last executing test programs: 48.220554741s ago: executing program 3 (id=571): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$pagemap(0x0, &(0x7f0000000880)) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000e9ff00000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d0001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r4, 0x300, 0x70bd27}, 0x14}}, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c00)={0x0, &(0x7f00000008c0)=[@nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0x6a}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x0, 0xac0, 0x3}}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x0, @unmapped=0xf0000000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x40, 0x6, 0xc}}, @uexit={0x0, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro_nat=0x6408, 0x2, 0x74}}, @in_dx={0x69, 0x20, {0xd6de, 0x6}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x83b, 0x1}}, @rdmsr={0x66, 0x18, {0x2a9}}, @rdmsr={0x66, 0x18, {0x613}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x48b, 0x67, 0x7, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @code={0xa, 0x6c, {"b90a040000b8cf000000ba000000000f30660fe5cd0f20e035000200000f22e0c421fd5a2509000000d26b00f3460fc737c7442400fd000000c744240200000000c7442406000000000f011c2426460f7832f241aac4c279597581"}}, @nested_load_code={0x12e, 0x7e, {0x2, "c74424006d000000c74424020a000000ff2c24c4e2fd2a9e8262ffffc4c115e1e1b94e0a0000b899000000ba000000000f30c7442400f8000000c7442402170e0000ff1c24260f0179000f20e035000020000f22e0f30f320f78b90400000026dead09000000"}}, @in_dx={0x69, 0x20, {0x3abe}}, @wrmsr={0x65, 0x20, {0xb45, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x32a}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000c40)={0x1, 0xdddd0000, 0x1, 0x0, 0xef}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r5, &(0x7f0000001640)="8b", 0x11) 46.981428527s ago: executing program 1 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019600)=0x7) execve(&(0x7f00000196c0)='./file0\x00', 0x0, &(0x7f0000019700)) mkdirat(0xffffffffffffff9c, &(0x7f0000019740)='./file0\x00', 0x0) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='jffs2\x00', 0x800000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019840)=ANY=[@ANYBLOB="02000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="0a00000000000896c30000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) timer_create(0x0, 0x0, &(0x7f00000005c0)) r3 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000002c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000340)}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x6, 0xd, 0xffffffffffffffff, &(0x7f0000000240)) 43.769010125s ago: executing program 2 (id=578): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpeername$inet6(r2, 0x0, &(0x7f00000004c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x55}}}, &(0x7f0000000200)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x33b2, 0x6043, 0x1, 0x91, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc822, 0x800, 0x1, 0x240}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800093ea, 0x2000, 0x4003bfff, 0x102b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1001, 0x2001ab, 0x0, r1}}], 0x1, 0x0, 0x0) 43.716313585s ago: executing program 0 (id=579): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$pagemap(0x0, &(0x7f0000000880)) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000e9ff00000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d0001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r4, 0x300, 0x70bd27}, 0x14}}, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000c40)={0x1, 0xdddd0000, 0x1, 0x0, 0xef}) write(r5, &(0x7f0000001640)="8b", 0x11) 43.488586477s ago: executing program 3 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0xc5) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001800)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000003840)=0x7) r0 = getpid() setrlimit(0xa, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000038c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000003940), 0x0, 0x0) read$msr(r1, &(0x7f0000003980)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f000001cbc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f000001ec00)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}}, 0x50) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f000001ca40), 0x8000) read(r4, &(0x7f0000000340)=""/206, 0xce) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f000001cb80)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) tkill(r3, 0x7) 40.184544432s ago: executing program 3 (id=582): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019600)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000019640)) execve(&(0x7f00000196c0)='./file0\x00', 0x0, &(0x7f0000019700)) mkdirat(0xffffffffffffff9c, &(0x7f0000019740)='./file0\x00', 0x0) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='jffs2\x00', 0x800000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="0a00000000000896c30000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) timer_create(0x0, 0x0, &(0x7f00000005c0)) r3 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000002c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000340)}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x6, 0xd, 0xffffffffffffffff, &(0x7f0000000240)) 40.139150862s ago: executing program 0 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fanotify_init(0x40, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa880, 0x97) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000308000b4000003ce013ad000068000480340001800b000100657874686472000024000280080001400000000b080003400000004d0500020007000000080004400000002f3000018008000100636d7000240002801000038009000100910d000000000000080001400000000208000240000000000900010073797a3000000000"], 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 39.440244443s ago: executing program 0 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xab1f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x43000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa575}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x66e}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="3237f0fb6ac0e54c5a5b05365cd6179b520dc64b3a562363a1183697263b0c088a61e472b114c529d25a61026d8e88392ace7f475d027104f34558b6c9ccf00b9add0d13eb0a688e202a64186f96d8ba3e0a6122ef95eed0732cb414ecf8f2000000657826fb8448306dffff0000856cf8e72d369988618f403269f50aae2b8e8bbafb2d2250dbfef4591c07000019c4a6115cc897a9ca42bfed8eb2a944312dda9fde0824b310ef45ca01a7717a6abc699da305c62074b1312f217db0477f0c5883d6ff896fbe4dd160b587f5c2d2773e251060b0e9733e00ba088816bcf2d66f9e98a53ab7a90d002aeafb354a5b", 0xffffffffffffffba) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) mkdir(&(0x7f00000003c0)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='dir0\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r2 = getpid() sigaltstack(&(0x7f0000000700)={0x0, 0x80000001}, 0x0) r3 = io_uring_setup(0xc90, &(0x7f0000000740)={0x0, 0x4f9, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000840)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000008c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) sync() r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES8=r5, @ANYRES16=r2, @ANYRES8, @ANYRES32=r5, @ANYRES8, @ANYRESDEC=r4], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x200}) readv(r6, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/214, 0xd6}], 0x1) 38.068703658s ago: executing program 2 (id=585): r0 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x541b, 0x20000000000009) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') gettid() r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x2008800, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f5b746d6f64653d30d33030303030303030303030303030303130303038302c757b65725f29643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000003500)="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", 0x2000, &(0x7f0000005500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000055c0)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000005600)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x2b, 0x0, 0x30004506, 0x0, 0x6, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, r6, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0x10d615, 0xb, 0x3, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) write$UHID_INPUT(r4, &(0x7f0000000480)={0x8, {"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", 0x1000}}, 0x1006) 37.019992926s ago: executing program 1 (id=586): socket$inet(0x2, 0xa, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000003b80)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003bc0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000003c00)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000003c40)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000003c80), 0x2, 0x143102) writev(r2, &(0x7f0000003cc0)=[{&(0x7f0000003d00)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000003d40)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x1, 0x7]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000004180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000004240)={0xd0, r4, 0x1, 0xfffffffd, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1000001}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x4000000000400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x7fffffffffffffff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000004340)={0x0, 'batadv0\x00', {0x5}}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000080)={0x29, {"ee338b717394f21c36fb7d53de4057f0", "2943183329a6a950e0bb2b43951f4d0e", "179b7cc78187f016b830fead6afa5f8c"}, 0x8, 0x2}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0x18, 0x0, &(0x7f0000000540)=0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r7}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)=""/122, 0x7a}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f0000000900)=""/4093, 0xffd}, {&(0x7f0000001900)=""/151, 0xa6}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/127, 0x7f}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x80003}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)=""/4088, 0xff8}, {&(0x7f0000002b00)=""/4097, 0x1001}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) 36.911404673s ago: executing program 2 (id=587): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000019640)) openat$dir(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x40, 0x16f) execve(&(0x7f00000196c0)='./file0\x00', 0x0, &(0x7f0000019700)) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='jffs2\x00', 0x800000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="0a00000000000896c30000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) timer_create(0x0, 0x0, &(0x7f00000005c0)) r4 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000002c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000340)}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x6, 0xd, 0xffffffffffffffff, &(0x7f0000000240)) 35.868475513s ago: executing program 2 (id=588): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x80000, 0xfffffffc) io_setup(0x9, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_debug_messages', 0x28201, 0x1ca) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000040)=0xffffffffffffff84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() sync() r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) futimesat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={{}, {0x77359400}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000013c0), 0x40000000000009f, 0x0) sync() ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fffe) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r2) 34.65308088s ago: executing program 3 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0xc5) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001800)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000003840)=0x7) r0 = getpid() setrlimit(0xa, &(0x7f0000003880)={0x9, 0x6}) sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000003940), 0x0, 0x0) read$msr(r1, &(0x7f0000003980)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f000001cbc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f000001ec00)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}}, 0x50) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f000001ca40), 0x8000) read(r4, &(0x7f0000000340)=""/206, 0xce) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f000001cb80)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) tkill(r3, 0x7) 33.709641291s ago: executing program 0 (id=591): socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB="1f6f6ebc8ae4f9b936d1aa3bbd3c98d580d64ba42e2a98d3704eacf4ff1952356cd6733e118374e98686ff56877d1b0bcbee805977733e484baa3952e246b626fece9155c975f124177fe2d8f3a57c53d0a301ba9a2bf808ef27ad043c015e838de9d31b80e61bc3672c878a43658225920b1681a34a28b8d32a33ab41c3a7e0580675"]) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000023c0)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002400), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000002440), 0x1, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000002480), 0x2, 0x141102) writev(r2, &(0x7f00000024c0)=[{0x0}, {0x0}], 0x2) read$char_usb(0xffffffffffffffff, &(0x7f0000002540)=""/236, 0xec) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f0000002640)={0x3, 0x80000000, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000002680)={0x3, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) add_key(&(0x7f00000026c0)='keyring\x00', &(0x7f0000002700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000002740)='id_legacy\x00', 0x0, &(0x7f0000002780)="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", 0x165, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000002940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa0000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002a80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002ac0)='./sys\x00', &(0x7f0000002b00)='sysfs\x00', 0x800, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002b40)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write$P9_RREADLINK(r5, &(0x7f0000002b80)={0x79, 0x17, 0x2, {0x2f, './sys/module/kvm/parameters/nx_huge_pages/file0'}}, 0x38) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000002bc0)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r4}, [@crypt={0x0, 0x1080, 0x0, 0xa8, 'crypt\x00', {'capi:xts(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef01234567', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) ioctl$DM_TARGET_MSG(r3, 0xc138fd0e, &(0x7f0000002dc0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev={r6}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) ioctl$DM_DEV_REMOVE(r3, 0xc138fd04, &(0x7f0000002f40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 33.708280911s ago: executing program 3 (id=592): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$pagemap(0x0, &(0x7f0000000880)) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000e9ff00000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d0001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r4, 0x300, 0x70bd27}, 0x14}}, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c00)={0x0, &(0x7f00000008c0)=[@nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0x6a}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x0, 0xac0, 0x3}}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x0, @unmapped=0xf0000000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x40, 0x6, 0xc}}, @uexit={0x0, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro_nat=0x6408, 0x2, 0x74}}, @in_dx={0x69, 0x20, {0xd6de, 0x6}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x83b, 0x1}}, @rdmsr={0x66, 0x18, {0x2a9}}, @rdmsr={0x66, 0x18, {0x613}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x48b, 0x67, 0x7, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @code={0xa, 0x6c, {"b90a040000b8cf000000ba000000000f30660fe5cd0f20e035000200000f22e0c421fd5a2509000000d26b00f3460fc737c7442400fd000000c744240200000000c7442406000000000f011c2426460f7832f241aac4c279597581"}}, @nested_load_code={0x12e, 0x7e, {0x2, "c74424006d000000c74424020a000000ff2c24c4e2fd2a9e8262ffffc4c115e1e1b94e0a0000b899000000ba000000000f30c7442400f8000000c7442402170e0000ff1c24260f0179000f20e035000020000f22e0f30f320f78b90400000026dead09000000"}}, @in_dx={0x69, 0x20, {0x3abe}}, @wrmsr={0x65, 0x20, {0xb45, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x32a}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000c40)={0x1, 0xdddd0000, 0x1, 0x0, 0xef}) write(r5, &(0x7f0000001640)="8b", 0x11) 32.247740042s ago: executing program 1 (id=593): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000600)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0xa8}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000700)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000007c0)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) fsopen(&(0x7f00000008c0)='bdev\x00', 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000900)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000940)=[@text32={0x20, &(0x7f0000000980)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000009c0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 31.783357804s ago: executing program 4 (id=594): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000500)={0x8, 0x1, {0x8, @usage=0x4, 0x0, 0x7, 0x8001, 0x8000000000000001, 0x4, 0x2, 0x0, @usage, 0x7fffffff, 0xa03, [0x5, 0x0, 0x4, 0x9, 0x9, 0x6]}, {0xa3, @usage=0x16, 0x0, 0xfffffffffffffff9, 0x1, 0x9, 0x9, 0x9, 0x42, @struct={0x401, 0x200000}, 0xfff, 0x5, [0x0, 0x100000001, 0xfb5, 0x4, 0x5, 0xffffffffee753293]}, {0x1, @struct={0x800, 0x1}, 0x0, 0x7, 0x4, 0x6e4b, 0x5, 0x0, 0x1, @struct={0xfffffff7, 0x4}, 0x5, 0x5, [0xff, 0x4968, 0x310a, 0x2, 0x4, 0x3]}, {0x5, 0x46b, 0x59}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 31.5500173s ago: executing program 4 (id=595): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000800)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10001, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000880)={&(0x7f00000008c0)=@in6={0x63, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 31.46335001s ago: executing program 0 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019600)=0x7) execve(&(0x7f00000196c0)='./file0\x00', 0x0, &(0x7f0000019700)) mkdirat(0xffffffffffffff9c, &(0x7f0000019740)='./file0\x00', 0x0) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='jffs2\x00', 0x800000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019840)=ANY=[@ANYBLOB="02000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="0a00000000000896c30000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) timer_create(0x0, 0x0, &(0x7f00000005c0)) r3 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000002c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000340)}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x6, 0xd, 0xffffffffffffffff, &(0x7f0000000240)) 31.279862308s ago: executing program 4 (id=597): socket$inet(0x2, 0xa, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000003b80)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003bc0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000003c00)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000003c40)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000003c80), 0x2, 0x143102) writev(r2, &(0x7f0000003cc0)=[{&(0x7f0000003d00)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000003d40)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x1, 0x7]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000004180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000004240)={0xd0, r4, 0x1, 0xfffffffd, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1000001}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x4000000000400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x7fffffffffffffff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000004340)={0x0, 'batadv0\x00', {0x5}}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0x18, 0x0, &(0x7f0000000540)=0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r7}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)=""/122, 0x7a}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f0000000900)=""/4093, 0xffd}, {&(0x7f0000001900)=""/151, 0xa6}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/127, 0x7f}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x80003}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)=""/4088, 0xff8}, {&(0x7f0000002b00)=""/4097, 0x1001}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) 30.051135093s ago: executing program 0 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xab1f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x43000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa575}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x66e}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="3237f0fb6ac0e54c5a5b05365cd6179b520dc64b3a562363a1183697263b0c088a61e472b114c529d25a61026d8e88392ace7f475d027104f34558b6c9ccf00b9add0d13eb0a688e202a64186f96d8ba3e0a6122ef95eed0732cb414ecf8f2000000657826fb8448306dffff0000856cf8e72d369988618f403269f50aae2b8e8bbafb2d2250dbfef4591c07000019c4a6115cc897a9ca42bfed8eb2a944312dda9fde0824b310ef45ca01a7717a6abc699da305c62074b1312f217db0477f0c5883d6ff896fbe4dd160b587f5c2d2773e251060b0e9733e00ba088816bcf2d66f9e98a53ab7a90d002aeafb354a5b", 0xffffffffffffffba) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) mkdir(&(0x7f00000003c0)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='dir0\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r2 = getpid() sigaltstack(&(0x7f0000000700)={0x0, 0x80000001}, 0x0) r3 = io_uring_setup(0xc90, &(0x7f0000000740)={0x0, 0x4f9, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000840)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f00000008c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) sync() r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES8=r6, @ANYRES16=r2, @ANYRES8, @ANYRES32=r6, @ANYRES8, @ANYRESDEC=r4], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x200}) readv(r7, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/214, 0xd6}], 0x1) 29.510091406s ago: executing program 2 (id=599): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019600)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000019640)) openat$dir(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x40, 0x16f) execve(&(0x7f00000196c0)='./file0\x00', 0x0, &(0x7f0000019700)) mkdirat(0xffffffffffffff9c, &(0x7f0000019740)='./file0\x00', 0x0) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='jffs2\x00', 0x800000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019840)=ANY=[@ANYBLOB="02000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="0a00000000000896c30000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@arena={0x21, 0x0, 0x0, 0x33, 0x400, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000019980), 0xc) r4 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000002c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000340)}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x6, 0xd, 0xffffffffffffffff, &(0x7f0000000240)) 29.459359308s ago: executing program 4 (id=600): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019600)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000019640)) execve(&(0x7f00000196c0)='./file0\x00', 0x0, &(0x7f0000019700)) mkdirat(0xffffffffffffff9c, &(0x7f0000019740)='./file0\x00', 0x0) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='jffs2\x00', 0x800000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="0a00000000000896c30000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) timer_create(0x0, 0x0, &(0x7f00000005c0)) r3 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000002c0)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000340)}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x6, 0xd, 0xffffffffffffffff, &(0x7f0000000240)) 29.383049961s ago: executing program 1 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xab1f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x43000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa575}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x66e}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="3237f0fb6ac0e54c5a5b05365cd6179b520dc64b3a562363a1183697263b0c088a61e472b114c529d25a61026d8e88392ace7f475d027104f34558b6c9ccf00b9add0d13eb0a688e202a64186f96d8ba3e0a6122ef95eed0732cb414ecf8f2000000657826fb8448306dffff0000856cf8e72d369988618f403269f50aae2b8e8bbafb2d2250dbfef4591c07000019c4a6115cc897a9ca42bfed8eb2a944312dda9fde0824b310ef45ca01a7717a6abc699da305c62074b1312f217db0477f0c5883d6ff896fbe4dd160b587f5c2d2773e251060b0e9733e00ba088816bcf2d66f9e98a53ab7a90d002aeafb354a5b", 0xffffffffffffffba) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) mkdir(&(0x7f00000003c0)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='dir0\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r2 = getpid() sigaltstack(&(0x7f0000000700)={0x0, 0x80000001}, 0x0) r3 = io_uring_setup(0xc90, &(0x7f0000000740)={0x0, 0x4f9, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000840)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000008c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) sync() r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES8=r5, @ANYRES16=r2, @ANYRES8, @ANYRES32=r5, @ANYRES8, @ANYRESDEC=r4], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x200}) readv(r6, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/214, 0xd6}], 0x1) 28.34451554s ago: executing program 2 (id=602): socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c010000100001000000000000000000ffffffff0000000000000000000000008895f90ac2bc8e16000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d6320000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200020057000000000000004c001400686d6163287368613235362900"/244], 0x13c}}, 0x4004004) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, 0x0) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000a40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000ac0), 0x0, 0x0) read$msr(r8, &(0x7f0000000b00)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x8, &(0x7f0000019b00)=0xa) openat$iommufd(0xffffffffffffff9c, &(0x7f0000019b40), 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000019bc0)={0x0, 0x0, &(0x7f0000019c00)={&(0x7f0000019d40)=@deltfilter={0x161c, 0x2d, 0x1f924e4a1ddf681f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xe}, {0x10, 0x8}, {0x3, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2c}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_cgroup={{0xb}, {0x15b4, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x1f7a}, {0x2, 0x1, 0x7, 0x3}}}]}]}, @TCA_CGROUP_EMATCHES={0x184, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xb851, 0x8, 0x81}, {0xffffffffffffffff, 0x2, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0xea9}, {0x7, 0xffff, 0x4, 0xffff}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1ff, 0x2, 0x8}, {0x8}}}, @TCF_EM_CONTAINER={0x10, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x6}, "e6aad693"}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x3ff, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x400}, {0x7, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x10}, {0x9, 0x5, 0x2, "249bd51474"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0xffff}, {0xffffffffffffffff, 0x2, 0x6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x1}, {0x5, 0xffffffff, 0x2, 0x3, 0x7, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xa9, 0x7, 0x9}, {{0x4, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x5d7}, {0x10, 0x9, 0x2, "d66b9a8691383d850b"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x30e, 0x8, 0x7f}, {0x4, 0x4, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x101, 0x8, 0x101}, {0x3, 0x5, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5a91}, {0x0, 0x8, 0x4, 0x8}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x300, 0x1, 0x8}, {0x49, 0xa699, 0x3, 0x1, 0xf, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x401, 0x2, 0x23}, {0x4, 0x7, 0x1, "72dcbf2fd43f42"}}}]}]}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_ACT={0x4d0, 0x1, [@m_gact={0x108, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffa, 0x10000, 0xffffffffffffffff, 0xfffffbee, 0x3}}]}, {0xc1, 0x6, "f4057579844c6acbf6393a5a441d4569234488e00f07189437e3f62c556114bbdca48caad13aee7b4e29c6320800dcf28a3e88b741fd4c89f9dc772a92828ff81659a7ccbf6c4f36a17d7824011dcad86bd892602552f9d86f5261a6c86e859cd69b2f750d3ed3c9839d770f9bb54eab4306f102dbf313e790986991793b8cbee84a0d8456746b9a0c1d0e0005c3f2bce2875bc991ec4600ea0351652513ba2eb94854854b0f69866f69226e0fa56533410ca3c0d24e6af9d75fd3e4a1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x54, 0xe, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x5, 0x6, 'Y'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x100, 0x1b, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xc7, 0x6, "b44686cd3923793075a6f0b78bbea77bba50fb71cd952c9be3faca831f2b7b01bf152d4b80b1591f37c306d6b93940cbc68339e605a0bb8498913a5c68ef7d08be6b6d90627c30c75ffe62252541736430c97bb4f09b64a1fe614c3c43bdd78c5fed78d423b433f319e6bb81b544c3b5d613864b7a99b571b8a891746b88b1adac7fc6fb51ca5ddfbfe5d331d462a742b37de2144f4a8eaafc15c7e71e153b9aa4ff9d173e20f18cd616c83a85e0c86572c2a73be1b89760c7aab82b13d3c7b8d9b7be"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x18c, 0x3, 0x0, 0x0, {{0x7}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x104, 0x6, {0x2c, 'security\x00', 0x4, 0x5, "109fdd040b896b95a77f18cf9f4443e7469ff43690e06d35ea1f7403f5899eb4f5aa408f13ff50df6cdada8b37c0b3e4b54183ad956c36c4c36dd711a8b48ef48cb641e7e19245c321497b5ab57876e436950013f274472107ca2291747815e2a8ed7dd1ba74cf7a91c2728f3c9547dec0934043a851098e485bc9c0880e46534e222201c944f978aaab6c687f70424615103f36de88452acc6a29a53ffdb360c17de8d84206703158df59d46516269df665c22af94faad42a9b134aee6738ce9530b6e147ebd86d6b6a8a797ecc9f18ad9b6048f608d1d9d3ed"}}]}, {0x60, 0x6, "a1b4f02bb5b0d6a85d7c0ed0a419c8695cdf039a149d644f49bc312c6676daf7524499fe6cd34e2c3032217d7ac70e8c992e9f088ace0cd885ebd1f81206214306494590e22d11652cb25df729adce766372bdb8f1dea7b13f292d53"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0xe4, 0x1e, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xcf, 0x1, 0x2, 0x9, 0x1ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x483, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5f3f, 0x10000000, 0x8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x20000000, 0x7, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf9, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x6, 0xffffffffffffffff, 0x100, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x53, 0x5, 0x3, 0x3, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xe, 0x1, 0x7, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x174b, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_CGROUP_ACT={0x368, 0x1, [@m_tunnel_key={0x110, 0x18, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x189e}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xd}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x400, 0x7, 0x3, 0x101}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x7d, 0x6, "0aa0cc7a649cc67ae9c391bd653458d4f620f6b467318016f4bed099f204cde68c33e98ee5eb68dee75561a7174b192b3f05d89651559390b2fa9847c4fc08267b6cb32da435ebc64cb4e8f697e17f00023575ed02730c4118c439e5ba1fb0af73714379b033c003919b97a16b81b663a87fefe72769393939"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x9c, 0x1f, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x80, 0x6, 0xffffffff, 0x7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffff9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x97, 0x40, 0x6, 0x6, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x14c}, @TCA_SAMPLE_RATE={0x8}]}, {0x8, 0x6, "248dd99b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0xa0, 0xe, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x1, 0x6, 0x40, 0xc2}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x0, 0x9, 0x8, 0x4}, {0x8, 0xc, 0xb, 0x75}, {0x2, 0x7, 0x2, 0x5}]}]}, {0x3a, 0x6, "a271dc3fe0eeaa6171b0f896993ca48499f28094b4147ac04b8eedefc10bed6efc66a57c869f707c00be12fc759c9f52dda28fa1d36f"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x118, 0x18, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xff3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8cf}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc3f}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xac, 0x6, "77204cd0e92071c365ea521f9a258f733b7689743fd7118d8c70b9ad87cf8555931fd1b2ba5d6fb2f3076ff5d767e0269fcb69722e9c24f63f7fd45e0aa851242cdbdf2261c3674927e49a91f38b1b0cdb1715007985c2918b5e0919fb795fd2edbb5d3a82ad30f62d539333b3dc0225cb50856f3e25a07167c28d394ba0a51f7f70b235912592133ba3c9c9a9398892673c859f8c1091d23a90ca6acc9682cc7859f9edbc0c0617"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x394, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x6}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="1b614c618bf8", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="a0"]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="8f9667", @TCF_META_TYPE_VAR="ec6942ce96c1e84ce5", @TCF_META_TYPE_VAR="6b1ae2a3"]}]}}, @TCF_EM_META={0xd4, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="1e1acc3ba8e4", @TCF_META_TYPE_VAR="2a35941fed16", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="40250b93851f"]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="6943ac7794"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0x5, 0x5}}}, @TCA_EM_META_RVALUE={0x3a, 0x3, [@TCF_META_TYPE_VAR="8f3e0d40c0b691d5f3d2", @TCF_META_TYPE_VAR="c3dbf8f34aa020e68b", @TCF_META_TYPE_VAR="91004cae109e", @TCF_META_TYPE_VAR=']', @TCF_META_TYPE_VAR="887b8f51394b52cd27", @TCF_META_TYPE_VAR="6a5bd0b37a2a", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="d8", @TCF_META_TYPE_VAR="ac2206ff353e8a9b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x7, 0x1}, {0x3, 0x9}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c7d58ab491fb", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="dcb8", @TCF_META_TYPE_VAR="c4209e72", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="3bdf6b", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x800, 0xbd}, {0x96cf, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x76, 0x2}, {0x5, 0x0, 0x2}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xac1, 0x7, 0x9}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0xff, 0x4, 0x1000}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1]}]}}]}, @TCA_EMATCH_TREE_LIST={0x204, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x15}, {0x1, 0x4, 0x6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x48f}, {0x0, 0x4, 0xfff9, 0x4, 0x1, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x1}, {0xffffffffffffffff, 0x6, 0x4}}}, @TCF_EM_CONTAINER={0x5c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x1}, "3e31456af16851431b9e184ad07f84c8cec5d22c3eab2fd69386d77a777c81cf23ebc6d685a502bb37cfeca989d40ae5c2b460d7dc4e12513744b94aed1390fededb0b2a78e11270c8a2d728232304e3"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x401}, {0x2, 0x3}}}, @TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR='*;', @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="9007c80e8a", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="916b78698c41"]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0xb2f7}, {0x7, 0x1, 0x9, 0x3, 0xb}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="d658161269dbb1", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CONTAINER={0xf0, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x6}, "bfbd096e1d5f1a07ad185bc84b6546b5f8ac4ad171dfae47a705ad09943a7733236b27250ea7320f2749ef2649ce1d40dae641b683c39a9c32b48d580fe8f6e6020124bf6febf634281a5272ff9769612285851ad5c7cb374b9380ee02af5380bd0d387a382c0ca1e5d722afd27bbceec48851114c8897617dcc9080cffd5eec9e9714991d7f8c32d67f72b4b4db6cc96f7316f47e001ca0eddbd104a87c3b6bb01be3aedb21f4d0c151ab7fb865710132c1bced576a7d5c2f3797296688c8dc659bb63bbf73096a25f725040c5d5ba0648580b4ee60fc56fc0a465c6afd185d0fe01f"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x200, 0x2, 0x1bb1}, {0x6, 0x3, 0x2, "93f370"}}}]}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xedaa}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9b}}]}, @TCA_CGROUP_POLICE={0x838, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfba}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0x6, 0x2b02, 0x7, 0x8, 0x3, 0x8, 0x4, 0x7, 0x3, 0x0, 0x6, 0xc, 0x80, 0x7, 0x2, 0x9, 0x8, 0x280, 0x10001, 0xfff, 0x0, 0x9, 0xf08, 0x7, 0x40, 0x1, 0x8000, 0x800, 0xc170, 0x10000, 0x6, 0x7, 0x5, 0xc3, 0x0, 0x7, 0x7fffffff, 0x3, 0x3, 0xffffffff, 0x10000, 0x8, 0x1, 0xb30, 0x0, 0xd, 0x4, 0x10001, 0x2, 0xc3a7, 0x57691d93, 0x7ff, 0x5, 0x101, 0x1e, 0xfffffffe, 0x2, 0x5, 0x4, 0x9, 0x0, 0xffffffff, 0x0, 0x5, 0x40, 0x3, 0xdf6, 0x5, 0xa, 0x2, 0x8001, 0xe7, 0x61, 0xf, 0x10001, 0x7, 0x1, 0xfffffffb, 0x3ff, 0x800, 0x7, 0x1, 0x3, 0xa, 0x7, 0x3, 0xae4, 0x0, 0x5, 0xffffff00, 0x6, 0x2, 0x6, 0x9, 0x9, 0xe, 0x8, 0x80000001, 0x9a, 0xfd, 0xfffffffb, 0x5, 0x74ce, 0x3, 0x31d, 0x2, 0x7, 0x401, 0x7, 0x3cad, 0x6, 0x6, 0x5388, 0x8000, 0x4, 0x2, 0x4, 0x10, 0x1, 0xffffff4e, 0x0, 0x4, 0x80000000, 0x7fffffff, 0x8, 0xa, 0x729, 0x1, 0x6, 0x9, 0x7, 0x7f, 0x9, 0xdd, 0xd, 0x7, 0x5, 0x7fff, 0x3, 0x99, 0x56562ed4, 0x8, 0x3ea, 0x1ff, 0x7ff, 0x1000, 0x5, 0xf1f, 0x8f0, 0x2, 0xf, 0xc, 0x400, 0xab, 0x9, 0xa, 0xc6f, 0x7, 0x1, 0x80, 0x5f, 0x4, 0x93, 0x3, 0x0, 0xfffffffb, 0xb, 0x8, 0x80000000, 0xc50, 0x9, 0x840, 0xf, 0xc885, 0x1, 0x1, 0x9, 0x5, 0x6, 0xb2, 0x1, 0x3, 0xf30, 0xb190, 0xa17, 0x11bb, 0x942, 0x8001, 0x3, 0x5, 0x6, 0xf2, 0x3, 0xffffffff, 0x3, 0x7, 0x3, 0x80000001, 0x401, 0x2, 0x3, 0x0, 0x5, 0x9, 0x200, 0x8, 0x7, 0x8, 0x55, 0x1, 0x2a, 0x7fffffff, 0x6, 0x1, 0x2, 0x4, 0x401, 0x1, 0xfffffffe, 0x35c1457d, 0x9, 0x3, 0xd439, 0x3ff, 0x5, 0xfffffff5, 0xd, 0x8, 0xbfc, 0x2, 0x7fff, 0x3, 0x6, 0x9, 0x4, 0xfffffffc, 0xffffffff, 0x2, 0x0, 0x7f, 0x7, 0x3, 0x14e00, 0x0, 0x1, 0x5, 0xc72, 0x4, 0x101, 0x81, 0xff, 0x0, 0x2, 0xae]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x4, 0x878f, 0x876, 0x6, 0xe, 0x401, 0x3, 0x7, 0x8, 0x2, 0x5, 0x0, 0x8, 0x5, 0xa, 0x6, 0xcd9a, 0x4, 0x8001, 0x8001, 0x80, 0x9, 0x7, 0x7f, 0xc, 0x2, 0x711, 0x2, 0x9, 0xd59d, 0x8, 0x4, 0x1, 0xfffffffc, 0x2, 0x9, 0x0, 0xfffffffb, 0x0, 0xc4f, 0xa, 0x5, 0xd, 0x0, 0x581, 0x7, 0x0, 0x38, 0x100, 0xe6f00000, 0x6, 0x0, 0x85, 0x10001, 0x4, 0xb0, 0xf38, 0x1, 0x0, 0xe9dc, 0x2, 0x10001, 0x4, 0x9, 0x8000, 0x3ff, 0xd, 0xc5, 0x6, 0x4, 0x6, 0x400, 0xfffffe01, 0x400, 0x7fffffff, 0x101, 0x7fff, 0xa09, 0x6, 0x7, 0x81, 0x6, 0x9ec, 0x2, 0x0, 0x800, 0x4, 0x8, 0x1000, 0x3, 0xc4, 0x800, 0x1, 0x6, 0x9, 0x6, 0x2, 0x6, 0x9, 0x80000000, 0x80, 0x3, 0x0, 0x5, 0x5, 0x61, 0x3, 0x5, 0x8, 0x6, 0x8ff, 0x536, 0x80000000, 0x2207, 0x9, 0x9, 0xbbf00f, 0x2e0e, 0x9, 0x7, 0x800, 0x1000, 0x1, 0x7ff, 0x0, 0x5, 0x80000000, 0xfffffff2, 0x2, 0x4, 0x8000, 0x8, 0x0, 0x2, 0x9, 0x9, 0xd711, 0x5, 0x5f, 0x4, 0x2, 0x3, 0xa, 0x10001, 0x6, 0x6, 0x4, 0x0, 0x721, 0x2, 0x10001, 0x164, 0x9, 0x7fffffff, 0x6e0, 0xb, 0xfffffffa, 0x0, 0x7fffffff, 0x2, 0x1ff, 0x9, 0x10, 0x3, 0x47c, 0x9, 0x4, 0x2e5a, 0x6, 0x8a, 0x5, 0x4, 0x81, 0x7, 0x9f0, 0x2, 0x7, 0x4, 0x5, 0x9a, 0x10001, 0x5, 0x401, 0x7, 0x4, 0x6, 0x4, 0x4, 0xa63, 0x8001, 0x70fef3e0, 0x5, 0x10, 0x1, 0x3, 0x2, 0x2, 0x0, 0x4, 0x6, 0x173, 0x6, 0x8001, 0x1, 0x8, 0x2, 0x400, 0xbf, 0x7f, 0x624d, 0x4, 0x1, 0x3, 0x5, 0x200, 0x4, 0x6, 0x8, 0xfffffffd, 0x8, 0x1, 0xe38c, 0x3ff, 0x5, 0x6, 0x6, 0x8, 0x3, 0x7fffffff, 0x1, 0x7, 0x4, 0x0, 0xe, 0xf, 0x7, 0x6d, 0xb0d, 0x0, 0x80000001, 0x1000, 0x7, 0x4, 0x3, 0x8, 0x7fc000, 0x1, 0x3, 0x3, 0x9, 0xe0, 0x10001, 0x4, 0xff, 0xf3d]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9835}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x6007}]}}]}, 0x161c}}, 0x0) 27.163123014s ago: executing program 4 (id=603): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_create_resource$kvm_nested_state(&(0x7f0000019180)=@svm={0xe, 0x1, 0x1080, {0x80a0000}, {"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"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r4, 0x0}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x690000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000200)={0x0, r5, 0xe, 0x3, 0x1}) write$cgroup_int(r2, &(0x7f0000000040)=0x8000000001cb, 0x12) r6 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip6_mr_vif\x00') capset(&(0x7f0000019080)={0x20080522}, &(0x7f00000190c0)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x180000) setsockopt$TIPC_MCAST_BROADCAST(r7, 0x10f, 0x85) 27.1104716s ago: executing program 1 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf2503"], 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1411000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000fedbdf2502000000060001004e21000014000700ed000000000000000000000000000000060001002300000004000500f86ff6377a5f510a80f851113a98291a5fc14a393e33f6ff7cf4545ce61bdbe3947876d723ffc1cbb2089342bc9f151e900e633f2e"], 0x3c}}, 0x2b334068e5ba5c0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() mount(0x0, &(0x7f00000003c0)='./cifs\x00', 0x0, 0xc0ed0000, &(0x7f0000000400)='vers=1.0,username=guest,password=,port=20000,soft\x00') sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d22000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000000740)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sched_setparam(r3, &(0x7f0000000700)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x30, r8, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 26.872594747s ago: executing program 3 (id=605): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001080), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000010c0)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)="0000ffaf42", 0x5}], 0x1}}], 0x1, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 25.839704182s ago: executing program 4 (id=606): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, 0x2}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000500)={0x8, 0x1, {0x8, @usage=0x4, 0x0, 0x7, 0x8001, 0x8000000000000001, 0x4, 0x2, 0x0, @usage, 0x7fffffff, 0xa03, [0x5, 0x0, 0x4, 0x9, 0x9, 0x6]}, {0xa3, @usage=0x16, 0x0, 0xfffffffffffffff9, 0x1, 0x9, 0x9, 0x9, 0x42, @struct={0x401, 0x200000}, 0xfff, 0x5, [0x0, 0x100000001, 0xfb5, 0x4, 0x5, 0xffffffffee753293]}, {0x1, @struct={0x800, 0x1}, 0x0, 0x7, 0x4, 0x6e4b, 0x5, 0x0, 0x1, @struct={0xfffffff7, 0x4}, 0x5, 0x5, [0xff, 0x4968, 0x310a, 0x2, 0x4, 0x3]}, {0x5, 0x46b, 0x59}}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 25.027106815s ago: executing program 1 (id=607): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpeername$inet6(r2, 0x0, &(0x7f00000004c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x55}}}, &(0x7f0000000200)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x33b2, 0x6043, 0x1, 0x91, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc822, 0x800, 0x1, 0x240}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800093ea, 0x2000, 0x4003bfff, 0x102b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1001, 0x2001ab, 0x0, r1}}], 0x1, 0x0, 0x0) 0s ago: executing program 32 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xab1f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x43000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa575}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x66e}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="3237f0fb6ac0e54c5a5b05365cd6179b520dc64b3a562363a1183697263b0c088a61e472b114c529d25a61026d8e88392ace7f475d027104f34558b6c9ccf00b9add0d13eb0a688e202a64186f96d8ba3e0a6122ef95eed0732cb414ecf8f2000000657826fb8448306dffff0000856cf8e72d369988618f403269f50aae2b8e8bbafb2d2250dbfef4591c07000019c4a6115cc897a9ca42bfed8eb2a944312dda9fde0824b310ef45ca01a7717a6abc699da305c62074b1312f217db0477f0c5883d6ff896fbe4dd160b587f5c2d2773e251060b0e9733e00ba088816bcf2d66f9e98a53ab7a90d002aeafb354a5b", 0xffffffffffffffba) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) mkdir(&(0x7f00000003c0)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='dir0\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r2 = getpid() sigaltstack(&(0x7f0000000700)={0x0, 0x80000001}, 0x0) r3 = io_uring_setup(0xc90, &(0x7f0000000740)={0x0, 0x4f9, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000840)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f00000008c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) sync() r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES8=r6, @ANYRES16=r2, @ANYRES8, @ANYRES32=r6, @ANYRES8, @ANYRESDEC=r4], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x200}) readv(r7, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/214, 0xd6}], 0x1) kernel console output (not intermixed with test programs): 463985][ T6210] ? find_held_lock+0x2b/0x80 [ 118.464006][ T6210] ? __pfx_do_anonymous_page+0x10/0x10 [ 118.464024][ T6210] ? pgd_none+0x9f/0xe0 [ 118.464042][ T6210] ? __pfx_pgd_none+0x10/0x10 [ 118.464062][ T6210] ? lock_acquire+0x1d1/0x380 [ 118.464089][ T6210] __handle_mm_fault+0x1ff3/0x2f60 [ 118.464111][ T6210] ? lock_vma_under_rcu+0x11d/0x590 [ 118.464128][ T6210] ? __pfx___handle_mm_fault+0x10/0x10 [ 118.464152][ T6210] ? lock_vma_under_rcu+0x17c/0x590 [ 118.464184][ T6210] handle_mm_fault+0x363/0xa20 [ 118.464210][ T6210] do_user_addr_fault+0x59c/0x12f0 [ 118.464246][ T6210] exc_page_fault+0x6f/0xd0 [ 118.464265][ T6210] asm_exc_page_fault+0x26/0x30 [ 118.464283][ T6210] RIP: 0033:0x7fd9006589c6 [ 118.464299][ T6210] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d cc d6 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 118.464315][ T6210] RSP: 002b:00007fd90169df60 EFLAGS: 00010202 [ 118.464330][ T6210] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 118.464341][ T6210] RDX: 0000000000002c85 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 118.464352][ T6210] RBP: 00007fd9008568e0 R08: 0000000000000000 R09: 0000000000000005 [ 118.464361][ T6210] R10: 0000000000000005 R11: 0000000000000000 R12: 00000000003ff000 [ 118.464371][ T6210] R13: 0000200000c00000 R14: 00007fd900a25fa0 R15: 0000000000000000 [ 118.464396][ T6210] [ 118.464537][ T6210] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 118.511915][ T5730] usb usb1-port1: attempt power cycle [ 119.122398][ T5730] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.153709][ T5730] usb 1-1: device descriptor read/8, error -71 [ 119.398673][ T5730] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.430825][ T5730] usb 1-1: device descriptor read/8, error -71 [ 119.568697][ T5730] usb usb1-port1: unable to enumerate USB device [ 119.850233][ T30] audit: type=1400 audit(1793547721.309:259): avc: denied { mount } for pid=6217 comm="syz.1.83" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 119.887915][ T30] audit: type=1400 audit(1793547721.349:260): avc: denied { search } for pid=6217 comm="syz.1.83" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.926064][ T30] audit: type=1400 audit(1793547721.389:261): avc: denied { search } for pid=6217 comm="syz.1.83" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.926109][ T30] audit: type=1400 audit(1793547721.389:262): avc: denied { search } for pid=6217 comm="syz.1.83" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.926425][ T30] audit: type=1400 audit(1793547721.389:263): avc: denied { search } for pid=6217 comm="syz.1.83" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.926678][ T30] audit: type=1400 audit(1793547721.389:264): avc: denied { search } for pid=6217 comm="syz.1.83" name="/" dev="configfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.045514][ T30] audit: type=1400 audit(1793547721.499:265): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 120.949591][ T6231] netlink: 76 bytes leftover after parsing attributes in process `syz.2.87'. [ 122.938864][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 122.938886][ T30] audit: type=1400 audit(1793547724.389:267): avc: denied { map_read map_write } for pid=6236 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.429879][ T30] audit: type=1400 audit(1793547724.889:268): avc: denied { read } for pid=6251 comm="syz.3.93" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.429925][ T30] audit: type=1400 audit(1793547724.889:269): avc: denied { open } for pid=6251 comm="syz.3.93" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.429959][ T30] audit: type=1400 audit(1793547724.889:270): avc: denied { ioctl } for pid=6251 comm="syz.3.93" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0xc00c643c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.429992][ T30] audit: type=1400 audit(1793547724.889:271): avc: denied { write } for pid=6251 comm="syz.3.93" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.430020][ T30] audit: type=1400 audit(1793547724.889:272): avc: denied { ioctl } for pid=6251 comm="syz.3.93" path="cgroup:[4026532797]" dev="nsfs" ino=4026532797 ioctlcmd=0x82307201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 126.826672][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 127.177424][ T6270] netlink: 'syz.0.88': attribute type 10 has an invalid length. [ 127.554802][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.554858][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.938843][ T6283] device-mapper: table: 248:0: crypt: Error decoding and setting key (-EINVAL) [ 129.938872][ T6283] device-mapper: ioctl: error adding target to table [ 131.201173][ T6287] netlink: 76 bytes leftover after parsing attributes in process `syz.0.100'. [ 132.146294][ T6300] device-mapper: table: 248:0: crypt: Error decoding and setting key (-EINVAL) [ 132.146355][ T6300] device-mapper: ioctl: error adding target to table [ 134.964670][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 135.207803][ T5729] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 136.305135][ T6322] jffs2: notice: (6322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.874561][ T30] audit: type=1400 audit(1793547738.339:273): avc: denied { prog_load } for pid=6328 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 137.015699][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 138.021772][ T6317] jffs2: notice: (6317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 139.906691][ T5818] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 140.114167][ T30] audit: type=1400 audit(1793547741.579:274): avc: denied { setopt } for pid=6351 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.302406][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 140.389664][ T5818] usb 1-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 140.522801][ T5730] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.539746][ T5818] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 140.539763][ T5818] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 140.539774][ T5818] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 140.539785][ T5818] usb 1-1: config 1 has no interface number 0 [ 140.539815][ T5818] usb 1-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.539825][ T5818] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 140.539844][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.156415][ T5730] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 141.314799][ T5818] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 141.376911][ T5730] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 141.376961][ T5730] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.376980][ T5730] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 141.376999][ T5730] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 141.424747][ T5730] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 141.424790][ T5730] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.424808][ T5730] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 141.424826][ T5730] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 141.429742][ T5818] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 141.429980][ T5818] snd_usb_pod 1-1:1.1: invalid control EP [ 141.429992][ T5818] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 141.430499][ T5818] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 141.430902][ T5818] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 141.515779][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.515795][ T5730] usb 3-1: Product: syz [ 141.515803][ T5730] usb 3-1: Manufacturer: syz [ 141.515810][ T5730] usb 3-1: SerialNumber: syz [ 141.570176][ T5730] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 141.592392][ T5730] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 141.613771][ T5730] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 141.680792][ T5818] usb 1-1: USB disconnect, device number 6 [ 142.847952][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 145.670661][ T1610] usb 3-1: USB disconnect, device number 2 [ 145.715945][ T1610] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 145.868413][ T6373] jffs2: notice: (6373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 146.388689][ T1610] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 146.389411][ T1610] ti_usb_3410_5052 3-1:2.0: device disconnected [ 146.517608][ T30] audit: type=1400 audit(1793547747.979:275): avc: denied { connect } for pid=6381 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.539574][ T30] audit: type=1400 audit(1793547747.999:276): avc: denied { read append } for pid=6381 comm="syz.2.122" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.571006][ T30] audit: type=1400 audit(1793547748.029:277): avc: denied { setopt } for pid=6381 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.595676][ T30] audit: type=1400 audit(1793547748.059:278): avc: denied { open } for pid=6381 comm="syz.2.122" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.992475][ T6394] fuse: Unknown parameter 'ro[tmode' [ 148.641738][ T1610] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 148.711429][ T5793] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.811477][ T1610] usb 3-1: Using ep0 maxpacket: 8 [ 148.813038][ T1610] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.815757][ T1610] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 148.816095][ T1610] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.816183][ T1610] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.816248][ T1610] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.816275][ T1610] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.816343][ T1610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.932957][ T5793] usb 5-1: Using ep0 maxpacket: 32 [ 148.949810][ T5793] usb 5-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 148.971148][ T5793] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 148.971258][ T5793] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 148.971285][ T5793] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 148.972194][ T5793] usb 5-1: config 1 has no interface number 0 [ 148.989550][ T5793] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.989653][ T5793] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 148.989721][ T5793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.459646][ T6398] FAULT_INJECTION: forcing a failure. [ 149.459646][ T6398] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.463616][ T6398] CPU: 1 UID: 0 PID: 6398 Comm: syz.4.129 Not tainted syzkaller #0 PREEMPT(full) [ 149.463641][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 149.463651][ T6398] Call Trace: [ 149.463657][ T6398] [ 149.463664][ T6398] dump_stack_lvl+0x100/0x190 [ 149.463699][ T6398] should_fail_ex.cold+0x5/0xa [ 149.463730][ T6398] _copy_from_user+0x2e/0xd0 [ 149.463752][ T6398] raw_alloc_io_data+0x32/0x1c0 [ 149.463781][ T6398] raw_ioctl+0x223/0x2b80 [ 149.463811][ T6398] ? __pfx_raw_ioctl+0x10/0x10 [ 149.463835][ T6398] ? selinux_file_ioctl+0x1e0/0x290 [ 149.463861][ T6398] ? selinux_file_ioctl+0x1e7/0x290 [ 149.463889][ T6398] ? __pfx_raw_ioctl+0x10/0x10 [ 149.463914][ T6398] __x64_sys_ioctl+0x18e/0x210 [ 149.463944][ T6398] do_syscall_64+0x123/0x790 [ 149.463966][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.463983][ T6398] RIP: 0033:0x7fe804f9f1eb [ 149.463998][ T6398] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 149.464014][ T6398] RSP: 002b:00007fe805ed3f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.464032][ T6398] RAX: ffffffffffffffda RBX: fffffffffffffddf RCX: 00007fe804f9f1eb [ 149.464043][ T6398] RDX: 00007fe805ed3fe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 149.464054][ T6398] RBP: 0000000000000003 R08: 00007fe805350320 R09: 0000000000000000 [ 149.464065][ T6398] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000009f40 [ 149.464075][ T6398] R13: 0000000000000000 R14: 00007fe805225fa0 R15: 00007ffda8c1ca88 [ 149.464097][ T6398] [ 149.715221][ T5793] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 149.756565][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 149.889531][ T5793] snd_usb_pod 5-1:1.1: invalid control EP [ 149.889563][ T5793] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 149.891173][ T5793] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 149.928587][ T5793] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 149.952025][ T6408] batman_adv: batadv0: Adding interface: syzkaller0 [ 149.952039][ T6408] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.952060][ T6408] batman_adv: batadv0: Interface activated: syzkaller0 [ 149.954765][ T5793] usb 5-1: USB disconnect, device number 3 [ 149.995351][ T1610] usb 3-1: GET_CAPABILITIES returned 0 [ 149.995391][ T1610] usbtmc 3-1:16.0: can't read capabilities [ 150.156118][ T30] audit: type=1400 audit(1793547751.619:279): avc: denied { write } for pid=6395 comm="syz.2.128" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.157475][ T30] audit: type=1400 audit(1793547751.619:280): avc: denied { ioctl } for pid=6395 comm="syz.2.128" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.513573][ T30] audit: type=1400 audit(1793547751.829:281): avc: denied { write } for pid=6395 comm="syz.2.128" name="usbtmc0" dev="devtmpfs" ino=2811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 150.982330][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.982862][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.011051][ T30] audit: type=1400 audit(1793547752.469:282): avc: denied { ioctl } for pid=6395 comm="syz.2.128" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10240 ioctlcmd=0x400454ca scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.041540][ T6409] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 151.152463][ T6409] batman_adv: batadv0: Removing interface: syzkaller0 [ 151.188517][ T6421] netlink: 'syz.4.134': attribute type 10 has an invalid length. [ 151.865676][ T6425] jffs2: notice: (6425) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 152.202668][ T6425] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 152.554365][ T5829] usb 3-1: USB disconnect, device number 3 [ 152.726972][ T30] audit: type=1400 audit(1793547754.189:283): avc: denied { open } for pid=6429 comm="syz.0.123" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 152.759336][ T30] audit: type=1400 audit(1793547754.219:284): avc: denied { ioctl } for pid=6429 comm="syz.0.123" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 152.919626][ T6437] netlink: 'syz.4.136': attribute type 10 has an invalid length. [ 153.982758][ T30] audit: type=1400 audit(1793547755.449:285): avc: denied { write } for pid=6442 comm="syz.0.139" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 153.985327][ T30] audit: type=1400 audit(1793547755.449:286): avc: denied { mounton } for pid=6442 comm="syz.0.139" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 153.985417][ T6444] tmpfs: Bad value for 'mpol' [ 154.893837][ T6449] jffs2: notice: (6449) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 155.060390][ T6454] netlink: 'syz.2.140': attribute type 10 has an invalid length. [ 155.090812][ T6454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.104704][ T6454] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.951231][ T6457] jffs2: notice: (6457) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.217087][ T6457] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 157.664309][ T6469] jffs2: notice: (6469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 157.853436][ T6475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.146'. [ 158.778961][ T30] audit: type=1400 audit(1793547759.809:287): avc: denied { write } for pid=6474 comm="syz.3.146" path="socket:[11281]" dev="sockfs" ino=11281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.778990][ T30] audit: type=1400 audit(1793547759.819:288): avc: denied { bind } for pid=6474 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.779007][ T30] audit: type=1400 audit(1793547759.819:289): avc: denied { name_bind } for pid=6474 comm="syz.3.146" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 158.779024][ T30] audit: type=1400 audit(1793547759.819:290): avc: denied { node_bind } for pid=6474 comm="syz.3.146" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 158.779042][ T30] audit: type=1400 audit(1793547759.859:291): avc: denied { write } for pid=6474 comm="syz.3.146" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.779061][ T30] audit: type=1400 audit(1793547759.859:292): avc: denied { connect } for pid=6474 comm="syz.3.146" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.779079][ T30] audit: type=1400 audit(1793547759.859:293): avc: denied { name_connect } for pid=6474 comm="syz.3.146" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 159.676735][ T6480] jffs2: notice: (6480) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 159.976925][ T6480] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 159.981513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 161.386693][ T30] audit: type=1400 audit(1793547762.849:294): avc: denied { mount } for pid=6489 comm="syz.2.149" name="/" dev="autofs" ino=11362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 161.438335][ T6493] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.150' sets config #1 [ 161.550931][ T30] audit: type=1400 audit(1793547763.009:295): avc: denied { create } for pid=6497 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.574267][ T30] audit: type=1400 audit(1793547763.039:296): avc: denied { block_suspend } for pid=6497 comm="syz.1.152" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.653056][ T6498] ======================================================= [ 161.653056][ T6498] WARNING: The mand mount option has been deprecated and [ 161.653056][ T6498] and is ignored by this kernel. Remove the mand [ 161.653056][ T6498] option from the mount to silence this warning. [ 161.653056][ T6498] ======================================================= [ 162.677202][ T6510] jffs2: notice: (6510) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.299981][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 164.643860][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 164.643880][ T30] audit: type=1400 audit(1793547766.079:301): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 164.719249][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 166.024530][ T6535] jffs2: notice: (6535) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 166.337747][ T6535] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 166.588334][ T6529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14608 sclass=netlink_route_socket pid=6529 comm=syz.4.156 [ 167.790120][ T6545] jffs2: notice: (6545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 170.043992][ T5729] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.202018][ T5729] usb 5-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 170.202845][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.202862][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.202879][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.208782][ T5729] usb 5-1: config 0 descriptor?? [ 170.741347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 170.971338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 171.101337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 171.225668][ T5729] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x2 [ 171.255940][ T5729] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 171.334102][ T6570] jffs2: notice: (6570) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 171.648398][ T6574] jffs2: notice: (6574) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 172.078693][ T5729] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 172.078723][ T5729] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 173.063242][ T5729] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 173.104830][ T5729] usb 5-1: USB disconnect, device number 4 [ 173.399710][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 173.441170][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.170'. [ 173.560124][ T6590] usb usb1: usbfs: process 6590 (syz.3.170) did not claim interface 0 before use [ 173.584837][ T6590] FAULT_INJECTION: forcing a failure. [ 173.584837][ T6590] name failslab, interval 1, probability 0, space 0, times 0 [ 173.584858][ T6590] CPU: 0 UID: 0 PID: 6590 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT(full) [ 173.584871][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 173.584877][ T6590] Call Trace: [ 173.584881][ T6590] [ 173.584887][ T6590] dump_stack_lvl+0x100/0x190 [ 173.584909][ T6590] should_fail_ex.cold+0x5/0xa [ 173.584926][ T6590] should_failslab+0xc2/0x120 [ 173.584939][ T6590] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 173.584958][ T6590] ? kstrdup_const+0x63/0x80 [ 173.584972][ T6590] kstrdup+0x51/0xe0 [ 173.584983][ T6590] kstrdup_const+0x63/0x80 [ 173.584993][ T6590] __kernfs_new_node+0x9b/0xa10 [ 173.585012][ T6590] ? __pfx___kernfs_new_node+0x10/0x10 [ 173.585030][ T6590] ? lock_acquire+0x1d1/0x380 [ 173.585044][ T6590] ? kernfs_root+0x23/0x2a0 [ 173.585058][ T6590] ? find_held_lock+0x2b/0x80 [ 173.585069][ T6590] ? kernfs_root+0xee/0x2a0 [ 173.585083][ T6590] ? kernfs_root+0xee/0x2a0 [ 173.585101][ T6590] kernfs_create_dir_ns+0xa4/0x2b0 [ 173.585115][ T6590] cgroup_mkdir+0x407/0x13a0 [ 173.585134][ T6590] ? __pfx_cgroup_mkdir+0x10/0x10 [ 173.585150][ T6590] kernfs_iop_mkdir+0x111/0x190 [ 173.585159][ T6590] ? security_inode_mkdir+0xc9/0x2b0 [ 173.585171][ T6590] vfs_mkdir+0x36d/0x8a0 [ 173.585189][ T6590] filename_mkdirat+0x4c4/0x630 [ 173.585203][ T6590] ? __pfx_filename_mkdirat+0x10/0x10 [ 173.585216][ T6590] ? strncpy_from_user+0x19d/0x2d0 [ 173.585232][ T6590] ? do_getname+0x191/0x390 [ 173.585247][ T6590] __x64_sys_mkdirat+0x89/0xc0 [ 173.585260][ T6590] do_syscall_64+0x123/0x790 [ 173.585272][ T6590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.585283][ T6590] RIP: 0033:0x7fb87d79f559 [ 173.585292][ T6590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.585301][ T6590] RSP: 002b:00007fb87e6e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 173.585312][ T6590] RAX: ffffffffffffffda RBX: 00007fb87da25fa0 RCX: 00007fb87d79f559 [ 173.585318][ T6590] RDX: 00000000000001ff RSI: 0000200000000780 RDI: ffffffffffffff9c [ 173.585324][ T6590] RBP: 00007fb87d836b50 R08: 0000000000000000 R09: 0000000000000000 [ 173.585330][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.585335][ T6590] R13: 00007fb87da26038 R14: 00007fb87da25fa0 R15: 00007ffd2c51b0f8 [ 173.585349][ T6590] [ 174.047791][ T30] audit: type=1400 audit(1793547775.509:302): avc: denied { setopt } for pid=6587 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.197222][ T6598] fuse: Unknown parameter 'ro[tmode' [ 175.437589][ T6600] jffs2: notice: (6600) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 175.590696][ T6600] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 176.409773][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 177.354161][ T6622] bridge_slave_0: left allmulticast mode [ 177.354196][ T6622] bridge_slave_0: left promiscuous mode [ 177.355612][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.416664][ T6622] bridge_slave_1: left allmulticast mode [ 177.416690][ T6622] bridge_slave_1: left promiscuous mode [ 177.416864][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.459762][ T6622] bond0: (slave bond_slave_0): Releasing backup interface [ 177.494850][ T30] audit: type=1400 audit(1793547778.959:303): avc: denied { read write } for pid=6621 comm="syz.1.177" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 177.495295][ T30] audit: type=1400 audit(1793547778.959:304): avc: denied { open } for pid=6621 comm="syz.1.177" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 177.549375][ T6622] bond0: (slave bond_slave_1): Releasing backup interface [ 177.610801][ T6622] team0: Port device team_slave_0 removed [ 178.036121][ T6630] kernel profiling enabled (shift: 0) [ 178.208200][ T6622] team0: Port device team_slave_1 removed [ 178.210362][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.210431][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.324003][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.324062][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.378098][ T6622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.531419][ T5729] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 182.751037][ T5729] usb 5-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 182.844912][ T6641] jffs2: notice: (6641) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.287023][ T5729] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 183.385315][ T5729] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 183.395700][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 183.521584][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.521602][ T5729] usb 5-1: Product: syz [ 183.521609][ T5729] usb 5-1: Manufacturer: syz [ 183.521617][ T5729] usb 5-1: SerialNumber: syz [ 183.550273][ T5729] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 184.155803][ T5729] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 184.186078][ T5729] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 185.281026][ T5829] usb 5-1: USB disconnect, device number 5 [ 185.320677][ T5829] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 185.343780][ T5829] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 185.344178][ T5829] ti_usb_3410_5052 5-1:2.0: device disconnected [ 185.525898][ T30] audit: type=1400 audit(1793547786.989:305): avc: denied { setopt } for pid=6671 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.554431][ T30] audit: type=1400 audit(1793547787.019:306): avc: denied { ioctl } for pid=6671 comm="syz.3.185" path="socket:[10568]" dev="sockfs" ino=10568 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.555940][ T6672] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 185.555969][ T6672] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 185.607173][ T30] audit: type=1400 audit(1793547787.069:307): avc: denied { write } for pid=6671 comm="syz.3.185" name="udp" dev="proc" ino=4026533101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 186.044594][ T30] audit: type=1400 audit(1793547787.509:308): avc: denied { write } for pid=6671 comm="syz.3.185" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.121599][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 186.121632][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 186.121652][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 186.121670][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 186.121699][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 186.318082][ T6682] netlink: 'syz.2.187': attribute type 10 has an invalid length. [ 187.945455][ T30] audit: type=1800 audit(1793547789.409:309): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.184" name=08 dev="sda1" ino=2047 res=0 errno=-22 [ 188.056996][ T6692] netlink: 'syz.4.188': attribute type 10 has an invalid length. [ 188.998875][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.998949][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.091567][ T5829] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 190.941644][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 190.943107][ T5829] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 190.943904][ T5829] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 190.946232][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 190.946251][ T5829] usb 2-1: Product: syz [ 190.946259][ T5829] usb 2-1: Manufacturer: syz [ 190.946266][ T5829] usb 2-1: SerialNumber: syz [ 190.953010][ T5829] usb 2-1: config 0 descriptor?? [ 191.292960][ T6713] device-mapper: table: 248:0: crypt: Error decoding and setting key (-EINVAL) [ 191.292989][ T6713] device-mapper: ioctl: error adding target to table [ 193.909639][ T5829] usb 2-1: can't set config #0, error -71 [ 193.928506][ T5829] usb 2-1: USB disconnect, device number 2 [ 194.491718][ T5829] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 195.056221][ T5829] usb 2-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 195.193916][ T5829] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 195.250367][ T5829] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 195.352770][ T6727] FAULT_INJECTION: forcing a failure. [ 195.352770][ T6727] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 195.352796][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.0.199 Not tainted syzkaller #0 PREEMPT(full) [ 195.352817][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 195.352827][ T6727] Call Trace: [ 195.352833][ T6727] [ 195.352840][ T6727] dump_stack_lvl+0x100/0x190 [ 195.352873][ T6727] should_fail_ex.cold+0x5/0xa [ 195.352903][ T6727] should_fail_alloc_page+0xeb/0x140 [ 195.352925][ T6727] prepare_alloc_pages+0x1f0/0x5b0 [ 195.352943][ T6727] ? __kernel_text_address+0xd/0x30 [ 195.352967][ T6727] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 195.352996][ T6727] ? tomoyo_path_number_perm+0x46d/0x580 [ 195.353028][ T6727] ? stack_trace_save+0x8e/0xc0 [ 195.353052][ T6727] ? __pfx_stack_trace_save+0x10/0x10 [ 195.353075][ T6727] ? stack_depot_save_flags+0x27/0xa10 [ 195.353101][ T6727] ? __lock_acquire+0x5c0/0x1f40 [ 195.353124][ T6727] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 195.353149][ T6727] ? __lock_acquire+0x5c0/0x1f40 [ 195.353173][ T6727] ? __kasan_slab_free+0x5f/0x80 [ 195.353189][ T6727] ? kfree+0x22b/0x6d0 [ 195.353207][ T6727] ? tomoyo_path_number_perm+0x46d/0x580 [ 195.353229][ T6727] ? security_file_ioctl+0xd3/0x230 [ 195.353252][ T6727] ? __x64_sys_ioctl+0xb7/0x210 [ 195.353274][ T6727] ? do_syscall_64+0x123/0x790 [ 195.353290][ T6727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.353312][ T6727] ? lock_acquire+0x1d1/0x380 [ 195.353339][ T6727] ? __lock_acquire+0x5c0/0x1f40 [ 195.353364][ T6727] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.353393][ T6727] ? policy_nodemask+0xed/0x5e0 [ 195.353414][ T6727] alloc_pages_mpol+0x201/0x560 [ 195.353433][ T6727] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 195.353448][ T6727] ? kasan_quarantine_put+0x104/0x240 [ 195.353470][ T6727] ___kmalloc_large_node+0x103/0x170 [ 195.353486][ T6727] __kmalloc_large_node_noprof+0x1c/0x70 [ 195.353502][ T6727] __kmalloc_noprof+0x5a3/0x840 [ 195.353520][ T6727] ? hci_alloc_dev_priv+0x1d/0x28a0 [ 195.353538][ T6727] hci_alloc_dev_priv+0x1d/0x28a0 [ 195.353552][ T6727] hci_uart_tty_ioctl+0x2b2/0xcb0 [ 195.353571][ T6727] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 195.353587][ T6727] tty_ioctl+0x12f4/0x1870 [ 195.353605][ T6727] ? __pfx_tty_ioctl+0x10/0x10 [ 195.353618][ T6727] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 195.353644][ T6727] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 195.353666][ T6727] ? __fget_files+0x34/0x3d0 [ 195.353689][ T6727] ? selinux_file_ioctl+0x1e0/0x290 [ 195.353708][ T6727] ? selinux_file_ioctl+0x1e7/0x290 [ 195.353728][ T6727] ? __pfx_tty_ioctl+0x10/0x10 [ 195.353741][ T6727] __x64_sys_ioctl+0x18e/0x210 [ 195.353763][ T6727] do_syscall_64+0x123/0x790 [ 195.353780][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.353795][ T6727] RIP: 0033:0x7f9c4419f559 [ 195.353808][ T6727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.353820][ T6727] RSP: 002b:00007f9c45029028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.353836][ T6727] RAX: ffffffffffffffda RBX: 00007f9c44425fa0 RCX: 00007f9c4419f559 [ 195.353845][ T6727] RDX: 0000000000000002 RSI: 00000000400455c8 RDI: 0000000000000004 [ 195.353854][ T6727] RBP: 00007f9c45029090 R08: 0000000000000000 R09: 0000000000000000 [ 195.353863][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.353872][ T6727] R13: 00007f9c44426038 R14: 00007f9c44425fa0 R15: 00007ffe453a6758 [ 195.353894][ T6727] [ 195.354102][ T6727] Bluetooth: Can't allocate HCI device [ 195.420937][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.420970][ T5829] usb 2-1: Product: syz [ 195.421005][ T5829] usb 2-1: Manufacturer: syz [ 195.421046][ T5829] usb 2-1: SerialNumber: syz [ 195.844654][ T6730] device-mapper: table: 248:0: crypt: Error decoding and setting key (-EINVAL) [ 195.844699][ T6730] device-mapper: ioctl: error adding target to table [ 196.009101][ T5829] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 196.140846][ T5829] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 196.224402][ T5829] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 196.231407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 196.576714][ T6740] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 198.575660][ T6750] jffs2: notice: (6750) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 198.977220][ T6750] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 199.067907][ T5730] usb 2-1: USB disconnect, device number 3 [ 199.100158][ T5730] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 199.154382][ T5730] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 199.155021][ T5730] ti_usb_3410_5052 2-1:2.0: device disconnected [ 199.354627][ T6757] FAULT_INJECTION: forcing a failure. [ 199.354627][ T6757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.354644][ T6757] CPU: 1 UID: 0 PID: 6757 Comm: syz.1.206 Not tainted syzkaller #0 PREEMPT(full) [ 199.354655][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 199.354661][ T6757] Call Trace: [ 199.354665][ T6757] [ 199.354669][ T6757] dump_stack_lvl+0x100/0x190 [ 199.354690][ T6757] should_fail_ex.cold+0x5/0xa [ 199.354707][ T6757] _copy_from_user+0x2e/0xd0 [ 199.354719][ T6757] get_user_ifreq+0xe7/0x250 [ 199.354733][ T6757] sock_do_ioctl+0x16e/0x280 [ 199.354748][ T6757] ? __pfx_sock_do_ioctl+0x10/0x10 [ 199.354761][ T6757] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.354780][ T6757] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 199.354795][ T6757] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 199.354813][ T6757] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 199.354832][ T6757] sock_ioctl+0x599/0x6b0 [ 199.354847][ T6757] ? __pfx_sock_ioctl+0x10/0x10 [ 199.354865][ T6757] ? selinux_file_ioctl+0x1e0/0x290 [ 199.354880][ T6757] ? selinux_file_ioctl+0x1e7/0x290 [ 199.354896][ T6757] ? __pfx_sock_ioctl+0x10/0x10 [ 199.354912][ T6757] __x64_sys_ioctl+0x18e/0x210 [ 199.354929][ T6757] do_syscall_64+0x123/0x790 [ 199.354941][ T6757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.354951][ T6757] RIP: 0033:0x7fd90079f559 [ 199.354960][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.354970][ T6757] RSP: 002b:00007fd90169e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.354981][ T6757] RAX: ffffffffffffffda RBX: 00007fd900a25fa0 RCX: 00007fd90079f559 [ 199.354987][ T6757] RDX: 00002000000005c0 RSI: 0000000000008914 RDI: 0000000000000005 [ 199.354993][ T6757] RBP: 00007fd90169e090 R08: 0000000000000000 R09: 0000000000000000 [ 199.355001][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.355006][ T6757] R13: 00007fd900a26038 R14: 00007fd900a25fa0 R15: 00007fff6a7a3458 [ 199.355019][ T6757] [ 200.440221][ T6764] jffs2: notice: (6764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 200.971386][ T1610] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 201.121487][ T1610] usb 4-1: Using ep0 maxpacket: 32 [ 201.122545][ T1610] usb 4-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 201.124969][ T1610] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 201.124989][ T1610] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.125006][ T1610] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.125019][ T1610] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 201.125037][ T1610] usb 4-1: config 1 has no interface number 0 [ 201.125068][ T1610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.132153][ T1610] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 201.591338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 201.819147][ T6782] jffs2: notice: (6782) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 202.170569][ T6782] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 202.503687][ T30] audit: type=1400 audit(1793547803.969:310): avc: denied { create } for pid=6768 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.506255][ T30] audit: type=1400 audit(1793547803.969:311): avc: denied { bind } for pid=6768 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.545110][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 202.568918][ T30] audit: type=1400 audit(1793547804.029:312): avc: denied { setopt } for pid=6768 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.569401][ T30] audit: type=1400 audit(1793547804.029:313): avc: denied { listen } for pid=6768 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.569960][ T30] audit: type=1400 audit(1793547804.029:314): avc: denied { accept } for pid=6768 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.651079][ T1610] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 202.660177][ T1610] snd_usb_pod 4-1:1.1: invalid control EP [ 202.660189][ T1610] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 202.660296][ T1610] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 202.684111][ T1610] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 202.701375][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 202.701869][ T24] usb 5-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 202.704469][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.704490][ T24] usb 5-1: Product: syz [ 202.704500][ T24] usb 5-1: Manufacturer: syz [ 202.704507][ T24] usb 5-1: SerialNumber: syz [ 202.754080][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 202.754095][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 202.755729][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 202.755749][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 203.689000][ T24] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 203.942966][ T24] usb 4-1: USB disconnect, device number 2 [ 204.024309][ T6790] jffs2: notice: (6790) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 204.556379][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 204.828437][ T24] usb 4-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 204.991563][ T24] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 205.023245][ T24] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 205.124523][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.129559][ T24] usb 4-1: Product: syz [ 205.146556][ T24] usb 4-1: Manufacturer: syz [ 205.158038][ T24] usb 4-1: SerialNumber: syz [ 205.454808][ T24] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 205.476961][ T24] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 205.498604][ T24] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 205.766992][ T30] audit: type=1400 audit(1793547807.229:315): avc: denied { map } for pid=6799 comm="syz.4.217" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.793219][ T30] audit: type=1400 audit(1793547807.259:316): avc: denied { execute } for pid=6799 comm="syz.4.217" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 206.300594][ T6802] jffs2: notice: (6802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.593810][ T6802] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 207.086878][ T5730] usb 4-1: USB disconnect, device number 3 [ 207.109388][ T5730] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 207.174699][ T5730] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 207.192834][ T5730] ti_usb_3410_5052 4-1:2.0: device disconnected [ 209.675745][ T6816] jffs2: notice: (6816) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 211.698813][ T6832] jffs2: notice: (6832) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 212.068450][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 213.674538][ T6851] jffs2: notice: (6851) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 214.380702][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 216.170472][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 219.090659][ T30] audit: type=1400 audit(1793547820.119:317): avc: denied { write } for pid=6881 comm="syz.2.235" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.383711][ T6892] FAULT_INJECTION: forcing a failure. [ 219.383711][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 219.383737][ T6892] CPU: 0 UID: 0 PID: 6892 Comm: syz.2.238 Not tainted syzkaller #0 PREEMPT(full) [ 219.383756][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 219.383771][ T6892] Call Trace: [ 219.383777][ T6892] [ 219.383784][ T6892] dump_stack_lvl+0x100/0x190 [ 219.383817][ T6892] should_fail_ex.cold+0x5/0xa [ 219.383844][ T6892] should_failslab+0xc2/0x120 [ 219.383862][ T6892] kmem_cache_alloc_noprof+0x92/0x6a0 [ 219.383888][ T6892] ? alloc_empty_file+0x5b/0x1c0 [ 219.383915][ T6892] alloc_empty_file+0x5b/0x1c0 [ 219.383937][ T6892] path_openat+0xd6/0x23f0 [ 219.383961][ T6892] ? __pfx_path_openat+0x10/0x10 [ 219.383987][ T6892] do_file_open+0x20e/0x430 [ 219.384009][ T6892] ? __pfx_do_file_open+0x10/0x10 [ 219.384048][ T6892] ? _raw_spin_unlock+0x28/0x50 [ 219.384073][ T6892] ? alloc_fd+0x471/0x7a0 [ 219.384101][ T6892] do_sys_openat2+0x163/0x1d0 [ 219.384124][ T6892] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.384147][ T6892] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.384166][ T6892] ? __fget_files+0x21f/0x3d0 [ 219.384189][ T6892] __x64_sys_openat+0x12d/0x210 [ 219.384214][ T6892] ? __pfx___x64_sys_openat+0x10/0x10 [ 219.384235][ T6892] ? ksys_write+0x1ac/0x250 [ 219.384260][ T6892] do_syscall_64+0x123/0x790 [ 219.384279][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.384296][ T6892] RIP: 0033:0x7eff20b5fd8e [ 219.384312][ T6892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 219.384326][ T6892] RSP: 002b:00007eff21a6cf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.384344][ T6892] RAX: ffffffffffffffda RBX: 00007eff21a6d6c0 RCX: 00007eff20b5fd8e [ 219.384354][ T6892] RDX: 0000000000000000 RSI: 00007eff20c3627e RDI: ffffffffffffff9c [ 219.384364][ T6892] RBP: 00007eff21a6d090 R08: 0000000000000000 R09: 0000000000000000 [ 219.384373][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.384382][ T6892] R13: 00007eff20e26038 R14: 00007eff20e25fa0 R15: 00007ffc00a0d048 [ 219.384402][ T6892] [ 220.234074][ T6896] jffs2: notice: (6896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 221.564702][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 222.696164][ T6917] jffs2: notice: (6917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 222.812678][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 223.729235][ T30] audit: type=1400 audit(1793547825.189:318): avc: denied { create } for pid=6927 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.811651][ T6929] rt1711h 0-0004: probe with driver rt1711h failed with error -5 [ 223.816171][ T6929] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 225.192638][ T6932] jffs2: notice: (6932) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 225.464974][ T30] audit: type=1400 audit(1793547826.929:319): avc: denied { map } for pid=6933 comm="syz.4.248" path="/48/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 226.264253][ T6942] jffs2: notice: (6942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 226.492883][ T6947] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16) [ 228.313749][ T30] audit: type=1400 audit(1793547829.769:320): avc: denied { create } for pid=6948 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.369903][ T30] audit: type=1400 audit(1793547829.829:321): avc: denied { accept } for pid=6948 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.472359][ T30] audit: type=1400 audit(1793547829.929:322): avc: denied { ioctl } for pid=6948 comm="syz.0.245" path="socket:[10887]" dev="sockfs" ino=10887 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.527711][ T30] audit: type=1400 audit(1793547829.989:323): avc: denied { create } for pid=6951 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.527754][ T30] audit: type=1400 audit(1793547829.989:324): avc: denied { write } for pid=6951 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.528351][ T30] audit: type=1400 audit(1793547829.989:325): avc: denied { read } for pid=6951 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.530561][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'. [ 228.542183][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 228.549210][ T30] audit: type=1400 audit(1793547829.989:326): avc: denied { ioctl } for pid=6951 comm="syz.2.252" path="socket:[12021]" dev="sockfs" ino=12021 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.550147][ T6949] ip_tables: iptables: counters copy to user failed while replacing table [ 228.570588][ T30] audit: type=1400 audit(1793547830.009:327): avc: denied { setopt } for pid=6948 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.405226][ T6962] jffs2: notice: (6962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 230.928548][ T6975] jffs2: notice: (6975) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 231.136188][ T6975] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 231.593814][ T30] audit: type=1400 audit(1793547832.329:328): avc: denied { execute } for pid=6973 comm="syz.2.259" name="file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.593865][ T30] audit: type=1400 audit(1793547832.339:329): avc: denied { execute_no_trans } for pid=6973 comm="syz.2.259" path="/50/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.593902][ T30] audit: type=1400 audit(1793547832.379:330): avc: denied { mounton } for pid=6973 comm="syz.2.259" path="/50/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.761204][ T6982] jffs2: notice: (6982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 232.500914][ T6989] jffs2: notice: (6989) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 232.567061][ T30] audit: type=1400 audit(1793547834.029:331): avc: denied { create } for pid=6984 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.607330][ T30] audit: type=1400 audit(1793547834.069:332): avc: denied { ioctl } for pid=6984 comm="syz.1.262" path="socket:[12139]" dev="sockfs" ino=12139 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.616824][ T30] audit: type=1400 audit(1793547834.079:333): avc: denied { read } for pid=6984 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.677821][ T30] audit: type=1400 audit(1793547834.139:334): avc: denied { write } for pid=6984 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.043323][ T6998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.253'. [ 234.755234][ T7025] jffs2: notice: (7025) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 234.993258][ T30] audit: type=1326 audit(1793547836.459:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.267" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90079f559 code=0x7ffc0000 [ 234.993305][ T30] audit: type=1326 audit(1793547836.459:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.267" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90079f559 code=0x7ffc0000 [ 235.020153][ T30] audit: type=1326 audit(1793547836.479:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7030 comm="syz.1.267" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd90079f559 code=0x7ffc0000 [ 235.083230][ T7031] FAULT_INJECTION: forcing a failure. [ 235.083230][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 235.083255][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 235.083274][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 235.083283][ T7031] Call Trace: [ 235.083289][ T7031] [ 235.083295][ T7031] dump_stack_lvl+0x100/0x190 [ 235.083325][ T7031] should_fail_ex.cold+0x5/0xa [ 235.083350][ T7031] should_failslab+0xc2/0x120 [ 235.083368][ T7031] kmem_cache_alloc_noprof+0x92/0x6a0 [ 235.083391][ T7031] ? audit_log_start+0x29d/0x930 [ 235.083418][ T7031] audit_log_start+0x29d/0x930 [ 235.083442][ T7031] ? __pfx_audit_log_start+0x10/0x10 [ 235.083462][ T7031] ? __lock_acquire+0x5c0/0x1f40 [ 235.083484][ T7031] ? percpu_counter_add_batch+0xb9/0x230 [ 235.083506][ T7031] ? errseq_sample+0x51/0x70 [ 235.083523][ T7031] ? file_init_path+0x48e/0x670 [ 235.083544][ T7031] audit_seccomp+0x61/0x1f0 [ 235.083566][ T7031] __seccomp_filter+0x88c/0x1130 [ 235.083589][ T7031] ? __pfx___seccomp_filter+0x10/0x10 [ 235.083606][ T7031] ? fd_install+0x252/0x580 [ 235.083628][ T7031] ? __pfx___sys_socket+0x10/0x10 [ 235.083655][ T7031] __seccomp_permit_syscall+0x224/0x2e0 [ 235.083677][ T7031] do_syscall_64+0x591/0x790 [ 235.083695][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.083711][ T7031] RIP: 0033:0x7fd90079f559 [ 235.083724][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.083738][ T7031] RSP: 002b:00007fd90169e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.083754][ T7031] RAX: ffffffffffffffda RBX: 00007fd900a25fa8 RCX: 00007fd90079f559 [ 235.083765][ T7031] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd900a25fac [ 235.083775][ T7031] RBP: 00007fd900a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 235.083785][ T7031] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 235.083794][ T7031] R13: 00007fd900a26038 R14: 00007fff6a7a3370 R15: 00007fff6a7a3458 [ 235.083816][ T7031] [ 238.069938][ T7057] jffs2: notice: (7057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.263400][ T7081] jffs2: notice: (7081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.881827][ T7081] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 242.279350][ T7089] device-mapper: table: 248:0: crypt: Error decoding and setting key (-EINVAL) [ 242.279379][ T7089] device-mapper: ioctl: error adding target to table [ 243.411368][ T5627] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 243.594433][ T5627] usb 2-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=1.00 [ 243.595536][ T5627] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.595576][ T5627] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.595596][ T5627] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 243.597125][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 243.597157][ T5627] usb 2-1: Product: syz [ 243.597171][ T5627] usb 2-1: Manufacturer: syz [ 243.662945][ T5627] redrat3 2-1:1.0: Couldn't find all endpoints [ 244.074470][ T7109] device-mapper: table: 248:0: crypt: Error decoding and setting key (-EINVAL) [ 244.074533][ T7109] device-mapper: ioctl: error adding target to table [ 244.331123][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 244.331150][ T30] audit: type=1400 audit(1793547845.779:390): avc: denied { nlmsg_read } for pid=7092 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 244.336876][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 244.830210][ T10] usb 2-1: USB disconnect, device number 4 [ 244.942800][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 245.571354][ T7120] jffs2: notice: (7120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 247.052192][ T7138] block device autoloading is deprecated and will be removed. [ 248.187474][ T7145] device-mapper: table: 248:0: crypt: Error decoding and setting key (-EINVAL) [ 248.187538][ T7145] device-mapper: ioctl: error adding target to table [ 248.279092][ T7140] jffs2: notice: (7140) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 249.953356][ T7158] capability: warning: `syz.3.296' uses deprecated v2 capabilities in a way that may be insecure [ 250.136281][ T30] audit: type=1400 audit(1793547851.529:391): avc: denied { name_connect } for pid=7154 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 250.229245][ T30] audit: type=1400 audit(1793547851.679:392): avc: denied { setopt } for pid=7154 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 250.539488][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.539542][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.786548][ T7158] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 252.055336][ T7180] jffs2: notice: (7180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.634209][ T7180] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 256.289813][ T7205] netlink: 'syz.2.300': attribute type 10 has an invalid length. [ 256.325910][ T7213] futex_wake_op: syz.4.303 tries to shift op by 144; fix this program [ 256.772826][ T5627] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 256.976675][ T5627] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 257.088867][ T5627] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 257.091737][ T5627] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 257.095102][ T5627] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 257.099049][ T5627] usb 5-1: config 1 interface 0 has no altsetting 0 [ 257.184061][ T5627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 257.187831][ T5627] usb 5-1: SerialNumber: syz [ 257.586370][ T7214] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.586865][ T7214] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.889865][ T7218] netlink: 'syz.1.306': attribute type 10 has an invalid length. [ 257.892827][ T7218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.893881][ T7218] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 257.995494][ T30] audit: type=1400 audit(1793547859.459:393): avc: denied { setattr } for pid=7222 comm="syz.2.308" name="NETLINK" dev="sockfs" ino=11252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.037741][ T7213] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 258.037817][ T7213] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 258.470726][ T5627] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 258.547031][ T5627] usb 5-1: USB disconnect, device number 7 [ 260.694652][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 262.589548][ T7266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.658645][ T7266] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 262.672208][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 262.787493][ T7274] netlink: 'syz.4.320': attribute type 10 has an invalid length. [ 262.822089][ T24] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 262.823001][ T24] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 262.825541][ T24] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 262.864398][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.864414][ T24] usb 3-1: Product: syz [ 262.864421][ T24] usb 3-1: Manufacturer: syz [ 262.864429][ T24] usb 3-1: SerialNumber: syz [ 262.915978][ T24] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 262.918926][ T24] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 262.942167][ T24] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 264.370298][ T5627] usb 3-1: USB disconnect, device number 4 [ 264.387755][ T5627] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 264.396832][ T5627] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 264.399403][ T5627] ti_usb_3410_5052 3-1:2.0: device disconnected [ 264.535095][ T7299] device-mapper: table: 248:2: thin: Error opening pool device (-ENOENT) [ 264.535112][ T7299] device-mapper: ioctl: error adding target to table [ 264.751382][ T7302] device-mapper: table: 248:4: crypt: Error decoding and setting key (-EINVAL) [ 264.751412][ T7302] device-mapper: ioctl: error adding target to table [ 267.373672][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.330'. [ 267.998968][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'. [ 268.087457][ T30] audit: type=1400 audit(1793547869.549:394): avc: denied { read } for pid=7318 comm="syz.1.332" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.112468][ T30] audit: type=1400 audit(1793547869.579:395): avc: denied { open } for pid=7318 comm="syz.1.332" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.139946][ T30] audit: type=1400 audit(1793547869.599:396): avc: denied { ioctl } for pid=7318 comm="syz.1.332" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x40187013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 269.659158][ T7338] netlink: 'syz.2.334': attribute type 10 has an invalid length. [ 271.080825][ T1194] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 271.262141][ T1194] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 271.264625][ T1194] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.288289][ T1194] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.314341][ T1194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.314365][ T1194] usb 3-1: Product: syz [ 271.314377][ T1194] usb 3-1: Manufacturer: syz [ 271.314388][ T1194] usb 3-1: SerialNumber: syz [ 271.353559][ T1194] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 271.371123][ T1194] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 271.389396][ T1194] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 271.512493][ T5627] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 271.685002][ T5627] usb 2-1: Using ep0 maxpacket: 8 [ 271.688295][ T5627] usb 2-1: unable to get BOS descriptor or descriptor too short [ 271.688334][ T5627] usb 2-1: New USB device found: idVendor=0557, idProduct=2022, bcdDevice=e6.aa [ 271.699725][ T5627] usb 2-1: config 15 has an invalid interface number: 145 but max is 1 [ 271.699753][ T5627] usb 2-1: config 15 has an invalid interface number: 239 but max is 1 [ 271.699768][ T5627] usb 2-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 271.699783][ T5627] usb 2-1: config 15 has no interface number 0 [ 271.699795][ T5627] usb 2-1: config 15 has no interface number 1 [ 271.699831][ T5627] usb 2-1: config 15 interface 145 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 271.699847][ T5627] usb 2-1: config 15 interface 145 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.699875][ T5627] usb 2-1: config 15 interface 239 altsetting 13 bulk endpoint 0x8 has invalid maxpacket 1024 [ 271.699893][ T5627] usb 2-1: config 15 interface 239 altsetting 13 has an endpoint descriptor with address 0x97, changing to 0x87 [ 271.699929][ T5627] usb 2-1: config 15 interface 239 altsetting 13 endpoint 0x87 has invalid wMaxPacketSize 0 [ 271.699946][ T5627] usb 2-1: config 15 interface 239 altsetting 13 bulk endpoint 0x87 has invalid maxpacket 0 [ 271.699963][ T5627] usb 2-1: config 15 interface 145 has no altsetting 0 [ 271.699976][ T5627] usb 2-1: config 15 interface 239 has no altsetting 0 [ 271.849598][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.849615][ T5627] usb 2-1: Product: syz [ 271.849623][ T5627] usb 2-1: Manufacturer: syz [ 271.849630][ T5627] usb 2-1: SerialNumber: syz [ 271.921372][ T7351] jffs2: notice: (7351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 272.120943][ T5627] pl2303 2-1:15.145: required endpoints missing [ 272.140795][ T5627] pl2303 2-1:15.239: required interrupt-in endpoint missing [ 272.161556][ T5627] usb 2-1: USB disconnect, device number 5 [ 272.399303][ T30] audit: type=1400 audit(1793547873.859:397): avc: denied { create } for pid=7361 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.426812][ T30] audit: type=1400 audit(1793547873.889:398): avc: denied { listen } for pid=7361 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.454052][ T30] audit: type=1400 audit(1793547873.919:399): avc: denied { connect } for pid=7361 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.461766][ T30] audit: type=1400 audit(1793547873.929:400): avc: denied { write } for pid=7361 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.607777][ T30] audit: type=1400 audit(1793547874.069:401): avc: denied { accept } for pid=7361 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 273.040465][ T30] audit: type=1400 audit(1793547874.409:402): avc: denied { execute } for pid=7365 comm="syz.0.342" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 273.257589][ T30] audit: type=1400 audit(1793547874.719:403): avc: denied { connect } for pid=7374 comm="syz.3.341" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.304347][ T1194] usb 3-1: USB disconnect, device number 5 [ 273.378098][ T1194] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 273.419692][ T1194] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 273.434820][ T1194] ti_usb_3410_5052 3-1:2.0: device disconnected [ 274.596781][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.345'. [ 274.689076][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 276.365585][ T7410] FAULT_INJECTION: forcing a failure. [ 276.365585][ T7410] name failslab, interval 1, probability 0, space 0, times 0 [ 276.365603][ T7410] CPU: 1 UID: 0 PID: 7410 Comm: syz.4.354 Not tainted syzkaller #0 PREEMPT(full) [ 276.365616][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 276.365622][ T7410] Call Trace: [ 276.365626][ T7410] [ 276.365630][ T7410] dump_stack_lvl+0x100/0x190 [ 276.365651][ T7410] should_fail_ex.cold+0x5/0xa [ 276.365667][ T7410] should_failslab+0xc2/0x120 [ 276.365679][ T7410] kmem_cache_alloc_noprof+0x92/0x6a0 [ 276.365696][ T7410] ? security_file_alloc+0x34/0x2c0 [ 276.365716][ T7410] security_file_alloc+0x34/0x2c0 [ 276.365733][ T7410] init_file+0x95/0x480 [ 276.365746][ T7410] alloc_empty_file+0x79/0x1c0 [ 276.365766][ T7410] path_openat+0xd6/0x23f0 [ 276.365780][ T7410] ? __pfx_path_openat+0x10/0x10 [ 276.365796][ T7410] do_file_open+0x20e/0x430 [ 276.365809][ T7410] ? __pfx_do_file_open+0x10/0x10 [ 276.365830][ T7410] ? _raw_spin_unlock+0x28/0x50 [ 276.365845][ T7410] ? alloc_fd+0x471/0x7a0 [ 276.365861][ T7410] do_sys_openat2+0x163/0x1d0 [ 276.365875][ T7410] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.365889][ T7410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.365901][ T7410] ? __fget_files+0x21f/0x3d0 [ 276.365915][ T7410] __x64_sys_openat+0x12d/0x210 [ 276.365929][ T7410] ? __pfx___x64_sys_openat+0x10/0x10 [ 276.365942][ T7410] ? ksys_write+0x1ac/0x250 [ 276.365956][ T7410] do_syscall_64+0x123/0x790 [ 276.365967][ T7410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.365978][ T7410] RIP: 0033:0x7fe804f9f559 [ 276.365989][ T7410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.365999][ T7410] RSP: 002b:00007fe805ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 276.366010][ T7410] RAX: ffffffffffffffda RBX: 00007fe805225fa0 RCX: 00007fe804f9f559 [ 276.366017][ T7410] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 276.366023][ T7410] RBP: 00007fe805ed5090 R08: 0000000000000000 R09: 0000000000000000 [ 276.366029][ T7410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.366035][ T7410] R13: 00007fe805226038 R14: 00007fe805225fa0 R15: 00007ffda8c1ca88 [ 276.366048][ T7410] [ 278.855129][ T30] audit: type=1400 audit(1793547880.319:404): avc: denied { create } for pid=7425 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 278.876645][ T30] audit: type=1400 audit(1793547880.319:405): avc: denied { ioctl } for pid=7425 comm="syz.0.358" path="socket:[13591]" dev="sockfs" ino=13591 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 278.981069][ T7431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'. [ 279.156670][ T30] audit: type=1400 audit(1793547880.619:406): avc: denied { getopt } for pid=7425 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 279.157008][ T30] audit: type=1400 audit(1793547880.619:407): avc: denied { write } for pid=7425 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 279.237992][ T7428] 9p: Bad value for 'rfdno' [ 279.617493][ T7447] device-mapper: table: 248:4: crypt: Error decoding and setting key (-EINVAL) [ 279.617538][ T7447] device-mapper: ioctl: error adding target to table [ 281.090435][ T7461] FAULT_INJECTION: forcing a failure. [ 281.090435][ T7461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.090456][ T7461] CPU: 1 UID: 0 PID: 7461 Comm: syz.3.366 Not tainted syzkaller #0 PREEMPT(full) [ 281.090468][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 281.090474][ T7461] Call Trace: [ 281.090478][ T7461] [ 281.090482][ T7461] dump_stack_lvl+0x100/0x190 [ 281.090504][ T7461] should_fail_ex.cold+0x5/0xa [ 281.090520][ T7461] should_fail_alloc_page+0xeb/0x140 [ 281.090533][ T7461] prepare_alloc_pages+0x1f0/0x5b0 [ 281.090546][ T7461] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 281.090564][ T7461] ? lock_acquire+0x1d1/0x380 [ 281.090578][ T7461] ? is_bpf_text_address+0x25/0x1a0 [ 281.090591][ T7461] ? find_held_lock+0x2b/0x80 [ 281.090604][ T7461] ? is_bpf_text_address+0x8a/0x1a0 [ 281.090616][ T7461] ? is_bpf_text_address+0x8a/0x1a0 [ 281.090629][ T7461] ? bpf_ksym_find+0x128/0x1c0 [ 281.090644][ T7461] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 281.090660][ T7461] ? kernel_text_address+0x8d/0x100 [ 281.090672][ T7461] ? __kernel_text_address+0xd/0x30 [ 281.090684][ T7461] ? unwind_get_return_address+0x59/0xa0 [ 281.090694][ T7461] ? arch_stack_walk+0xa6/0xf0 [ 281.090718][ T7461] ? __pfx_stack_trace_save+0x10/0x10 [ 281.090733][ T7461] ? stack_depot_save_flags+0x27/0xa10 [ 281.090749][ T7461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.090767][ T7461] ? policy_nodemask+0xed/0x5e0 [ 281.090780][ T7461] alloc_pages_mpol+0x201/0x560 [ 281.090793][ T7461] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 281.090808][ T7461] alloc_pages_noprof+0x1a/0x160 [ 281.090822][ T7461] get_free_pages_noprof+0x10/0xb0 [ 281.090838][ T7461] __kasan_populate_vmalloc+0xa0/0x210 [ 281.090857][ T7461] alloc_vmap_area+0x963/0x2bc0 [ 281.090877][ T7461] ? kasan_save_track+0x14/0x30 [ 281.090887][ T7461] ? __kasan_kmalloc+0xaa/0xb0 [ 281.090906][ T7461] ? __pfx_alloc_vmap_area+0x10/0x10 [ 281.090923][ T7461] ? __get_vm_area_node+0x124/0x350 [ 281.090934][ T7461] __get_vm_area_node+0x1ed/0x350 [ 281.090946][ T7461] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 281.090958][ T7461] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 281.090969][ T7461] ? __lock_acquire+0x5c0/0x1f40 [ 281.090988][ T7461] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 281.091000][ T7461] ? lock_acquire+0x1d1/0x380 [ 281.091015][ T7461] ? find_held_lock+0x2b/0x80 [ 281.091026][ T7461] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.091036][ T7461] ? avc_has_perm_noaudit+0x11e/0x470 [ 281.091051][ T7461] ? avc_has_perm_noaudit+0x145/0x470 [ 281.091063][ T7461] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 281.091075][ T7461] __vmalloc_node_noprof+0xad/0xf0 [ 281.091085][ T7461] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 281.091098][ T7461] __vmalloc_noprof+0xa3/0x120 [ 281.091109][ T7461] ? __pfx___vmalloc_noprof+0x10/0x10 [ 281.091121][ T7461] ? rcu_is_watching+0x13/0xc0 [ 281.091132][ T7461] ? cap_capable+0x107/0x430 [ 281.091146][ T7461] bpf_prog_alloc_no_stats+0x59/0x690 [ 281.091157][ T7461] ? security_capable+0x80/0x260 [ 281.091171][ T7461] bpf_prog_alloc+0x3b/0x200 [ 281.091181][ T7461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.091199][ T7461] bpf_prog_load+0x12ed/0x2b20 [ 281.091218][ T7461] ? avc_has_perm_noaudit+0x11e/0x470 [ 281.091233][ T7461] ? __pfx_bpf_prog_load+0x10/0x10 [ 281.091262][ T7461] __sys_bpf+0x146f/0x4b60 [ 281.091282][ T7461] ? __pfx___sys_bpf+0x10/0x10 [ 281.091296][ T7461] ? find_held_lock+0x2b/0x80 [ 281.091311][ T7461] ? get_pid_task+0xfc/0x250 [ 281.091322][ T7461] ? get_pid_task+0xfc/0x250 [ 281.091335][ T7461] ? find_held_lock+0x2b/0x80 [ 281.091349][ T7461] ? rcu_read_lock_any_held+0x6a/0x90 [ 281.091361][ T7461] ? find_held_lock+0x2b/0x80 [ 281.091371][ T7461] ? ksys_write+0x190/0x250 [ 281.091381][ T7461] ? ksys_write+0x190/0x250 [ 281.091390][ T7461] ? lock_acquire+0x1d1/0x380 [ 281.091413][ T7461] ? fput+0x7c/0x100 [ 281.091425][ T7461] ? ksys_write+0x1ac/0x250 [ 281.091436][ T7461] ? __x64_sys_bpf+0xce/0x140 [ 281.091445][ T7461] __x64_sys_bpf+0xce/0x140 [ 281.091455][ T7461] ? do_syscall_64+0xae/0x790 [ 281.091466][ T7461] do_syscall_64+0x123/0x790 [ 281.091478][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.091488][ T7461] RIP: 0033:0x7fb87d79f559 [ 281.091497][ T7461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.091507][ T7461] RSP: 002b:00007fb87e6e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.091519][ T7461] RAX: ffffffffffffffda RBX: 00007fb87da25fa0 RCX: 00007fb87d79f559 [ 281.091526][ T7461] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 281.091532][ T7461] RBP: 00007fb87e6e0090 R08: 0000000000000000 R09: 0000000000000000 [ 281.091537][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.091543][ T7461] R13: 00007fb87da26038 R14: 00007fb87da25fa0 R15: 00007ffd2c51b0f8 [ 281.091557][ T7461] [ 281.252206][ T1194] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 281.323486][ T30] audit: type=1400 audit(1793547882.789:408): avc: denied { mount } for pid=7457 comm="syz.1.365" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 281.323784][ T7461] syz.3.366: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 281.323887][ T7461] CPU: 0 UID: 0 PID: 7461 Comm: syz.3.366 Not tainted syzkaller #0 PREEMPT(full) [ 281.323904][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 281.323913][ T7461] Call Trace: [ 281.323918][ T7461] [ 281.323924][ T7461] dump_stack_lvl+0x100/0x190 [ 281.323953][ T7461] warn_alloc.cold+0x9e/0xb2 [ 281.323970][ T7461] ? __pfx_warn_alloc+0x10/0x10 [ 281.323989][ T7461] ? lockdep_hardirqs_on+0x7d/0x110 [ 281.324007][ T7461] ? __get_vm_area_node+0x2f0/0x350 [ 281.324028][ T7461] ? __get_vm_area_node+0x22b/0x350 [ 281.324047][ T7461] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 281.324065][ T7461] ? __lock_acquire+0x5c0/0x1f40 [ 281.324092][ T7461] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 281.324111][ T7461] ? lock_acquire+0x1d1/0x380 [ 281.324131][ T7461] ? find_held_lock+0x2b/0x80 [ 281.324147][ T7461] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.324162][ T7461] ? avc_has_perm_noaudit+0x11e/0x470 [ 281.324183][ T7461] ? avc_has_perm_noaudit+0x145/0x470 [ 281.324201][ T7461] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 281.324217][ T7461] __vmalloc_node_noprof+0xad/0xf0 [ 281.324232][ T7461] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 281.324252][ T7461] __vmalloc_noprof+0xa3/0x120 [ 281.324267][ T7461] ? __pfx___vmalloc_noprof+0x10/0x10 [ 281.324284][ T7461] ? rcu_is_watching+0x13/0xc0 [ 281.324302][ T7461] ? cap_capable+0x107/0x430 [ 281.324322][ T7461] bpf_prog_alloc_no_stats+0x59/0x690 [ 281.324338][ T7461] ? security_capable+0x80/0x260 [ 281.324358][ T7461] bpf_prog_alloc+0x3b/0x200 [ 281.324373][ T7461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.324398][ T7461] bpf_prog_load+0x12ed/0x2b20 [ 281.324418][ T7461] ? avc_has_perm_noaudit+0x11e/0x470 [ 281.324440][ T7461] ? __pfx_bpf_prog_load+0x10/0x10 [ 281.324480][ T7461] __sys_bpf+0x146f/0x4b60 [ 281.324500][ T7461] ? __pfx___sys_bpf+0x10/0x10 [ 281.324514][ T7461] ? find_held_lock+0x2b/0x80 [ 281.324529][ T7461] ? get_pid_task+0xfc/0x250 [ 281.324542][ T7461] ? get_pid_task+0xfc/0x250 [ 281.324563][ T7461] ? find_held_lock+0x2b/0x80 [ 281.324584][ T7461] ? rcu_read_lock_any_held+0x6a/0x90 [ 281.324601][ T7461] ? find_held_lock+0x2b/0x80 [ 281.324616][ T7461] ? ksys_write+0x190/0x250 [ 281.324630][ T7461] ? ksys_write+0x190/0x250 [ 281.324643][ T7461] ? lock_acquire+0x1d1/0x380 [ 281.324677][ T7461] ? fput+0x7c/0x100 [ 281.324694][ T7461] ? ksys_write+0x1ac/0x250 [ 281.324716][ T7461] ? __x64_sys_bpf+0xce/0x140 [ 281.324729][ T7461] __x64_sys_bpf+0xce/0x140 [ 281.324743][ T7461] ? do_syscall_64+0xae/0x790 [ 281.324759][ T7461] do_syscall_64+0x123/0x790 [ 281.324776][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.324792][ T7461] RIP: 0033:0x7fb87d79f559 [ 281.324805][ T7461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.324819][ T7461] RSP: 002b:00007fb87e6e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.324834][ T7461] RAX: ffffffffffffffda RBX: 00007fb87da25fa0 RCX: 00007fb87d79f559 [ 281.324844][ T7461] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 281.324853][ T7461] RBP: 00007fb87e6e0090 R08: 0000000000000000 R09: 0000000000000000 [ 281.324862][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.324870][ T7461] R13: 00007fb87da26038 R14: 00007fb87da25fa0 R15: 00007ffd2c51b0f8 [ 281.324891][ T7461] [ 281.384110][ T30] audit: type=1400 audit(1793547882.839:409): avc: denied { mounton } for pid=7457 comm="syz.1.365" path="/80/sys_sec" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 281.385466][ T7461] Mem-Info: [ 281.385477][ T7461] active_anon:33449 inactive_anon:2 isolated_anon:0 [ 281.385477][ T7461] active_file:195 inactive_file:60887 isolated_file:0 [ 281.385477][ T7461] unevictable:0 dirty:86 writeback:0 [ 281.385477][ T7461] slab_reclaimable:12644 slab_unreclaimable:98583 [ 281.385477][ T7461] mapped:42679 shmem:26784 pagetables:1562 [ 281.385477][ T7461] sec_pagetables:0 bounce:0 [ 281.385477][ T7461] kernel_misc_reclaimable:0 [ 281.385477][ T7461] free:1055832 free_pcp:26347 free_cma:0 [ 281.385513][ T7461] Node 0 active_anon:133796kB inactive_anon:8kB active_file:780kB inactive_file:243340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170716kB dirty:344kB writeback:0kB shmem:107136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12836kB pagetables:6084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 281.385551][ T7461] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 281.385586][ T7461] Node 0 DMA free:11104kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.385627][ T7461] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 281.385653][ T7461] Node 0 DMA32 free:282628kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:133796kB inactive_anon:8kB active_file:780kB inactive_file:243340kB unevictable:0kB writepending:344kB zspages:0kB present:3129332kB managed:2506304kB mlocked:0kB bounce:0kB free_pcp:103340kB local_pcp:82232kB free_cma:0kB [ 281.385694][ T7461] lowmem_reserve[]: 0 0 1 1 1 [ 281.385724][ T7461] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1752kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.385762][ T7461] lowmem_reserve[]: 0 0 0 0 0 [ 281.385785][ T7461] Node 1 Normal free:3929596kB boost:0kB min:56088kB low:70108kB high:84128kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 281.385826][ T7461] lowmem_reserve[]: 0 0 0 0 0 [ 281.385850][ T7461] Node 0 DMA: 0*4kB 0*8kB 0*16kB 3*32kB (U) 0*64kB 2*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11104kB [ 281.385940][ T7461] Node 0 DMA32: 2935*4kB (UME) 2640*8kB (UME) 1975*16kB (UME) 742*32kB (UME) 1218*64kB (UME) 332*128kB (UME) 169*256kB (UM) 52*512kB (UME) 4*1024kB (UME) 0*2048kB 0*4096kB = 282636kB [ 281.386047][ T7461] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 281.386117][ T7461] Node 1 Normal: 5*4kB (UME) 9*8kB (UME) 10*16kB (UM) 10*32kB (UME) 9*64kB (UME) 5*128kB (UME) 3*256kB (ME) 6*512kB (UME) 2*1024kB (ME) 3*2048kB (UE) 956*4096kB (UM) = 3929596kB [ 281.386231][ T7461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.386243][ T7461] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.386254][ T7461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.386266][ T7461] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.386276][ T7461] 87863 total pagecache pages [ 281.386282][ T7461] 1 pages in swap cache [ 281.386287][ T7461] Free swap = 124992kB [ 281.386292][ T7461] Total swap = 124996kB [ 281.386298][ T7461] 2097051 pages RAM [ 281.386302][ T7461] 0 pages HighMem/MovableOnly [ 281.386307][ T7461] 438421 pages reserved [ 281.386312][ T7461] 0 pages cma reserved [ 281.401359][ T1194] usb 3-1: device descriptor read/64, error -71 [ 281.711340][ T1194] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 281.891448][ T1194] usb 3-1: device descriptor read/64, error -71 [ 282.004491][ T1194] usb usb3-port1: attempt power cycle [ 282.453764][ T1194] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 282.472212][ T1194] usb 3-1: device descriptor read/8, error -71 [ 282.484651][ T7467] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 282.484687][ T7467] block device autoloading is deprecated and will be removed. [ 282.514161][ T30] audit: type=1400 audit(1793547883.979:410): avc: denied { ioctl } for pid=7466 comm="syz.0.367" path="socket:[13635]" dev="sockfs" ino=13635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 282.676555][ T30] audit: type=1400 audit(1793547884.139:411): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 283.223152][ T1194] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 283.242015][ T1194] usb 3-1: device descriptor read/8, error -71 [ 283.359585][ T1194] usb usb3-port1: unable to enumerate USB device [ 283.817740][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 285.108125][ T7486] jffs2: notice: (7486) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 285.396907][ T7486] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 285.785816][ T30] audit: type=1400 audit(1793547887.249:412): avc: denied { create } for pid=7480 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 287.023741][ T30] audit: type=1400 audit(1793547888.489:413): avc: denied { create } for pid=7494 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 287.046503][ T30] audit: type=1400 audit(1793547888.509:414): avc: denied { setopt } for pid=7494 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 287.421478][ T5627] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 287.572856][ T5627] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 287.578854][ T5627] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 287.602940][ T5627] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 287.627045][ T5627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.627093][ T5627] usb 3-1: Product: syz [ 287.627161][ T5627] usb 3-1: Manufacturer: syz [ 287.627201][ T5627] usb 3-1: SerialNumber: syz [ 287.813047][ T5627] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 287.953141][ T5627] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 288.116395][ T5627] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 290.182590][ T7513] jffs2: notice: (7513) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 290.182802][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 290.382299][ T10] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 290.382336][ T10] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 290.390288][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.390313][ T10] usb 2-1: Product: syz [ 290.390327][ T10] usb 2-1: Manufacturer: syz [ 290.390339][ T10] usb 2-1: SerialNumber: syz [ 290.743360][ T30] audit: type=1400 audit(1793547892.199:415): avc: denied { cmd } for pid=7509 comm="syz.1.378" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 290.837981][ T30] audit: type=1400 audit(1793547892.299:416): avc: denied { append } for pid=7509 comm="syz.1.378" name="frontend0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 291.889247][ T7531] jffs2: notice: (7531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 292.269374][ T7531] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 292.414561][ T7510] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 292.432950][ T1194] usb 3-1: USB disconnect, device number 10 [ 292.450067][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 292.450118][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 292.453848][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 292.453889][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 292.459319][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 292.469973][ T1194] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 292.490079][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 292.495758][ T1194] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 292.496515][ T1194] ti_usb_3410_5052 3-1:2.0: device disconnected [ 292.734629][ T7538] jffs2: notice: (7538) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 293.470889][ T7544] jffs2: notice: (7544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 294.578892][ T5627] usb 2-1: USB disconnect, device number 6 [ 295.549387][ T7567] device-mapper: table: 248:4: crypt: Error decoding and setting key (-EINVAL) [ 295.549431][ T7567] device-mapper: ioctl: error adding target to table [ 296.948036][ T7581] jffs2: notice: (7581) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 297.253863][ T7581] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 302.745122][ T7616] jffs2: notice: (7616) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 304.363698][ T7631] device-mapper: table: 248:6: crypt: Error decoding and setting key (-EINVAL) [ 304.363752][ T7631] device-mapper: ioctl: error adding target to table [ 305.709733][ T7640] jffs2: notice: (7640) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 306.070383][ T7640] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 307.977601][ T7644] jffs2: notice: (7644) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 308.704880][ T7664] jffs2: notice: (7664) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 308.924587][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 309.073790][ T24] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 309.077615][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.077638][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 309.077658][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.080541][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.080563][ T24] usb 4-1: Product: syz [ 309.080577][ T24] usb 4-1: Manufacturer: syz [ 309.080590][ T24] usb 4-1: SerialNumber: syz [ 309.156396][ T24] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 309.156420][ T24] cdc_mbim 4-1:1.0: bind() failure [ 310.182456][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 310.622875][ T30] audit: type=1400 audit(1793547912.059:417): avc: denied { write } for pid=7657 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 311.445722][ T7684] jffs2: notice: (7684) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 311.921466][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.921494][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.099931][ T5627] usb 4-1: USB disconnect, device number 4 [ 312.262829][ T7695] netlink: 76 bytes leftover after parsing attributes in process `syz.3.417'. [ 315.844933][ T7712] FAULT_INJECTION: forcing a failure. [ 315.844933][ T7712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.844960][ T7712] CPU: 1 UID: 0 PID: 7712 Comm: syz.3.418 Not tainted syzkaller #0 PREEMPT(full) [ 315.844980][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 315.844991][ T7712] Call Trace: [ 315.844997][ T7712] [ 315.845004][ T7712] dump_stack_lvl+0x100/0x190 [ 315.845037][ T7712] should_fail_ex.cold+0x5/0xa [ 315.845064][ T7712] _copy_to_user+0x32/0xd0 [ 315.845086][ T7712] simple_read_from_buffer+0xcb/0x170 [ 315.845110][ T7712] proc_fail_nth_read+0x1af/0x230 [ 315.845134][ T7712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.845158][ T7712] ? rw_verify_area+0xce/0x6d0 [ 315.845182][ T7712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.845204][ T7712] vfs_read+0x1e4/0xb40 [ 315.845220][ T7712] ? lock_acquire+0x1d1/0x380 [ 315.845243][ T7712] ? __fget_files+0x34/0x3d0 [ 315.845263][ T7712] ? __pfx_vfs_read+0x10/0x10 [ 315.845277][ T7712] ? find_held_lock+0x2b/0x80 [ 315.845297][ T7712] ? __fget_files+0x215/0x3d0 [ 315.845322][ T7712] ? __fget_files+0x21f/0x3d0 [ 315.845350][ T7712] ksys_read+0x12a/0x250 [ 315.845366][ T7712] ? __pfx_ksys_read+0x10/0x10 [ 315.845389][ T7712] do_syscall_64+0x123/0x790 [ 315.845409][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.845427][ T7712] RIP: 0033:0x7fb87d75fd8e [ 315.845442][ T7712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 315.845457][ T7712] RSP: 002b:00007fb87e6dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.845474][ T7712] RAX: ffffffffffffffda RBX: 00007fb87e6e06c0 RCX: 00007fb87d75fd8e [ 315.845486][ T7712] RDX: 000000000000000f RSI: 00007fb87e6e00a0 RDI: 0000000000000004 [ 315.845496][ T7712] RBP: 00007fb87e6e0090 R08: 0000000000000000 R09: 0000000000000000 [ 315.845507][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.845517][ T7712] R13: 00007fb87da26038 R14: 00007fb87da25fa0 R15: 00007ffd2c51b0f8 [ 315.845542][ T7712] [ 316.224772][ T7716] FAULT_INJECTION: forcing a failure. [ 316.224772][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 316.224799][ T7716] CPU: 1 UID: 0 PID: 7716 Comm: syz.3.423 Not tainted syzkaller #0 PREEMPT(full) [ 316.224820][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 316.224831][ T7716] Call Trace: [ 316.224837][ T7716] [ 316.224844][ T7716] dump_stack_lvl+0x100/0x190 [ 316.224885][ T7716] should_fail_ex.cold+0x5/0xa [ 316.224916][ T7716] should_failslab+0xc2/0x120 [ 316.224936][ T7716] __kmalloc_noprof+0xfc/0x840 [ 316.224961][ T7716] ? rcu_is_watching+0x13/0xc0 [ 316.224981][ T7716] ? tomoyo_realpath_from_path+0xb6/0x690 [ 316.225005][ T7716] tomoyo_realpath_from_path+0xb6/0x690 [ 316.225029][ T7716] tomoyo_mount_acl+0x1b6/0x8b0 [ 316.225054][ T7716] ? is_bpf_text_address+0x8a/0x1a0 [ 316.225074][ T7716] ? is_bpf_text_address+0x8a/0x1a0 [ 316.225097][ T7716] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 316.225124][ T7716] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 316.225149][ T7716] ? kernel_text_address+0x8d/0x100 [ 316.225171][ T7716] ? unwind_get_return_address+0x59/0xa0 [ 316.225189][ T7716] ? arch_stack_walk+0xa6/0xf0 [ 316.225218][ T7716] ? __lock_acquire+0x5c0/0x1f40 [ 316.225254][ T7716] ? tomoyo_mount_permission+0x1f6/0x460 [ 316.225283][ T7716] ? tomoyo_domain+0xb2/0x150 [ 316.225302][ T7716] ? tomoyo_profile+0x47/0x60 [ 316.225323][ T7716] tomoyo_mount_permission+0x214/0x460 [ 316.225347][ T7716] ? tomoyo_mount_permission+0x1f6/0x460 [ 316.225371][ T7716] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 316.225409][ T7716] security_sb_mount+0xdd/0x270 [ 316.225435][ T7716] path_mount+0x158/0x2850 [ 316.225465][ T7716] ? __pfx_path_mount+0x10/0x10 [ 316.225488][ T7716] ? lockdep_hardirqs_on+0x7d/0x110 [ 316.225509][ T7716] ? putname+0xb1/0x110 [ 316.225528][ T7716] ? kmem_cache_free+0x127/0x6c0 [ 316.225560][ T7716] ? __x64_sys_mount+0x293/0x310 [ 316.225583][ T7716] __x64_sys_mount+0x293/0x310 [ 316.225609][ T7716] ? __pfx___x64_sys_mount+0x10/0x10 [ 316.225640][ T7716] do_syscall_64+0x123/0x790 [ 316.225660][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.225678][ T7716] RIP: 0033:0x7fb87d79f559 [ 316.225694][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.225710][ T7716] RSP: 002b:00007fb87e6e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 316.225728][ T7716] RAX: ffffffffffffffda RBX: 00007fb87da25fa0 RCX: 00007fb87d79f559 [ 316.225740][ T7716] RDX: 0000000000000000 RSI: 0000200000010f40 RDI: 0000000000000000 [ 316.225750][ T7716] RBP: 00007fb87e6e0090 R08: 0000000000000000 R09: 0000000000000000 [ 316.225760][ T7716] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000001 [ 316.225771][ T7716] R13: 00007fb87da26038 R14: 00007fb87da25fa0 R15: 00007ffd2c51b0f8 [ 316.225796][ T7716] [ 316.226167][ T7716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.957482][ T7723] jffs2: notice: (7723) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 318.293595][ T7723] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 318.494848][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 318.773556][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 321.413957][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 324.948844][ T7783] jffs2: notice: (7783) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 326.244555][ T30] audit: type=1400 audit(1793547927.709:418): avc: denied { connect } for pid=7802 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.249186][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 326.517984][ T30] audit: type=1400 audit(1793547927.979:419): avc: denied { remount } for pid=7810 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 326.948357][ T30] audit: type=1400 audit(1793547928.409:420): avc: denied { execute } for pid=7822 comm="syz.0.437" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 327.143864][ T30] audit: type=1400 audit(1793547928.609:421): avc: denied { ioctl } for pid=7828 comm="syz.2.453" path="socket:[14135]" dev="sockfs" ino=14135 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 327.721909][ T30] audit: type=1400 audit(1793547929.179:422): avc: denied { getopt } for pid=7842 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 328.283754][ T30] audit: type=1400 audit(1793547929.749:423): avc: denied { ioctl } for pid=7860 comm="syz.0.468" path="socket:[14799]" dev="sockfs" ino=14799 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 328.436912][ T7865] x_tables: duplicate entry at hook 3 [ 328.689936][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 329.647496][ T7903] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 329.665475][ T30] audit: type=1400 audit(1793547931.129:424): avc: denied { accept } for pid=7899 comm="syz.4.485" lport=57813 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 329.708700][ T30] audit: type=1400 audit(1793547931.169:425): avc: denied { setopt } for pid=7899 comm="syz.4.485" lport=57813 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 329.709236][ T30] audit: type=1400 audit(1793547931.169:426): avc: denied { getopt } for pid=7899 comm="syz.4.485" lport=57813 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 330.049928][ T30] audit: type=1400 audit(1793547931.509:427): avc: denied { watch } for pid=7913 comm="syz.3.491" path="/103" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 330.475818][ T7929] overlayfs: missing 'lowerdir' [ 330.487365][ T7930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.499'. [ 330.867544][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 330.922691][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.334216][ T7960] futex_wake_op: syz.4.509 tries to shift op by -1; fix this program [ 332.344280][ T7972] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16) [ 334.964980][ T7975] jffs2: notice: (7975) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 336.248787][ T10] dummy0: entered promiscuous mode [ 336.255208][ T7990] macvtap1: entered allmulticast mode [ 336.255228][ T7990] dummy0: entered allmulticast mode [ 336.282202][ T7990] dummy0: left allmulticast mode [ 336.350909][ T10] dummy0: left promiscuous mode [ 336.666388][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 337.486071][ T7999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.167436][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 339.163186][ T8015] jffs2: notice: (8015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 339.523091][ T8015] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 339.998582][ T8025] jffs2: notice: (8025) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 340.045322][ T8024] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8024 comm=syz.2.532 [ 340.159996][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.441366][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 342.055550][ T8051] jffs2: notice: (8051) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 342.729944][ T1110] IPVS: starting estimator thread 0... [ 342.757438][ T8068] IPVS: ip_vs_add_dest(): server weight less than zero [ 342.831396][ T8069] IPVS: using max 76 ests per chain, 182400 per kthread [ 343.072290][ T5627] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 343.160815][ T8070] jffs2: notice: (8070) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.027788][ T5627] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 344.107404][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.107424][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.107443][ T5627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.141517][ T5627] usb 4-1: config 0 descriptor?? [ 344.820072][ T8081] jffs2: notice: (8081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 345.194521][ T8081] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 345.644280][ T5627] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 346.302784][ T8088] jffs2: notice: (8088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 346.640351][ T8088] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 347.030762][ T5627] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 347.030788][ T5627] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 347.046978][ T5627] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 347.067717][ T5627] usb 4-1: USB disconnect, device number 5 [ 347.438167][ T8095] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16) [ 349.889073][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 349.889089][ T30] audit: type=1400 audit(1793547951.349:429): avc: denied { shutdown } for pid=8106 comm="syz.2.545" lport=55208 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 350.166895][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 350.378616][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 350.454652][ T30] audit: type=1400 audit(1793547951.919:430): avc: denied { create } for pid=8114 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 350.495682][ T30] audit: type=1400 audit(1793547951.959:431): avc: denied { create } for pid=8114 comm="syz.4.543" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 351.582829][ T30] audit: type=1400 audit(1793547953.049:432): avc: denied { map } for pid=8114 comm="syz.4.543" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 351.607867][ T30] audit: type=1400 audit(1793547953.069:433): avc: denied { read write } for pid=8114 comm="syz.4.543" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 351.735242][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 351.743874][ T10] usb 3-1: New USB device found: idVendor=12ab, idProduct=0004, bcdDevice=0.00 [ 351.839765][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 351.839801][ T10] usb 3-1: config 179 has no interface number 0 [ 351.839834][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 351.839857][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 351.839879][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 351.839899][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 351.839917][ T10] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 351.839938][ T10] usb 3-1: config 179 interface 65 has no altsetting 0 [ 351.839964][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.978622][ T30] audit: type=1400 audit(1793547953.439:434): avc: denied { connect } for pid=8114 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 352.004999][ T30] audit: type=1400 audit(1793547953.469:435): avc: denied { ioctl } for pid=8114 comm="syz.4.543" path="socket:[15523]" dev="sockfs" ino=15523 ioctlcmd=0x80047437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 352.088886][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 352.202788][ T5627] usb 3-1: USB disconnect, device number 11 [ 352.355462][ T8122] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16) [ 352.737835][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'. [ 355.571619][ T8131] jffs2: notice: (8131) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 355.793795][ T8131] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 356.167282][ T8142] JFS: discard option not supported on device [ 356.169853][ T8142] Mount JFS Failure: -5 [ 356.169877][ T8142] jfs_mount failed w/return code = -5 [ 356.172171][ T30] audit: type=1400 audit(1793547957.629:436): avc: denied { mounton } for pid=8135 comm="syz.4.556" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 357.677345][ T8149] netlink: 76 bytes leftover after parsing attributes in process `syz.0.560'. [ 358.460026][ T8156] jffs2: notice: (8156) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 358.673202][ T30] audit: type=1400 audit(1793547960.139:437): avc: denied { setopt } for pid=8160 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 358.676540][ T30] audit: type=1400 audit(1793547960.139:438): avc: denied { read } for pid=8160 comm="syz.0.564" path="socket:[15357]" dev="sockfs" ino=15357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 358.868349][ T30] audit: type=1400 audit(1793547960.199:439): avc: denied { write } for pid=8160 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 359.110550][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.218640][ T30] audit: type=1400 audit(1793547960.679:440): avc: denied { read } for pid=8166 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 359.537312][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.568994][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.595226][ T8172] device-mapper: table: 248:6: crypt: Error decoding and setting key (-EINVAL) [ 359.595240][ T8172] device-mapper: ioctl: error adding target to table [ 359.851279][ T8178] device-mapper: table: 248:6: crypt: Error decoding and setting key (-EINVAL) [ 359.851303][ T8178] device-mapper: ioctl: error adding target to table [ 361.257618][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 361.511342][ T1163] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.511386][ T1163] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.511416][ T1163] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.511445][ T1163] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.084625][ T8200] jffs2: notice: (8200) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 363.273708][ T8200] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 363.561337][ T5730] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 363.649947][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 363.717771][ T5730] usb 2-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 363.723611][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 363.723676][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 363.723705][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 363.723761][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 363.788241][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.788272][ T5730] usb 2-1: Product: syz [ 363.788316][ T5730] usb 2-1: Manufacturer: syz [ 363.788343][ T5730] usb 2-1: SerialNumber: syz [ 363.866615][ T5730] usb 2-1: config 0 descriptor?? [ 364.308073][ T5730] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 364.526365][ T5730] usb 2-1: USB disconnect, device number 7 [ 364.984729][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 366.767101][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 368.140265][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 368.702084][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 371.679648][ T8251] netlink: 76 bytes leftover after parsing attributes in process `syz.4.581'. [ 373.189083][ T8256] jffs2: notice: (8256) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 373.341926][ T8256] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 373.593909][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.593954][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.167317][ T8263] fuse: Unknown parameter 'ro[tmode' [ 375.410791][ T8266] jffs2: notice: (8266) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 375.768027][ T8266] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 376.566036][ T8272] jffs2: notice: (8272) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 379.545390][ T8293] device-mapper: table: 248:6: crypt: Error decoding and setting key (-EINVAL) [ 379.545404][ T8293] device-mapper: ioctl: error adding target to table [ 380.331193][ T1163] IPVS: starting estimator thread 0... [ 380.421392][ T8312] IPVS: using max 41 ests per chain, 98400 per kthread [ 380.976072][ T8321] jffs2: notice: (8321) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 381.245711][ T8321] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 382.938592][ T8333] jffs2: notice: (8333) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 383.293738][ T8333] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 383.769992][ T8329] jffs2: notice: (8329) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 384.056267][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 385.880999][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.604'. [ 391.451245][ C0] sched: DL replenish lagged too much [ 435.853748][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.865297][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.410810][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.421398][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.811551][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.823653][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 610.451170][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 610.458146][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5621/1:b..l.. [ 610.467076][ C0] rcu: (detected by 0, t=10503 jiffies, g=34541, q=1406004 ncpus=2) [ 610.475144][ C0] task:syz-executor state:R running task stack:21656 pid:5621 tgid:5621 ppid:5613 task_flags:0x400140 flags:0x00080000 [ 610.488635][ C0] Call Trace: [ 610.491915][ C0] [ 610.494848][ C0] __schedule+0x125e/0x6990 [ 610.499367][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 610.505529][ C0] ? unwind_get_return_address+0x59/0xa0 [ 610.511162][ C0] ? arch_stack_walk+0xa6/0xf0 [ 610.515933][ C0] ? __pfx___schedule+0x10/0x10 [ 610.520797][ C0] ? mark_held_locks+0x40/0x70 [ 610.525591][ C0] preempt_schedule_irq+0x4e/0x90 [ 610.530623][ C0] irqentry_exit+0x33f/0xab0 [ 610.535215][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.541193][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 610.546396][ C0] Code: 05 0f 01 d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e 69 81 10 0f 82 c9 02 00 00 8b 35 fe 98 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad 00 d1 13 0f 85 09 03 00 00 48 83 c4 [ 610.566030][ C0] RSP: 0018:ffffc900039ff920 EFLAGS: 00000206 [ 610.572101][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 610.580068][ C0] RDX: 0000000000000000 RSI: ffffffff8e601048 RDI: ffffffff8c835380 [ 610.588035][ C0] RBP: ffffffff8ffeb2a0 R08: 0000000040f98d7a R09: 0000000000000007 [ 610.596001][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 610.603965][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 610.611944][ C0] ? unwind_next_frame+0x3be/0x2090 [ 610.617143][ C0] ? unwind_next_frame+0x3be/0x2090 [ 610.622339][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 610.628496][ C0] unwind_next_frame+0xd1/0x2090 [ 610.633428][ C0] ? unwind_next_frame+0xbd/0x2090 [ 610.638534][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 610.644173][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 610.650330][ C0] arch_stack_walk+0x94/0xf0 [ 610.654930][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 610.660570][ C0] stack_trace_save+0x8e/0xc0 [ 610.665250][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 610.670630][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 610.675571][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 610.680509][ C0] save_stack+0x162/0x1e0 [ 610.684838][ C0] ? __pfx_save_stack+0x10/0x10 [ 610.689691][ C0] ? __free_frozen_pages+0x7b4/0x1110 [ 610.695061][ C0] ? qlist_free_all+0x47/0xf0 [ 610.699741][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 610.705373][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 610.710405][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 610.716069][ C0] ? page_ext_put+0x3e/0xd0 [ 610.720590][ C0] __reset_page_owner+0x85/0x230 [ 610.725570][ C0] __free_frozen_pages+0x7b4/0x1110 [ 610.730776][ C0] ? __free_slab+0xd0/0x200 [ 610.735285][ C0] qlist_free_all+0x47/0xf0 [ 610.739796][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 610.745260][ C0] __kasan_slab_alloc+0x69/0x90 [ 610.750110][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 610.755573][ C0] ? do_getname+0x35/0x390 [ 610.760004][ C0] do_getname+0x35/0x390 [ 610.764266][ C0] user_path_at+0x26/0x60 [ 610.768600][ C0] __x64_sys_umount+0x10a/0x1a0 [ 610.773465][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 610.778862][ C0] do_syscall_64+0x123/0x790 [ 610.783466][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.789365][ C0] RIP: 0033:0x7fb87d7a0797 [ 610.793807][ C0] RSP: 002b:00007ffd2c51a368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 610.802223][ C0] RAX: ffffffffffffffda RBX: 00007fb87d835f93 RCX: 00007fb87d7a0797 [ 610.810194][ C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2c51a420 [ 610.818168][ C0] RBP: 00007ffd2c51a420 R08: 00007ffd2c51b420 R09: 00000000ffffffff [ 610.826141][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2c51b4b0 [ 610.834112][ C0] R13: 00007fb87d835f93 R14: 000000000005ec87 R15: 00007ffd2c51b4f0 [ 610.842102][ C0]