}], 0x3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f0000406000/0x3000)=nil, 0x3000, 0x2000005, 0x32, 0xffffffffffffffff, 0x58dd4000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019b80)={0xc, 0x13, &(0x7f0000019c40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000019d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019d40)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f0000019dc0)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r7, &(0x7f0000000340)=""/102400, 0x19000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4041) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000019780), 0x2, 0x0) 5.049683302s ago: executing program 2 (id=2179): mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x1000005, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x20000f04, &(0x7f0000000140)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f00000002c0)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x64ec, 0xfffffffd, 0x6a, 0x0, 0x0) 4.98056189s ago: executing program 4 (id=2180): prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c80)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000d00)=0x6) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0x10}, {}, 0x0, 0x3, 0x6}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x2c}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0xf, 0x6, 0xffff, 0x8251c, 0x2, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0xfffffffffffffdac}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000d40), 0x0, 0x0) read$msr(r4, &(0x7f0000000d80)=""/102392, 0x18ff8) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000019dc0)=0x8) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8002) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="03040000b500"], 0xc8) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000680)="9bce1c874ec41d16038bdecb475198ec3fcb6e6eb3b6d312fcef30a625419f3529b4a3e71ccdc5322839539b2a097089b4ca3e10abc23e4d1934c8f653e5caf8fee1e92c794f172d4968f8f9132360969f8b6c0711c21e47e80ff98c9eab5aebb01e6d0d4e19cc5e559f5731614d827023ffc1c8ffdac37d01440754fd755845f60a7a82", 0x41}, {&(0x7f0000000340)="20570455078ac2c4b1b8203a9fdc6ecf3ea6109d1c76b7897b03996da238f72f5267a6bbdb211d8f3258d4862b2f039cd95b583c06eee718892bfcf97681dded4baebca556d5178b02803aba61974b4459ba80ec03bbbb48f89cc434133e26a2dc5d123851c70766e127022c619aa2ec921252ce8c8c62c35b623b4b8b9c8cd864a9b64742f5eea81b0b4953bcd165600d213f8fdd5e4e9cf4c180b5092bdb973283952d48928336bd3b086af502ae", 0xaf}, {&(0x7f00000004c0)="d4598378d536c05f8fc5ad9e011aa02720c99e09fd36b668a4bfb9b36cbee8b91fd102ebe4804f52d17fb6ad75010c73937438fc81fc8e265184874b2f6b67d4cd80aefebea44edfc6d0d69002276ed75e29595f4ef453940429da0f9b9c8c412bbbc965621b753a43360b384b10fca26c7b7f5b2429d382630d52e70192e6bfbb790dfc8c494c793533a46f400ae089e526c74e41f305c208fc9b43e0fbf2692e0353d51eacad922f851dc7f0cf2e62fa46080a12c3ab45487527835f4f740c40a4bfe3", 0x22}, {&(0x7f0000019e80)="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", 0x1000}, {&(0x7f000001ae80)="98427c81778cb4c62f8b1f5c98aa5481a09921522d074970971a06c04a86cba5897abc3781e0ae23b817ae1b4232cedf18d33131430f392576d091c652dbf0d5566b6c3285b78f77e01a664722c3f9f871cf68890005c6b534038db2a5ea52fc31b3997424a2779e3d5e2d367c11c7c2497dd8ebd9c472affb77044c66338db693a70973645d20301c2a4f4d6ea7", 0x8e}, {&(0x7f000001af40)="5be85e66bc6748269a28a1181db26d38e8bb63658a7ac615590c22d032d4cd9fd82eaf2364d51ce13617d87bc8b3c978be4def33ee184e4ef462467abb2dda74f54dd9caa9c466d9019bb8014b1c5b7ab59ddafd4e88f00768455466da7ec8e89fa676eb81cbec71fb83d94924b1b65ef6ee72c40af92e03bc60cce9b2509baeaa3972b0db92eb33e575f24ea9d15c37d1601a691c2d42c6f5178f42de28aa4e781da93510cc1c3e37031ad0e631e21b9b557f12c94035749e3b7431c4fb4de96e98e02122291ba3a88e76750e25a44fafbedc36dfbbb679f663ef3567ea19b8017aa04e6a6e39d66b08fc9c87bbfa4e7dbaae6a2869f63e103d", 0xfa}, {&(0x7f00000005c0)="80f3bd27d99664dbb3eac293ecd8a293cf5b5240655c54c0053fa8589260bd00ffffffffffffff7f4504e01c6befcb24763ea12122c8d69c7eba2e58080d7c2af6f5cabaf4e3d2d5a5ddad4dd539b6a76ed31af56e6145656b945d7baed21dc129128aa4a48861740000000000007ba66d687510c069b0a7497dcc27b2f1aa82f7c52757d328920af65f6f5f680768cca06cea95fb53eee0796b22b4a2", 0x98}, {&(0x7f000001b100)="e32e29b469aca2354de71491229456baec98f014a5312e3515fe9e", 0x1b}], 0x100000000000009f, 0x5, 0x4) dup3(r6, r5, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000019e40)={0xa, 0x9004, 0x0, @local, 0x9}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000480)=0x100000001) r9 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fbffffff0f00010000000000000000000200300a140000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004018) 4.423321656s ago: executing program 8 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x90) r2 = io_uring_setup(0xbf3, &(0x7f0000000440)={0x0, 0x6ea3, 0x1, 0x8, 0x324}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYRESHEX=r1, @ANYRESDEC=r2], 0x50) io_uring_enter(r2, 0x25b2, 0x6de8, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xe0400, 0x0) ioctl$TCGETA(r3, 0x5405, 0x0) sched_setaffinity(0x0, 0xf2, &(0x7f00000000c0)=0x5) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000580)) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000200), 0x318, 0x0) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee00) recvmmsg(r5, &(0x7f0000000240), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x891b, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000680)) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000006c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0xe30}}, 0x0) 4.411535569s ago: executing program 0 (id=2182): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000002400)='./bus\x00', &(0x7f0000002440), 0x8, &(0x7f0000002480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000002580)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x389780, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000300)={@id={0x2, 0x0, @a}}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x8000, &(0x7f0000000100)={0xb, 0x0, 0x100000}, 0x20) 4.280368974s ago: executing program 0 (id=2183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (fail_nth: 5) 4.212674418s ago: executing program 8 (id=2184): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0x2b49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x800000004}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a44000000090a010400000000000000000200000008862e17833a7abe07b021456ad7ca1440000000010900020073797a31000000000900010073797a30000000000800054000000008080003400000008414000000110001"], 0x6c}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x10, 0xffffffffffffffff, 0x42795000) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x2, 0x200400) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)={0x0, @reserved}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, r2, 0x76bdd000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x20902, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000180)={0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x0, 0x110, 0xffffffffffffffff, 0x20000000) setns(0xc9, 0x0) r5 = socket(0x8, 0x2, 0x0) setsockopt(r5, 0x108, 0x42020054, &(0x7f00000002c0)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) r6 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000380)={0x2, 0x0, @name="cc421b71539481e819a2e884a0adf4fd155e4d54c740d0af1729e22ad3c0223d"}) 4.034917534s ago: executing program 9 (id=2185): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x12}, 0x10) mknodat$md(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x84080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180)) r1 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x0, 0x2222, 0x0) sendmsg$netlink(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2044080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000001700)='./tracing\x00', &(0x7f0000001740)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001780), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f00000017c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = openat$md_node(0xffffffffffffff9c, &(0x7f0000001800)='./md0\x00', 0x2, 0x0) ioctl$GET_BITMAP_FILE(r4, 0x90000915, &(0x7f0000001840)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002840)={0x0, 0x11, &(0x7f0000002880)={&(0x7f00000028c0)=@newqdisc={0x14c, 0x24, 0xd0f, 0x1, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "4d6628003455af53322d95c561262a1b96aebcfa9f5a0b664a5c951310964a492ad3a623881954544026cdb5ec0c015e46c5aa2369777a151f9c7607fde6e6636da4b373e15038f37c44ddceefbfec33864f404efb2b0f36df250493f030918e1a473d280f9251a3d2d9c4b7c0d5c261105f90ec51eeba178973ffb9cd74d74a7e11e211f27e402313a473ee748c0537fcea636d151b5526006ffb63aaa570d2a93c79aaeed7eb48b33f0611aba1b3f0595ad0e124a3307e0292b8b106d441c4f69f2a9da929e42c2380314f995b7c752344bad9b8b81957fe34b39ba449c5ed578911ef43b384483935c597ea29f3e7234c66c97900ef7ecbebf7ec9ab97b9f"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x80000001, 0xff, 0x0, 0x1d, 0x10, 0x15, 0x1}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8017}, 0x200400c0) write(r0, &(0x7f0000000040)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 3.450260054s ago: executing program 0 (id=2186): openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={0x3c, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x2}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x2, 0xa}, {0x3, 0x8}, {0x7}, {0x5, 0x6}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0xa}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000019580)=0x80005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) clock_gettime(0x0, &(0x7f00000015c0)) recvmmsg$unix(r3, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[], 0x1a0}}, 0x24040884) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000001740)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x424a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x50, 0xdc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0xe1, 0xa, {0x7, 0x25, 0x1, 0xc, 0x3d, 0x45a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0xf7, 0x7f, {0x7, 0x25, 0x1, 0xc, 0x1, 0x9}}}}}}}}]}}, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(r6, 0xc0085508, &(0x7f00000017c0)=0x1d) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f00000195c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r8 = syz_clone(0x90042000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001580)={0x6, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/186, 0xba}], &(0x7f0000001540)=[0x6508, 0x431, 0x9, 0x800], 0x3}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000019600), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x22, 0x0, 0x0, 0x14, '\x00', 0x0, @flow_dissector=0x11, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 3.39329346s ago: executing program 8 (id=2187): r0 = syz_open_dev$loop(&(0x7f00000004c0), 0xd79, 0x0) (async) r1 = accept4$inet_tcp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000017c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0x7]}}) 2.403493865s ago: executing program 4 (id=2188): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x206, 0x420182) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000003000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000003040)='27', 0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000003080)={0x48}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x4, 0x2) socket(0x2b, 0x3, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) socket$nl_route(0x10, 0x3, 0x0) inotify_init() r3 = syz_io_uring_setup(0xf06, &(0x7f0000003100)={0x0, 0xfffffffe, 0x800, 0x1, 0x800000c0}, &(0x7f0000003180), &(0x7f00000031c0), &(0x7f0000003200)) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2.043162084s ago: executing program 8 (id=2189): socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='100', 0x3) io_uring_setup(0x2bd2, &(0x7f0000000180)={0x0, 0x6618, 0x0, 0x0, 0x194}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000480)={0x41}, 0x10) sendmmsg$sock(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="aca8819791a10e1dbb622e161e6c2a0a63cd47ac14a11262da759f0f57e537a88f1ccabf5e1f357b10c13f7ad890712c1804cd10bdc4dd8a7fe3a6bf18cfeaa38fc5512548a5136b0ed1911f4789463b3554c5d6f1548e1744a9845a6bd3c566aa05abf1336ae7", 0x67}, {&(0x7f00000005c0)="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", 0xce3}, {&(0x7f00000012c0)="9e7f6b", 0x3}], 0x3}}], 0x1, 0x0) epoll_create(0x7) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000001300), 0xd9a, 0x200000) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="134cb30f000000005ba6c79ff3117baef017140012800200000062616cb2e24f2ecfd3d12d5fbad4a7cc654a8ecc198048aedc64b747ce9dd0e74da7e3e393b612ec019ee5675828cefb1db0b2a17737b4fdb1bc9fde7ef14c901a53b6c31d3bf4542e70e30b35ad1fb4de4c0a023e196b9b93b601fdad6f5028af1c54a7232d00e4bb9465bac667aee91f1aa2edfe316071"], 0x34}}, 0x20000840) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1.955717587s ago: executing program 4 (id=2190): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) mknod$loop(&(0x7f0000000e40)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000e80)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000ec0)={'\x00', 0x40, 0xa1, 0x80000008, 0xfffffffffffffff7, 0x8}) syz_open_dev$evdev(&(0x7f0000000500), 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e1802, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x11, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r4, 0x0, 0xe80, 0x10, &(0x7f0000000cc0)="0000ffffffffa000", &(0x7f0000000d00)=""/8, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000406d042bc500240102000109022200010100a0320904000001030000000921110100012215000705810340"], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYRESHEX=r9], 0x0}, 0x0) r13 = syz_open_dev$hidraw(&(0x7f0000000d40), 0x82, 0x2) read$hidraw(r13, &(0x7f0000000d80)=""/80, 0x50) syz_usb_ep_write(r12, 0x81, 0x2, &(0x7f0000000e00)="20ea") r14 = dup(r11) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000680)='./file0\x00') open(&(0x7f00000006c0)='.\x00', 0x8000, 0x112) syz_ublk_setup_queues(r14, r10, &(0x7f0000000180)={0x0, 0xf000, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x100ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) mount(&(0x7f0000000540)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='nilfs2\x00', 0x640d8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.662708399s ago: executing program 2 (id=2191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0xc8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "11"}]}]}}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f00000004c0)=0x2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0xfffffffffffffdb8, r3, 0x30b, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008853}, 0x20068005) 1.22616672s ago: executing program 9 (id=2192): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f864ce, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x8b}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) syz_emit_ethernet(0x22, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'pimreg\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c000100040000000000000007000000", @ANYRES32=r4, @ANYBLOB="8000f2040a000200aaaaaaaaaa1be3ff050005"], 0x30}, 0x1, 0x1000000}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000980)=0x6) getuid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000a80), 0x400000000000041, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000001c0)={{0x5, 0x8001}, {0x2, 0x8}, 0x7fffffff, 0x1}) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) 955.631184ms ago: executing program 2 (id=2193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x14) setitimer(0x3, 0x0, 0x0) syz_clone(0x44088200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='source', &(0x7f0000019380)='%(G:\x00\x00\x00\x00\x00\x00\x00\x00v\x00 \x06\xf0aT\x8b\x96\x17l\xdew\x1aP\xb5\x04Y\x1cu\x01\x97g\x12\xf3\xd1\xcd\x9e\xb8\xff\x01\xbc\xe0Bt\x9bf\xa4`\x1a\xa5>t.\x84*\xa5\xdd\x9e\x00_\xaf\x03\xd5\x93\xa1\x8e.\x13\xfcS\xab\xca~\v\x04\xa17\x7f \x97\b\xc5\x140\x15\r\xb5\x92-\xb1Z.\x9e,\xbfP\n\xbaz7I\xb0Y?#\xab\xb4\xbd\x98>v\xd3\x97\xd1S\x00\xb5L*\x11\x055d\xf2{7\\a\xaa)\xb2^\x06\xa6?(\xc7g\xacj\xe6\xb8\xb6\x8blz\xea9\xaa\f\xcavk\xe97\xc8\xaf\x06MI\xce\x81\x85\x92W\x1c\x12L\x9b\xe3\xb7_\xabo<\x11~\x1c\xe2\a5+\xb4\xe13\xadPq\x89c\x1a\xad\xd1n\xed\xe5\x86H\xbf\x9a\x8bI\x1fCOE\x1a{LT\xfa\x17,\xe1\xe2\x9a\xdd\xfc\xf9o^\f\x8c\x8b ^t\xa9\x9a\xb7| 2\xa2|\x04\xbdoF\xce9\xd0\x03=\xb5/\xc6\x85\xb0\xc6\xc9Fq\x13K\xdb\x8e\xbdu&\x8baE\xeb\v6\xb6O\xe0\xb7\xc8\x05\x02\x13\x9b\x9c\x10\x00\xcdH7\x9b\xd5c0\\\x88d\xee>\xcc#\x96:\v\x99\xa1\xe2x`%J0\xa4\xfd\xa8^\x03\xc1ZU\x12A:zbs\xe2|\xd1U\xcc\f~\x15\x98K\x84\x06W\a\x0e\xf1\xfd\r\xb3\xa8j\xbd\xdd1W\x91\xbb\xef\xf2', 0x0) r3 = fsopen(&(0x7f0000019500)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000019540)='source', &(0x7f0000019580)='%(G:\x00\x00\x00\x00\x00\x00\x00\x00v\x00 \x06\xf0aT\x8b\x96\x17l\xdew\x1aP\xb5\x04Y\x1cu\x01\x97g\x12\xf3\xd1\xcd\x9e\xb8\xff\x01\xbc\xe0Bt\x9bf\xa4`\x1a\xa5>t.\x84*\xa5\xdd\x9e\x00_\xaf\x03\xd5\x93\xa1\x8e.\x13\xfcS\xab\xca~\v\x04\xa17\x7f \x97\b\xc5\x140\x15\r\xb5\x92-\xb1Z.\x9e,\xbfP\n\xbaz7I\xb0Y?#\xab\xb4\xbd\x98>v\xd3\x97\xd1S\x00\xb5L*\x11\x055d\xf2{7\\a\xaa)\xb2^\x06\xa6?(\xc7g\xacj\xe6\xb8\xb6\x8blz\xea9\xaa\f\xcavk\xe97\xc8\xaf\x06MI\xce\x81\x85\x92W\x1c\x12L\x9b\xe3\xb7_\xabo<\x11~\x1c\xe2\a5+\xb4\xe13\xadPq\x89c\x1a\xad\xd1n\xed\xe5\x86H\xbf\x9a\x8bI\x1fCOE\x1a{LT\xfa\x17,\xe1\xe2\x9a\xdd\xfc\xf9o^\f\x8c\x8b ^t\xa9\x9a\xb7| 2\xa2|\x04\xbdoF\xce9\xd0\x03=\xb5/\xc6\x85\xb0\xc6\xc9Fq\x13K\xdb\x8e\xbdu&\x8baE\xeb\v6\xb6O\xe0\xb7\xc8\x05\x02\x13\x9b\x9c\x10\x00\xcdH7\x9b\xd5c0\\\x88d\xee>\xcc#\x96:\v\x99\xa1\xe2x`%J0\xa4\xfd\xa8^\x03\xc1ZU\x12A:zbs\xe2|\xd1U\xcc\f~\x15\x98K\x84\x06W\a\x0e\xf1\xfd\r\xb3\xa8j\xbd\xdd1W\x91\xbb\xef\xf2', 0x0) (fail_nth: 5) read$msr(r1, &(0x7f0000000380)=""/102392, 0x18ff8) listns(&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0x0) 606.127019ms ago: executing program 8 (id=2194): syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="49c5", 0x2) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r0, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x3}) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000) 42.813173ms ago: executing program 0 (id=2195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r4, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ec5f8fed2e65258dd6d3cae51aa04f000228bd7000fddbdf2555005a69af2648dbc4daae9e31ac305bf461a0bc"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x121}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x0) 0s ago: executing program 2 (id=2196): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000001140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000001240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000302eda273f7ff0000000000000000"]}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000012c0)={0x14, &(0x7f0000001300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0), 0x0, 0x10, &(0x7f0000000f00), 0xfffffffffffffd00}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) getpeername$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0xff, 0x0, 0x34, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast2, 0x80, 0x1, 0x7f, 0x4}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x13, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x31, '\x00', r2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000030000000800000000", @ANYRES32=0x0], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xc, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004080000850000000200000095"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000010c0)=r7, 0x4) sendmsg$unix(r5, &(0x7f0000001100)={0x0, 0xeffd, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) kernel console output (not intermixed with test programs): 2/0x8e0 [ 911.926594][T14288] ? alloc_slab_obj_exts+0x6a/0x170 [ 911.926625][T14288] alloc_slab_obj_exts+0x6a/0x170 [ 911.926654][T14288] __memcg_slab_post_alloc_hook+0x3f3/0x10b0 [ 911.926690][T14288] ? kasan_save_track+0x14/0x30 [ 911.926711][T14288] kmem_cache_alloc_noprof+0x4f5/0x6a0 [ 911.926739][T14288] ? copy_net_ns+0xe3/0x7a0 [ 911.926767][T14288] copy_net_ns+0xe3/0x7a0 [ 911.926791][T14288] ? copy_cgroup_ns+0x64/0x970 [ 911.926814][T14288] create_new_namespaces+0x3ea/0xac0 [ 911.926845][T14288] unshare_nsproxy_namespaces+0xf6/0x210 [ 911.926872][T14288] ksys_unshare+0x44f/0x980 [ 911.926896][T14288] ? __pfx_ksys_unshare+0x10/0x10 [ 911.926938][T14288] __x64_sys_unshare+0x31/0x40 [ 911.926960][T14288] do_syscall_64+0x123/0x7b0 [ 911.926987][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.927007][T14288] RIP: 0033:0x7fee477a8f19 [ 911.927024][T14288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.927039][T14288] RSP: 002b:00007fee486c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 911.927059][T14288] RAX: ffffffffffffffda RBX: 00007fee47a25fa0 RCX: 00007fee477a8f19 [ 911.927071][T14288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 911.927082][T14288] RBP: 00007fee47837f6d R08: 0000000000000000 R09: 0000000000000000 [ 911.927093][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.927103][T14288] R13: 00007fee47a26038 R14: 00007fee47a25fa0 R15: 00007ffde5bd1298 [ 911.927131][T14288] [ 912.116842][T14288] rxe_eth0 speed is unknown, defaulting to 1000 [ 912.453944][ T1709] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 912.602437][ T1709] usb 9-1: Using ep0 maxpacket: 16 [ 912.603277][ T1709] usb 9-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 912.605631][ T1709] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 912.605658][ T1709] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 912.607650][ T1709] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.607671][ T1709] usb 9-1: Product: syz [ 912.607685][ T1709] usb 9-1: Manufacturer: syz [ 912.607698][ T1709] usb 9-1: SerialNumber: syz [ 912.616881][ T1709] usb 9-1: config 0 descriptor?? [ 912.628812][ T1709] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 912.628840][ T1709] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 914.148931][ T11] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 914.340955][ T1709] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 914.349592][ T1709] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 914.350074][ T1709] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 914.350089][ T1709] em28xx 9-1:0.0: No AC97 audio processor [ 914.422409][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 914.422916][ T11] usb 4-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 914.423818][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 914.423856][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.426422][ T11] usb 4-1: config 0 descriptor?? [ 914.427068][T14308] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 914.504882][ T1709] usb 9-1: USB disconnect, device number 33 [ 914.535336][ T1709] em28xx 9-1:0.0: Disconnecting em28xx [ 914.563512][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 914.563530][ T31] audit: type=1800 audit(1794416189.803:5824): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=292300 res=0 errno=-22 [ 914.608595][T14315] rxe_eth0 speed is unknown, defaulting to 1000 [ 914.610849][ T31] audit: type=1800 audit(1794416189.843:5825): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=292278 res=0 errno=-22 [ 914.660390][ T31] audit: type=1800 audit(1794416189.893:5826): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=292279 res=0 errno=-22 [ 914.664407][ T31] audit: type=1800 audit(1794416189.893:5827): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=292280 res=0 errno=-22 [ 914.718600][ T1709] em28xx: Freeing device [ 914.720290][ T31] audit: type=1800 audit(1794416189.953:5828): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=292203 res=0 errno=-22 [ 914.735277][ T4994] udevd[4994]: worker [14316] terminated by signal 11 (Segmentation fault) [ 914.735311][ T4994] udevd[4994]: worker [14316] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 914.805162][ T31] audit: type=1800 audit(1794416190.043:5829): pid=14122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292337 res=0 errno=-22 [ 914.867391][ T31] audit: type=1800 audit(1794416190.103:5830): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292982 res=0 errno=-22 [ 914.893408][ T11] hid_parser_main: 582 callbacks suppressed [ 914.893433][ T11] hid-sensor-hub 0003:0C70:F00D.0019: unknown main item tag 0x0 [ 914.893461][ T11] hid-sensor-hub 0003:0C70:F00D.0019: unknown main item tag 0x0 [ 914.893479][ T11] hid-sensor-hub 0003:0C70:F00D.0019: unknown main item tag 0x0 [ 914.893497][ T11] hid-sensor-hub 0003:0C70:F00D.0019: unknown main item tag 0x0 [ 914.893515][ T11] hid-sensor-hub 0003:0C70:F00D.0019: unknown main item tag 0x0 [ 914.893531][ T11] hid-sensor-hub 0003:0C70:F00D.0019: unknown main item tag 0x0 [ 914.893548][ T11] hid-sensor-hub 0003:0C70:F00D.0019: unknown main item tag 0x0 [ 914.893567][ T11] hid-sensor-hub 0003:0C70:F00D.0019: unknown main item tag 0x0 [ 914.893584][ T11] hid-sensor-hub 0003:0C70:F00D.0019: unknown main item tag 0x0 [ 914.893614][ T11] hid-sensor-hub 0003:0C70:F00D.0019: unknown main item tag 0x0 [ 914.897777][ T11] hid-sensor-hub 0003:0C70:F00D.0019: collection stack underflow [ 914.897805][ T11] hid-sensor-hub 0003:0C70:F00D.0019: item 0 1 0 12 parsing failed [ 914.900038][ T11] hid-sensor-hub 0003:0C70:F00D.0019: parse failed [ 914.900122][ T11] hid-sensor-hub 0003:0C70:F00D.0019: probe with driver hid-sensor-hub failed with error -22 [ 915.071722][ T11] aquacomputer_d5next 0003:0C70:F00D.0019: collection stack underflow [ 915.071746][ T11] aquacomputer_d5next 0003:0C70:F00D.0019: item 0 1 0 12 parsing failed [ 915.073426][ T11] aquacomputer_d5next 0003:0C70:F00D.0019: probe with driver aquacomputer_d5next failed with error -22 [ 915.129221][ T11] usb 4-1: USB disconnect, device number 29 [ 915.316235][ T31] audit: type=1800 audit(1794416190.553:5831): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=295921 res=0 errno=-22 [ 915.341119][ T31] audit: type=1800 audit(1794416190.553:5832): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=295979 res=0 errno=-22 [ 915.341160][ T31] audit: type=1800 audit(1794416190.553:5833): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=295991 res=0 errno=-22 [ 915.436064][ T4994] udevd[4994]: worker [14319] terminated by signal 11 (Segmentation fault) [ 915.438597][ T4994] udevd[4994]: worker [14319] failed while handling '/devices/virtual/vc/vcsu38' [ 915.505909][ T4994] udevd[4994]: worker [14122] terminated by signal 11 (Segmentation fault) [ 915.505960][ T4994] udevd[4994]: worker [14122] failed while handling '/devices/virtual/vc/vcsa38' [ 915.509720][ T4994] udevd[4994]: worker [14280] terminated by signal 11 (Segmentation fault) [ 915.509755][ T4994] udevd[4994]: worker [14280] failed while handling '/devices/virtual/vc/vcs38' [ 915.689024][T14327] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 915.689041][T14327] block device autoloading is deprecated and will be removed. [ 915.774544][ T4994] udevd[4994]: worker [14322] terminated by signal 11 (Segmentation fault) [ 915.774568][ T4994] udevd[4994]: worker [14322] failed while handling '/devices/virtual/block/md9' [ 918.563389][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1994'. [ 918.882403][T14331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 920.150044][T14376] FAULT_INJECTION: forcing a failure. [ 920.150044][T14376] name failslab, interval 1, probability 5, space 0, times 9965 [ 920.150133][T14376] CPU: 0 UID: 0 PID: 14376 Comm: syz.0.1997 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.150159][T14376] Tainted: [L]=SOFTLOCKUP [ 920.150165][T14376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 920.150176][T14376] Call Trace: [ 920.150183][T14376] [ 920.150190][T14376] dump_stack_lvl+0x100/0x190 [ 920.150224][T14376] should_fail_ex.cold+0x5/0xa [ 920.150252][T14376] should_failslab+0xc2/0x120 [ 920.150274][T14376] __kmalloc_cache_node_noprof+0x94/0x710 [ 920.150296][T14376] ? __get_vm_area_node+0x124/0x350 [ 920.150319][T14376] __get_vm_area_node+0x124/0x350 [ 920.150342][T14376] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 920.150363][T14376] ? bpf_check+0x1c2b/0xa0f0 [ 920.150380][T14376] ? __schedule+0x1270/0x6a40 [ 920.150399][T14376] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 920.150432][T14376] ? bpf_check+0x1c2b/0xa0f0 [ 920.150455][T14376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 920.150475][T14376] ? __pfx___schedule+0x10/0x10 [ 920.150496][T14376] ? preempt_schedule_irq+0x79/0x90 [ 920.150519][T14376] ? bpf_check+0x1c2b/0xa0f0 [ 920.150536][T14376] __vmalloc_node_noprof+0xad/0xf0 [ 920.150556][T14376] ? bpf_check+0x1c2b/0xa0f0 [ 920.150575][T14376] __vmalloc_noprof+0xa3/0x120 [ 920.150595][T14376] ? __pfx___vmalloc_noprof+0x10/0x10 [ 920.150619][T14376] ? bpf_check+0x1b50/0xa0f0 [ 920.150636][T14376] ? __sanitizer_cov_trace_pc+0x40/0x70 [ 920.150656][T14376] bpf_check+0x1c2b/0xa0f0 [ 920.150679][T14376] ? __pfx___schedule+0x10/0x10 [ 920.150710][T14376] ? __pfx_bpf_check+0x10/0x10 [ 920.150737][T14376] ? __asan_memset+0x23/0x50 [ 920.150767][T14376] ? bpf_prog_load+0x1baf/0x2b20 [ 920.150793][T14376] bpf_prog_load+0x1baf/0x2b20 [ 920.150824][T14376] ? avc_has_perm_noaudit+0x11e/0x470 [ 920.150853][T14376] ? __pfx_bpf_prog_load+0x10/0x10 [ 920.150901][T14376] __sys_bpf+0x146f/0x4b60 [ 920.150926][T14376] ? __pfx___sys_bpf+0x10/0x10 [ 920.150943][T14376] ? find_held_lock+0x2b/0x80 [ 920.150963][T14376] ? get_pid_task+0xfc/0x250 [ 920.150979][T14376] ? get_pid_task+0xfc/0x250 [ 920.151003][T14376] ? find_held_lock+0x2b/0x80 [ 920.151029][T14376] ? rcu_read_lock_any_held+0x6a/0x90 [ 920.151050][T14376] ? find_held_lock+0x2b/0x80 [ 920.151069][T14376] ? ksys_write+0x190/0x250 [ 920.151088][T14376] ? ksys_write+0x190/0x250 [ 920.151106][T14376] ? lock_acquire+0x1d1/0x380 [ 920.151146][T14376] ? fput+0x7c/0x100 [ 920.151169][T14376] ? ksys_write+0x1ac/0x250 [ 920.151192][T14376] ? __x64_sys_bpf+0xce/0x140 [ 920.151209][T14376] __x64_sys_bpf+0xce/0x140 [ 920.151227][T14376] ? do_syscall_64+0xae/0x7b0 [ 920.151251][T14376] do_syscall_64+0x123/0x7b0 [ 920.151274][T14376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.151293][T14376] RIP: 0033:0x7fe9d9da8f19 [ 920.151308][T14376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.151325][T14376] RSP: 002b:00007fe9dacf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 920.151343][T14376] RAX: ffffffffffffffda RBX: 00007fe9da026090 RCX: 00007fe9d9da8f19 [ 920.151355][T14376] RDX: 0000000000000094 RSI: 000020000001b640 RDI: 0000000000000005 [ 920.151365][T14376] RBP: 00007fe9dacf0090 R08: 0000000000000000 R09: 0000000000000000 [ 920.151375][T14376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.151385][T14376] R13: 00007fe9da026128 R14: 00007fe9da026090 R15: 00007fff52f40098 [ 920.151410][T14376] [ 920.151436][T14376] syz.0.1997: vmalloc error: size 4600, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 920.151577][T14376] CPU: 0 UID: 0 PID: 14376 Comm: syz.0.1997 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.151601][T14376] Tainted: [L]=SOFTLOCKUP [ 920.151607][T14376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 920.151617][T14376] Call Trace: [ 920.151623][T14376] [ 920.151630][T14376] dump_stack_lvl+0x100/0x190 [ 920.151660][T14376] warn_alloc.cold+0x9e/0xb2 [ 920.151682][T14376] ? __pfx_warn_alloc+0x10/0x10 [ 920.151705][T14376] ? __kasan_kmalloc+0x8a/0xb0 [ 920.151734][T14376] ? __get_vm_area_node+0x22b/0x350 [ 920.151759][T14376] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 920.151780][T14376] ? __schedule+0x1270/0x6a40 [ 920.151798][T14376] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 920.151837][T14376] ? bpf_check+0x1c2b/0xa0f0 [ 920.151861][T14376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 920.151882][T14376] ? __pfx___schedule+0x10/0x10 [ 920.151903][T14376] ? preempt_schedule_irq+0x79/0x90 [ 920.151926][T14376] ? bpf_check+0x1c2b/0xa0f0 [ 920.151942][T14376] __vmalloc_node_noprof+0xad/0xf0 [ 920.151962][T14376] ? bpf_check+0x1c2b/0xa0f0 [ 920.151982][T14376] __vmalloc_noprof+0xa3/0x120 [ 920.152003][T14376] ? __pfx___vmalloc_noprof+0x10/0x10 [ 920.152027][T14376] ? bpf_check+0x1b50/0xa0f0 [ 920.152044][T14376] ? __sanitizer_cov_trace_pc+0x40/0x70 [ 920.152064][T14376] bpf_check+0x1c2b/0xa0f0 [ 920.152086][T14376] ? __pfx___schedule+0x10/0x10 [ 920.152118][T14376] ? __pfx_bpf_check+0x10/0x10 [ 920.152144][T14376] ? __asan_memset+0x23/0x50 [ 920.152175][T14376] ? bpf_prog_load+0x1baf/0x2b20 [ 920.152202][T14376] bpf_prog_load+0x1baf/0x2b20 [ 920.152227][T14376] ? avc_has_perm_noaudit+0x11e/0x470 [ 920.152256][T14376] ? __pfx_bpf_prog_load+0x10/0x10 [ 920.152306][T14376] __sys_bpf+0x146f/0x4b60 [ 920.152329][T14376] ? __pfx___sys_bpf+0x10/0x10 [ 920.152344][T14376] ? find_held_lock+0x2b/0x80 [ 920.152362][T14376] ? get_pid_task+0xfc/0x250 [ 920.152379][T14376] ? get_pid_task+0xfc/0x250 [ 920.152405][T14376] ? find_held_lock+0x2b/0x80 [ 920.152430][T14376] ? rcu_read_lock_any_held+0x6a/0x90 [ 920.152451][T14376] ? find_held_lock+0x2b/0x80 [ 920.152469][T14376] ? ksys_write+0x190/0x250 [ 920.152488][T14376] ? ksys_write+0x190/0x250 [ 920.152506][T14376] ? lock_acquire+0x1d1/0x380 [ 920.152547][T14376] ? fput+0x7c/0x100 [ 920.152571][T14376] ? ksys_write+0x1ac/0x250 [ 920.152593][T14376] ? __x64_sys_bpf+0xce/0x140 [ 920.152609][T14376] __x64_sys_bpf+0xce/0x140 [ 920.152627][T14376] ? do_syscall_64+0xae/0x7b0 [ 920.152649][T14376] do_syscall_64+0x123/0x7b0 [ 920.152672][T14376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.152690][T14376] RIP: 0033:0x7fe9d9da8f19 [ 920.152704][T14376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.152720][T14376] RSP: 002b:00007fe9dacf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 920.152736][T14376] RAX: ffffffffffffffda RBX: 00007fe9da026090 RCX: 00007fe9d9da8f19 [ 920.152747][T14376] RDX: 0000000000000094 RSI: 000020000001b640 RDI: 0000000000000005 [ 920.152758][T14376] RBP: 00007fe9dacf0090 R08: 0000000000000000 R09: 0000000000000000 [ 920.152769][T14376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.152779][T14376] R13: 00007fe9da026128 R14: 00007fe9da026090 R15: 00007fff52f40098 [ 920.152808][T14376] [ 920.153010][T14376] Mem-Info: [ 920.153093][T14376] active_anon:4161 inactive_anon:65542 isolated_anon:0 [ 920.153093][T14376] active_file:24130 inactive_file:4408 isolated_file:0 [ 920.153093][T14376] unevictable:0 dirty:294 writeback:0 [ 920.153093][T14376] slab_reclaimable:9462 slab_unreclaimable:117381 [ 920.153093][T14376] mapped:43355 shmem:62744 pagetables:1597 [ 920.153093][T14376] sec_pagetables:0 bounce:0 [ 920.153093][T14376] kernel_misc_reclaimable:0 [ 920.153093][T14376] free:1232737 free_pcp:21471 free_cma:0 [ 920.153171][T14376] Node 0 active_anon:16644kB inactive_anon:262168kB active_file:96520kB inactive_file:17492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173420kB dirty:1176kB writeback:0kB shmem:250976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15296kB pagetables:6240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 920.153254][T14376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 920.153307][T14376] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.153370][T14376] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 920.153520][T14376] Node 0 DMA32 free:971804kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16644kB inactive_anon:262168kB active_file:96520kB inactive_file:17492kB unevictable:0kB writepending:1176kB zspages:0kB present:3129332kB managed:2506160kB mlocked:0kB bounce:0kB free_pcp:85360kB local_pcp:48800kB free_cma:0kB [ 920.153598][T14376] lowmem_reserve[]: 0 0 1 1 1 [ 920.153731][T14376] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1748kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.153813][T14376] lowmem_reserve[]: 0 0 0 0 0 [ 920.153964][T14376] Node 1 Normal free:3943784kB boost:0kB min:56092kB low:70112kB high:84132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 920.154042][T14376] lowmem_reserve[]: 0 0 0 0 0 [ 920.154192][T14376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 920.154548][T14376] Node 0 DMA32: 80*4kB (UE) 90*8kB (UME) 97*16kB (E) 120*32kB (UME) 31*64kB (UME) 538*128kB (ME) 436*256kB (UME) 171*512kB (UME) 55*1024kB (UM) 24*2048kB (UME) 144*4096kB (UM) = 971744kB [ 920.154983][T14376] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 920.155259][T14376] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 9*64kB (UM) 4*128kB (UM) 5*256kB (UM) 2*512kB (M) 2*1024kB (UM) 3*2048kB (UM) 960*4096kB (M) = 3943836kB [ 920.155846][T14376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.155897][T14376] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 920.155928][T14376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.155955][T14376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 920.155983][T14376] 91295 total pagecache pages [ 920.156006][T14376] 2 pages in swap cache [ 920.156028][T14376] Free swap = 124988kB [ 920.156051][T14376] Total swap = 124996kB [ 920.156074][T14376] 2097051 pages RAM [ 920.156095][T14376] 0 pages HighMem/MovableOnly [ 920.156117][T14376] 438458 pages reserved [ 920.156140][T14376] 0 pages cma reserved [ 920.176319][T14376] overlayfs: missing 'workdir' [ 922.961066][ T31] kauditd_printk_skb: 55 callbacks suppressed [ 922.961084][ T31] audit: type=1800 audit(1794416198.193:5889): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296535 res=0 errno=-22 [ 923.001837][ T31] audit: type=1800 audit(1794416198.233:5890): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296547 res=0 errno=-22 [ 923.099379][ T31] audit: type=1800 audit(1794416198.333:5891): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296559 res=0 errno=-22 [ 923.146310][ T4994] udevd[4994]: worker [14323] terminated by signal 11 (Segmentation fault) [ 923.146343][ T4994] udevd[4994]: worker [14323] failed while handling '/devices/virtual/vc/vcs36' [ 923.147672][ T4994] udevd[4994]: worker [14325] terminated by signal 11 (Segmentation fault) [ 923.154613][ T4994] udevd[4994]: worker [14325] failed while handling '/devices/virtual/vc/vcsu36' [ 923.169591][ T4994] udevd[4994]: worker [14394] terminated by signal 11 (Segmentation fault) [ 923.169614][ T4994] udevd[4994]: worker [14394] failed while handling '/devices/virtual/vc/vcsa36' [ 923.186766][T14401] FAULT_INJECTION: forcing a failure. [ 923.186766][T14401] name failslab, interval 1, probability 5, space 0, times 9964 [ 923.186802][T14401] CPU: 0 UID: 0 PID: 14401 Comm: syz.0.2000 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.186823][T14401] Tainted: [L]=SOFTLOCKUP [ 923.186829][T14401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 923.186838][T14401] Call Trace: [ 923.186844][T14401] [ 923.186850][T14401] dump_stack_lvl+0x100/0x190 [ 923.186881][T14401] should_fail_ex.cold+0x5/0xa [ 923.186905][T14401] should_failslab+0xc2/0x120 [ 923.186924][T14401] __kmalloc_cache_noprof+0x91/0x6d0 [ 923.186945][T14401] ? find_held_lock+0x2b/0x80 [ 923.186962][T14401] ? alloc_fs_context+0x57/0xf40 [ 923.186981][T14401] alloc_fs_context+0x57/0xf40 [ 923.186995][T14401] ? __get_fs_type+0xe3/0x200 [ 923.187020][T14401] path_mount+0xf59/0x2850 [ 923.187058][T14401] ? __pfx_path_mount+0x10/0x10 [ 923.187080][T14401] ? lockdep_hardirqs_on+0x7d/0x110 [ 923.187101][T14401] ? putname+0xb1/0x110 [ 923.187119][T14401] ? kmem_cache_free+0x127/0x6c0 [ 923.187146][T14401] ? __x64_sys_mount+0x293/0x310 [ 923.187167][T14401] __x64_sys_mount+0x293/0x310 [ 923.187189][T14401] ? __pfx___x64_sys_mount+0x10/0x10 [ 923.187218][T14401] do_syscall_64+0x123/0x7b0 [ 923.187238][T14401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.187254][T14401] RIP: 0033:0x7fe9d9da8f19 [ 923.187272][T14401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.187287][T14401] RSP: 002b:00007fe9dad11028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 923.187302][T14401] RAX: ffffffffffffffda RBX: 00007fe9da025fa0 RCX: 00007fe9d9da8f19 [ 923.187312][T14401] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 00002000000004c0 [ 923.187322][T14401] RBP: 00007fe9dad11090 R08: 0000200000000580 R09: 0000000000000000 [ 923.187332][T14401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 923.187341][T14401] R13: 00007fe9da026038 R14: 00007fe9da025fa0 R15: 00007fff52f40098 [ 923.187362][T14401] [ 923.539044][T14402] overlayfs: missing 'workdir' [ 924.444231][ T31] audit: type=1400 audit(1794416199.683:5892): avc: denied { write } for pid=14406 comm="syz.8.2005" name="dynamic_events" dev="tracefs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 924.447926][T14390] EXT4-fs (nbd3): unable to read superblock [ 924.485840][ T31] audit: type=1800 audit(1794416199.723:5893): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31628 res=0 errno=-22 [ 924.487608][ T31] audit: type=1800 audit(1794416199.723:5894): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31651 res=0 errno=-22 [ 924.575709][ T31] audit: type=1400 audit(1794416199.813:5895): avc: denied { append } for pid=14381 comm="syz.3.2001" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 924.742562][ T25] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 924.865461][ T31] audit: type=1800 audit(1794416200.103:5896): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296656 res=0 errno=-22 [ 924.892810][ T25] usb 10-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 924.893843][ T25] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 924.893872][ T25] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 924.893912][ T25] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 924.893930][ T25] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 924.896006][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.896028][ T25] usb 10-1: Product: Ђ [ 924.896042][ T25] usb 10-1: Manufacturer: 量㬰੼ᰍ䑙岽夈蝥蟇㑰ᐉ襙♇纾๫⡊죳볽䰷⮐퍴퇦稙研涊咦⎷粴릞힑糚糿ꕴڄ뉸쪌ᵷꑟힾ┆矾Ⱃ᩹㜻밹ﰾ㤢᳕ᴸ≤ᓥ㝖ࠗ䴕玶巺멯륭ۖ൸군ꜛ鍇Ȩ罖⥣ꡁꌉ计㊭ꔰ㐲㊗ᧉ鱄貕奃邞⃜댵柹戡ﺰ⪼凇㓛ᦍ뙙퍃蠿趤᳍핝沩澈铩࿖ᦟ锻蔈 [ 924.896075][ T25] usb 10-1: SerialNumber: ꥣヴࡸꎃܠ숣犫ꪍ㵣졿⎮魴 [ 924.908058][ T31] audit: type=1800 audit(1794416200.143:5897): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296666 res=0 errno=-22 [ 924.909746][T14409] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 925.010131][ T31] audit: type=1800 audit(1794416200.243:5898): pid=14400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296685 res=0 errno=-22 [ 925.413006][ T30] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 925.479716][T14433] FAULT_INJECTION: forcing a failure. [ 925.479716][T14433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.479738][T14433] CPU: 1 UID: 0 PID: 14433 Comm: syz.3.2010 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.479753][T14433] Tainted: [L]=SOFTLOCKUP [ 925.479757][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 925.479763][T14433] Call Trace: [ 925.479767][T14433] [ 925.479771][T14433] dump_stack_lvl+0x100/0x190 [ 925.479793][T14433] should_fail_ex.cold+0x5/0xa [ 925.479812][T14433] _copy_from_user+0x2e/0xd0 [ 925.479827][T14433] copy_msghdr_from_user+0x9f/0x4c0 [ 925.479845][T14433] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 925.479865][T14433] ? lock_acquire+0x1d1/0x380 [ 925.479880][T14433] ? get_pid_task+0x2a/0x250 [ 925.479891][T14433] ___sys_sendmsg+0x106/0x1e0 [ 925.479902][T14433] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.479912][T14433] ? get_pid_task+0x106/0x250 [ 925.479927][T14433] ? find_held_lock+0x2b/0x80 [ 925.479947][T14433] __sys_sendmsg+0x160/0x210 [ 925.479962][T14433] ? __pfx___sys_sendmsg+0x10/0x10 [ 925.479982][T14433] do_syscall_64+0x123/0x7b0 [ 925.479996][T14433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.480007][T14433] RIP: 0033:0x7fee477a8f19 [ 925.480016][T14433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.480026][T14433] RSP: 002b:00007fee486c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.480037][T14433] RAX: ffffffffffffffda RBX: 00007fee47a25fa0 RCX: 00007fee477a8f19 [ 925.480044][T14433] RDX: 0000000000000080 RSI: 0000200000000400 RDI: 0000000000000003 [ 925.480050][T14433] RBP: 00007fee486c8090 R08: 0000000000000000 R09: 0000000000000000 [ 925.480056][T14433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.480063][T14433] R13: 00007fee47a26038 R14: 00007fee47a25fa0 R15: 00007ffde5bd1298 [ 925.480077][T14433] [ 925.564437][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 925.565441][ T30] usb 5-1: New USB device found: idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 925.566702][ T30] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 925.566722][ T30] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 925.566737][ T30] usb 5-1: config 3 has no interface number 0 [ 925.566767][ T30] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 925.566788][ T30] usb 5-1: config 3 interface 45 has no altsetting 0 [ 925.573599][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.573638][ T30] usb 5-1: Product: syz [ 925.573650][ T30] usb 5-1: Manufacturer: syz [ 925.573663][ T30] usb 5-1: SerialNumber: syz [ 925.867271][T14424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=14424 comm=syz.4.2004 [ 925.889173][T14424] xt_l2tp: unknown flags: 17 [ 925.923685][ T8826] bridge_slave_1: left allmulticast mode [ 925.923705][ T8826] bridge_slave_1: left promiscuous mode [ 925.923935][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.925157][T14424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.925507][T14424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.947808][ T8826] bridge_slave_0: left allmulticast mode [ 925.947871][ T8826] bridge_slave_0: left promiscuous mode [ 925.948047][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.045705][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.045755][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.463146][ T30] usb 5-1: USB disconnect, device number 61 [ 926.679675][T14425] udevd[14425]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 926.888259][ T8826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.904889][ T8826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.906012][ T8826] bond0 (unregistering): Released all slaves [ 927.711895][ T25] cdc_ncm 10-1:1.0: bind() failure [ 927.738879][ T25] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 927.738903][ T25] cdc_ncm 10-1:1.1: bind() failure [ 927.749342][ T25] usb 10-1: USB disconnect, device number 2 [ 927.876923][ T4994] udevd[4994]: worker [14400] terminated by signal 11 (Segmentation fault) [ 927.876960][ T4994] udevd[4994]: worker [14400] failed while handling '/devices/platform/dummy_hcd.9/usb10/10-1' [ 928.112402][ T1709] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 928.274425][ T1709] usb 9-1: New USB device found: idVendor=1286, idProduct=2046, bcdDevice=1.00 [ 928.278445][ T1709] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.278604][ T1709] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 928.345418][ T1709] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.345491][ T1709] usb 9-1: Product: syz [ 928.345540][ T1709] usb 9-1: Manufacturer: syz [ 928.345568][ T1709] usb 9-1: SerialNumber: syz [ 928.419216][ T1709] usb 9-1: NFC: intf ffff888028c13000 id ffffffff910c6240 [ 928.502133][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 928.502151][ T31] audit: type=1800 audit(1794416203.733:5932): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297089 res=0 errno=-22 [ 928.545018][ T31] audit: type=1800 audit(1794416203.783:5933): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=297121 res=0 errno=-22 [ 928.579719][ T31] audit: type=1800 audit(1794416203.813:5934): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=297096 res=0 errno=-22 [ 928.580273][ T31] audit: type=1800 audit(1794416203.813:5935): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=297097 res=0 errno=-22 [ 928.580797][ T31] audit: type=1800 audit(1794416203.813:5936): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=297118 res=0 errno=-22 [ 928.657381][ T31] audit: type=1800 audit(1794416203.893:5937): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=297119 res=0 errno=-22 [ 928.658174][ T31] audit: type=1800 audit(1794416203.893:5938): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=297098 res=0 errno=-22 [ 928.671110][ T31] audit: type=1800 audit(1794416203.893:5939): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133478 res=0 errno=-22 [ 928.765803][ T31] audit: type=1800 audit(1794416204.003:5940): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=297120 res=0 errno=-22 [ 928.817918][ T31] audit: type=1400 audit(1794416204.053:5941): avc: denied { bind } for pid=14460 comm="syz.8.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 928.861767][ T25] usb 9-1: USB disconnect, device number 34 [ 928.903172][ T4994] udevd[4994]: worker [14426] terminated by signal 11 (Segmentation fault) [ 928.903197][ T4994] udevd[4994]: worker [14426] failed while handling '/devices/platform/dummy_hcd.8/usb9/9-1' [ 929.086179][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2021'. [ 929.098746][T14475] syzkaller0: entered promiscuous mode [ 929.098760][T14475] syzkaller0: entered allmulticast mode [ 929.380233][ T8826] hsr_slave_0: left promiscuous mode [ 929.381494][ T8826] hsr_slave_1: left promiscuous mode [ 929.381902][ T8826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.381913][ T8826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.446752][ T8826] veth1_macvtap: left promiscuous mode [ 929.446796][ T8826] veth0_macvtap: left promiscuous mode [ 929.446925][ T8826] veth1_vlan: left promiscuous mode [ 929.446955][ T8826] veth0_vlan: left promiscuous mode [ 929.524985][T14478] ip6t_srh: unknown srh invflags 4000 [ 932.583986][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 932.774205][ T25] usb 4-1: device descriptor read/64, error -71 [ 933.813130][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 933.867939][ T8826] team0 (unregistering): Port device team_slave_1 removed [ 933.906850][ T8826] team0 (unregistering): Port device team_slave_0 removed [ 933.942398][ T25] usb 4-1: device descriptor read/64, error -71 [ 934.054546][ T25] usb usb4-port1: attempt power cycle [ 934.071935][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 934.071953][ T31] audit: type=1800 audit(1794416209.303:5948): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297291 res=0 errno=-22 [ 934.108624][ T31] audit: type=1800 audit(1794416209.343:5949): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297301 res=0 errno=-22 [ 934.402375][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 934.427441][ T25] usb 4-1: device descriptor read/8, error -71 [ 934.714782][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 934.787438][ T31] audit: type=1326 audit(1794416210.003:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.9.2024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2fa8f19 code=0x7ffc0000 [ 934.787496][ T31] audit: type=1326 audit(1794416210.003:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.9.2024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2fa8f19 code=0x7ffc0000 [ 934.787537][ T31] audit: type=1326 audit(1794416210.003:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.9.2024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0a2fa8f19 code=0x7ffc0000 [ 934.787586][ T31] audit: type=1326 audit(1794416210.003:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.9.2024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2fa8f19 code=0x7ffc0000 [ 934.787628][ T31] audit: type=1326 audit(1794416210.003:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.9.2024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2fa8f19 code=0x7ffc0000 [ 934.787668][ T31] audit: type=1326 audit(1794416210.003:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.9.2024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc0a2fa8f19 code=0x7ffc0000 [ 934.787706][ T31] audit: type=1326 audit(1794416210.003:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.9.2024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2fa8f19 code=0x7ffc0000 [ 934.787746][ T31] audit: type=1326 audit(1794416210.003:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14539 comm="syz.9.2024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2fa8f19 code=0x7ffc0000 [ 934.914818][ T25] usb 4-1: device descriptor read/8, error -71 [ 935.022637][ T25] usb usb4-port1: unable to enumerate USB device [ 935.105798][T14538] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2034'. [ 936.847590][T14561] device-mapper: table: 248:13: verity: Data device lookup failed (-ENOENT) [ 936.847606][T14561] device-mapper: ioctl: error adding target to table [ 937.495682][T14575] ip_tables: iptables: counters copy to user failed while replacing table [ 939.613568][T14607] FAULT_INJECTION: forcing a failure. [ 939.613568][T14607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.613588][T14607] CPU: 0 UID: 0 PID: 14607 Comm: syz.8.2050 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.613603][T14607] Tainted: [L]=SOFTLOCKUP [ 939.613606][T14607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 939.613613][T14607] Call Trace: [ 939.613617][T14607] [ 939.613622][T14607] dump_stack_lvl+0x100/0x190 [ 939.613643][T14607] should_fail_ex.cold+0x5/0xa [ 939.613660][T14607] _copy_from_user+0x2e/0xd0 [ 939.613675][T14607] copy_msghdr_from_user+0x9f/0x4c0 [ 939.613693][T14607] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 939.613713][T14607] ? lock_acquire+0x1d1/0x380 [ 939.613727][T14607] ? get_pid_task+0x2a/0x250 [ 939.613739][T14607] ___sys_sendmsg+0x106/0x1e0 [ 939.613750][T14607] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.613760][T14607] ? get_pid_task+0x106/0x250 [ 939.613775][T14607] ? find_held_lock+0x2b/0x80 [ 939.613795][T14607] __sys_sendmsg+0x160/0x210 [ 939.613809][T14607] ? __pfx___sys_sendmsg+0x10/0x10 [ 939.613829][T14607] do_syscall_64+0x123/0x7b0 [ 939.613844][T14607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.613856][T14607] RIP: 0033:0x7f2a1bfa8f19 [ 939.613866][T14607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.613875][T14607] RSP: 002b:00007f2a1ce6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.613887][T14607] RAX: ffffffffffffffda RBX: 00007f2a1c225fa0 RCX: 00007f2a1bfa8f19 [ 939.613893][T14607] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 939.613899][T14607] RBP: 00007f2a1ce6d090 R08: 0000000000000000 R09: 0000000000000000 [ 939.613905][T14607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.613911][T14607] R13: 00007f2a1c226038 R14: 00007f2a1c225fa0 R15: 00007ffd0719bcc8 [ 939.613925][T14607] [ 939.905952][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 939.905971][ T31] audit: type=1800 audit(1794416215.143:5970): pid=14609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2053" name="power" dev="configfs" ino=54464 res=0 errno=-22 [ 942.207611][ T31] audit: type=1400 audit(1794416216.853:5971): avc: denied { mount } for pid=14613 comm="syz.4.2052" name="/" dev="ramfs" ino=54484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 942.207665][ T31] audit: type=1800 audit(1794416216.873:5972): pid=14625 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2052" name="resume" dev="sysfs" ino=1437 res=0 errno=-22 [ 942.739396][T14638] FAULT_INJECTION: forcing a failure. [ 942.739396][T14638] name failslab, interval 1, probability 5, space 0, times 9963 [ 942.739422][T14638] CPU: 1 UID: 0 PID: 14638 Comm: syz.3.2057 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.739441][T14638] Tainted: [L]=SOFTLOCKUP [ 942.739445][T14638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 942.739452][T14638] Call Trace: [ 942.739457][T14638] [ 942.739461][T14638] dump_stack_lvl+0x100/0x190 [ 942.739485][T14638] should_fail_ex.cold+0x5/0xa [ 942.739504][T14638] should_failslab+0xc2/0x120 [ 942.739519][T14638] __kmalloc_noprof+0xfc/0x840 [ 942.739530][T14638] ? ovl_lookup_layers+0x1405/0x2aa0 [ 942.739548][T14638] ovl_lookup_layers+0x1405/0x2aa0 [ 942.739565][T14638] ? __lock_acquire+0x5c0/0x1f40 [ 942.739584][T14638] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 942.739600][T14638] ? lock_acquire+0x1d1/0x380 [ 942.739615][T14638] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 942.739633][T14638] ? find_held_lock+0x2b/0x80 [ 942.739644][T14638] ? rcu_read_unlock+0x17/0x60 [ 942.739659][T14638] ? rcu_read_unlock+0x17/0x60 [ 942.739678][T14638] ovl_lookup+0x4a8/0x6b0 [ 942.739694][T14638] ? __pfx_ovl_lookup+0x10/0x10 [ 942.739711][T14638] ? do_raw_spin_lock+0x128/0x260 [ 942.739724][T14638] ? do_raw_spin_unlock+0x145/0x1e0 [ 942.739735][T14638] ? _raw_spin_unlock+0x28/0x50 [ 942.739748][T14638] lookup_one_qstr_excl+0x1cd/0x250 [ 942.739764][T14638] ? mnt_want_write+0x15f/0x420 [ 942.739778][T14638] filename_create+0x1cf/0x400 [ 942.739790][T14638] ? __pfx_filename_create+0x10/0x10 [ 942.739802][T14638] ? lock_acquire+0x1d1/0x380 [ 942.739817][T14638] ? find_held_lock+0x2b/0x80 [ 942.739830][T14638] filename_mkdirat+0xb9/0x630 [ 942.739845][T14638] ? __pfx_filename_mkdirat+0x10/0x10 [ 942.739859][T14638] ? strncpy_from_user+0x19d/0x2d0 [ 942.739876][T14638] ? do_getname+0x191/0x390 [ 942.739893][T14638] __x64_sys_mkdirat+0x89/0xc0 [ 942.739907][T14638] do_syscall_64+0x123/0x7b0 [ 942.739922][T14638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.739934][T14638] RIP: 0033:0x7fee477a8f19 [ 942.739946][T14638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.739956][T14638] RSP: 002b:00007fee486c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 942.739967][T14638] RAX: ffffffffffffffda RBX: 00007fee47a25fa0 RCX: 00007fee477a8f19 [ 942.739974][T14638] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 942.739981][T14638] RBP: 00007fee47837f6d R08: 0000000000000000 R09: 0000000000000000 [ 942.739987][T14638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.739993][T14638] R13: 00007fee47a26038 R14: 00007fee47a25fa0 R15: 00007ffde5bd1298 [ 942.740007][T14638] [ 943.113260][ T31] audit: type=1400 audit(1794416218.343:5973): avc: denied { link } for pid=13766 comm="syz-executor" name="#17" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 943.143972][ T31] audit: type=1400 audit(1794416218.373:5974): avc: denied { rename } for pid=13766 comm="syz-executor" name="#18" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 943.346432][ T31] audit: type=1400 audit(1794416218.583:5975): avc: denied { mount } for pid=14643 comm="syz.3.2061" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 943.584673][T14649] FAULT_INJECTION: forcing a failure. [ 943.584673][T14649] name failslab, interval 1, probability 5, space 0, times 9962 [ 943.584694][T14649] CPU: 0 UID: 0 PID: 14649 Comm: syz.4.2060 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.584710][T14649] Tainted: [L]=SOFTLOCKUP [ 943.584714][T14649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 943.584721][T14649] Call Trace: [ 943.584726][T14649] [ 943.584731][T14649] dump_stack_lvl+0x100/0x190 [ 943.584753][T14649] should_fail_ex.cold+0x5/0xa [ 943.584770][T14649] should_failslab+0xc2/0x120 [ 943.584786][T14649] kmem_cache_alloc_noprof+0x92/0x6a0 [ 943.584805][T14649] ? hashtab_duplicate+0x225/0x5c0 [ 943.584819][T14649] hashtab_duplicate+0x225/0x5c0 [ 943.584829][T14649] ? __pfx_cond_bools_copy+0x10/0x10 [ 943.584845][T14649] ? __pfx_cond_bools_destroy+0x10/0x10 [ 943.584861][T14649] cond_policydb_dup+0x155/0x750 [ 943.584878][T14649] ? security_set_bools+0x115/0x6c0 [ 943.584892][T14649] ? __asan_memcpy+0x3c/0x60 [ 943.584910][T14649] security_set_bools+0x13f/0x6c0 [ 943.584935][T14649] sel_commit_bools_write+0x368/0x420 [ 943.584949][T14649] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 943.584968][T14649] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 943.584984][T14649] vfs_writev+0x5ed/0xdd0 [ 943.584999][T14649] ? __pfx_vfs_writev+0x10/0x10 [ 943.585014][T14649] ? lock_acquire+0x1d1/0x380 [ 943.585030][T14649] ? __fget_files+0x34/0x3d0 [ 943.585050][T14649] ? __fget_files+0x21f/0x3d0 [ 943.585066][T14649] ? do_writev+0x13e/0x340 [ 943.585075][T14649] do_writev+0x13e/0x340 [ 943.585086][T14649] ? __pfx_do_writev+0x10/0x10 [ 943.585100][T14649] do_syscall_64+0x123/0x7b0 [ 943.585115][T14649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.585127][T14649] RIP: 0033:0x7f411fda8f19 [ 943.585137][T14649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.585147][T14649] RSP: 002b:00007f4120bb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 943.585157][T14649] RAX: ffffffffffffffda RBX: 00007f4120025fa0 RCX: 00007f411fda8f19 [ 943.585164][T14649] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000007 [ 943.585170][T14649] RBP: 00007f411fe37f6d R08: 0000000000000000 R09: 0000000000000000 [ 943.585177][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.585183][T14649] R13: 00007f4120026038 R14: 00007f4120025fa0 R15: 00007ffc6c1c6238 [ 943.585197][T14649] [ 944.907350][ T31] audit: type=1400 audit(1794416220.143:5976): avc: denied { allowed } for pid=14656 comm="syz.4.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 944.907382][ T31] audit: type=1400 audit(1794416220.143:5977): avc: denied { sqpoll } for pid=14656 comm="syz.4.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 944.951727][ T31] audit: type=1400 audit(1794416220.173:5978): avc: denied { create } for pid=14656 comm="syz.4.2063" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 944.951771][ T31] audit: type=1400 audit(1794416220.173:5979): avc: denied { map } for pid=14656 comm="syz.4.2063" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 944.951803][ T31] audit: type=1400 audit(1794416220.173:5980): avc: denied { read write } for pid=14656 comm="syz.4.2063" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 945.018788][ T31] audit: type=1400 audit(1794416220.253:5981): avc: denied { create } for pid=14656 comm="syz.4.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 945.023419][ T31] audit: type=1400 audit(1794416220.253:5982): avc: denied { map } for pid=14656 comm="syz.4.2063" path="socket:[54602]" dev="sockfs" ino=54602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 945.023460][ T31] audit: type=1400 audit(1794416220.263:5983): avc: denied { write } for pid=14656 comm="syz.4.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 945.060294][ T31] audit: type=1400 audit(1794416220.293:5984): avc: denied { read write } for pid=14656 comm="syz.4.2063" name="virtual_nci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 945.060618][ T31] audit: type=1400 audit(1794416220.293:5985): avc: denied { open } for pid=14656 comm="syz.4.2063" path="/dev/virtual_nci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 945.136768][ T31] audit: type=1400 audit(1794416220.373:5986): avc: denied { create } for pid=14656 comm="syz.4.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 945.142076][ T31] audit: type=1400 audit(1794416220.373:5987): avc: denied { read } for pid=13765 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 946.669180][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2070'. [ 947.559127][ T25] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 947.726124][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 947.727333][ T25] usb 10-1: New USB device found: idVendor=061c, idProduct=c084, bcdDevice=d3.8d [ 947.728159][ T25] usb 10-1: config 88 has an invalid interface number: 210 but max is 0 [ 947.728182][ T25] usb 10-1: config 88 has no interface number 0 [ 947.728215][ T25] usb 10-1: config 88 interface 210 altsetting 153 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 947.728239][ T25] usb 10-1: config 88 interface 210 altsetting 153 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 947.728261][ T25] usb 10-1: config 88 interface 210 has no altsetting 0 [ 947.732116][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.732137][ T25] usb 10-1: Product: syz [ 947.732151][ T25] usb 10-1: Manufacturer: syz [ 947.732164][ T25] usb 10-1: SerialNumber: syz [ 948.947990][ T25] usb 10-1: USB disconnect, device number 3 [ 950.784846][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 950.784865][ T31] audit: type=1400 audit(1794416226.013:6033): avc: denied { read } for pid=14707 comm="syz.4.2074" dev="nsfs" ino=4026533075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 950.784906][ T31] audit: type=1400 audit(1794416226.013:6034): avc: denied { open } for pid=14707 comm="syz.4.2074" path="net:[4026533075]" dev="nsfs" ino=4026533075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 950.784939][ T31] audit: type=1400 audit(1794416226.013:6035): avc: denied { create } for pid=14707 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 951.003288][ T31] audit: type=1400 audit(1794416226.243:6036): avc: denied { mount } for pid=14709 comm="syz.9.2077" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 951.037249][ T31] audit: type=1400 audit(1794416226.273:6037): avc: denied { search } for pid=14709 comm="syz.9.2077" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 951.037687][ T31] audit: type=1400 audit(1794416226.273:6038): avc: denied { search } for pid=14709 comm="syz.9.2077" name="nullb" dev="configfs" ino=3061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 951.037919][ T31] audit: type=1400 audit(1794416226.273:6039): avc: denied { search } for pid=14709 comm="syz.9.2077" name="my_nullb" dev="configfs" ino=43977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 951.038387][ T31] audit: type=1400 audit(1794416226.273:6040): avc: denied { read write } for pid=14709 comm="syz.9.2077" name="power" dev="configfs" ino=55339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 951.038679][ T31] audit: type=1400 audit(1794416226.273:6041): avc: denied { open } for pid=14709 comm="syz.9.2077" path="/27/config/nullb/my_nullb/power" dev="configfs" ino=55339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 951.054930][ T31] audit: type=1800 audit(1794416226.293:6042): pid=14713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2077" name="power" dev="configfs" ino=55339 res=0 errno=-22 [ 952.802560][ T30] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 952.965097][ T30] usb 10-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 952.965957][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.997666][ T30] usb 10-1: config 0 descriptor?? [ 953.051305][ T4994] udevd[4994]: worker [14706] terminated by signal 11 (Segmentation fault) [ 953.051345][ T4994] udevd[4994]: worker [14706] failed while handling '/devices/platform/dummy_hcd.9/usb10/10-1' [ 953.525050][ T30] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 953.526403][ T30] [drm:udl_init] *ERROR* Selecting channel failed [ 953.565266][ T30] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 953.565291][ T30] [drm] Initialized udl on minor 1 [ 953.576616][T14743] ip_tables: iptables: counters copy to user failed while replacing table [ 953.579489][ T30] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 953.586115][ T30] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 953.592675][ T30] usb 10-1: USB disconnect, device number 4 [ 953.594953][ T25] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 953.978896][ T4994] udevd[4994]: worker [14626] terminated by signal 11 (Segmentation fault) [ 953.978934][ T4994] udevd[4994]: worker [14626] failed while handling '/devices/virtual/tty/gsmtty2' [ 953.993971][ T4994] udevd[4994]: worker [14627] terminated by signal 11 (Segmentation fault) [ 953.994003][ T4994] udevd[4994]: worker [14627] failed while handling '/devices/virtual/tty/gsmtty1' [ 954.000528][ T4994] udevd[4994]: worker [14747] terminated by signal 11 (Segmentation fault) [ 954.000575][ T4994] udevd[4994]: worker [14747] failed while handling '/devices/virtual/tty/gsmtty3' [ 954.050768][ T4994] udevd[4994]: worker [14748] terminated by signal 11 (Segmentation fault) [ 954.050792][ T4994] udevd[4994]: worker [14748] failed while handling '/devices/virtual/tty/gsmtty4' [ 954.315768][T14754] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 954.693265][ T1709] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 954.843485][ T1709] usb 10-1: New USB device found: idVendor=1532, idProduct=010d, bcdDevice=0.00 [ 954.858627][ T1709] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 954.858660][ T1709] usb 10-1: config 0 interface 0 has no altsetting 0 [ 954.858688][ T1709] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.912507][ T1709] usb 10-1: config 0 descriptor?? [ 954.913195][T14761] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 955.358975][ T1709] hid_parser_main: 582 callbacks suppressed [ 955.359000][ T1709] razer 0003:1532:010D.001A: unknown main item tag 0x0 [ 955.359027][ T1709] razer 0003:1532:010D.001A: unknown main item tag 0x0 [ 955.359046][ T1709] razer 0003:1532:010D.001A: unknown main item tag 0x0 [ 955.359066][ T1709] razer 0003:1532:010D.001A: unknown main item tag 0x0 [ 955.401451][ T1709] razer 0003:1532:010D.001A: unknown main item tag 0x0 [ 955.401493][ T1709] razer 0003:1532:010D.001A: unknown main item tag 0x0 [ 955.401513][ T1709] razer 0003:1532:010D.001A: unknown main item tag 0x0 [ 955.401532][ T1709] razer 0003:1532:010D.001A: unknown main item tag 0x0 [ 955.401551][ T1709] razer 0003:1532:010D.001A: unknown main item tag 0x0 [ 955.401569][ T1709] razer 0003:1532:010D.001A: unknown main item tag 0x0 [ 955.489113][T14784] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2087'. [ 955.504396][T14784] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2087'. [ 955.504415][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2087'. [ 955.550604][ T1709] razer 0003:1532:010D.001A: hidraw0: USB HID v7f.fd Device [HID 1532:010d] on usb-dummy_hcd.9-1/input0 [ 955.865164][ T1709] usb 10-1: USB disconnect, device number 5 [ 955.869202][ T31] kauditd_printk_skb: 108 callbacks suppressed [ 955.869218][ T31] audit: type=1400 audit(1794416231.103:6151): avc: denied { connect } for pid=14794 comm="syz.4.2089" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 955.870361][ T31] audit: type=1400 audit(1794416231.103:6152): avc: denied { setopt } for pid=14794 comm="syz.4.2089" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 955.874067][ T31] audit: type=1400 audit(1794416231.113:6153): avc: denied { write } for pid=14794 comm="syz.4.2089" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 955.877488][ T31] audit: type=1400 audit(1794416231.113:6154): avc: denied { allowed } for pid=14794 comm="syz.4.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 956.062699][ T31] audit: type=1400 audit(1794416231.303:6155): avc: denied { map } for pid=14794 comm="syz.4.2089" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 956.125630][ T31] audit: type=1400 audit(1794416231.363:6156): avc: denied { prog_run } for pid=14796 comm="syz.8.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 956.142795][T14802] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2089'. [ 956.158101][ T31] audit: type=1400 audit(1794416231.383:6157): avc: denied { read write } for pid=14794 comm="syz.4.2089" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 956.375071][ T11] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 957.375165][ T31] audit: type=1400 audit(1794416232.303:6158): avc: denied { create } for pid=14809 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 957.375215][ T31] audit: type=1400 audit(1794416232.323:6159): avc: denied { write } for pid=14809 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 957.380210][ T11] usb 9-1: Using ep0 maxpacket: 8 [ 957.380781][ T11] usb 9-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 957.384752][ T11] usb 9-1: config 2 has an invalid interface number: 31 but max is 0 [ 957.384773][ T11] usb 9-1: config 2 has no interface number 0 [ 957.384812][ T11] usb 9-1: config 2 interface 31 has no altsetting 0 [ 957.388575][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.388595][ T11] usb 9-1: Product: syz [ 957.388607][ T11] usb 9-1: Manufacturer: syz [ 957.388620][ T11] usb 9-1: SerialNumber: syz [ 957.430810][ T31] audit: type=1800 audit(1794416232.653:6160): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298793 res=0 errno=-22 [ 957.604818][ T11] ch9200 9-1:2.31: probe with driver ch9200 failed with error -71 [ 957.630058][ T11] usb 9-1: USB disconnect, device number 35 [ 958.872070][T14823] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 958.905628][T14823] FAULT_INJECTION: forcing a failure. [ 958.905628][T14823] name failslab, interval 1, probability 5, space 0, times 9961 [ 958.905648][T14823] CPU: 1 UID: 0 PID: 14823 Comm: syz.8.2095 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.905663][T14823] Tainted: [L]=SOFTLOCKUP [ 958.905667][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 958.905673][T14823] Call Trace: [ 958.905677][T14823] [ 958.905682][T14823] dump_stack_lvl+0x100/0x190 [ 958.905703][T14823] should_fail_ex.cold+0x5/0xa [ 958.905720][T14823] should_failslab+0xc2/0x120 [ 958.905734][T14823] __kmalloc_noprof+0xfc/0x840 [ 958.905743][T14823] ? rcu_is_watching+0x13/0xc0 [ 958.905756][T14823] ? tomoyo_realpath_from_path+0xb6/0x690 [ 958.905771][T14823] tomoyo_realpath_from_path+0xb6/0x690 [ 958.905786][T14823] tomoyo_path_number_perm+0x23c/0x580 [ 958.905801][T14823] ? tomoyo_path_number_perm+0x22e/0x580 [ 958.905818][T14823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 958.905839][T14823] ? __lock_acquire+0x5c0/0x1f40 [ 958.905861][T14823] ? __fget_files+0x34/0x3d0 [ 958.905875][T14823] ? find_held_lock+0x2b/0x80 [ 958.905886][T14823] ? hook_file_ioctl_common+0x140/0x440 [ 958.905902][T14823] ? __fget_files+0x21f/0x3d0 [ 958.905918][T14823] security_file_ioctl+0xd3/0x230 [ 958.905936][T14823] __x64_sys_ioctl+0xb7/0x210 [ 958.905949][T14823] do_syscall_64+0x123/0x7b0 [ 958.905964][T14823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.905975][T14823] RIP: 0033:0x7f2a1bfa8f19 [ 958.905984][T14823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.905995][T14823] RSP: 002b:00007f2a1ce6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.906006][T14823] RAX: ffffffffffffffda RBX: 00007f2a1c225fa0 RCX: 00007f2a1bfa8f19 [ 958.906012][T14823] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 958.906019][T14823] RBP: 00007f2a1ce6d090 R08: 0000000000000000 R09: 0000000000000000 [ 958.906025][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.906031][T14823] R13: 00007f2a1c226038 R14: 00007f2a1c225fa0 R15: 00007ffd0719bcc8 [ 958.906045][T14823] [ 958.906050][T14823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 958.906086][T14823] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 959.472679][ T25] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 960.451401][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 960.451445][ T25] usb 9-1: New USB device found: idVendor=044f, idProduct=a01c, bcdDevice=4a.05 [ 960.474575][ T25] usb 9-1: config 0 has an invalid interface number: 209 but max is 0 [ 960.474603][ T25] usb 9-1: config 0 has no interface number 0 [ 960.474637][ T25] usb 9-1: config 0 interface 209 altsetting 14 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 960.474664][ T25] usb 9-1: config 0 interface 209 has no altsetting 0 [ 960.477270][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.477290][ T25] usb 9-1: Product: syz [ 960.477301][ T25] usb 9-1: Manufacturer: syz [ 960.477318][ T25] usb 9-1: SerialNumber: syz [ 960.482152][ T25] usb 9-1: config 0 descriptor?? [ 960.724726][ T25] usb 9-1: USB disconnect, device number 36 [ 960.813763][ T4994] udevd[4994]: worker [14792] terminated by signal 11 (Segmentation fault) [ 960.813809][ T4994] udevd[4994]: worker [14792] failed while handling '/devices/platform/dummy_hcd.8/usb9/9-1' [ 960.852400][ T7571] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 960.867442][T13184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 960.873051][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 960.873065][ T31] audit: type=1800 audit(1794416236.113:6186): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299077 res=0 errno=-22 [ 960.888773][ T31] audit: type=1400 audit(1794416236.123:6187): avc: denied { ioctl } for pid=14841 comm="syz-executor" path="socket:[54955]" dev="sockfs" ino=54955 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 960.911461][T13184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 960.942596][T13184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 960.966950][ T31] audit: type=1800 audit(1794416236.203:6188): pid=14844 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2099" name="mem_sleep" dev="sysfs" ino=1413 res=0 errno=-22 [ 960.968642][T13184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 960.970412][T13184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 961.025227][ T31] audit: type=1800 audit(1794416236.263:6189): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299096 res=0 errno=-22 [ 961.027495][ T31] audit: type=1400 audit(1794416236.263:6190): avc: denied { mounton } for pid=14841 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 961.031546][T14844] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 961.056687][ T31] audit: type=1800 audit(1794416236.273:6191): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299107 res=0 errno=-22 [ 961.081565][ T7571] usb 10-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 961.127112][ T7571] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 961.127159][ T7571] usb 10-1: config 0 has no interface number 0 [ 961.127190][ T7571] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 961.159414][ T7571] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.159440][ T7571] usb 10-1: Product: syz [ 961.159453][ T7571] usb 10-1: Manufacturer: syz [ 961.159466][ T7571] usb 10-1: SerialNumber: syz [ 961.189355][ T7571] usb 10-1: config 0 descriptor?? [ 961.191614][ T31] audit: type=1800 audit(1794416236.423:6192): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299118 res=0 errno=-22 [ 961.212440][ T31] audit: type=1800 audit(1794416236.433:6193): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=299150 res=0 errno=-22 [ 961.212487][ T31] audit: type=1800 audit(1794416236.443:6194): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=299125 res=0 errno=-22 [ 961.212519][ T31] audit: type=1800 audit(1794416236.443:6195): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=299126 res=0 errno=-22 [ 961.275215][ T7571] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 961.391000][T14841] rxe_eth0 speed is unknown, defaulting to 1000 [ 961.417353][ T4994] udevd[4994]: worker [14839] terminated by signal 11 (Segmentation fault) [ 961.417389][ T4994] udevd[4994]: worker [14839] failed while handling '/devices/platform/dummy_hcd.9/usb10/10-1' [ 961.483353][ T4994] udevd[4994]: worker [14791] terminated by signal 11 (Segmentation fault) [ 961.483393][ T4994] udevd[4994]: worker [14791] failed while handling '/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.50/usbmisc/yurex0' [ 961.658452][T14837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.658864][T14837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.892413][ T11] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 962.042723][ T11] usb 9-1: Using ep0 maxpacket: 8 [ 962.043333][ T11] usb 9-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 962.044351][ T11] usb 9-1: config 2 has an invalid interface number: 31 but max is 0 [ 962.044374][ T11] usb 9-1: config 2 has no interface number 0 [ 962.044414][ T11] usb 9-1: config 2 interface 31 has no altsetting 0 [ 962.046583][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.046605][ T11] usb 9-1: Product: syz [ 962.046619][ T11] usb 9-1: Manufacturer: syz [ 962.046633][ T11] usb 9-1: SerialNumber: syz [ 962.311248][ T7750] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.469847][ T11] ch9200 9-1:2.31: probe with driver ch9200 failed with error -71 [ 962.487262][ T11] usb 9-1: USB disconnect, device number 37 [ 962.522708][ T7571] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 962.523730][ T7750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.527547][T14862] udevd[14862]: setting owner of /dev/bus/usb/009/037 to uid=0, gid=0 failed: No such file or directory [ 962.642125][ T7750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.674290][ T7571] usb 5-1: device descriptor read/64, error -71 [ 962.774215][ T7750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.882500][T14841] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.882636][T14841] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.882802][T14841] bridge_slave_0: entered allmulticast mode [ 962.891341][T14841] bridge_slave_0: entered promiscuous mode [ 962.907144][T14841] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.913093][T14841] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.913437][T14841] bridge_slave_1: entered allmulticast mode [ 962.925765][T14841] bridge_slave_1: entered promiscuous mode [ 962.953860][ T7571] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 963.006300][T14841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.072459][ T53] Bluetooth: hci1: command tx timeout [ 963.103770][ T7571] usb 5-1: device descriptor read/64, error -71 [ 963.120457][T14841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.213691][ T7571] usb usb5-port1: attempt power cycle [ 963.269988][ T25] usb 10-1: USB disconnect, device number 6 [ 963.283807][T14879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=14879 comm=syz.8.2103 [ 963.303825][ T25] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 963.338169][T14841] team0: Port device team_slave_0 added [ 963.339397][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 963.351915][T14841] team0: Port device team_slave_1 added [ 963.429152][T14841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.429168][T14841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.429190][T14841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.444900][ T7750] bridge_slave_1: left allmulticast mode [ 963.444922][ T7750] bridge_slave_1: left promiscuous mode [ 963.445088][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.484115][ T7750] bridge_slave_0: left allmulticast mode [ 963.484138][ T7750] bridge_slave_0: left promiscuous mode [ 963.484287][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.585253][ T7571] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 963.644665][ T7571] usb 5-1: device descriptor read/8, error -71 [ 963.746811][T14886] ptp ptp0: guarantee physical clock free running [ 963.884753][ T25] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 963.902821][ T7571] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 963.926388][ T7571] usb 5-1: device descriptor read/8, error -71 [ 964.036419][ T7571] usb usb5-port1: unable to enumerate USB device [ 964.052017][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 964.064598][ T25] usb 10-1: New USB device found: idVendor=1e7d, idProduct=3264, bcdDevice=0.00 [ 964.068159][ T25] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 964.068297][ T25] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 964.068376][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 964.068471][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.147331][ T25] usb 10-1: config 0 descriptor?? [ 964.333280][ T4994] udevd[4994]: worker [14862] terminated by signal 11 (Segmentation fault) [ 964.333539][ T4994] udevd[4994]: worker [14862] failed while handling '/devices/platform/dummy_hcd.9/usb10/10-1' [ 964.684398][ T25] usbhid 10-1:0.0: can't add hid device: -71 [ 964.684945][ T25] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 964.826979][ T25] usb 10-1: USB disconnect, device number 7 [ 965.153440][ T53] Bluetooth: hci1: command tx timeout [ 966.151963][ T7750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.186041][ T7750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.190819][ T7750] bond0 (unregistering): Released all slaves [ 966.204198][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 966.204216][ T31] audit: type=1400 audit(1794416241.433:6248): avc: denied { create } for pid=14902 comm="syz.0.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 966.215650][T14903] FAULT_INJECTION: forcing a failure. [ 966.215650][T14903] name failslab, interval 1, probability 5, space 0, times 9960 [ 966.215678][T14903] CPU: 0 UID: 0 PID: 14903 Comm: syz.0.2110 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.215702][T14903] Tainted: [L]=SOFTLOCKUP [ 966.215708][T14903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 966.215717][T14903] Call Trace: [ 966.215723][T14903] [ 966.215729][T14903] dump_stack_lvl+0x100/0x190 [ 966.215760][T14903] should_fail_ex.cold+0x5/0xa [ 966.215785][T14903] should_failslab+0xc2/0x120 [ 966.215806][T14903] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 966.215824][T14903] ? trace_kmem_cache_alloc+0xdd/0x100 [ 966.215841][T14903] ? cond_bools_copy+0x45/0xf0 [ 966.215867][T14903] kmemdup_noprof+0x29/0x60 [ 966.215885][T14903] cond_bools_copy+0x45/0xf0 [ 966.215906][T14903] hashtab_duplicate+0x24a/0x5c0 [ 966.215923][T14903] ? __pfx_cond_bools_copy+0x10/0x10 [ 966.215946][T14903] ? __pfx_cond_bools_destroy+0x10/0x10 [ 966.215968][T14903] cond_policydb_dup+0x155/0x750 [ 966.215990][T14903] ? security_set_bools+0x115/0x6c0 [ 966.216011][T14903] ? __asan_memcpy+0x3c/0x60 [ 966.216037][T14903] security_set_bools+0x13f/0x6c0 [ 966.216065][T14903] sel_commit_bools_write+0x368/0x420 [ 966.216092][T14903] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 966.216121][T14903] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 966.216142][T14903] vfs_writev+0x5ed/0xdd0 [ 966.216164][T14903] ? __pfx_vfs_writev+0x10/0x10 [ 966.216186][T14903] ? lock_acquire+0x1d1/0x380 [ 966.216209][T14903] ? __fget_files+0x34/0x3d0 [ 966.216241][T14903] ? __fget_files+0x21f/0x3d0 [ 966.216268][T14903] ? do_writev+0x13e/0x340 [ 966.216282][T14903] do_writev+0x13e/0x340 [ 966.216299][T14903] ? __pfx_do_writev+0x10/0x10 [ 966.216321][T14903] do_syscall_64+0x123/0x7b0 [ 966.216343][T14903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.216359][T14903] RIP: 0033:0x7fe9d9da8f19 [ 966.216373][T14903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.216390][T14903] RSP: 002b:00007fe9dad11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 966.216406][T14903] RAX: ffffffffffffffda RBX: 00007fe9da025fa0 RCX: 00007fe9d9da8f19 [ 966.216417][T14903] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000007 [ 966.216427][T14903] RBP: 00007fe9d9e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 966.216436][T14903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.216446][T14903] R13: 00007fe9da026038 R14: 00007fe9da025fa0 R15: 00007fff52f40098 [ 966.216469][T14903] [ 966.217654][ T31] audit: type=1400 audit(1794416241.443:6249): avc: denied { bind } for pid=14902 comm="syz.0.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 966.217691][ T31] audit: type=1400 audit(1794416241.443:6250): avc: denied { name_bind } for pid=14902 comm="syz.0.2110" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 966.217722][ T31] audit: type=1400 audit(1794416241.443:6251): avc: denied { node_bind } for pid=14902 comm="syz.0.2110" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 966.217751][ T31] audit: type=1400 audit(1794416241.443:6252): avc: denied { mount } for pid=14902 comm="syz.0.2110" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 966.244591][T14841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.244605][T14841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.244622][T14841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.359432][ T31] audit: type=1400 audit(1794416241.583:6253): avc: denied { unmount } for pid=13765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 966.399843][ T31] audit: type=1400 audit(1794416241.633:6254): avc: denied { listen } for pid=14901 comm="syz.8.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 966.456684][ T31] audit: type=1400 audit(1794416241.693:6255): avc: denied { mount } for pid=14905 comm="syz.9.2112" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 966.471018][ T31] audit: type=1400 audit(1794416241.703:6256): avc: denied { search } for pid=14905 comm="syz.9.2112" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 966.478863][ T31] audit: type=1400 audit(1794416241.713:6257): avc: denied { search } for pid=14905 comm="syz.9.2112" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 966.538821][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2112'. [ 966.818314][T14841] hsr_slave_0: entered promiscuous mode [ 966.818794][T14841] hsr_slave_1: entered promiscuous mode [ 966.820984][T14841] debugfs: 'hsr0' already exists in 'hsr' [ 966.820997][T14841] Cannot create hsr debugfs directory [ 966.828972][T14907] gtp0: entered allmulticast mode [ 966.830172][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 967.083701][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 967.114167][ T30] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 967.253725][ T53] Bluetooth: hci1: command tx timeout [ 967.292994][T14926] ptp ptp0: guarantee physical clock free running [ 967.319264][ T30] usb 9-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=1.00 [ 967.358172][ T30] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 967.358326][ T30] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 967.406291][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.406340][ T30] usb 9-1: Product: syz [ 967.406406][ T30] usb 9-1: Manufacturer: syz [ 967.406447][ T30] usb 9-1: SerialNumber: syz [ 967.807855][ T30] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 967.952080][ T4994] udevd[4994]: worker [14863] terminated by signal 11 (Segmentation fault) [ 967.952118][ T4994] udevd[4994]: worker [14863] failed while handling '/devices/platform/dummy_hcd.8/usb9/9-1' [ 968.014814][T14915] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz.8.2114: No space for directory leaf checksum. Please run e2fsck -D. [ 968.014847][T14915] EXT4-fs error (device sda1): ext4_empty_dir:3087: inode #1262: comm syz.8.2114: Directory block failed checksum [ 968.017223][T14915] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz.8.2114: No space for directory leaf checksum. Please run e2fsck -D. [ 968.017254][T14915] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #1262: comm syz.8.2114: checksumming directory block 0 [ 968.181905][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 968.209040][T14931] jffs2: notice: (14931) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 968.277806][ T5289] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 968.277837][ T5289] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2004: comm dhcpcd: checksumming directory block 0 [ 969.668945][ T53] Bluetooth: hci1: command tx timeout [ 970.432188][ T1709] usb 9-1: USB disconnect, device number 38 [ 970.447661][ T7750] hsr_slave_0: left promiscuous mode [ 970.460659][ T7750] hsr_slave_1: left promiscuous mode [ 970.461203][ T7750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.461216][ T7750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.485653][ T7750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.485666][ T7750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.513822][ T7750] veth1_macvtap: left promiscuous mode [ 970.513855][ T7750] veth0_macvtap: left promiscuous mode [ 970.513955][ T7750] veth1_vlan: left promiscuous mode [ 970.514015][ T7750] veth0_vlan: left promiscuous mode [ 971.738109][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 971.738145][ T31] audit: type=1400 audit(1794416246.953:6305): avc: denied { create } for pid=14958 comm="syz.9.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 971.738335][ T31] audit: type=1400 audit(1794416246.963:6306): avc: denied { setopt } for pid=14958 comm="syz.9.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 971.761546][ T31] audit: type=1400 audit(1794416246.993:6307): avc: denied { mount } for pid=14958 comm="syz.9.2122" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 971.822829][ T31] audit: type=1400 audit(1794416247.053:6308): avc: denied { bind } for pid=14958 comm="syz.9.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 971.822998][ T31] audit: type=1400 audit(1794416247.053:6309): avc: denied { node_bind } for pid=14958 comm="syz.9.2122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 971.823140][ T31] audit: type=1400 audit(1794416247.053:6310): avc: denied { read } for pid=14958 comm="syz.9.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 971.953944][ T31] audit: type=1800 audit(1794416247.193:6311): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308785 res=0 errno=-22 [ 972.024974][ T7750] team0 (unregistering): Port device team_slave_1 removed [ 972.045587][ T7750] team0 (unregistering): Port device team_slave_0 removed [ 972.237469][ T5289] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 972.237502][ T5289] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2004: comm dhcpcd: checksumming directory block 0 [ 972.367505][ T31] audit: type=1400 audit(1794416247.603:6312): avc: denied { getopt } for pid=14964 comm="syz.0.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 972.416735][T14955] FAULT_INJECTION: forcing a failure. [ 972.416735][T14955] name failslab, interval 1, probability 5, space 0, times 9959 [ 972.416756][T14955] CPU: 0 UID: 0 PID: 14955 Comm: syz.8.2120 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.416770][T14955] Tainted: [L]=SOFTLOCKUP [ 972.416774][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 972.416780][T14955] Call Trace: [ 972.416785][T14955] [ 972.416789][T14955] dump_stack_lvl+0x100/0x190 [ 972.416811][T14955] should_fail_ex.cold+0x5/0xa [ 972.416828][T14955] should_failslab+0xc2/0x120 [ 972.416842][T14955] __kmalloc_noprof+0xfc/0x840 [ 972.416851][T14955] ? tc_setup_action+0x16e/0xac0 [ 972.416865][T14955] ? flow_action_cookie_create+0x21/0x80 [ 972.416882][T14955] flow_action_cookie_create+0x21/0x80 [ 972.416897][T14955] tc_setup_action+0x22e/0xac0 [ 972.416911][T14955] ? lock_acquire+0x1d1/0x380 [ 972.416926][T14955] ? tcf_skbedit_offload_act_setup+0x1dc4/0x2160 [ 972.416946][T14955] ? tcf_skbedit_offload_act_setup+0x1e91/0x2160 [ 972.416961][T14955] ? __pfx_tc_setup_action+0x10/0x10 [ 972.416983][T14955] ? __local_bh_enable_ip+0xa5/0x120 [ 972.416998][T14955] tcf_action_offload_add_ex+0x38c/0x7b0 [ 972.417013][T14955] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 972.417039][T14955] ? tcf_action_fill_size+0x110/0x340 [ 972.417053][T14955] ? tcf_action_fill_size+0x110/0x340 [ 972.417072][T14955] tcf_action_init+0x7b5/0xb50 [ 972.417091][T14955] ? __pfx_tcf_action_init+0x10/0x10 [ 972.417118][T14955] ? __pfx_debug_object_activate+0x10/0x10 [ 972.417147][T14955] ? __lock_acquire+0x5c0/0x1f40 [ 972.417163][T14955] tcf_action_add+0xef/0x750 [ 972.417181][T14955] ? __pfx_tcf_action_add+0x10/0x10 [ 972.417215][T14955] ? __nla_parse+0x40/0x60 [ 972.417229][T14955] tc_ctl_action+0x2e3/0x470 [ 972.417246][T14955] ? __pfx_tc_ctl_action+0x10/0x10 [ 972.417266][T14955] ? __pfx_tc_ctl_action+0x10/0x10 [ 972.417282][T14955] rtnetlink_rcv_msg+0x3c9/0xe90 [ 972.417299][T14955] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 972.417320][T14955] netlink_rcv_skb+0x159/0x420 [ 972.417335][T14955] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 972.417351][T14955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 972.417369][T14955] ? rcu_is_watching+0x13/0xc0 [ 972.417385][T14955] netlink_unicast+0x668/0x950 [ 972.417401][T14955] ? __pfx_netlink_unicast+0x10/0x10 [ 972.417418][T14955] netlink_sendmsg+0x9ac/0x10c0 [ 972.417435][T14955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.417452][T14955] ? selinux_socket_sendmsg+0x198/0x2f0 [ 972.417469][T14955] ? ____sys_sendmsg+0xa99/0xc30 [ 972.417484][T14955] ____sys_sendmsg+0xa99/0xc30 [ 972.417499][T14955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.417514][T14955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 972.417533][T14955] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 972.417550][T14955] ___sys_sendmsg+0x190/0x1e0 [ 972.417560][T14955] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.417570][T14955] ? rcu_is_watching+0x13/0xc0 [ 972.417587][T14955] ? find_held_lock+0x2b/0x80 [ 972.417607][T14955] __sys_sendmsg+0x160/0x210 [ 972.417621][T14955] ? __pfx___sys_sendmsg+0x10/0x10 [ 972.417641][T14955] do_syscall_64+0x123/0x7b0 [ 972.417655][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.417666][T14955] RIP: 0033:0x7f2a1bfa8f19 [ 972.417676][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.417686][T14955] RSP: 002b:00007f2a1ce2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.417697][T14955] RAX: ffffffffffffffda RBX: 00007f2a1c226180 RCX: 00007f2a1bfa8f19 [ 972.417703][T14955] RDX: 000000002400c800 RSI: 000020000001ae40 RDI: 0000000000000008 [ 972.417710][T14955] RBP: 00007f2a1ce2b090 R08: 0000000000000000 R09: 0000000000000000 [ 972.417716][T14955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 972.417722][T14955] R13: 00007f2a1c226218 R14: 00007f2a1c226180 R15: 00007ffd0719bcc8 [ 972.417736][T14955] [ 972.485365][ T31] audit: type=1400 audit(1794416247.703:6313): avc: denied { unmount } for pid=13754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 972.941571][ T31] audit: type=1400 audit(1794416248.173:6314): avc: denied { unmount } for pid=10137 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 973.028298][T14975] FAULT_INJECTION: forcing a failure. [ 973.028298][T14975] name failslab, interval 1, probability 5, space 0, times 9958 [ 973.028334][T14975] CPU: 1 UID: 0 PID: 14975 Comm: syz.9.2124 Tainted: G L syzkaller #0 PREEMPT(full) [ 973.028364][T14975] Tainted: [L]=SOFTLOCKUP [ 973.028371][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 973.028383][T14975] Call Trace: [ 973.028390][T14975] [ 973.028398][T14975] dump_stack_lvl+0x100/0x190 [ 973.028436][T14975] should_fail_ex.cold+0x5/0xa [ 973.028472][T14975] should_failslab+0xc2/0x120 [ 973.028495][T14975] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 973.028514][T14975] ? selinux_socket_create+0xe7/0x590 [ 973.028541][T14975] ? sock_alloc_inode+0x26/0x2c0 [ 973.028570][T14975] ? __pfx_sock_alloc_inode+0x10/0x10 [ 973.028598][T14975] sock_alloc_inode+0x26/0x2c0 [ 973.028625][T14975] ? __pfx_sock_alloc_inode+0x10/0x10 [ 973.028649][T14975] alloc_inode+0x68/0x250 [ 973.028668][T14975] sock_alloc+0x42/0x240 [ 973.028694][T14975] __sock_create+0xc2/0x860 [ 973.028727][T14975] __sys_socket+0x14d/0x260 [ 973.028747][T14975] ? __pfx___sys_socket+0x10/0x10 [ 973.028772][T14975] __x64_sys_socket+0x72/0xb0 [ 973.028788][T14975] ? lockdep_hardirqs_on+0x7d/0x110 [ 973.028811][T14975] do_syscall_64+0x123/0x7b0 [ 973.028837][T14975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.028858][T14975] RIP: 0033:0x7fc0a2fa8f19 [ 973.028874][T14975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.028892][T14975] RSP: 002b:00007fc0a3e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 973.028912][T14975] RAX: ffffffffffffffda RBX: 00007fc0a3225fa0 RCX: 00007fc0a2fa8f19 [ 973.028924][T14975] RDX: 0000000000000001 RSI: 0000000000080801 RDI: 000000000000002b [ 973.028934][T14975] RBP: 00007fc0a3037f6d R08: 0000000000000000 R09: 0000000000000000 [ 973.028945][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.028956][T14975] R13: 00007fc0a3226038 R14: 00007fc0a3225fa0 R15: 00007ffff4cf7198 [ 973.028981][T14975] [ 973.028991][T14975] socket: no more sockets [ 973.320468][ T5289] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 973.320485][ T5289] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2004: comm dhcpcd: checksumming directory block 0 [ 973.895628][T14992] ptp ptp0: guarantee physical clock free running [ 974.401662][T14998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2128'. [ 974.734927][ T4994] udevd[4994]: worker [14948] terminated by signal 11 (Segmentation fault) [ 974.734955][ T4994] udevd[4994]: worker [14948] failed while handling '/devices/virtual/vc/vcs38' [ 974.784498][ T4994] udevd[4994]: worker [14861] terminated by signal 11 (Segmentation fault) [ 974.784523][ T4994] udevd[4994]: worker [14861] failed while handling '/devices/virtual/vc/vcsu38' [ 974.826071][ T4994] udevd[4994]: worker [14789] terminated by signal 11 (Segmentation fault) [ 974.826097][ T4994] udevd[4994]: worker [14789] failed while handling '/devices/virtual/vc/vcsa38' [ 974.863962][ T5289] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 974.863996][ T5289] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2004: comm dhcpcd: checksumming directory block 0 [ 975.887106][T15010] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2130'. [ 976.022217][T15019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=15019 comm=syz.9.2130 [ 976.300584][ T4994] udevd[4994]: worker [15005] terminated by signal 11 (Segmentation fault) [ 976.300617][ T4994] udevd[4994]: worker [15005] failed while handling '/devices/virtual/vc/vcsa36' [ 976.324647][ T4994] udevd[4994]: worker [15006] terminated by signal 11 (Segmentation fault) [ 976.324687][ T4994] udevd[4994]: worker [15006] failed while handling '/devices/virtual/vc/vcsu36' [ 976.422406][ T11] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 976.583565][ T11] usb 10-1: Using ep0 maxpacket: 8 [ 976.589897][ T11] usb 10-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 976.591814][ T11] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 976.591839][ T11] usb 10-1: config 179 has no interface number 0 [ 976.591866][ T11] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 976.591881][ T11] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 976.591895][ T11] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 976.591908][ T11] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 976.591922][ T11] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 976.591942][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.623703][T15021] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 976.956371][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 976.956390][ T31] audit: type=1800 audit(1794416252.193:6341): pid=15027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309349 res=0 errno=-22 [ 977.003898][T14841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 977.033244][T14841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.033881][T14841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 977.068991][T14841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.114863][T14841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 977.131648][T14841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 977.134184][T14841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 977.173132][T14841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 977.503746][T14841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.541732][T14841] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.572215][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.572326][ T7750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.585950][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.586035][ T7750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.165849][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 978.165876][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 978.165888][ T11] usb 10-1: USB disconnect, device number 8 [ 978.706974][T14841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.790469][T14841] veth0_vlan: entered promiscuous mode [ 978.807995][T14841] veth1_vlan: entered promiscuous mode [ 978.843145][ T31] audit: type=1800 audit(1794416254.083:6342): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309604 res=0 errno=-22 [ 978.847866][ T31] audit: type=1800 audit(1794416254.083:6343): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309614 res=0 errno=-22 [ 978.851678][T14841] veth0_macvtap: entered promiscuous mode [ 978.854994][T14841] veth1_macvtap: entered promiscuous mode [ 978.865065][T14841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.867758][T14841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.940657][ T141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.941044][ T141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.941063][ T141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.941081][ T141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.164565][ T31] audit: type=1400 audit(1794416254.403:6344): avc: denied { read write } for pid=15045 comm="syz.4.2132" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 979.164598][ T31] audit: type=1400 audit(1794416254.403:6345): avc: denied { open } for pid=15045 comm="syz.4.2132" path="/476/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 979.164617][ T31] audit: type=1400 audit(1794416254.403:6346): avc: denied { ioctl } for pid=15045 comm="syz.4.2132" path="/476/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x40104d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 979.198249][ T31] audit: type=1800 audit(1794416254.413:6347): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309633 res=0 errno=-22 [ 979.455656][ T7750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.455672][ T7750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.459799][ T31] audit: type=1800 audit(1794416254.693:6348): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309759 res=0 errno=-22 [ 979.545151][ T31] audit: type=1400 audit(1794416254.783:6349): avc: denied { mounton } for pid=15070 comm="syz.0.2136" path="/35/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 979.545792][T15073] 9pnet_fd: p9_fd_create_unix (15073): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 979.598374][ T31] audit: type=1400 audit(1794416254.833:6350): avc: denied { name_bind } for pid=15064 comm="syz.9.2135" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 980.266967][ T8826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.266987][ T8826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.902373][ T30] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 981.886787][ T30] usb 9-1: Using ep0 maxpacket: 16 [ 981.887878][ T30] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 981.891733][ T30] usb 9-1: config index 0 descriptor too short (expected 65535, got 92) [ 981.891768][ T30] usb 9-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 981.891786][ T30] usb 9-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 981.891803][ T30] usb 9-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 981.964999][ T30] usb 9-1: string descriptor 0 read error: -71 [ 981.965069][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 981.984698][ T30] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 981.984714][ T30] usb 9-1: no configuration chosen from 1 choice [ 982.016922][ T30] usb 9-1: USB disconnect, device number 39 [ 982.036789][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 982.036807][ T31] audit: type=1800 audit(1794416257.273:6365): pid=15027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309893 res=0 errno=-22 [ 982.108279][ T31] audit: type=1400 audit(1794416257.343:6366): avc: denied { listen } for pid=15100 comm="syz.4.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 982.204449][ T31] audit: type=1400 audit(1794416257.433:6367): avc: denied { read } for pid=15100 comm="syz.4.2142" path="socket:[57593]" dev="sockfs" ino=57593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 984.115952][ T31] audit: type=1400 audit(1794416259.353:6368): avc: denied { write } for pid=15113 comm="syz.8.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 984.537386][ T31] audit: type=1400 audit(1794416259.773:6369): avc: denied { create } for pid=15127 comm="syz.9.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 984.606933][ T31] audit: type=1800 audit(1794416259.843:6370): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310045 res=0 errno=-22 [ 984.642576][ T25] libceph: connect (1)[c::]:6789 error -101 [ 984.642832][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 984.663499][T15128] ceph: No mds server is up or the cluster is laggy [ 985.987039][T15142] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2152'. [ 986.007974][ T31] audit: type=1400 audit(1794416261.243:6371): avc: denied { cmd } for pid=15144 comm="syz.2.2153" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 986.051652][ T31] audit: type=1800 audit(1794416261.283:6372): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310186 res=0 errno=-22 [ 986.089156][ T4994] udevd[4994]: worker [15036] terminated by signal 11 (Segmentation fault) [ 986.089181][ T4994] udevd[4994]: worker [15036] failed while handling '/devices/virtual/misc/ublk-control/ublkc3' [ 986.125943][ T31] audit: type=1400 audit(1794416261.363:6373): avc: denied { map } for pid=15144 comm="syz.2.2153" path="/dev/ublkc3" dev="devtmpfs" ino=3988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 986.130547][ T31] audit: type=1400 audit(1794416261.363:6374): avc: denied { create } for pid=15141 comm="syz.9.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 987.999581][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.999613][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.048595][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 988.048612][ T31] audit: type=1800 audit(1794416263.283:6378): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310199 res=0 errno=-22 [ 988.199756][ T31] audit: type=1400 audit(1794416263.433:6379): avc: denied { read } for pid=15172 comm="syz.2.2160" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 988.230862][ T31] audit: type=1400 audit(1794416263.463:6380): avc: denied { open } for pid=15172 comm="syz.2.2160" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 988.273376][ T31] audit: type=1800 audit(1794416263.513:6381): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310218 res=0 errno=-22 [ 988.311725][ T31] audit: type=1800 audit(1794416263.553:6382): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310228 res=0 errno=-22 [ 988.898859][T15181] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 989.280198][ T31] audit: type=1400 audit(1794416264.143:6383): avc: denied { search } for pid=15172 comm="syz.2.2160" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 989.280245][ T31] audit: type=1400 audit(1794416264.143:6384): avc: denied { search } for pid=15172 comm="syz.2.2160" name="events" dev="tracefs" ino=3762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 989.280278][ T31] audit: type=1400 audit(1794416264.143:6385): avc: denied { search } for pid=15172 comm="syz.2.2160" name="kvm" dev="tracefs" ino=57714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 989.280488][ T31] audit: type=1400 audit(1794416264.143:6386): avc: denied { search } for pid=15172 comm="syz.2.2160" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=57716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 989.280523][ T31] audit: type=1400 audit(1794416264.153:6387): avc: denied { write search } for pid=15172 comm="syz.2.2160" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=57716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 990.931913][ T1709] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 991.093071][ T1709] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.40 [ 991.093889][ T1709] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 991.093915][ T1709] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 991.093930][ T1709] usb 5-1: config 1 interface 0 has no altsetting 0 [ 991.095427][ T1709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.095439][ T1709] usb 5-1: Product: syz [ 991.095447][ T1709] usb 5-1: Manufacturer: syz [ 991.095455][ T1709] usb 5-1: SerialNumber: syz [ 991.149468][ T30] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 991.172703][T15194] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 991.172803][T15194] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 991.283237][ T30] usb 10-1: device descriptor read/64, error -71 [ 991.461255][T15202] SELinux: DCCP has been removed, pid=15202 comm=syz.8.2166 [ 991.499861][T15202] kvm: MONITOR instruction emulated as NOP! [ 991.552464][ T30] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 991.692427][ T30] usb 10-1: device descriptor read/64, error -71 [ 991.796238][T15206] nvmet: adding nsid 1 to subsystem testsubsys [ 991.813510][ T30] usb usb10-port1: attempt power cycle [ 992.086763][T15210] sit0: entered promiscuous mode [ 992.108740][T15210] netlink: 'syz.2.2167': attribute type 1 has an invalid length. [ 992.109521][T15210] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2167'. [ 992.162760][ T30] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 992.182949][ T30] usb 10-1: device descriptor read/8, error -71 [ 992.228590][ T1709] rtl8150 5-1:1.0: couldn't reset the device [ 992.229675][ T1709] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 992.264543][ T1709] usb 5-1: USB disconnect, device number 66 [ 992.434652][ T30] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 992.453184][ T30] usb 10-1: device descriptor read/8, error -71 [ 992.562609][ T30] usb usb10-port1: unable to enumerate USB device [ 993.061791][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 993.061828][ T31] audit: type=1800 audit(1794416268.293:6407): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31278 res=0 errno=-22 [ 993.072491][ T1709] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 993.106978][ T31] audit: type=1800 audit(1794416268.343:6408): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31301 res=0 errno=-22 [ 993.224816][ T1709] usb 9-1: Using ep0 maxpacket: 8 [ 993.226540][ T1709] usb 9-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 993.237786][ T1709] usb 9-1: config 2 has an invalid interface number: 31 but max is 0 [ 993.237810][ T1709] usb 9-1: config 2 has no interface number 0 [ 993.237841][ T1709] usb 9-1: config 2 interface 31 has no altsetting 0 [ 993.269728][ T1709] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.269754][ T1709] usb 9-1: Product: syz [ 993.269768][ T1709] usb 9-1: Manufacturer: syz [ 993.269781][ T1709] usb 9-1: SerialNumber: syz [ 993.296636][T14100] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 993.299759][ T31] audit: type=1800 audit(1794416268.533:6409): pid=15195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310415 res=0 errno=-22 [ 993.312514][ T31] audit: type=1800 audit(1794416268.543:6410): pid=15195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=310447 res=0 errno=-22 [ 993.312556][ T31] audit: type=1800 audit(1794416268.543:6411): pid=15195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=310422 res=0 errno=-22 [ 993.383599][ T31] audit: type=1800 audit(1794416268.623:6412): pid=15195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=310423 res=0 errno=-22 [ 993.443335][T14100] usb 3-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 993.457131][T14100] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 993.457175][T14100] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 993.457198][T14100] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 993.457224][T14100] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 993.457245][T14100] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 993.457268][T14100] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 993.457290][T14100] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 993.460307][T14100] usb 3-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 993.460330][T14100] usb 3-1: Product: syz [ 993.460344][T14100] usb 3-1: Manufacturer: syz [ 993.460357][T14100] usb 3-1: SerialNumber: syz [ 993.552430][ T31] audit: type=1800 audit(1794416268.783:6413): pid=15198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310483 res=0 errno=-22 [ 993.553442][T15227] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 993.553538][T15227] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 993.553627][T15227] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 993.553700][T15227] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 993.582736][T14100] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 993.583149][T14100] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 993.620928][ T31] audit: type=1800 audit(1794416268.853:6414): pid=15198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=310515 res=0 errno=-22 [ 993.620972][ T31] audit: type=1800 audit(1794416268.853:6415): pid=15198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=310490 res=0 errno=-22 [ 993.623281][T14100] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 993.623361][T14100] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 993.650653][ T31] audit: type=1800 audit(1794416268.883:6416): pid=15198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=310491 res=0 errno=-22 [ 993.693701][T14100] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 993.759137][ T1709] ch9200 9-1:2.31: probe with driver ch9200 failed with error -71 [ 993.783497][ T1709] usb 9-1: USB disconnect, device number 40 [ 994.355420][T15233] jffs2: notice: (15233) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 7 of xref (0 dead, 0 orphan) found. [ 994.694840][T15217] Bluetooth: hci4: command 0x0406 tx timeout [ 994.696275][T15217] Bluetooth: hci2: command 0x0406 tx timeout [ 994.743664][ T10] usb 3-1: USB disconnect, device number 21 [ 994.788340][ T4994] udevd[4994]: worker [15198] terminated by signal 11 (Segmentation fault) [ 994.788364][ T4994] udevd[4994]: worker [15198] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 994.828504][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 994.829237][ T10] keyspan 3-1:1.0: device disconnected [ 994.967594][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2174'. [ 997.231469][T15264] FAULT_INJECTION: forcing a failure. [ 997.231469][T15264] name failslab, interval 1, probability 5, space 0, times 9956 [ 997.231491][T15264] CPU: 0 UID: 0 PID: 15264 Comm: syz.0.2183 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.231506][T15264] Tainted: [L]=SOFTLOCKUP [ 997.231509][T15264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 997.231516][T15264] Call Trace: [ 997.231520][T15264] [ 997.231525][T15264] dump_stack_lvl+0x100/0x190 [ 997.231546][T15264] should_fail_ex.cold+0x5/0xa [ 997.231563][T15264] should_failslab+0xc2/0x120 [ 997.231578][T15264] __kvmalloc_node_noprof+0x113/0x9b0 [ 997.231592][T15264] ? pfifo_fast_init+0x177/0x3b0 [ 997.231605][T15264] pfifo_fast_init+0x177/0x3b0 [ 997.231617][T15264] ? __pfx_pfifo_fast_init+0x10/0x10 [ 997.231626][T15264] qdisc_create_dflt+0x124/0x490 [ 997.231640][T15264] dev_activate+0x64f/0xce0 [ 997.231654][T15264] ? __pfx_dev_activate+0x10/0x10 [ 997.231666][T15264] ? __local_bh_enable_ip+0xa5/0x120 [ 997.231681][T15264] __dev_open+0x490/0x8f0 [ 997.231697][T15264] ? __pfx___dev_open+0x10/0x10 [ 997.231714][T15264] ? __local_bh_enable_ip+0xa5/0x120 [ 997.231728][T15264] __dev_change_flags+0x596/0x850 [ 997.231743][T15264] ? __pfx___dev_change_flags+0x10/0x10 [ 997.231756][T15264] ? lock_acquire+0x1d1/0x380 [ 997.231771][T15264] ? dev_ioctl+0x331/0x10e0 [ 997.231788][T15264] netif_change_flags+0x8d/0x160 [ 997.231803][T15264] dev_change_flags+0xba/0x260 [ 997.231819][T15264] dev_ifsioc+0x1666/0x1f70 [ 997.231834][T15264] ? __pfx_dev_ifsioc+0x10/0x10 [ 997.231847][T15264] ? __pfx___mutex_lock+0x10/0x10 [ 997.231863][T15264] ? lock_acquire+0x1d1/0x380 [ 997.231878][T15264] ? dev_load+0x8e/0x240 [ 997.231891][T15264] ? dev_load+0x8e/0x240 [ 997.231908][T15264] dev_ioctl+0x342/0x10e0 [ 997.231923][T15264] sock_do_ioctl+0x1a0/0x280 [ 997.231940][T15264] ? __pfx_sock_do_ioctl+0x10/0x10 [ 997.231955][T15264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 997.231975][T15264] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 997.231985][T15264] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 997.231999][T15264] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 997.232013][T15264] sock_ioctl+0x599/0x6b0 [ 997.232025][T15264] ? __pfx_sock_ioctl+0x10/0x10 [ 997.232039][T15264] ? selinux_file_ioctl+0x1e0/0x290 [ 997.232049][T15264] ? selinux_file_ioctl+0x1e7/0x290 [ 997.232060][T15264] ? __pfx_sock_ioctl+0x10/0x10 [ 997.232071][T15264] __x64_sys_ioctl+0x18e/0x210 [ 997.232087][T15264] do_syscall_64+0x123/0x7b0 [ 997.232102][T15264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.232113][T15264] RIP: 0033:0x7fe9d9da8f19 [ 997.232124][T15264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.232134][T15264] RSP: 002b:00007fe9dad11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.232145][T15264] RAX: ffffffffffffffda RBX: 00007fe9da025fa0 RCX: 00007fe9d9da8f19 [ 997.232152][T15264] RDX: 00002000000002c0 RSI: 0000000000008914 RDI: 0000000000000005 [ 997.232159][T15264] RBP: 00007fe9dad11090 R08: 0000000000000000 R09: 0000000000000000 [ 997.232165][T15264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.232171][T15264] R13: 00007fe9da026038 R14: 00007fe9da025fa0 R15: 00007fff52f40098 [ 997.232185][T15264] [ 997.312489][T15264] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 997.628924][T15262] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2184'. [ 997.947105][T15277] loop9: detected capacity change from 0 to 8 [ 999.037615][T15277] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 999.037644][T15277] loop9: partition table partially beyond EOD, truncated [ 999.037811][T15277] loop9: p1 size 81768186 extends beyond EOD, truncated [ 999.170435][ T4994] udevd[4994]: worker [15195] terminated by signal 11 (Segmentation fault) [ 999.170459][ T4994] udevd[4994]: worker [15195] failed while handling '/devices/virtual/block/loop9' [ 999.337457][T15286] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2189'. [ 999.391570][ T4994] udevd[4994]: worker [15237] terminated by signal 11 (Segmentation fault) [ 999.391613][ T4994] udevd[4994]: worker [15237] failed while handling '/devices/virtual/block/loop9' [ 999.429449][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 999.429467][ T31] audit: type=1400 audit(1794416274.663:6433): avc: denied { read write } for pid=15287 comm="syz.4.2190" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 999.430053][ T31] audit: type=1400 audit(1794416274.663:6434): avc: denied { open } for pid=15287 comm="syz.4.2190" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 999.549885][ T4994] udevd[4994]: worker [15240] terminated by signal 11 (Segmentation fault) [ 999.549925][ T4994] udevd[4994]: worker [15240] failed while handling '/devices/virtual/block/loop9/loop9p1' [ 999.656817][ T4994] udevd[4994]: worker [15027] terminated by signal 11 (Segmentation fault) [ 999.656844][ T4994] udevd[4994]: worker [15027] failed while handling '/devices/virtual/block/loop9' [ 999.701205][T15298] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 999.843044][ T30] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1000.014260][ T30] usb 5-1: New USB device found: idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 1000.017432][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.021321][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1000.021347][ T30] usb 5-1: Product: syz [ 1000.021362][ T30] usb 5-1: Manufacturer: syz [ 1000.074801][ T31] audit: type=1800 audit(1794416275.313:6435): pid=15299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310840 res=0 errno=-22 [ 1000.115799][ T31] audit: type=1800 audit(1794416275.353:6436): pid=15299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=310871 res=0 errno=-22 [ 1000.116445][ T31] audit: type=1800 audit(1794416275.353:6437): pid=15299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=310847 res=0 errno=-22 [ 1000.181659][ T31] audit: type=1800 audit(1794416275.353:6438): pid=15299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=310848 res=0 errno=-22 [ 1000.495795][T15309] rxe_eth0 speed is unknown, defaulting to 1000 [ 1001.104065][ T25] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1001.125250][T15310] kAFS: unable to lookup cell '(G' [ 1001.272786][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 1001.274505][ T25] usb 10-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1001.275937][ T25] usb 10-1: config 2 has an invalid interface number: 31 but max is 0 [ 1001.275958][ T25] usb 10-1: config 2 has no interface number 0 [ 1001.275990][ T25] usb 10-1: config 2 interface 31 has no altsetting 0 [ 1001.318657][ T31] audit: type=1400 audit(1794416276.563:6439): avc: denied { map } for pid=15287 comm="syz.4.2190" path="socket:[58498]" dev="sockfs" ino=58498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1001.320800][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.320825][ T25] usb 10-1: Product: syz [ 1001.320838][ T25] usb 10-1: Manufacturer: syz [ 1001.320870][ T25] usb 10-1: SerialNumber: syz [ 1001.398262][ T31] audit: type=1800 audit(1794416276.623:6440): pid=15296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=314783 res=0 errno=-22 [ 1001.433486][T15321] [ 1001.436073][T15321] ====================================================== [ 1001.443767][T15321] WARNING: possible circular locking dependency detected [ 1001.451464][T15321] syzkaller #0 Tainted: G L [ 1001.458010][T15321] ------------------------------------------------------ [ 1001.465699][T15321] iou-wrk-15288/15321 is trying to acquire lock: [ 1001.472633][T15321] ffffffff911854a0 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_show+0x26/0x210 [ 1001.482363][T15321] [ 1001.482363][T15321] but task is already holding lock: [ 1001.490436][T15321] ffff88807aad0e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1001.499691][T15321] [ 1001.499691][T15321] which lock already depends on the new lock. [ 1001.499691][T15321] [ 1001.505142][ T3217] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1001.519400][T15321] [ 1001.519400][T15321] the existing dependency chain (in reverse order) is: [ 1001.529303][T15321] [ 1001.529303][T15321] -> #4 (&p->lock){+.+.}-{4:4}: [ 1001.537019][T15321] lock_acquire+0x1d1/0x380 [ 1001.542535][T15321] __mutex_lock+0x19f/0x1c10 [ 1001.548145][T15321] seq_read_iter+0xe1/0x1270 [ 1001.553744][T15321] kernfs_fop_read_iter+0x46c/0x610 [ 1001.560023][T15321] __kernel_read+0x397/0xac0 [ 1001.565627][T15321] integrity_kernel_read+0x7e/0xb0 [ 1001.571810][T15321] ima_calc_file_hash_tfm+0x25e/0x350 [ 1001.578277][T15321] ima_calc_file_hash+0x1e3/0x380 [ 1001.584353][T15321] ima_collect_measurement+0x952/0xb30 [ 1001.590904][T15321] process_measurement+0xe04/0x2360 [ 1001.597172][T15321] ima_file_check+0xbf/0x110 [ 1001.602775][T15321] security_file_post_open+0xc4/0x210 [ 1001.609248][T15321] path_openat+0x5d0/0x23f0 [ 1001.614751][T15321] do_file_open+0x20e/0x430 [ 1001.620245][T15321] do_sys_openat2+0x163/0x1d0 [ 1001.625935][T15321] __x64_sys_openat+0x12d/0x210 [ 1001.631822][T15321] do_syscall_64+0x123/0x7b0 [ 1001.637432][T15321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.642572][ T31] audit: type=1800 audit(1794416276.733:6441): pid=15296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=314815 res=0 errno=-22 [ 1001.668297][T15321] [ 1001.668297][T15321] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1001.677748][T15321] lock_acquire+0x1d1/0x380 [ 1001.683267][T15321] __mutex_lock+0x19f/0x1c10 [ 1001.688872][T15321] process_measurement+0x5ab/0x2360 [ 1001.695144][T15321] ima_file_check+0xbf/0x110 [ 1001.700738][T15321] security_file_post_open+0xc4/0x210 [ 1001.707197][T15321] path_openat+0x5d0/0x23f0 [ 1001.712709][T15321] do_file_open+0x20e/0x430 [ 1001.718204][T15321] file_open_name+0x1c3/0x3e0 [ 1001.723894][T15321] filp_open+0x2e/0x50 [ 1001.728927][T15321] kernel_read_file_from_path_initns+0xec/0x240 [ 1001.736346][T15321] _request_firmware+0x6f1/0x1410 [ 1001.742424][T15321] request_firmware+0x35/0x50 [ 1001.748121][T15321] reg_reload_regdb+0x87/0x540 [ 1001.753930][T15321] genl_family_rcv_msg_doit+0x214/0x300 [ 1001.760584][T15321] genl_rcv_msg+0x560/0x800 [ 1001.766100][T15321] netlink_rcv_skb+0x159/0x420 [ 1001.771907][T15321] genl_rcv+0x28/0x40 [ 1001.776836][T15321] netlink_unicast+0x668/0x950 [ 1001.782638][T15321] netlink_sendmsg+0x9ac/0x10c0 [ 1001.788531][T15321] ____sys_sendmsg+0xa99/0xc30 [ 1001.794334][T15321] ___sys_sendmsg+0x190/0x1e0 [ 1001.800022][T15321] __sys_sendmsg+0x160/0x210 [ 1001.805626][T15321] do_syscall_64+0x123/0x7b0 [ 1001.811233][T15321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.818271][T15321] [ 1001.818271][T15321] -> #2 (cb_lock){++++}-{4:4}: [ 1001.825897][T15321] lock_acquire+0x1d1/0x380 [ 1001.831401][T15321] down_read+0x94/0x4c0 [ 1001.836511][T15321] genl_release+0x7e/0x1d0 [ 1001.841918][T15321] netlink_release+0x104e/0x1fc0 [ 1001.847903][T15321] __sock_release+0xb3/0x260 [ 1001.853499][T15321] sock_close+0x1c/0x30 [ 1001.858615][T15321] __fput+0x3fb/0xb50 [ 1001.863544][T15321] fput_close_sync+0x118/0x250 [ 1001.869349][T15321] filp_close_sync+0x75/0xa0 [ 1001.874966][T15321] __x64_sys_close+0x81/0x110 [ 1001.880669][T15321] do_syscall_64+0x123/0x7b0 [ 1001.886258][T15321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.893281][T15321] [ 1001.893281][T15321] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 1001.902796][T15321] lock_acquire+0x1d1/0x380 [ 1001.908291][T15321] down_write+0x86/0x1f0 [ 1001.913509][T15321] __sock_release+0x86/0x260 [ 1001.919115][T15321] sock_close+0x1c/0x30 [ 1001.924252][T15321] __fput+0x3fb/0xb50 [ 1001.929186][T15321] __fput_sync+0xd7/0x100 [ 1001.934517][T15321] nvme_tcp_alloc_queue.isra.0+0xb26/0x1340 [ 1001.941554][T15321] nvme_tcp_configure_admin_queue+0x26/0x530 [ 1001.948680][T15321] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 1001.954780][T15321] nvme_tcp_create_ctrl+0xdb8/0x1430 [ 1001.961173][T15321] nvmf_dev_write+0x4ee/0xb60 [ 1001.966856][T15321] vfs_write+0x2aa/0x1040 [ 1001.972163][T15321] ksys_write+0x12a/0x250 [ 1001.977473][T15321] do_syscall_64+0x123/0x7b0 [ 1001.983075][T15321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.990113][T15321] [ 1001.990113][T15321] -> #0 (nvmf_dev_mutex){+.+.}-{4:4}: [ 1001.998408][T15321] check_prev_add+0xeb/0xe60 [ 1002.004018][T15321] __lock_acquire+0x1528/0x1f40 [ 1002.009912][T15321] lock_acquire+0x1d1/0x380 [ 1002.015425][T15321] __mutex_lock+0x19f/0x1c10 [ 1002.021021][T15321] nvmf_dev_show+0x26/0x210 [ 1002.026530][T15321] seq_read_iter+0x32f/0x1270 [ 1002.032227][T15321] seq_read+0x33b/0x4c0 [ 1002.037349][T15321] loop_rw_iter+0x305/0x6a0 [ 1002.042843][T15321] __io_read+0x1087/0x1470 [ 1002.048264][T15321] io_read+0x8d/0x230 [ 1002.053187][T15321] io_issue_sqe+0x15f/0x1c10 [ 1002.058787][T15321] io_wq_submit_work+0x270/0x1120 [ 1002.064858][T15321] io_worker_handle_work+0x69d/0x1750 [ 1002.071316][T15321] io_wq_worker+0x35e/0x13b0 [ 1002.076906][T15321] ret_from_fork+0x730/0xd60 [ 1002.082512][T15321] ret_from_fork_asm+0x1a/0x30 [ 1002.088311][T15321] [ 1002.088311][T15321] other info that might help us debug this: [ 1002.088311][T15321] [ 1002.099535][T15321] Chain exists of: [ 1002.099535][T15321] nvmf_dev_mutex --> &ima_iint_mutex_key[depth] --> &p->lock [ 1002.099535][T15321] [ 1002.114126][T15321] Possible unsafe locking scenario: [ 1002.114126][T15321] [ 1002.122297][T15321] CPU0 CPU1 [ 1002.128175][T15321] ---- ---- [ 1002.134052][T15321] lock(&p->lock); [ 1002.138212][T15321] lock(&ima_iint_mutex_key[depth]); [ 1002.146867][T15321] lock(&p->lock); [ 1002.153799][T15321] lock(nvmf_dev_mutex); [ 1002.158540][T15321] [ 1002.158540][T15321] *** DEADLOCK *** [ 1002.158540][T15321] [ 1002.167470][T15321] locks held by iou-wrk-15288/15321: 1, on CPU#0: [ 1002.174510][T15321] #0: ffff88807aad0e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1002.184273][T15321] [ 1002.184273][T15321] stack backtrace: [ 1002.190723][T15321] CPU: 0 UID: 0 PID: 15321 Comm: iou-wrk-15288 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.203008][T15321] Tainted: [L]=SOFTLOCKUP [ 1002.207735][T15321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1002.218772][T15321] Call Trace: [ 1002.222356][T15321] [ 1002.225552][T15321] dump_stack_lvl+0x100/0x190 [ 1002.230682][T15321] print_circular_bug.cold+0x178/0x1be [ 1002.236669][T15321] check_noncircular+0x146/0x160 [ 1002.242085][T15321] check_prev_add+0xeb/0xe60 [ 1002.247103][T15321] __lock_acquire+0x1528/0x1f40 [ 1002.252431][T15321] ? seq_read_iter+0x819/0x1270 [ 1002.257737][T15321] ? seq_read+0x33b/0x4c0 [ 1002.262475][T15321] lock_acquire+0x1d1/0x380 [ 1002.267415][T15321] ? nvmf_dev_show+0x26/0x210 [ 1002.272540][T15321] ? __pfx___might_resched+0x10/0x10 [ 1002.278332][T15321] __mutex_lock+0x19f/0x1c10 [ 1002.283360][T15321] ? nvmf_dev_show+0x26/0x210 [ 1002.288475][T15321] ? nvmf_dev_show+0x26/0x210 [ 1002.293608][T15321] ? __pfx___mutex_lock+0x10/0x10 [ 1002.299122][T15321] ? trace_kmalloc+0xeb/0x110 [ 1002.304252][T15321] ? __kasan_kmalloc+0xaa/0xb0 [ 1002.309463][T15321] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 1002.315533][T15321] ? nvmf_dev_show+0x26/0x210 [ 1002.320666][T15321] nvmf_dev_show+0x26/0x210 [ 1002.325608][T15321] seq_read_iter+0x32f/0x1270 [ 1002.330727][T15321] seq_read+0x33b/0x4c0 [ 1002.335278][T15321] ? __pfx_seq_read+0x10/0x10 [ 1002.340402][T15321] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 1002.347626][T15321] ? iov_iter_advance+0xac/0x6c0 [ 1002.353031][T15321] loop_rw_iter+0x305/0x6a0 [ 1002.357974][T15321] __io_read+0x1087/0x1470 [ 1002.362806][T15321] ? __lock_acquire+0x5c0/0x1f40 [ 1002.368223][T15321] io_read+0x8d/0x230 [ 1002.372577][T15321] ? __pfx_io_read+0x10/0x10 [ 1002.377591][T15321] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1002.384525][T15321] io_issue_sqe+0x15f/0x1c10 [ 1002.389564][T15321] io_wq_submit_work+0x270/0x1120 [ 1002.395076][T15321] io_worker_handle_work+0x69d/0x1750 [ 1002.400984][T15321] ? lock_acquire+0x1d1/0x380 [ 1002.406111][T15321] ? __pfx_io_worker_handle_work+0x10/0x10 [ 1002.412470][T15321] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1002.418357][T15321] ? __asan_memset+0x23/0x50 [ 1002.423489][T15321] io_wq_worker+0x35e/0x13b0 [ 1002.428509][T15321] ? __pfx_io_wq_worker+0x10/0x10 [ 1002.434004][T15321] ? lock_acquire+0x1d1/0x380 [ 1002.439127][T15321] ? do_raw_spin_lock+0x128/0x260 [ 1002.444635][T15321] ? find_held_lock+0x2b/0x80 [ 1002.449776][T15321] ? ret_from_fork+0x79/0xd60 [ 1002.454902][T15321] ? rcu_is_watching+0x13/0xc0 [ 1002.460127][T15321] ? __pfx_io_wq_worker+0x10/0x10 [ 1002.465636][T15321] ret_from_fork+0x730/0xd60 [ 1002.470681][T15321] ? save_fpregs_to_fpstate+0x19c/0x270 [ 1002.476771][T15321] ? __pfx_ret_from_fork+0x10/0x10 [ 1002.482363][T15321] ? rcu_is_watching+0x13/0xc0 [ 1002.487579][T15321] ? __switch_to+0x800/0x10e0 [ 1002.492712][T15321] ? __pfx_io_wq_worker+0x10/0x10 [ 1002.498222][T15321] ret_from_fork_asm+0x1a/0x30 [ 1002.503434][T15321] [ 1002.518054][ T31] audit: type=1800 audit(1794416277.753:6442): pid=15296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=314790 res=0 errno=-22 [ 1002.547735][ T3217] usb 9-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1002.564218][ T3217] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1002.564246][ T3217] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1002.632415][ T3217] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.632441][ T3217] usb 9-1: Product: syz [ 1002.632455][ T3217] usb 9-1: Manufacturer: syz [ 1002.632468][ T3217] usb 9-1: SerialNumber: syz [ 1002.633833][ T3217] usb 9-1: config 0 descriptor?? [ 1002.648214][ T3217] hub 9-1:0.0: bad descriptor, ignoring hub [ 1002.648238][ T3217] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1002.695381][ T3217] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input46 [ 1002.715485][ T25] ch9200 10-1:2.31: probe with driver ch9200 failed with error -71 [ 1002.717515][ T25] usb 10-1: USB disconnect, device number 13 [ 1002.828905][ T4994] udevd[4994]: worker [15308] terminated by signal 11 (Segmentation fault) [ 1002.828935][ T4994] udevd[4994]: worker [15308] failed while handling '/devices/platform/dummy_hcd.8/usb9/9-1' [ 1003.012940][ T4994] udevd[4994]: worker [15296] terminated by signal 11 (Segmentation fault) [ 1003.012987][ T4994] udevd[4994]: worker [15296] failed while handling '/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input46/mouse1' [ 1003.582918][ T30] usbhid 5-1:1.0: can't add hid device: -71 [ 1003.582962][ T30] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1003.583525][ T30] usb 5-1: USB disconnect, device number 67 [ 1003.621749][ T4994] udevd[4994]: worker [15299] terminated by signal 11 (Segmentation fault) [ 1003.621769][ T4994] udevd[4994]: worker [15299] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 1003.672326][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1003.822505][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1003.829545][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1003.829567][ T25] usb 3-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 1003.848473][ T25] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1003.861996][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.862011][ T25] usb 3-1: Product: syz [ 1003.862020][ T25] usb 3-1: Manufacturer: syz [ 1003.862027][ T25] usb 3-1: SerialNumber: syz [ 1004.536446][ T25] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1004.536581][ T25] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1004.569406][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 1004.569424][ T31] audit: type=1800 audit(1794416279.803:6481): pid=15326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=315261 res=0 errno=-22 [ 1004.569909][ T31] audit: type=1800 audit(1794416279.803:6482): pid=15326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=315262 res=0 errno=-22 [ 1004.570551][ T31] audit: type=1800 audit(1794416279.803:6483): pid=15326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=315241 res=0 errno=-22 [ 1004.570779][ T25] usb 3-1: USB disconnect, device number 22 [ 1004.570849][ T31] audit: type=1800 audit(1794416279.803:6484): pid=15326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=315263 res=0 errno=-22 [ 1004.694637][T15325] udevd[15325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.564430][ T3217] usb 9-1: USB disconnect, device number 41 [ 1006.567924][T15324] udevd[15324]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory