last executing test programs: 13m50.560286255s ago: executing program 1 (id=224): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="f4de585a84f6894b16fc806f412cf93901d1f91e415790142449", 0x1a}, {0x0}, {0x0}], 0x3, &(0x7f0000000b00)=[@ip_ttl={{0x14}}], 0x18}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000540)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000039c0)}}], 0x3, 0x10814) 13m50.470469114s ago: executing program 1 (id=225): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0xa31e3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = open(0x0, 0x400, 0x43) linkat(r0, 0x0, r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x7, 0x6c48c66f]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xf]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004001}, 0xc080) setgroups(0x24, 0xffffffffffffffff) 13m50.362867126s ago: executing program 1 (id=226): r0 = gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) move_pages(r0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c2}) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x48642, 0x16c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) 13m46.952084564s ago: executing program 1 (id=235): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) write$proc_mixer(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="50484f4e4558db30d8494e0a545245424c4520274d6173746572c7b0f7a7ae284a1dffe5c920506c61796261636b20536e2f74"], 0xa8) close(r5) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x334e, 0x20000, 0x3, 0x275}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x2c020400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x4, 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000040)=0x5, 0x4) 13m43.235464526s ago: executing program 1 (id=242): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYRESDEC], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x41100, 0x1d, '\x00', 0x0, @flow_dissector}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x375, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000e00)='/'}, 0x50) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r8}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 13m42.049680216s ago: executing program 1 (id=244): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x5c30, 0x200, {}, {0xee00}, 0x40, 0x9d}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f00000005c0)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0xbf0}}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}, {@posixacl}, {@privport}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@seclabel}, {@fowner_lt={'fowner<', r4}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x4}}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nl802154\x00'}}, {@uid_lt={'uid<', r6}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@euid_eq={'euid', 0x3d, r7}}]}}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000007c0)={0x7, 0x8, 0xfa00, {r9, 0x3}}, 0x10) r10 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000000800)=[{0x7, 0x7f, 0x2, 0x90b6}]}, 0x10) r11 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r11, &(0x7f0000000880)="ce2ef049e3a2b71ed0e75357601726f097864fb822b34307df251af6a115c678e0808b3c947fb0fc927ff563b8b8987a274f1987bc83709ac544fa32d39de29af7218eeadd85ca3c68c959015305bcf4624a0c032aa70210066731929011669500433eabc916bd", 0x67, 0x840, &(0x7f0000000900)={0x2, 0x4e21, @multicast2}, 0x10) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r12, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000940)={@remote, 0x0, 0x0, 0x30, 0x0, [{@loopback}, {@dev}, {@remote}]}}) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r13, 0x0, 0xca, &(0x7f00000009c0)={0x1, 0x8, 0x1, 0x4, @vifc_lcl_ifindex=r5, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mount$nfs4(&(0x7f0000000a00)='posixacl', &(0x7f0000000a40)='./file0/file0\x00', &(0x7f0000000a80), 0x10000, &(0x7f0000000ac0)={[{'dfltgid'}, {'!'}, {'pcr'}], [{@pcr={'pcr', 0x3d, 0xa}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@seclabel}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz\x00'}}]}) unlinkat(r12, &(0x7f0000000b80)='./file0\x00', 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000bc0)) r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0xc0, &(0x7f0000000c40)=0x80, 0x0, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, &(0x7f0000000c80)={0x0, 0x1000, "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"}, &(0x7f0000001cc0)=0x1008) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001d00)={r15, 0x7, 0xa, [0x7, 0xb23d, 0x5, 0x800, 0x2e1, 0x1ff, 0xd24b, 0xff, 0x3, 0xea0]}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000001d40)={r13, 0xfffffffffffffff1, 0x3, 0xfff}) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000001e00)={'gre0\x00', &(0x7f0000001d80)=@ethtool_coalesce={0xf, 0x5, 0x1, 0x1, 0x3, 0x80, 0x0, 0x2, 0xd0a0, 0x9, 0x22bb, 0x1, 0xffffffff, 0x5407981c, 0x2, 0x9b, 0x2e2c, 0xb, 0x1, 0xfffffffb, 0x1, 0x54, 0x3}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r16, 0x84, 0x1, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0xfe, 0x40c}, &(0x7f0000001f00)=0x14) 13m26.727552332s ago: executing program 32 (id=244): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x5c30, 0x200, {}, {0xee00}, 0x40, 0x9d}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f00000005c0)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0xbf0}}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}, {@posixacl}, {@privport}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@seclabel}, {@fowner_lt={'fowner<', r4}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x4}}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nl802154\x00'}}, {@uid_lt={'uid<', r6}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@euid_eq={'euid', 0x3d, r7}}]}}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000007c0)={0x7, 0x8, 0xfa00, {r9, 0x3}}, 0x10) r10 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000000800)=[{0x7, 0x7f, 0x2, 0x90b6}]}, 0x10) r11 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r11, &(0x7f0000000880)="ce2ef049e3a2b71ed0e75357601726f097864fb822b34307df251af6a115c678e0808b3c947fb0fc927ff563b8b8987a274f1987bc83709ac544fa32d39de29af7218eeadd85ca3c68c959015305bcf4624a0c032aa70210066731929011669500433eabc916bd", 0x67, 0x840, &(0x7f0000000900)={0x2, 0x4e21, @multicast2}, 0x10) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r12, 0x89f5, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000940)={@remote, 0x0, 0x0, 0x30, 0x0, [{@loopback}, {@dev}, {@remote}]}}) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r13, 0x0, 0xca, &(0x7f00000009c0)={0x1, 0x8, 0x1, 0x4, @vifc_lcl_ifindex=r5, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mount$nfs4(&(0x7f0000000a00)='posixacl', &(0x7f0000000a40)='./file0/file0\x00', &(0x7f0000000a80), 0x10000, &(0x7f0000000ac0)={[{'dfltgid'}, {'!'}, {'pcr'}], [{@pcr={'pcr', 0x3d, 0xa}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@seclabel}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz\x00'}}]}) unlinkat(r12, &(0x7f0000000b80)='./file0\x00', 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000bc0)) r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0xc0, &(0x7f0000000c40)=0x80, 0x0, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, &(0x7f0000000c80)={0x0, 0x1000, "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"}, &(0x7f0000001cc0)=0x1008) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001d00)={r15, 0x7, 0xa, [0x7, 0xb23d, 0x5, 0x800, 0x2e1, 0x1ff, 0xd24b, 0xff, 0x3, 0xea0]}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000001d40)={r13, 0xfffffffffffffff1, 0x3, 0xfff}) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000001e00)={'gre0\x00', &(0x7f0000001d80)=@ethtool_coalesce={0xf, 0x5, 0x1, 0x1, 0x3, 0x80, 0x0, 0x2, 0xd0a0, 0x9, 0x22bb, 0x1, 0xffffffff, 0x5407981c, 0x2, 0x9b, 0x2e2c, 0xb, 0x1, 0xfffffffb, 0x1, 0x54, 0x3}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r16, 0x84, 0x1, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0xfe, 0x40c}, &(0x7f0000001f00)=0x14) 5m22.810626092s ago: executing program 0 (id=1479): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0) recvfrom$inet(r3, &(0x7f0000000200)=""/245, 0xf5, 0x2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800086}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m20.404220742s ago: executing program 0 (id=1485): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = socket(0x23, 0x5, 0x0) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5m19.242226696s ago: executing program 0 (id=1487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xca0b38a0cfa2f66d, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) socket$netlink(0x10, 0x3, 0x0) 5m17.857429473s ago: executing program 0 (id=1492): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xf, @string={0xf, 0x3, "6bc4f0cdb73e015f256e4f86af"}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x20, 0xfffffffc, 0x2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200021001200010a000000000000000080000000"], 0x26}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x7ff7ffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000f00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x61, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) process_mrelease(r6, 0x0) syz_io_uring_setup(0x1dd6, &(0x7f00000002c0)={0x0, 0x4764, 0x1000, 0x0, 0x118}, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000000f80)={0x2020}, 0x2020) 5m15.793423122s ago: executing program 0 (id=1497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000002000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x1, 0x1000000}, 0x50) 5m13.438615788s ago: executing program 0 (id=1506): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r4 = io_uring_setup(0x35a7, &(0x7f00000000c0)={0x0, 0x7f12, 0x3410, 0x3, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) socket(0x25, 0x1, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200003, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) 5m11.049142685s ago: executing program 33 (id=1506): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r4 = io_uring_setup(0x35a7, &(0x7f00000000c0)={0x0, 0x7f12, 0x3410, 0x3, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) socket(0x25, 0x1, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200003, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) 4m28.489982469s ago: executing program 2 (id=1621): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x2, &(0x7f0000004680)=ANY=[@ANYBLOB="12f7ffffff5cf679c49a6dfac9ca0f13d574fce316d03ab2bda89ce41044d7e74474d85c22bb5446e87d452570829c1b5d0b135bff8665572bb8dcaafaf978eedb229b71c70046b39e5722cbade783c54db1566ce24947237e232fb005db5276cc6ba3a6b207f5981751ecf6454b2f92582d17ecf2027f1716c12e452ded968258bc9e6ef3430f9c6d978c32d92f86018ac671851fbe983dc1b9b42f7556d03357e21a1cafbc6ef1808a8e12a9ba625c0b2c7314b194a51421a874231403698997e57218cc5ce6e9dfac57941854ef00f8c0fb97442ec5", @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESHEX=r1]) read$FUSE(r0, &(0x7f00000047c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = open(&(0x7f0000002280)='./file1\x00', 0x400, 0x10) write$FUSE_INIT(r1, &(0x7f0000002380)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x9, 0x1, 0x103010a, 0x0, 0x3, 0x400000, 0x10000}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000022c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x10001, 0x5}}, 0x30) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x2, 0xfff, 0x7}, &(0x7f0000000180)=0x10) r4 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, 0x0, 0x4000040) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYRESDEC=r4], 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r1, 0x0) r8 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x400002, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r8, 0x0) 4m27.601898729s ago: executing program 2 (id=1623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f0000000c80)=""/102370, 0x18fe2, 0x41e) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x4, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x88, 0xff}}, 0x18}}, 0x20040800) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 4m26.539329274s ago: executing program 2 (id=1625): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xca0b38a0cfa2f66d, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) 4m25.60501613s ago: executing program 2 (id=1630): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1100) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0xff40, 0x8, 0x7, 0x5, {{0x1a, 0x4, 0x1, 0x0, 0x68, 0x66, 0x0, 0xc0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, {[@timestamp_prespec={0x44, 0x54, 0x25, 0x3, 0xf, [{@remote, 0x3ff}, {@loopback, 0x5}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote}, {@local, 0x1fc0000}, {@multicast1, 0xc}, {@rand_addr=0x64010102, 0x4a65}, {@multicast2, 0xd}]}]}}}}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') read$FUSE(r2, &(0x7f0000004380)={0x2020}, 0x2020) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000000c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xc6, 0x0, 0x0, 0x0, 0x3, '\x00', r1, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000002000/0x1000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) 4m24.595868518s ago: executing program 2 (id=1638): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@remote, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) 4m21.060006083s ago: executing program 2 (id=1647): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x1, {0x1, 0xf0, 0x3}, 0xfe}, 0x18) socketpair(0x18, 0x4, 0x8, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="007baae80afa9027bd7710487c867ddb565a90f835d6b0ba45d499a635822ec48ebf399a01b9", 0x26}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}}], 0x2, 0xa8fc) 4m20.770860444s ago: executing program 34 (id=1647): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x1, {0x1, 0xf0, 0x3}, 0xfe}, 0x18) socketpair(0x18, 0x4, 0x8, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="007baae80afa9027bd7710487c867ddb565a90f835d6b0ba45d499a635822ec48ebf399a01b9", 0x26}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}}], 0x2, 0xa8fc) 9.053377931s ago: executing program 4 (id=2479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) sendmsg$AUDIT_SET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r1, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r6, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) recvmmsg(r6, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040088) 8.852947755s ago: executing program 6 (id=2481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x28, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) fsync(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRESHEX=r4, @ANYRES64=r1, @ANYRES32=r3], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5f114b66, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc4c, 0x4}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="200025bd7000ffdbdf25080000003c00038008000300080000000800030001000000080003004d0000000800030000080000080002000700000008000200ff7f000008000200ffffffff3c0104804c000780080002005841000008000400400000000800040004000000080002005e00000008000400ff01000008000200ac0000000800030007000000080004000000000008000200018000002400078008000100150000000800020006000000080003000d000000080003007c0200002c0007800800030000080000080004000800000008000100200000000800030003000000080001001b0000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b000044000780080001001c0000000800010008000000080002000600000008000300070000000800030000080000080003000800000008000400ff00000008000200060000000900010073797a30000000002400078008000300050000000800010014000000080001000f0000000800020008000000"], 0x18c}, 0x1, 0x0, 0x0, 0x4001}, 0x8810) 8.066553767s ago: executing program 4 (id=2486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x17dc80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0], &(0x7f0000000180)=[{}], &(0x7f0000000100)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0]}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r9], &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000780)=[{}, {}, {}, {}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x2}) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r11, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r11, 0xc04064aa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, r12, 0x0, '\x00', 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[r6, r7, r9, r10, r12], 0x5}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000800) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019400)=@newtaction={0xd8, 0x30, 0x1, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x60, 0x2, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x20fc}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x158c, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xfffffffd, 0x2, 0x80000001, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x8000) 7.968192689s ago: executing program 6 (id=2487): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x6}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f00000002c0)=[{r4, 0x1046}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 7.073922232s ago: executing program 4 (id=2488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$MSR(&(0x7f00000001c0), 0x4, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{0xff}, {0x3, 0xfc}}}}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') 6.738308911s ago: executing program 7 (id=2489): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0xa941, 0x8, 0x7fff, 0xffff, 0x1, 0x0, 0x1000, 0x1000, 0x5, 0x81, 0x9, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write(r4, &(0x7f0000000100)="9fcac1ecfacfb0ca1d9d84a3933e1a116ae72e3585b5907624814a3428a23c5fc50f79ccbd517aac132ea06c32526a4eca356c38d479f4b27754344738c936fcf64f31ea0b83b5ba286f5fa77d6b0e5338365349cf0688458f1bbcb1bb9a344a9d4686349ed583683b95cefa117fa58f7d177d2a26e918b38bcbb43892dc671fdfd1c7298896d2c583bf1385739682a8489ef7037adab5632abbc6d99cbbf74954c8235592356f200632bd6cb34d177e27fd8446fc6330f1cf30304e7f2d49fd7f9f709e252d6651dcd89c0061bcda", 0xcf) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r5}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000014"], 0x48, 0x4050}, 0x20000800) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000000) socket$packet(0x11, 0x2, 0x300) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000000)={0x9, 0xd6, 0x7fffffff, 0x7, 0xffffffde, 0x344f, "85ec21e1382c329131320f813d6d7ab7", 0x8, 0x7, 0x2, 0x5, 0x80, 0x2, 0x4}) 5.88169297s ago: executing program 6 (id=2490): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x18) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x9, 0xd6, 0x7fffffff, 0x7, 0xffffffde, 0x344f, "85ec21e1382c329131320f813d6d7ab7", 0x8, 0x7, 0x2, 0x5, 0x80, 0x2, 0x4}) 5.881053083s ago: executing program 5 (id=2491): r0 = socket$kcm(0x2, 0x1, 0x0) lremovexattr(0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x38, 0x0}, 0x20000811) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r3, &(0x7f0000000440)=""/176, 0xb0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00), r2) r7 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x2, [{r1, 0x0, 0x1000, 0x1000000}, {r1, 0x0, 0x10000, 0x1000}]}) readv(r7, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/223, 0xdf}], 0x1) 5.701265118s ago: executing program 6 (id=2492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xb, 0x200) lseek(r1, 0x7, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x40}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000051}, 0x4048091) (async, rerun: 64) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async, rerun: 64) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x650, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "1322ac79fd6b17b2"}}, 0x48}}, 0x0) (async, rerun: 32) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x3, 0x90, 0x7f, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x42805) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4031, 0xffffffffffffffff, 0x0) 5.439679484s ago: executing program 4 (id=2493): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfdfff00c}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x9ec, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) r4 = syz_io_uring_setup(0x4276, &(0x7f0000000480)={0x0, 0x5ff8, 0x800, 0x2, 0x8000276, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000000240)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x264942, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x32) syz_io_uring_setup(0x3b7, &(0x7f0000000340)={0x0, 0xcbe, 0x100, 0x240001, 0x376, 0x0, r4}, 0x0, &(0x7f0000000400)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3c, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r8}}) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 5.120161476s ago: executing program 6 (id=2495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0xf500) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) mlock2(&(0x7f0000440000/0x2000)=nil, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigaction(0xd, &(0x7f0000003a40)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc5, 0xc}) sendmmsg$inet6(r4, &(0x7f0000003940)=[{{0x0, 0x32, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3.746483244s ago: executing program 4 (id=2497): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1d}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000012d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r4, 0x0, 0xd0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r6, 0x93, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, 0x0, 0x0}, 0x20) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000040)={0x12f, &(0x7f0000000000)=[{}]}) 2.892383696s ago: executing program 7 (id=2499): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003d40)=[{{&(0x7f0000000200)=@sco={0x1f, @none}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/231, 0xe7}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000140)=""/5, 0x5}, {&(0x7f0000000600)=""/238, 0xee}, {&(0x7f0000000700)=""/242, 0xf2}, {&(0x7f0000000800)=""/228, 0xe4}], 0x8, &(0x7f0000000980)=""/96, 0x60}, 0x8}, {{&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=""/124, 0x7c}, 0x909}, {{&(0x7f0000001b40), 0x80, &(0x7f00000030c0)=[{&(0x7f0000003ec0)=""/168, 0xa8}, {&(0x7f0000001c80)=""/214, 0xd6}, {&(0x7f0000001d80)=""/54, 0x36}, {&(0x7f0000001dc0)=""/123, 0x7b}, {&(0x7f0000001bc0)=""/163, 0xa3}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/224, 0xe0}, {&(0x7f0000003000)=""/191, 0xbf}], 0x8, &(0x7f0000003140)=""/167, 0xa7}, 0x88a}, {{&(0x7f0000003200)=@sco, 0x80, &(0x7f0000003400)=[{&(0x7f0000003280)=""/201, 0xc9}, {&(0x7f0000003380)=""/125, 0x7d}], 0x2, &(0x7f0000003440)=""/251, 0xfb}, 0x2}, {{0x0, 0x0, &(0x7f0000003cc0)=[{0x0}, {&(0x7f0000003b00)=""/46, 0x2e}, {0x0}, {&(0x7f0000003bc0)=""/27, 0x1b}, {&(0x7f0000003c00)=""/63, 0x3f}, {&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/55, 0x37}], 0x7}, 0xd}], 0x5, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfe, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x9, 0x0, 0x0, 0x80, 0x9}}, 0x50) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) r5 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2.804149765s ago: executing program 4 (id=2500): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6, @ANYRESHEX=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000180)=0xc) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000bc0)={0xe4, 0x0, &(0x7f00000009c0)=[@increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000680)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/163, 0xa3, 0x0, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/189, 0xbd, 0x1, 0xe}, @fda={0x66646185, 0x2, 0x0, 0x33}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000007c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/144, 0x90, 0x0, 0x2c}, @fd={0x66642a85, 0x0, r10}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x400}, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000900)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000840)=""/8, 0x8, 0x0, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/115, 0x73, 0x1, 0x31}}, &(0x7f0000000980)={0x0, 0x18, 0x40}}}], 0x57, 0x0, &(0x7f0000000b40)="b189bd95b4b0eb122942c1f772717eeedf330fafaf2126214b3b957b81e56af771243538b6ddbd5d9881d5b367ca6093b31d074305df4584fb2f794d1c7effa6f3ddfa70068d4d1f1dc45cf505f8f259feaef124f9018a"}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.588793681s ago: executing program 5 (id=2501): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xfffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000800)=[{{&(0x7f0000000580)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="2400000000000000010000e501000000c333ff05340f49caf3004d1f9a8c514cef706220d36412266f332eb7086dd52b575d7861113448fd8b5bebbf05b0bb0522b93714afcdc9651072ce011125dff06176f9c5b2fd66477e70bc1bf6cc1c53632e0bdb764a182a443aa659c6d8f45dcf4a2b5708bb2f18833eaacce053b30be45615", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x20000000}}, {{&(0x7f0000000180)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)="1379f4d3ebb5b9a956a09c038a45b294dc8f2c7cd99bc660517cb1908d9bed2b40c88c3b2211280a9839aa7ae71ae294c2d0d8981aa2c3e765264a9a88f3d2a7ee63788da70714f189b3ebedebe1de5d7ea54708f5d9404a509109f630408273020031e91da73ee835c294866d4a2f874c90d4d5e87b57b26c6500f0ffb4d1651691209e1b4970d6", 0x88}], 0x1, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r1, r4, r7]}}, @rights={{0x24, 0x1, 0x1, [r6, 0xffffffffffffffff, r2, r1, r3]}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0xe0, 0xc010}}], 0x2, 0x80) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r8, 0x0, 0x0, 0x811) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x4f, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x2000000000008, 0x0, 0x3}, 0x0) 2.460199125s ago: executing program 3 (id=2502): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$loop(0x0, 0x3, 0x88582) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x2800048, 0x0) 2.313378949s ago: executing program 3 (id=2503): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getdents(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f00000028c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xf0, 0xc2) 2.245336344s ago: executing program 3 (id=2504): unshare(0x62040200) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r1, 0x20, &(0x7f0000000780)={&(0x7f0000000680)=""/95, 0x5f, 0x0, &(0x7f0000000700)=""/92, 0x5c}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='mm_lru_insertion\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket(0x1d, 0x800, 0x2) 2.15023202s ago: executing program 6 (id=2505): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) syz_usb_disconnect(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) r6 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x8a73, 0x8, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r6, 0x47ba, 0x3000000, 0x300000000000000, 0x0, 0x0) r9 = syz_io_uring_setup(0xbd7, &(0x7f0000000640)={0x0, 0x356e, 0x200, 0x2001, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.903528811s ago: executing program 7 (id=2506): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) close_range(r0, 0xffffffffffffffff, 0x0) 1.820246825s ago: executing program 7 (id=2507): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0xc0001502, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x80000e, 0x12, 0xffffffffffffffff, 0x100000000) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r7, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0x9d, 0x0, &(0x7f0000000700)=@ax25={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00068008000600ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.431470518s ago: executing program 7 (id=2508): fsopen(&(0x7f00000002c0)='virtiofs\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x100400, 0x0) read(r0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = io_uring_setup(0x7998, &(0x7f0000000200)={0x0, 0xe98f, 0x400, 0x0, 0xd8}) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x400, 0x1, 0x215, 0x0, r4}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, r9, 0x81, 0x4}, 0xfffffffc, 0x20d, 0x0, 0xffffffffffffffff, 0xeffffffffffffffd, 0x0, 0x800}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x1080000, &(0x7f00000004c0)={[{@usrquota}, {@nr_blocks={'nr_blocks', 0x3d, [0x31, 0x30, 0x30]}}, {@grpquota}, {@huge_within_size}, {@huge_within_size}, {@gid={'gid', 0x3d, r9}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) r10 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r10, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r10, 0x40046109, &(0x7f0000000040)={0xd0}) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x1, 0x0) 1.280317067s ago: executing program 5 (id=2509): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x4b0, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x49c, 0x11, 0x0, 0x1, [@nested={0x498, 0xcf, 0x0, 0x1, [@nested={0x491, 0x146, 0x0, 0x1, [@generic="f5ef56146c91147563276660e594de86923b901b9c31b5127825f1868b4db9469c2df41906c1f5ee", @typed={0x8, 0x124, 0x0, 0x0, @u32=0x7}, @nested={0x356, 0x6c, 0x0, 0x1, [@generic="8b82111c59f6", @nested={0x19c, 0x10f, 0x0, 0x1, [@nested={0x195, 0x11b, 0x0, 0x1, [@generic="44e4ba7c0b0ff113b095b181686c69e6901606a6035b241060d1ba9b116c80da82d5b88cc6363112ecfcfe146d3396e45fbbf0a08b22fd28c11b96cceeebb143edb758f38e41e6198a4aac1b4f64403c0297fdc66d55feb17b3a47961e32432008a761d761630abd62e074f1aeda6ad0a673e1e2f1ef46c79d906ae0a1b56a1cb49371c5044e8535c676535532d332e91b4270db1184a76120ed", @typed={0x5, 0x6b, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0xfffffffffffffffd}, @typed={0xc1, 0x82, 0x0, 0x0, @binary="9da6d2cfd0d56814fd84a9b4e09bfefb7e71aa6b1338a2f4b0bcf5b7da34e38272c0fb396e8da9fe6bafa86982b217883dc0a99d6f8cc8d02d65ac33bf40d09bc28a90cbe72d692943aa8ec74169b9f54f99da2135cef1a3b948b4bb65653d617abfa325b7ece7ef3a395ab715205e14add6497c4d4ccd9950c466a2121433263671d206265ab7a4afb86bcfc88d39c8da199e34acdfd9f19a20d74af1508d9ef7e25cbdbcb597005c8fd2c532208d87b50f917122d979574773357159"}, @generic="ea8e54f0deb6d4df4fed8cacb160ad53bc0360eeda91dd", @typed={0x8, 0xb8, 0x0, 0x0, @pid}]}]}, @nested={0x4, 0xef}, @nested={0x4}, @typed={0x4, 0xfe}, @nested={0x4, 0x62}, @nested={0x4, 0x87}, @nested={0x19c, 0x76, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @u32=0x5}, @nested={0x18f, 0xe0, 0x0, 0x1, [@typed={0xc, 0xae, 0x0, 0x0, @u64=0x4df8}, @typed={0x5, 0x1b, 0x0, 0x0, @str='\x00'}, @generic, @nested={0x137, 0x2f, 0x0, 0x1, [@nested={0x4, 0x8b}, @nested={0x4, 0xf5}, @generic="18bead30d3b42231b34c516a5d1c430292867a9b4b0f3026db667c88bc547a9840773d56f853a38c5e5f9427cf7ba124129623866304c57f657b890ba91fc7dd0e3474f15782e2e44f17ef3858c78fc4100cbcf96c3ba2104ad315c067bdad1aaab64f40101eb201d3068e50bb3d8dd1f08183a580edc2876f24ef9d54330d6a7f51723d5f1e3824e4f2753c56acaf2fdfcb995246862a", @generic="528aa2d6bdce46ebf45d8930ca9f01582e783cc846ed961a996dcb72", @nested={0x4, 0xd9}, @generic="9c1d5d1da82f851b86466b9287fcef3861700ba0385ea419fcaeda7eb359d4bdbff7c95c54543921cc78648862dc4c14300048123016ef2f51cdd3159eb8e7ec3172766a32df73f21872fdbbe1aaf0a984cc6c5a4b4e26dd907674b6cf7fb541593b7457da74944f61b06f5f", @typed={0x5, 0x4a, 0x0, 0x0, @str='\x00'}]}, @generic="1bb674bcf6d93b82006265e840926989f59187f517c4c20653d1453af91af1c38f432002094221016ef9fed97b78e2fabd762b99b4b92f", @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x5}]}]}]}, @typed={0x8, 0x65, 0x0, 0x0, @pid}, @generic="db89061eb9fbad2bf82b2a9418649da868c869b4397ab66e7f39863979f0bdf348067f0b5606ca8cdcb5b5080280648f010c688d62984d051b094fe343cb1fa22295cdcf66ca2b1cc8152ecb85f43f28d04aa546812ddb957608dc2f3b52e0e98745cc4aa9b20ab28754d0d7c05b9139d8ff8509fbe0d7d56d5710ea94b935782d99259af1a87cf89bcca8f33c9878df0b153753b7ccc2d3d65b5d8e92f7230c8b3b3d434ce7cd2f1e8dbf2cbfca3103a770996f13ed41af6f046964853f276bf8c18987b616eb8c1c752f52389cd54b7a7874ba1d9b4d2612518c8c3c9220ded49fd5ff56d71b5b5569f9421c", @typed={0x8, 0xb8, 0x0, 0x0, @u32=0xfffffff8}, @typed={0x8, 0x98, 0x0, 0x0, @fd=r0}]}]}]}]}, 0x4b0}], 0x1, 0x0, 0x0, 0x84}, 0x300) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000080)) 1.214548251s ago: executing program 3 (id=2510): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x7, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "215afde920"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x80, 0x3, 0xc7}, [@country_functional={0x8, 0x24, 0x7, 0xfd, 0x800, [0x45a6]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0xd, 0xc3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x27, 0x8, 0x5, 0x40, 0x3a}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0x7f, &(0x7f0000000100)=@string={0x7f, 0x3, "829be7a1eeeb483acba0f3b84ef1119af9b9533b6fb960794f7593e399470d16e118bf27c5f98776442fa64125f98358a1548fffda616fbbdc34bf5cda0ab3b005db90552b8d4c7f25c0212b9f760061451238e93fd2f67d5d46d2935e06b49567bca63f79406ccb31d22e000bc800335a4e566a64481206ab6b6c2821"}}, {0x57, &(0x7f0000000180)=@string={0x57, 0x3, "03731daa2c037aa7ad750d5278dc7bb99011e3fd3397876f9d0a2bbaba357a8dd033fda74cdcd510e648f2be38d4b0c3388577339e92453498824076c912a3ae71a18fa4d9390560bd3d12e90538c13faa074e7ee1"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xb9, &(0x7f0000000500)=@string={0xb9, 0x3, "266fb7864fcf759eb336284fdf2bec3f2a9a4b0990318242df3950d1bde516ba736c91e1ddecc9f61cd7e2b22e9d83afe42b9814ae654e714449e39a8d1faf40b8c342ff115071b5cb897d6b5b99a02275668c62a5893343827d021bc064f3fd964d5fd13fecc49a2fffa28957b1d19bebb58019730e0acee80b94fc12e6daa07179287b8e1cf30307acd4b6e1e3f448580d1b8f13df8ca1a57369023c8d1fa3a2695b397d99d26c9a7f0d5f757c2eac30a526a3660bf0"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}, {0x26, &(0x7f0000000380)=@string={0x26, 0x3, "e36ac8a69715bd0019f14fba0fc4a03a9a76854f5675148b9eea6da097918a9aa4b40450"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c10}}]}) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.132500677s ago: executing program 5 (id=2511): syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x1, @sdr={0x34325258, 0xb}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) getresuid(0x0, 0x0, 0x0) setuid(0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r6, 0x0, 0x801) sendmsg$NL80211_CMD_SET_COALESCE(r6, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 308.205864ms ago: executing program 7 (id=2512): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000004c0)) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r3, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file1\x00', 0x108) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x90, 0x0, 0x9, {0x5, 0x0, 0x672, 0x249804a1, 0xf5, 0x1ff, {0x3, 0x1, 0x2, 0x7, 0x4, 0x80000001, 0xa, 0x641d4d1, 0x6, 0x4000, 0x6, r3, r5, 0x57c, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r8, 0x89f0, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x7ff, 0xa, "5dee000000594000"}) 176.94814ms ago: executing program 5 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 36.33214ms ago: executing program 3 (id=2514): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf", 0x7a, 0x0, 0x0, 0x0) 8.323723ms ago: executing program 3 (id=2515): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) write$proc_mixer(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="50484f4e4558db30d8494e0a545245424c4520274d6173746572c7b0f7a7ae284a1dffe5c920506c6179626163"], 0xa8) close(r5) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x334e, 0x20000, 0x3, 0x275}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x2c020400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) connect$inet6(r8, &(0x7f0000010440)={0xa, 0x20, 0x0, @local, 0x9}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x4, 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000040)=0x5, 0x4) 0s ago: executing program 5 (id=2516): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f00000000c0)=0xfff, &(0x7f0000000240)=0x2) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) kernel console output (not intermixed with test programs): ] usb 8-1: selecting invalid altsetting 0 [ 767.421647][ T1205] usb 8-1: selecting invalid altsetting 0 [ 767.432278][ T1205] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 767.474621][ T1205] usb 8-1: USB disconnect, device number 3 [ 768.353225][ T30] audit: type=1400 audit(1762536900.188:1061): avc: denied { read write } for pid=13169 comm="syz.4.1743" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 768.659255][ T30] audit: type=1400 audit(1762536900.188:1062): avc: denied { open } for pid=13169 comm="syz.4.1743" path="/327/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 768.722068][T13191] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1744'. [ 768.857597][ T30] audit: type=1400 audit(1762536900.468:1063): avc: denied { ioctl } for pid=13187 comm="syz.7.1746" path="socket:[40474]" dev="sockfs" ino=40474 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 769.383727][T13211] FAULT_INJECTION: forcing a failure. [ 769.383727][T13211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.405301][T13211] CPU: 1 UID: 0 PID: 13211 Comm: syz.7.1750 Not tainted syzkaller #0 PREEMPT(full) [ 769.405324][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 769.405333][T13211] Call Trace: [ 769.405344][T13211] [ 769.405351][T13211] dump_stack_lvl+0x16c/0x1f0 [ 769.405381][T13211] should_fail_ex+0x512/0x640 [ 769.405404][T13211] _copy_from_user+0x2e/0xd0 [ 769.405429][T13211] copy_msghdr_from_user+0x98/0x160 [ 769.405453][T13211] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 769.405480][T13211] ? __pfx__kstrtoull+0x10/0x10 [ 769.405512][T13211] ___sys_sendmsg+0xfe/0x1d0 [ 769.405536][T13211] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.405573][T13211] ? find_held_lock+0x2b/0x80 [ 769.405611][T13211] __sys_sendmmsg+0x200/0x420 [ 769.405635][T13211] ? __pfx___sys_sendmmsg+0x10/0x10 [ 769.405665][T13211] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 769.405694][T13211] ? fput+0x9b/0xd0 [ 769.405715][T13211] ? ksys_write+0x1ac/0x250 [ 769.405730][T13211] ? __pfx_ksys_write+0x10/0x10 [ 769.405752][T13211] __x64_sys_sendmmsg+0x9c/0x100 [ 769.405774][T13211] ? lockdep_hardirqs_on+0x7c/0x110 [ 769.405800][T13211] do_syscall_64+0xcd/0xfa0 [ 769.405818][T13211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.405833][T13211] RIP: 0033:0x7fbf63f8f6c9 [ 769.405847][T13211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.405863][T13211] RSP: 002b:00007fbf64e99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 769.405879][T13211] RAX: ffffffffffffffda RBX: 00007fbf641e5fa0 RCX: 00007fbf63f8f6c9 [ 769.405890][T13211] RDX: 0000000000000001 RSI: 0000200000003a00 RDI: 0000000000000003 [ 769.405900][T13211] RBP: 00007fbf64e99090 R08: 0000000000000000 R09: 0000000000000000 [ 769.405910][T13211] R10: 0000000000010814 R11: 0000000000000246 R12: 0000000000000001 [ 769.405920][T13211] R13: 00007fbf641e6038 R14: 00007fbf641e5fa0 R15: 00007ffc761ee138 [ 769.405946][T13211] [ 770.822542][ T30] audit: type=1400 audit(1762536901.998:1064): avc: denied { execute } for pid=13213 comm="syz.7.1753" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 774.040150][ T30] audit: type=1400 audit(1762536905.868:1065): avc: denied { read write } for pid=13265 comm="syz.4.1766" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 774.072167][ T30] audit: type=1400 audit(1762536905.868:1066): avc: denied { open } for pid=13265 comm="syz.4.1766" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 774.173610][ T30] audit: type=1400 audit(1762536905.878:1067): avc: denied { getopt } for pid=13267 comm="syz.6.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 774.336051][ T30] audit: type=1400 audit(1762536906.058:1068): avc: denied { bind } for pid=13269 comm="syz.6.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 774.414939][ T30] audit: type=1400 audit(1762536906.058:1069): avc: denied { listen } for pid=13269 comm="syz.6.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 774.563318][ T30] audit: type=1400 audit(1762536906.158:1070): avc: denied { connect } for pid=13269 comm="syz.6.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 775.488440][ T30] audit: type=1400 audit(1762536907.318:1071): avc: denied { getopt } for pid=13290 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 776.389494][ T30] audit: type=1400 audit(1762536908.168:1072): avc: denied { mount } for pid=13290 comm="syz.3.1773" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 778.318181][T13318] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1778'. [ 778.378334][T13318] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1778'. [ 778.418964][T13326] syz_tun: entered allmulticast mode [ 778.443193][T13325] syz_tun: left allmulticast mode [ 778.960214][T12676] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 779.049190][T13339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.091877][T13339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.385955][T12676] usb 7-1: not running at top speed; connect to a high speed hub [ 779.401873][T12676] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 779.411059][T12676] usb 7-1: config 95 has no interface number 0 [ 779.417533][T12676] usb 7-1: config 95 interface 1 has no altsetting 0 [ 779.433041][T12676] usb 7-1: string descriptor 0 read error: -22 [ 779.492439][T12676] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 779.513546][T12676] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.540286][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.574710][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.600773][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.612333][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.730775][T13350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.755232][T13350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.791217][T13352] netlink: 'syz.7.1788': attribute type 10 has an invalid length. [ 779.804276][T13352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.813278][T13352] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 779.833678][T13352] netlink: 'syz.7.1788': attribute type 10 has an invalid length. [ 779.841630][T13352] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1788'. [ 779.850656][T13352] batadv0: entered promiscuous mode [ 779.855938][T13352] batadv0: entered allmulticast mode [ 780.016268][T13352] bond0: (slave batadv0): Releasing backup interface [ 780.098438][T13352] bridge0: port 3(batadv0) entered blocking state [ 780.105140][T13352] bridge0: port 3(batadv0) entered disabled state [ 780.198012][ T1148] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 780.207453][ T1148] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 781.702054][ T5952] usb 7-1: USB disconnect, device number 6 [ 781.724589][ T30] audit: type=1400 audit(1762536913.268:1073): avc: denied { write } for pid=13349 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 782.095831][T13363] lo speed is unknown, defaulting to 1000 [ 782.195169][T13368] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 782.317642][ T30] audit: type=1400 audit(1762536914.148:1074): avc: denied { write } for pid=13362 comm="syz.4.1791" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 782.350076][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1792'. [ 782.761364][T13379] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 782.794848][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1793'. [ 783.886668][T13394] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 783.901876][T13394] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1798'. [ 785.037442][T13406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.054714][T13406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.446836][T13424] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1806'. [ 788.193213][T13433] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 788.459891][ T30] audit: type=1400 audit(1762536920.298:1075): avc: denied { bind } for pid=13435 comm="syz.7.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 788.732147][T12676] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 789.137239][T12676] usb 8-1: device descriptor read/64, error -71 [ 789.447084][T12676] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 789.456992][ T30] audit: type=1400 audit(1762536921.288:1076): avc: denied { watch } for pid=13441 comm="syz.3.1812" path="/369/bus" dev="tmpfs" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 789.482786][ T30] audit: type=1400 audit(1762536921.288:1077): avc: denied { watch_sb watch_reads } for pid=13441 comm="syz.3.1812" path="/369/bus" dev="tmpfs" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 789.506716][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.606626][T12676] usb 8-1: device descriptor read/64, error -71 [ 789.656125][T13446] FAULT_INJECTION: forcing a failure. [ 789.656125][T13446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.669587][T13446] CPU: 1 UID: 0 PID: 13446 Comm: syz.4.1813 Not tainted syzkaller #0 PREEMPT(full) [ 789.669612][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 789.669623][T13446] Call Trace: [ 789.669629][T13446] [ 789.669637][T13446] dump_stack_lvl+0x16c/0x1f0 [ 789.669670][T13446] should_fail_ex+0x512/0x640 [ 789.669694][T13446] _copy_from_user+0x2e/0xd0 [ 789.669717][T13446] copy_msghdr_from_user+0x98/0x160 [ 789.669742][T13446] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 789.669769][T13446] ? __pfx__kstrtoull+0x10/0x10 [ 789.669800][T13446] ___sys_sendmsg+0xfe/0x1d0 [ 789.669823][T13446] ? __pfx____sys_sendmsg+0x10/0x10 [ 789.669859][T13446] ? find_held_lock+0x2b/0x80 [ 789.669897][T13446] __sys_sendmmsg+0x200/0x420 [ 789.669924][T13446] ? __pfx___sys_sendmmsg+0x10/0x10 [ 789.669956][T13446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 789.669984][T13446] ? fput+0x9b/0xd0 [ 789.670005][T13446] ? ksys_write+0x1ac/0x250 [ 789.670021][T13446] ? __pfx_ksys_write+0x10/0x10 [ 789.670041][T13446] __x64_sys_sendmmsg+0x9c/0x100 [ 789.670063][T13446] ? lockdep_hardirqs_on+0x7c/0x110 [ 789.670089][T13446] do_syscall_64+0xcd/0xfa0 [ 789.670107][T13446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.670124][T13446] RIP: 0033:0x7f2a3198f6c9 [ 789.670139][T13446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.670156][T13446] RSP: 002b:00007f2a327a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 789.670173][T13446] RAX: ffffffffffffffda RBX: 00007f2a31be5fa0 RCX: 00007f2a3198f6c9 [ 789.670184][T13446] RDX: 0000000000000002 RSI: 0000200000003a00 RDI: 0000000000000003 [ 789.670200][T13446] RBP: 00007f2a327a5090 R08: 0000000000000000 R09: 0000000000000000 [ 789.670210][T13446] R10: 0000000000010814 R11: 0000000000000246 R12: 0000000000000001 [ 789.670221][T13446] R13: 00007f2a31be6038 R14: 00007f2a31be5fa0 R15: 00007ffe1af65a58 [ 789.670247][T13446] [ 789.864255][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.973437][T13448] syz_tun: entered allmulticast mode [ 789.988091][T13447] syz_tun: left allmulticast mode [ 789.989337][T12676] usb usb8-port1: attempt power cycle [ 790.624637][ T5813] IPVS: starting estimator thread 0... [ 790.638647][T12676] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 790.665601][T13462] syzkaller0: entered promiscuous mode [ 790.671194][T13462] syzkaller0: entered allmulticast mode [ 790.678268][T12676] usb 8-1: device descriptor read/8, error -71 [ 790.690259][T13462] syzkaller0: tun_net_xmit 2 [ 790.695864][T13462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13462 comm=syz.5.1819 [ 790.716622][T13463] IPVS: using max 39 ests per chain, 93600 per kthread [ 790.718294][ T6986] syzkaller0: tun_net_xmit 48 [ 790.733740][T13462] IPVS: nq: FWM 3 0x00000003 - no destination available [ 790.752991][ T30] audit: type=1400 audit(1762536922.568:1078): avc: denied { create } for pid=13461 comm="syz.5.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 790.793100][ T30] audit: type=1400 audit(1762536922.568:1079): avc: denied { read } for pid=13461 comm="syz.5.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 790.840145][ T30] audit: type=1400 audit(1762536922.668:1080): avc: denied { execute } for pid=13452 comm="syz.3.1816" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 790.916718][T12676] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 790.937311][T12676] usb 8-1: device descriptor read/8, error -71 [ 791.086095][T12676] usb usb8-port1: unable to enumerate USB device [ 792.116755][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 792.405113][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 792.456860][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 792.471982][ T10] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 792.497068][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.532480][ T10] usb 8-1: Product: syz [ 792.542655][ T10] usb 8-1: Manufacturer: syz [ 792.548752][ T10] usb 8-1: SerialNumber: syz [ 792.569486][ T10] usb 8-1: config 0 descriptor?? [ 792.578033][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 792.590912][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 792.618151][ T10] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input34 [ 792.995120][T13488] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1822'. [ 793.085953][T13490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.098805][T13490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.680974][T13492] fuse: Bad value for 'fd' [ 793.983447][T13501] fuse: Unknown parameter 'usÙÝ8d' [ 794.081722][ T30] audit: type=1400 audit(1762536925.898:1081): avc: denied { setopt } for pid=13500 comm="syz.6.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 795.434878][T13497] lo: Caught tx_queue_len zero misconfig [ 795.577067][ T10] usb 8-1: USB disconnect, device number 8 [ 796.699037][ T30] audit: type=1400 audit(1762536928.538:1082): avc: denied { write } for pid=13534 comm="syz.3.1837" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 796.813374][ T30] audit: type=1400 audit(1762536928.538:1083): avc: denied { open } for pid=13534 comm="syz.3.1837" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 797.915043][ T30] audit: type=1400 audit(1762536929.638:1084): avc: denied { read } for pid=13545 comm="syz.7.1839" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 798.526820][ T30] audit: type=1400 audit(1762536929.638:1085): avc: denied { open } for pid=13545 comm="syz.7.1839" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 798.561809][ T30] audit: type=1400 audit(1762536929.648:1086): avc: denied { ioctl } for pid=13545 comm="syz.7.1839" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 798.794834][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.852418][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.060723][ T30] audit: type=1326 audit(1762536930.878:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.7.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf63f8f6c9 code=0x7ffc0000 [ 799.115193][ T30] audit: type=1326 audit(1762536930.888:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.7.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf63f8f6c9 code=0x7ffc0000 [ 799.163578][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1841'. [ 799.496417][T13568] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 799.787152][ T5859] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 799.975560][T13572] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1842'. [ 799.986971][T12877] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 800.057678][T13572] netlink: 840 bytes leftover after parsing attributes in process `syz.5.1842'. [ 800.068624][ T5859] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 800.081593][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.090152][ T5859] usb 7-1: Product: syz [ 800.094768][ T5859] usb 7-1: Manufacturer: syz [ 800.100673][ T5859] usb 7-1: SerialNumber: syz [ 800.107642][ T5859] usb 7-1: config 0 descriptor?? [ 800.119964][ T5859] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 800.134573][ T5859] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 800.150143][T12877] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 800.152913][ T5859] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 800.171620][T12877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 800.173083][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.191468][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.228772][T12877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 800.255868][T12877] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 800.274754][T12877] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 800.286560][T12877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.305290][T12877] usb 8-1: config 0 descriptor?? [ 800.752995][T12877] usbhid 8-1:0.0: can't add hid device: -71 [ 800.763610][T12877] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 800.898449][T12877] usb 8-1: USB disconnect, device number 9 [ 801.185613][T13581] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 801.208800][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.221997][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.321414][T12877] usb 7-1: USB disconnect, device number 7 [ 802.382183][T13586] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 802.390519][T13586] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 802.709671][T13598] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 802.854894][T13605] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1853'. [ 802.960166][T13598] kvm: pic: level sensitive irq not supported [ 802.960413][T13598] kvm: pic: non byte read [ 802.972047][T13598] kvm: pic: level sensitive irq not supported [ 802.972104][T13598] kvm: pic: non byte read [ 802.983332][T13598] kvm: pic: level sensitive irq not supported [ 802.983382][T13598] kvm: pic: non byte read [ 803.007994][T13598] kvm: pic: level sensitive irq not supported [ 803.008049][T13598] kvm: pic: non byte read [ 803.271731][T13612] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 804.369321][T13622] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1858'. [ 805.413851][T13613] Bluetooth: hci1: command 0x0406 tx timeout [ 805.461827][ T30] audit: type=1400 audit(1762536937.258:1089): avc: denied { bind } for pid=13630 comm="syz.7.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 806.355592][T13643] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 807.233810][T13646] fuse: Unknown parameter 'rZOtmoÊàf¢èÕd…ÍÛÓp±«' [ 807.287134][ T30] audit: type=1400 audit(1762536939.118:1090): avc: denied { setopt } for pid=13645 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 807.397377][T13663] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 807.423545][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.430615][T13663] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 808.012696][T13670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.025681][T13670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.509300][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.518444][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.302528][ T30] audit: type=1400 audit(1762536940.708:1091): avc: denied { watch } for pid=13677 comm="syz.5.1873" path="/311/file0" dev="tmpfs" ino=1635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 809.389998][T13681] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1871'. [ 809.608433][ T30] audit: type=1400 audit(1762536941.448:1092): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 809.739486][T13689] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 810.997032][T13708] netlink: 'syz.7.1882': attribute type 1 has an invalid length. [ 811.158834][T13709] vlan2: entered allmulticast mode [ 811.165337][T13709] veth1: entered allmulticast mode [ 811.886301][T13721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.942434][T13721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.026593][ T30] audit: type=1400 audit(1762536943.848:1093): avc: denied { write } for pid=13729 comm="syz.4.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 812.338726][T13739] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 813.216708][T12676] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 813.408823][T12676] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.419711][T12676] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 813.429402][T12676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.466051][T12676] usb 7-1: config 0 descriptor?? [ 813.485941][T12676] pwc: Askey VC010 type 2 USB webcam detected. [ 813.900737][T12676] pwc: recv_control_msg error -32 req 02 val 2b00 [ 813.932383][T12676] pwc: recv_control_msg error -32 req 02 val 2700 [ 813.957472][T12676] pwc: recv_control_msg error -32 req 02 val 2c00 [ 813.964885][T12676] pwc: recv_control_msg error -32 req 04 val 1000 [ 814.000352][T12676] pwc: recv_control_msg error -32 req 04 val 1300 [ 814.036956][T12676] pwc: recv_control_msg error -32 req 04 val 1400 [ 814.062773][T12676] pwc: recv_control_msg error -32 req 02 val 2000 [ 814.100556][T12676] pwc: recv_control_msg error -32 req 02 val 2100 [ 814.121613][T12676] pwc: recv_control_msg error -32 req 04 val 1500 [ 814.193416][ T30] audit: type=1400 audit(1762536946.028:1094): avc: denied { unmount } for pid=12665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 814.363616][T12676] pwc: recv_control_msg error -71 req 02 val 2400 [ 814.877576][T12676] pwc: recv_control_msg error -71 req 02 val 2600 [ 814.886105][T12676] pwc: recv_control_msg error -71 req 02 val 2900 [ 814.901937][T12676] pwc: recv_control_msg error -71 req 02 val 2800 [ 814.913713][T12676] pwc: recv_control_msg error -71 req 04 val 1100 [ 814.921812][T12676] pwc: recv_control_msg error -71 req 04 val 1200 [ 814.956205][T12676] pwc: Registered as video103. [ 814.988406][T12676] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 815.419325][T12676] usb 7-1: USB disconnect, device number 8 [ 815.705721][T13782] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 816.709924][T13799] FAULT_INJECTION: forcing a failure. [ 816.709924][T13799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.737488][T13799] CPU: 0 UID: 0 PID: 13799 Comm: syz.5.1910 Not tainted syzkaller #0 PREEMPT(full) [ 816.737516][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 816.737528][T13799] Call Trace: [ 816.737533][T13799] [ 816.737540][T13799] dump_stack_lvl+0x16c/0x1f0 [ 816.737575][T13799] should_fail_ex+0x512/0x640 [ 816.737600][T13799] _copy_from_iter+0x29f/0x1720 [ 816.737624][T13799] ? _copy_from_iter+0x15d/0x1720 [ 816.737646][T13799] ? __pfx__copy_from_iter+0x10/0x10 [ 816.737667][T13799] ? __pfx__copy_from_iter+0x10/0x10 [ 816.737693][T13799] copy_page_from_iter+0xde/0x180 [ 816.737718][T13799] skb_copy_datagram_from_iter+0x2a0/0x740 [ 816.737750][T13799] tun_get_user+0x1850/0x3cc0 [ 816.737787][T13799] ? __pfx_tun_get_user+0x10/0x10 [ 816.737809][T13799] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 816.737835][T13799] ? find_held_lock+0x2b/0x80 [ 816.737856][T13799] ? tun_get+0x191/0x370 [ 816.737880][T13799] tun_chr_write_iter+0xdc/0x210 [ 816.737902][T13799] vfs_write+0x7d3/0x11d0 [ 816.737918][T13799] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 816.737947][T13799] ? __pfx_vfs_write+0x10/0x10 [ 816.737958][T13799] ? find_held_lock+0x2b/0x80 [ 816.737993][T13799] ksys_write+0x12a/0x250 [ 816.738010][T13799] ? __pfx_ksys_write+0x10/0x10 [ 816.738033][T13799] do_syscall_64+0xcd/0xfa0 [ 816.738052][T13799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.738068][T13799] RIP: 0033:0x7f8c63d8e17f [ 816.738083][T13799] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 816.738100][T13799] RSP: 002b:00007f8c64b82000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 816.738116][T13799] RAX: ffffffffffffffda RBX: 00007f8c63fe5fa0 RCX: 00007f8c63d8e17f [ 816.738126][T13799] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 00000000000000c8 [ 816.738136][T13799] RBP: 00007f8c64b82090 R08: 0000000000000000 R09: 0000000000000000 [ 816.738145][T13799] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 816.738154][T13799] R13: 00007f8c63fe6038 R14: 00007f8c63fe5fa0 R15: 00007ffe8c77c4d8 [ 816.738177][T13799] [ 816.946892][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.022010][T13803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1911'. [ 817.033538][T13801] netlink: 'syz.4.1909': attribute type 1 has an invalid length. [ 817.209367][ T30] audit: type=1400 audit(1762536949.038:1095): avc: denied { mount } for pid=13807 comm="syz.5.1912" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 817.237801][ T30] audit: type=1400 audit(1762536949.078:1096): avc: denied { mounton } for pid=13807 comm="syz.5.1912" path="/317/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 817.296225][T13805] vlan2: entered allmulticast mode [ 817.302069][T13805] veth1: entered allmulticast mode [ 817.346254][ T30] audit: type=1400 audit(1762536949.178:1097): avc: denied { unmount } for pid=7096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 817.369998][ T30] audit: type=1400 audit(1762536949.208:1098): avc: denied { unmount } for pid=7096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 817.466953][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 817.626635][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 817.637432][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.648737][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.658894][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 817.668376][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.688252][ T10] usb 8-1: config 0 descriptor?? [ 817.704473][ T10] hub 8-1:0.0: USB hub found [ 817.949220][ T10] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 818.752533][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 818.760374][ T10] usbhid 8-1:0.0: can't add hid device: -32 [ 818.766872][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 818.808336][ T10] usb 8-1: USB disconnect, device number 10 [ 819.544736][ T5826] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 819.588211][ T30] audit: type=1400 audit(1762536951.428:1099): avc: denied { write } for pid=13823 comm="syz.3.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 819.706632][ T30] audit: type=1400 audit(1762536951.468:1100): avc: denied { read } for pid=13823 comm="syz.3.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 821.133381][T13839] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 821.358870][T13848] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 822.116991][T13859] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 823.100769][T13861] lo speed is unknown, defaulting to 1000 [ 824.398912][T13874] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 824.407352][T13874] team0: Port device batadv1 added [ 824.627145][ T5881] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 824.727090][ T30] audit: type=1400 audit(1762536956.478:1101): avc: denied { block_suspend } for pid=13885 comm="syz.4.1935" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 824.897239][ T5881] usb 8-1: Using ep0 maxpacket: 32 [ 824.918926][ T5881] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.920170][T13888] [U]  [ 824.962986][ T5881] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 824.998919][ T30] audit: type=1400 audit(1762536956.818:1102): avc: denied { append } for pid=13883 comm="syz.5.1934" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.022664][ C0] vkms_vblank_simulate: vblank timer overrun [ 825.033357][T12877] kernel read not supported for file /asound/seq/clients (pid: 12877 comm: kworker/0:3) [ 825.043607][ T5881] usb 8-1: config 0 interface 0 has no altsetting 0 [ 825.069943][ T5881] usb 8-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 825.081967][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.108783][ T5881] usb 8-1: config 0 descriptor?? [ 825.169806][T13895] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 825.234763][ T30] audit: type=1400 audit(1762536957.048:1103): avc: denied { setopt } for pid=13894 comm="syz.4.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 825.255308][ C0] vkms_vblank_simulate: vblank timer overrun [ 825.549209][ T5881] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 825.563220][ T5881] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 825.564452][T13904] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 825.580497][ T5881] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 825.587929][ T5881] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 825.595266][ T5881] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 825.604280][ T5881] wacom 0003:056A:0094.0001: Using device in hidraw-only mode [ 826.031914][ T5881] wacom 0003:056A:0094.0001: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.7-1/input0 [ 826.085288][T13911] netlink: 'syz.6.1938': attribute type 6 has an invalid length. [ 826.169649][ T5881] usb 8-1: USB disconnect, device number 11 [ 826.308993][T13910] fido_id[13910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 826.570932][T13917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.585595][T13917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.678419][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 827.268971][T13925] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1947'. [ 827.278123][T13925] netlink: 'syz.7.1947': attribute type 1 has an invalid length. [ 827.292040][T13925] capability: warning: `syz.7.1947' uses deprecated v2 capabilities in a way that may be insecure [ 828.406737][T13935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.472972][T13935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.633362][T13942] vxfs: unable to read disk superblock at 1 [ 828.640188][T13942] vxfs: unable to read disk superblock at 8 [ 828.665366][T13942] vxfs: can't find superblock. [ 828.680551][ T30] audit: type=1326 audit(1762536960.518:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.7.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf63f8f6c9 code=0x7ffc0000 [ 828.786648][ T30] audit: type=1326 audit(1762536960.518:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.7.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf63f8f6c9 code=0x7ffc0000 [ 828.810487][ T30] audit: type=1326 audit(1762536960.518:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.7.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbf63f8f6c9 code=0x7ffc0000 [ 828.836225][ T30] audit: type=1326 audit(1762536960.538:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.7.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf63f8f6c9 code=0x7ffc0000 [ 829.011676][ T30] audit: type=1326 audit(1762536960.538:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.7.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf63f8f6c9 code=0x7ffc0000 [ 829.243016][ T30] audit: type=1326 audit(1762536960.698:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.7.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf63f8f6c9 code=0x7ffc0000 [ 829.267786][ T30] audit: type=1326 audit(1762536960.698:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.7.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf63f8f6c9 code=0x7ffc0000 [ 829.295074][T13939] ALSA: mixer_oss: invalid OSS volume '' [ 829.359092][T13947] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1954'. [ 829.363520][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 831.214590][T13959] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 831.374206][T13959] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 831.378020][T13962] vxfs: unable to read disk superblock at 1 [ 831.616728][T13962] vxfs: unable to read disk superblock at 8 [ 831.622681][T13962] vxfs: can't find superblock. [ 831.624453][T13959] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 831.680523][T13963] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1956'. [ 831.717187][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 831.717199][ T30] audit: type=1400 audit(1762536963.518:1147): avc: denied { read } for pid=5168 comm="acpid" name="mouse7" dev="devtmpfs" ino=2928 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 831.728434][ T5859] kernel write not supported for file /sg0 (pid: 5859 comm: kworker/1:4) [ 831.750668][T13959] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 831.827903][T13959] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 831.855279][ T30] audit: type=1400 audit(1762536963.518:1148): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=2928 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 832.838698][T12676] kernel read not supported for file /dsp1 (pid: 12676 comm: kworker/1:1) [ 832.868463][T13959] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 832.897735][ T30] audit: type=1400 audit(1762536963.518:1149): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=2928 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 832.947299][T13959] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 833.027110][T13959] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 833.044632][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 833.049186][T13977] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 833.057858][T13975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 833.061417][T13959] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 833.291965][ T5826] Bluetooth: hci3: link tx timeout [ 833.298992][ T5826] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 833.309673][T13613] Bluetooth: hci3: link tx timeout [ 833.314983][T13613] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 833.359415][T13613] Bluetooth: hci3: link tx timeout [ 833.364594][T13613] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 833.373271][T13613] Bluetooth: hci3: link tx timeout [ 833.378985][T13613] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 833.636074][T13994] nft_compat: unsupported protocol 4 [ 833.654818][ T30] audit: type=1400 audit(1762536965.488:1150): avc: denied { accept } for pid=13991 comm="syz.6.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 834.102951][T14004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 834.115051][T14004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.123960][T14004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.186629][ T3093] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 834.346767][ T3093] usb 7-1: Using ep0 maxpacket: 16 [ 834.374204][ T3093] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.427181][ T3093] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 834.478493][ T3093] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 834.516936][ T3093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.559771][ T3093] usb 7-1: config 0 descriptor?? [ 835.323758][T14022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.327697][T13613] Bluetooth: hci3: command 0x0406 tx timeout [ 835.335436][T14022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.054814][T12877] usb 7-1: USB disconnect, device number 9 [ 837.117382][ T30] audit: type=1400 audit(1762536968.958:1151): avc: denied { setopt } for pid=14039 comm="syz.5.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 837.118420][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.243171][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.794933][ T30] audit: type=1400 audit(1762536969.618:1152): avc: denied { write } for pid=14050 comm="syz.7.1982" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 837.908483][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.048542][T14060] binder: 14051:14060 ioctl c0306201 200000000080 returned -14 [ 838.736609][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.745186][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.758144][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.593842][T14087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.637164][T14087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.670332][T14089] FAULT_INJECTION: forcing a failure. [ 840.670332][T14089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.688491][T14089] CPU: 0 UID: 0 PID: 14089 Comm: syz.5.1991 Not tainted syzkaller #0 PREEMPT(full) [ 840.688517][T14089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 840.688526][T14089] Call Trace: [ 840.688531][T14089] [ 840.688537][T14089] dump_stack_lvl+0x16c/0x1f0 [ 840.688569][T14089] should_fail_ex+0x512/0x640 [ 840.688593][T14089] _copy_from_user+0x2e/0xd0 [ 840.688614][T14089] evdev_handle_set_keycode_v2+0xb0/0x150 [ 840.688639][T14089] ? __pfx_evdev_handle_set_keycode_v2+0x10/0x10 [ 840.688663][T14089] ? __pfx___mutex_trylock_common+0x10/0x10 [ 840.688684][T14089] ? rcu_is_watching+0x12/0xc0 [ 840.688702][T14089] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 840.688720][T14089] evdev_do_ioctl+0x9fe/0x1b30 [ 840.688743][T14089] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 840.688784][T14089] evdev_ioctl+0x16f/0x1a0 [ 840.688803][T14089] ? __pfx_evdev_ioctl+0x10/0x10 [ 840.688823][T14089] __x64_sys_ioctl+0x18e/0x210 [ 840.688845][T14089] do_syscall_64+0xcd/0xfa0 [ 840.688860][T14089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.688874][T14089] RIP: 0033:0x7f8c63d8f6c9 [ 840.688887][T14089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.688899][T14089] RSP: 002b:00007f8c64b82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.688913][T14089] RAX: ffffffffffffffda RBX: 00007f8c63fe5fa0 RCX: 00007f8c63d8f6c9 [ 840.688922][T14089] RDX: 0000000000000000 RSI: 0000000040284504 RDI: 0000000000000003 [ 840.688930][T14089] RBP: 00007f8c64b82090 R08: 0000000000000000 R09: 0000000000000000 [ 840.688939][T14089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.688947][T14089] R13: 00007f8c63fe6038 R14: 00007f8c63fe5fa0 R15: 00007ffe8c77c4d8 [ 840.688967][T14089] [ 841.697717][ T5881] IPVS: starting estimator thread 0... [ 841.946977][T14104] IPVS: using max 37 ests per chain, 88800 per kthread [ 842.887325][ T5859] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 843.080317][ T5859] usb 7-1: Using ep0 maxpacket: 16 [ 843.206021][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.217731][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.228557][ T5859] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 843.240231][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.266975][ T5859] usb 7-1: config 0 descriptor?? [ 843.736292][ T5859] apple 0003:05AC:024B.0002: unknown global tag 0xd [ 843.754270][ T5859] apple 0003:05AC:024B.0002: item 0 2 1 13 parsing failed [ 843.856432][ T5859] apple 0003:05AC:024B.0002: parse failed [ 843.871802][ T5859] apple 0003:05AC:024B.0002: probe with driver apple failed with error -22 [ 844.046442][T14129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2002'. [ 844.401621][ T30] audit: type=1400 audit(1762536975.858:1153): avc: denied { connect } for pid=14124 comm="syz.3.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 844.473024][T14097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.498637][T14097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.610757][T14097] fuse: Bad value for 'user_id' [ 844.615656][T14097] fuse: Bad value for 'user_id' [ 844.668800][T14132] Set syz1 is full, maxelem 14 reached [ 844.722487][T14134] pimreg: entered allmulticast mode [ 844.968804][T14134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.980952][T14134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.239435][T12877] usb 7-1: USB disconnect, device number 10 [ 845.828271][T14153] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 845.873215][T14153] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 846.860408][T14168] overlayfs: empty lowerdir [ 847.440732][ T30] audit: type=1400 audit(1762536979.208:1154): avc: denied { map } for pid=14170 comm="syz.5.2016" path="socket:[44680]" dev="sockfs" ino=44680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 847.784506][ T30] audit: type=1400 audit(1762536979.618:1155): avc: denied { create } for pid=14180 comm="syz.5.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 847.854618][ T30] audit: type=1400 audit(1762536979.618:1156): avc: denied { bind } for pid=14180 comm="syz.5.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 848.024037][ T30] audit: type=1400 audit(1762536979.618:1157): avc: denied { bind } for pid=14180 comm="syz.5.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 848.201421][T14196] netem: change failed [ 848.277038][T14197] macsec1: entered promiscuous mode [ 848.282608][T14197] macsec1: entered allmulticast mode [ 848.387571][T14197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2023'. [ 849.230831][ T30] audit: type=1400 audit(1762536981.048:1158): avc: denied { getopt } for pid=14204 comm="syz.5.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 849.484033][T14214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.559585][T14214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.420373][T14229] 9pnet: Found fid 0 not clunked [ 852.274472][T14250] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 852.295586][T14250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.307850][T14250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.044009][T14259] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 853.067488][T14259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.079368][T14259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.595324][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 853.723612][ T30] audit: type=1804 audit(1762536985.558:1159): pid=14262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2043" name="/newroot/423/file0" dev="tmpfs" ino=2254 res=1 errno=0 [ 854.601915][T12877] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 855.150486][T14280] fuse: Unknown parameter '0x0000000000000007' [ 855.402615][T12877] usb 7-1: Using ep0 maxpacket: 8 [ 855.428211][T12877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.498861][T12877] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 855.535558][T12877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.548501][T12877] usb 7-1: config 0 descriptor?? [ 855.561768][T12877] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 855.677809][T14286] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 855.779354][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 855.801532][ T30] audit: type=1400 audit(1762536987.638:1160): avc: denied { mounton } for pid=14288 comm="syz.5.2052" path="/354/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 855.808314][T14290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.878518][T14290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.898156][ T30] audit: type=1400 audit(1762536987.638:1161): avc: denied { getattr } for pid=14288 comm="syz.5.2052" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 855.922712][ T30] audit: type=1400 audit(1762536987.728:1162): avc: denied { append } for pid=14288 comm="syz.5.2052" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 856.255217][T12877] gspca_vc032x: reg_w err -71 [ 856.261369][T12877] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 856.271101][T12877] usb 7-1: USB disconnect, device number 11 [ 857.439739][ T30] audit: type=1400 audit(1762536988.618:1163): avc: denied { unmount } for pid=7096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 857.906639][ T3093] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 858.077649][ T3093] usb 8-1: Using ep0 maxpacket: 8 [ 858.104666][ T3093] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 858.114410][ T3093] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 858.129761][ T3093] usb 8-1: Product: syz [ 858.146846][ T3093] usb 8-1: Manufacturer: syz [ 858.250661][ T3093] usb 8-1: SerialNumber: syz [ 858.257530][T14321] netlink: 'syz.6.2060': attribute type 12 has an invalid length. [ 858.825035][ T3093] usb 8-1: config 0 descriptor?? [ 858.920634][ T3093] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 859.175235][ T3093] gspca_zc3xx: reg_w_i err -71 [ 859.195999][ T3093] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 859.206152][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 859.219072][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2062'. [ 859.232085][ T3093] usb 8-1: USB disconnect, device number 12 [ 859.251244][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2062'. [ 859.420333][T14330] vxfs: unable to read disk superblock at 1 [ 859.426355][T14330] vxfs: unable to read disk superblock at 8 [ 859.446637][T14330] vxfs: can't find superblock. [ 859.475662][ T5859] kernel write not supported for file /sg0 (pid: 5859 comm: kworker/1:4) [ 859.925458][T14341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.934540][T14341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.955803][T14340] Bluetooth: MGMT ver 1.23 [ 860.299074][ T30] audit: type=1400 audit(1762536992.138:1164): avc: denied { mounton } for pid=14343 comm="syz.7.2067" path="/69/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 860.324334][T14346] overlay: Unknown parameter 'fsuuid' [ 863.656823][T14378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2077'. [ 863.673245][ C1] vcan0: j1939_session_tx_dat: 0xffff888056f86c00: queue data error: -100 [ 863.714297][ T30] audit: type=1400 audit(1762536995.548:1165): avc: denied { read } for pid=5165 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 863.751985][ T30] audit: type=1400 audit(1762536995.548:1166): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.797547][ T30] audit: type=1400 audit(1762536995.548:1167): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.869661][ T30] audit: type=1400 audit(1762536995.548:1168): avc: denied { add_name } for pid=5165 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.300757][ T30] audit: type=1400 audit(1762536995.548:1169): avc: denied { create } for pid=5165 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 864.322278][ T30] audit: type=1400 audit(1762536995.548:1170): avc: denied { append open } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 864.362053][ T30] audit: type=1400 audit(1762536995.548:1171): avc: denied { getattr } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 865.640582][ T30] audit: type=1400 audit(1762536997.458:1172): avc: denied { accept } for pid=14401 comm="syz.4.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 867.162423][ T30] audit: type=1400 audit(1762536998.838:1173): avc: denied { append } for pid=14418 comm="syz.3.2090" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 867.231514][ T30] audit: type=1400 audit(1762536998.958:1174): avc: denied { map } for pid=14418 comm="syz.3.2090" path="socket:[46459]" dev="sockfs" ino=46459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 867.526790][ T30] audit: type=1400 audit(1762536998.978:1175): avc: denied { read } for pid=14418 comm="syz.3.2090" path="socket:[46459]" dev="sockfs" ino=46459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 869.021130][ T30] audit: type=1400 audit(1762537000.848:1176): avc: denied { read } for pid=14432 comm="syz.6.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 869.103584][ T30] audit: type=1400 audit(1762537000.928:1177): avc: denied { append } for pid=14447 comm="syz.3.2099" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 869.639056][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2097'. [ 869.966305][ T30] audit: type=1400 audit(1762537001.708:1178): avc: denied { map } for pid=14454 comm="syz.7.2100" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 870.003198][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.040557][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.046943][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.058947][ T30] audit: type=1400 audit(1762537001.708:1179): avc: denied { execute } for pid=14454 comm="syz.7.2100" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 870.083065][ T30] audit: type=1400 audit(1762537001.748:1180): avc: denied { write } for pid=14454 comm="syz.7.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 870.102418][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.333740][T14462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.381020][T14462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.474176][T14466] FAULT_INJECTION: forcing a failure. [ 870.474176][T14466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.487886][T14466] CPU: 0 UID: 0 PID: 14466 Comm: syz.6.2105 Not tainted syzkaller #0 PREEMPT(full) [ 870.487912][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 870.487922][T14466] Call Trace: [ 870.487928][T14466] [ 870.487935][T14466] dump_stack_lvl+0x16c/0x1f0 [ 870.487969][T14466] should_fail_ex+0x512/0x640 [ 870.487995][T14466] _copy_from_user+0x2e/0xd0 [ 870.488019][T14466] copy_msghdr_from_user+0x98/0x160 [ 870.488045][T14466] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 870.488074][T14466] ? __pfx__kstrtoull+0x10/0x10 [ 870.488105][T14466] ___sys_sendmsg+0xfe/0x1d0 [ 870.488130][T14466] ? __pfx____sys_sendmsg+0x10/0x10 [ 870.488166][T14466] ? find_held_lock+0x2b/0x80 [ 870.488206][T14466] __sys_sendmmsg+0x200/0x420 [ 870.488231][T14466] ? __pfx___sys_sendmmsg+0x10/0x10 [ 870.488264][T14466] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 870.488292][T14466] ? fput+0x9b/0xd0 [ 870.488315][T14466] ? ksys_write+0x1ac/0x250 [ 870.488330][T14466] ? __pfx_ksys_write+0x10/0x10 [ 870.488352][T14466] __x64_sys_sendmmsg+0x9c/0x100 [ 870.488375][T14466] ? lockdep_hardirqs_on+0x7c/0x110 [ 870.488402][T14466] do_syscall_64+0xcd/0xfa0 [ 870.488421][T14466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.488438][T14466] RIP: 0033:0x7fa19bb8f6c9 [ 870.488453][T14466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.488470][T14466] RSP: 002b:00007fa19c98b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 870.488488][T14466] RAX: ffffffffffffffda RBX: 00007fa19bde5fa0 RCX: 00007fa19bb8f6c9 [ 870.488499][T14466] RDX: 0000000000000001 RSI: 0000200000002780 RDI: 0000000000000003 [ 870.488509][T14466] RBP: 00007fa19c98b090 R08: 0000000000000000 R09: 0000000000000000 [ 870.488519][T14466] R10: 0000000020008004 R11: 0000000000000246 R12: 0000000000000001 [ 870.488530][T14466] R13: 00007fa19bde6038 R14: 00007fa19bde5fa0 R15: 00007fffd77da568 [ 870.488556][T14466] [ 872.898085][T14485] syz_tun: entered allmulticast mode [ 872.919731][T14485] syz_tun: left allmulticast mode [ 872.947809][ T30] audit: type=1400 audit(1762537004.788:1181): avc: denied { bind } for pid=14481 comm="syz.5.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 872.967605][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.409882][T14497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42618 sclass=netlink_route_socket pid=14497 comm=syz.4.2113 [ 874.686586][ T30] audit: type=1400 audit(1762537006.488:1182): avc: denied { execute_no_trans } for pid=14503 comm="syz.5.2115" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=46564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 874.716597][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.030522][T14523] syz_tun: entered allmulticast mode [ 876.099398][T14523] syz_tun: left allmulticast mode [ 876.209189][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2120'. [ 877.090977][T14536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.334407][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2123'. [ 877.391987][ T30] audit: type=1400 audit(1762537009.048:1183): avc: denied { mounton } for pid=14540 comm="syz.4.2126" path="/404/file1" dev="autofs" ino=47335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 878.538242][T14564] vxfs: unable to read disk superblock at 1 [ 878.643351][T14564] vxfs: unable to read disk superblock at 8 [ 878.653093][T14564] vxfs: can't find superblock. [ 878.853187][T12877] kernel write not supported for file /sg0 (pid: 12877 comm: kworker/0:3) [ 878.870873][T14572] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 878.949710][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 880.615080][ T30] audit: type=1400 audit(1762537012.448:1184): avc: denied { ioctl } for pid=14582 comm="syz.5.2139" path="socket:[47418]" dev="sockfs" ino=47418 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 881.719190][T14600] lo speed is unknown, defaulting to 1000 [ 881.719840][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.853600][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.602965][T14622] vxfs: unable to read disk superblock at 1 [ 882.871449][T14622] vxfs: unable to read disk superblock at 8 [ 882.888035][T14622] vxfs: can't find superblock. [ 882.922075][ T1205] kernel write not supported for file /sg0 (pid: 1205 comm: kworker/0:2) [ 885.698095][ T30] audit: type=1326 audit(1762537017.528:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14663 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 886.072748][ T30] audit: type=1326 audit(1762537017.528:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14663 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 886.152859][ T30] audit: type=1326 audit(1762537017.568:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14663 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 886.220469][ T30] audit: type=1326 audit(1762537017.568:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14663 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 886.266557][ T30] audit: type=1326 audit(1762537017.568:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14663 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 886.298093][T12877] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 886.402399][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.417007][ T30] audit: type=1326 audit(1762537017.568:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14663 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 886.420859][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.441169][ T30] audit: type=1326 audit(1762537017.568:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14663 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 886.500085][T14676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14676 comm=syz.3.2158 [ 886.536021][T14676] overlayfs: failed to resolve './bus': -2 [ 886.926753][ T30] audit: type=1326 audit(1762537017.568:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14663 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 886.952271][ T30] audit: type=1326 audit(1762537017.568:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14663 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 887.046060][T12877] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 887.062977][T12877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.073974][T12877] usb 8-1: Product: syz [ 887.081576][T12877] usb 8-1: Manufacturer: syz [ 887.086825][ T30] audit: type=1326 audit(1762537017.568:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14663 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 887.114234][T12877] usb 8-1: SerialNumber: syz [ 887.561613][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2161'. [ 887.576023][T14687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.601616][T14687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.714948][T12877] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 887.724268][ T5813] kernel read not supported for file /asound/seq/clients (pid: 5813 comm: kworker/1:3) [ 887.740167][T12676] kernel write not supported for file /snd/seq (pid: 12676 comm: kworker/1:1) [ 887.860219][T12877] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 888.136938][T12877] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 888.168311][T12877] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 888.183242][T12877] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 888.199819][T12877] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 888.228724][T12877] usb 8-1: USB disconnect, device number 13 [ 888.275207][T14706] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2167'. [ 888.288433][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2167'. [ 888.496229][T14712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.523396][T14712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.635838][T14728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.648775][T14728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.066726][ T1205] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 890.094953][T14741] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 890.338780][ T1205] usb 8-1: device descriptor read/64, error -71 [ 891.057719][ T1205] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 891.226512][ T1205] usb 8-1: device descriptor read/64, error -71 [ 891.350822][ T1205] usb usb8-port1: attempt power cycle [ 891.573905][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 891.573916][ T30] audit: type=1400 audit(1762537023.408:1265): avc: denied { read } for pid=14750 comm="syz.5.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 891.740516][ T1205] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 891.777121][ T1205] usb 8-1: device descriptor read/8, error -71 [ 892.016620][ T1205] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 892.737101][ T1205] usb 8-1: device descriptor read/8, error -71 [ 892.941093][ T1205] usb usb8-port1: unable to enumerate USB device [ 893.427504][T14773] netlink: 'syz.6.2183': attribute type 16 has an invalid length. [ 893.459834][T14773] netlink: 37922 bytes leftover after parsing attributes in process `syz.6.2183'. [ 893.606587][ T1205] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 893.813815][ T30] audit: type=1326 audit(1762537025.508:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14774 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 893.931061][ T30] audit: type=1326 audit(1762537025.508:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14774 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c63d8f6c9 code=0x7ffc0000 [ 894.096675][ T1205] usb 8-1: Using ep0 maxpacket: 8 [ 894.105592][ T1205] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 894.114897][ T1205] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 894.123458][ T1205] usb 8-1: Product: syz [ 894.173267][ T1205] usb 8-1: Manufacturer: syz [ 894.178655][ T1205] usb 8-1: SerialNumber: syz [ 894.196428][ T1205] usb 8-1: config 0 descriptor?? [ 894.209703][ T1205] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 894.246197][T14784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.271335][T14784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.329941][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2186'. [ 894.340028][T14784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.350634][T14784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.478771][ T1205] gspca_zc3xx: reg_w_i err -71 [ 894.488522][ T1205] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 894.526575][ T5859] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 894.593841][ T1205] usb 8-1: USB disconnect, device number 18 [ 895.146590][ T5859] usb 7-1: Using ep0 maxpacket: 32 [ 895.177221][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.223754][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.263266][ T5859] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 895.290449][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.309910][ T5859] usb 7-1: config 0 descriptor?? [ 895.383081][ T5859] hub 7-1:0.0: USB hub found [ 895.586024][ T5859] hub 7-1:0.0: 1 port detected [ 895.796949][ T5813] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 895.820789][ T30] audit: type=1400 audit(1762537027.658:1268): avc: denied { setopt } for pid=14795 comm="syz.4.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 896.076558][ T5813] usb 8-1: Using ep0 maxpacket: 8 [ 896.083646][ T5813] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.227291][ T5813] usb 8-1: config 0 has no interfaces? [ 896.233688][ T5813] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 896.249167][ T5859] hub 7-1:0.0: activate --> -90 [ 896.259136][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.283264][ T5813] usb 8-1: config 0 descriptor?? [ 896.458095][ T5813] usb 7-1: USB disconnect, device number 12 [ 897.611490][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2196'. [ 898.576928][ T1205] usb 8-1: USB disconnect, device number 19 [ 898.936990][T14839] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 899.176554][ T5859] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 899.450204][ T5859] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 899.468118][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.540010][ T5859] usb 7-1: Product: syz [ 899.544283][ T5859] usb 7-1: Manufacturer: syz [ 899.559184][ T5859] usb 7-1: SerialNumber: syz [ 899.585865][ T5859] usb 7-1: config 0 descriptor?? [ 899.609853][ T5859] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 899.652528][ T5859] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 899.701458][ T5859] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 901.227192][T14859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 901.758530][ T1205] usb 7-1: USB disconnect, device number 13 [ 901.780109][T14856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.788774][T14856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.909810][T14860] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2205'. [ 902.166615][ T1205] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 902.456548][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 902.465497][T14874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2211'. [ 902.635508][ T1205] usb 7-1: Using ep0 maxpacket: 16 [ 902.651149][ T1205] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.678879][ T1205] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 902.689066][ T1205] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 902.698966][ T1205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.711431][ T1205] usb 7-1: config 0 descriptor?? [ 902.959286][ T1205] kernel read not supported for file /asound/seq/clients (pid: 1205 comm: kworker/0:2) [ 903.076731][T14882] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 904.216105][T14897] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2216'. [ 904.573986][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2218'. [ 905.114334][T12877] usb 7-1: USB disconnect, device number 14 [ 905.672718][T14917] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 905.716760][ T1205] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 905.908516][ T1205] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 906.006521][ T1205] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 906.020531][ T1205] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 906.037396][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.045968][ T1205] usb 7-1: Product: syz [ 906.050530][ T1205] usb 7-1: Manufacturer: syz [ 906.055713][ T1205] usb 7-1: SerialNumber: syz [ 907.822513][ T1205] usb 7-1: 0:2 : does not exist [ 907.831947][ T30] audit: type=1400 audit(1762537039.668:1269): avc: denied { connect } for pid=14932 comm="syz.5.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 907.851559][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.797109][ T5826] Bluetooth: Frame is too long (len 24, expected len 4) [ 908.807485][T12676] usb 7-1: USB disconnect, device number 15 [ 909.491153][T14948] overlayfs: failed to resolve './file0': -2 [ 909.510711][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 909.874381][T14955] fuse: Unknown parameter '000000000000000000025550xffffffffffffffff' [ 909.915070][T14955] lo speed is unknown, defaulting to 1000 [ 910.482795][T14979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.518160][T14979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.677830][ T1205] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 910.836529][ T1205] usb 7-1: Using ep0 maxpacket: 32 [ 910.843043][ T1205] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.896635][ T1205] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.940690][ T1205] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 910.951510][ T1205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.963055][ T1205] usb 7-1: config 0 descriptor?? [ 910.977991][ T1205] hub 7-1:0.0: USB hub found [ 911.200630][ T1205] hub 7-1:0.0: 1 port detected [ 911.916785][ T1205] hub 7-1:0.0: activate --> -90 [ 912.146676][ T1205] hub 7-1:0.0: hub_ext_port_status failed (err = 0) [ 912.476969][T12676] usb 7-1: USB disconnect, device number 16 [ 912.911246][T15019] loop6: detected capacity change from 0 to 524287999 [ 913.092073][T15019] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.131729][T15022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.140636][T15022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.158022][T15019] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.186946][T15019] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.216790][T15019] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.304382][T15019] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.323347][T15019] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.341958][T15019] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.362318][T15019] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.380429][T15019] ldm_validate_partition_table(): Disk read failed. [ 913.394049][T15019] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.414132][T15019] Buffer I/O error on dev loop6, logical block 0, async page read [ 913.434453][T15019] Dev loop6: unable to read RDB block 0 [ 913.495482][T15019] loop6: unable to read partition table [ 913.664554][T15025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2248'. [ 913.754879][T15019] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 913.787943][T15028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15028 comm=syz.6.2248 [ 914.069013][T15036] vxfs: unable to read disk superblock at 1 [ 914.076390][T15036] vxfs: unable to read disk superblock at 8 [ 914.095697][T15036] vxfs: can't find superblock. [ 914.194265][ T5881] kernel write not supported for file /sg0 (pid: 5881 comm: kworker/0:5) [ 914.267265][ T5881] kernel read not supported for file /asound/seq/clients (pid: 5881 comm: kworker/0:5) [ 914.953257][T15056] FAULT_INJECTION: forcing a failure. [ 914.953257][T15056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.966856][T15056] CPU: 1 UID: 0 PID: 15056 Comm: syz.7.2256 Not tainted syzkaller #0 PREEMPT(full) [ 914.966879][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 914.966887][T15056] Call Trace: [ 914.966893][T15056] [ 914.966899][T15056] dump_stack_lvl+0x16c/0x1f0 [ 914.966929][T15056] should_fail_ex+0x512/0x640 [ 914.966953][T15056] strncpy_from_user+0x3b/0x2e0 [ 914.966990][T15056] strncpy_from_user_nofault+0x7f/0x180 [ 914.967020][T15056] bpf_bprintf_prepare+0xe90/0x13f0 [ 914.967046][T15056] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 914.967064][T15056] ? trace_event_raw_event_bpf_trace_printk+0x1a2/0x260 [ 914.967087][T15056] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 914.967118][T15056] ? bpf_trace_run2+0x3e1/0x590 [ 914.967136][T15056] bpf_trace_printk+0xda/0x190 [ 914.967153][T15056] ? __pfx_bpf_trace_printk+0x10/0x10 [ 914.967176][T15056] ? bpf_trace_run2+0x3e1/0x590 [ 914.967204][T15056] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 914.967220][T15056] bpf_trace_run2+0x239/0x590 [ 914.967241][T15056] ? __pfx_bpf_trace_run2+0x10/0x10 [ 914.967263][T15056] ? bpf_trace_run2+0x2ab/0x590 [ 914.967281][T15056] ? smb3_parse_devname+0xe6/0x480 [ 914.967303][T15056] ? __pfx_bpf_trace_run2+0x10/0x10 [ 914.967330][T15056] kfree+0x236/0x6d0 [ 914.967361][T15056] ? rcu_is_watching+0x12/0xc0 [ 914.967386][T15056] ? smb3_parse_devname+0xe6/0x480 [ 914.967407][T15056] smb3_parse_devname+0xe6/0x480 [ 914.967431][T15056] smb3_fs_context_parse_param+0x33eb/0xa170 [ 914.967463][T15056] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 914.967490][T15056] ? __pfx_selinux_fs_context_parse_param+0x10/0x10 [ 914.967517][T15056] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 914.967539][T15056] ? vfs_parse_fs_param+0x20b/0x3c0 [ 914.967556][T15056] vfs_parse_fs_param+0x20b/0x3c0 [ 914.967578][T15056] __do_sys_fsconfig+0x930/0xbe0 [ 914.967604][T15056] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 914.967632][T15056] ? anon_inode_getfd+0x81/0xb0 [ 914.967660][T15056] do_syscall_64+0xcd/0xfa0 [ 914.967678][T15056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.967697][T15056] RIP: 0033:0x7fbf63f8f6c9 [ 914.967711][T15056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.967728][T15056] RSP: 002b:00007fbf64e78038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 914.967745][T15056] RAX: ffffffffffffffda RBX: 00007fbf641e6090 RCX: 00007fbf63f8f6c9 [ 914.967757][T15056] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 000000000000000a [ 914.967767][T15056] RBP: 00007fbf64e78090 R08: 0000000000000000 R09: 0000000000000000 [ 914.967776][T15056] R10: 00002000000019c0 R11: 0000000000000246 R12: 0000000000000001 [ 914.967786][T15056] R13: 00007fbf641e6128 R14: 00007fbf641e6090 R15: 00007ffc761ee138 [ 914.967810][T15056] [ 915.242651][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.314435][ T30] audit: type=1326 audit(1762537047.138:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19bb8f6c9 code=0x7fc00000 [ 915.337947][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.509976][ T30] audit: type=1326 audit(1762537047.308:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa19bb8f6c9 code=0x7fc00000 [ 915.712926][ T30] audit: type=1326 audit(1762537047.318:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19bb8f6c9 code=0x7fc00000 [ 915.834099][ T30] audit: type=1326 audit(1762537047.318:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19bb8f6c9 code=0x7fc00000 [ 915.862126][ T30] audit: type=1326 audit(1762537047.318:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19bb8f6c9 code=0x7fc00000 [ 915.955526][ T30] audit: type=1326 audit(1762537047.318:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19bb8f6c9 code=0x7fc00000 [ 916.003203][ T30] audit: type=1326 audit(1762537047.318:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19bb8f6c9 code=0x7fc00000 [ 916.076685][ T30] audit: type=1326 audit(1762537047.318:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19bb8f6c9 code=0x7fc00000 [ 916.346748][ T30] audit: type=1326 audit(1762537047.318:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19bb8f6c9 code=0x7fc00000 [ 916.415044][ T30] audit: type=1326 audit(1762537047.318:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19bb8f6c9 code=0x7fc00000 [ 917.381793][T15083] vxfs: unable to read disk superblock at 1 [ 917.388115][T15083] vxfs: unable to read disk superblock at 8 [ 917.394339][T15083] vxfs: can't find superblock. [ 917.434730][T12877] kernel write not supported for file /sg0 (pid: 12877 comm: kworker/0:3) [ 918.439648][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'. [ 918.486773][T12877] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 918.756596][T12877] usb 8-1: Using ep0 maxpacket: 16 [ 918.881488][T12877] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.893602][T12877] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 918.959082][T12877] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 919.031232][T12877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.057927][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 919.066927][T15105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2272'. [ 919.087084][T12877] usb 8-1: config 0 descriptor?? [ 921.316050][T15126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.351722][T15126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.443157][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 921.443168][ T30] audit: type=1400 audit(1762537053.278:1338): avc: denied { mount } for pid=15125 comm="syz.5.2277" name="/" dev="configfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 921.711666][T15131] ALSA: seq fatal error: cannot create timer (-22) [ 922.087014][ T30] audit: type=1400 audit(1762537053.928:1339): avc: denied { getopt } for pid=15130 comm="syz.3.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 922.106590][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.152162][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2278'. [ 922.387297][T12676] usb 8-1: USB disconnect, device number 20 [ 922.552474][ T5813] kernel read not supported for file /asound/seq/clients (pid: 5813 comm: kworker/1:3) [ 922.788605][T15149] veth1_to_bond: entered promiscuous mode [ 922.818372][T15153] program syz.6.2286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 922.878401][T15149] veth1_to_bond: left promiscuous mode [ 922.977630][ T30] audit: type=1400 audit(1762537054.818:1340): avc: denied { ioctl } for pid=15152 comm="syz.6.2286" path="/134/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 923.281213][T15165] netlink: 576 bytes leftover after parsing attributes in process `syz.6.2290'. [ 924.029721][ T30] audit: type=1400 audit(1762537055.868:1341): avc: denied { getopt } for pid=15169 comm="syz.6.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 924.332448][T15181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.355584][ T30] audit: type=1400 audit(1762537056.168:1342): avc: denied { name_bind } for pid=15178 comm="syz.4.2294" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 924.376813][ C0] vkms_vblank_simulate: vblank timer overrun [ 924.757133][T15181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.851894][T15187] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 924.940994][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 925.012679][T12877] kernel read not supported for file /asound/seq/clients (pid: 12877 comm: kworker/0:3) [ 925.840967][T15201] tipc: Started in network mode [ 925.846045][T15201] tipc: Node identity 82b48e9d42b1, cluster identity 4711 [ 925.858153][T15201] tipc: Enabled bearer , priority 0 [ 926.082857][T15201] syzkaller0: entered promiscuous mode [ 926.104339][T15201] syzkaller0: entered allmulticast mode [ 926.135627][T15201] tipc: Resetting bearer [ 926.168662][T15200] tipc: Resetting bearer [ 926.886664][T12877] tipc: Node number set to 3221589661 [ 927.466615][ T5813] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 927.698776][ T5813] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 927.747961][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.774865][ T5813] usb 7-1: Product: syz [ 927.779547][ T5813] usb 7-1: Manufacturer: syz [ 927.792694][ T5813] usb 7-1: SerialNumber: syz [ 927.844535][ T5813] usb 7-1: config 0 descriptor?? [ 927.859517][ T5813] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 927.871191][ T5813] pctv452e: pctv452e_power_ctrl: 1 [ 927.871191][ T5813] [ 927.879092][ T5813] usb 7-1: selecting invalid altsetting 3 [ 927.884841][ T5813] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 927.884841][ T5813] [ 927.925557][ T5813] dvb-usb: bulk message failed: -22 (5/0) [ 928.031846][ T5813] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 928.075903][ T5813] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 928.167557][ T5813] usb 7-1: USB disconnect, device number 17 [ 928.230455][ T30] audit: type=1400 audit(1762537060.018:1343): avc: denied { write } for pid=15223 comm="syz.3.2305" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 928.258084][T15226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.266513][T15225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.266785][T15226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.275084][T15225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.336563][ T30] audit: type=1400 audit(1762537060.128:1344): avc: denied { ioctl } for pid=15223 comm="syz.3.2305" path="socket:[49038]" dev="sockfs" ino=49038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 929.904783][T15235] FAULT_INJECTION: forcing a failure. [ 929.904783][T15235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.940144][T12676] kernel read not supported for file /asound/seq/clients (pid: 12676 comm: kworker/1:1) [ 930.033302][T15235] CPU: 0 UID: 0 PID: 15235 Comm: syz.3.2308 Not tainted syzkaller #0 PREEMPT(full) [ 930.033328][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 930.033338][T15235] Call Trace: [ 930.033344][T15235] [ 930.033352][T15235] dump_stack_lvl+0x16c/0x1f0 [ 930.033382][T15235] should_fail_ex+0x512/0x640 [ 930.033405][T15235] _copy_from_user+0x2e/0xd0 [ 930.033428][T15235] dev_ethtool+0x15b/0x5bc0 [ 930.033445][T15235] ? __kernel_text_address+0xd/0x40 [ 930.033465][T15235] ? unwind_get_return_address+0x59/0xa0 [ 930.033485][T15235] ? arch_stack_walk+0xa6/0x100 [ 930.033512][T15235] ? __pfx_dev_ethtool+0x10/0x10 [ 930.033531][T15235] ? stack_trace_save+0x8e/0xc0 [ 930.033553][T15235] ? __pfx_stack_trace_save+0x10/0x10 [ 930.033577][T15235] ? stack_depot_save_flags+0x29/0x9c0 [ 930.033599][T15235] ? __lock_acquire+0xb8a/0x1c90 [ 930.033631][T15235] ? __lock_acquire+0x622/0x1c90 [ 930.033670][T15235] ? find_held_lock+0x2b/0x80 [ 930.033691][T15235] ? avc_has_extended_perms+0x33a/0x1090 [ 930.033726][T15235] ? __lock_acquire+0x622/0x1c90 [ 930.033766][T15235] ? find_held_lock+0x2b/0x80 [ 930.033787][T15235] ? dev_load+0x8e/0x240 [ 930.033813][T15235] dev_ioctl+0x290/0x10e0 [ 930.033837][T15235] sock_do_ioctl+0x19d/0x280 [ 930.033867][T15235] ? __pfx_sock_do_ioctl+0x10/0x10 [ 930.033901][T15235] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 930.033927][T15235] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 930.033951][T15235] sock_ioctl+0x227/0x6b0 [ 930.033967][T15235] ? __pfx_sock_ioctl+0x10/0x10 [ 930.033993][T15235] ? hook_file_ioctl_common+0x145/0x410 [ 930.034024][T15235] ? selinux_file_ioctl+0x180/0x270 [ 930.034043][T15235] ? selinux_file_ioctl+0xb4/0x270 [ 930.034063][T15235] ? __pfx_sock_ioctl+0x10/0x10 [ 930.034082][T15235] __x64_sys_ioctl+0x18e/0x210 [ 930.034108][T15235] do_syscall_64+0xcd/0xfa0 [ 930.034126][T15235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.034144][T15235] RIP: 0033:0x7f5ffb58f6c9 [ 930.034157][T15235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.034174][T15235] RSP: 002b:00007f5ff97f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.034191][T15235] RAX: ffffffffffffffda RBX: 00007f5ffb7e5fa0 RCX: 00007f5ffb58f6c9 [ 930.034202][T15235] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 930.034212][T15235] RBP: 00007f5ff97f6090 R08: 0000000000000000 R09: 0000000000000000 [ 930.034222][T15235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.034231][T15235] R13: 00007f5ffb7e6038 R14: 00007f5ffb7e5fa0 R15: 00007ffcb4fa9658 [ 930.034257][T15235] [ 930.917008][ T30] audit: type=1400 audit(1762537062.558:1345): avc: denied { write } for pid=15238 comm="syz.6.2310" path="socket:[49137]" dev="sockfs" ino=49137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 931.343938][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.350314][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.169334][T12676] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 932.326665][T12676] usb 8-1: Using ep0 maxpacket: 32 [ 932.336146][T12676] usb 8-1: config 1 interface 0 altsetting 34 bulk endpoint 0x1 has invalid maxpacket 64 [ 932.348384][T12676] usb 8-1: config 1 interface 0 altsetting 34 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 932.363145][T12676] usb 8-1: config 1 interface 0 has no altsetting 0 [ 932.388031][T12676] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 932.397332][T12676] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.405463][T12676] usb 8-1: Product: syz [ 932.410715][T12676] usb 8-1: Manufacturer: à ” [ 932.415353][T12676] usb 8-1: SerialNumber: syz [ 932.424915][T15252] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 932.432320][T15252] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 932.987310][T15200] tipc: Disabling bearer [ 933.065604][T13613] Bluetooth: hci3: command 0x0406 tx timeout [ 933.272533][T15258] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 933.281017][T15258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.289969][T15258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.913745][T12676] usb 8-1: USB disconnect, device number 21 [ 935.853286][T15285] tipc: Started in network mode [ 935.876124][T15285] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 935.964464][T15285] tipc: Enabled bearer , priority 10 [ 936.073489][ T30] audit: type=1400 audit(1762537067.908:1346): avc: denied { ioctl } for pid=15281 comm="syz.5.2322" path="socket:[50347]" dev="sockfs" ino=50347 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 937.555435][T12676] tipc: Node number set to 4269801488 [ 937.556504][ T30] audit: type=1400 audit(1762537068.938:1347): avc: denied { setopt } for pid=15296 comm="syz.4.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 937.620620][T15300] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 937.771468][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2326'. [ 937.787961][T15309] lo speed is unknown, defaulting to 1000 [ 937.802575][T15315] netlink: 'syz.5.2330': attribute type 4 has an invalid length. [ 938.559989][ T2211] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 941.279181][T12676] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 941.479158][T12676] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 941.493972][T12676] usb 8-1: config 0 interface 0 has no altsetting 0 [ 941.558677][T12676] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 941.595458][T12676] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 941.748038][T12676] usb 8-1: Product: syz [ 941.758784][T15353] IPv6: Can't replace route, no match found [ 941.786631][T12676] usb 8-1: Manufacturer: syz [ 941.831452][T12676] usb 8-1: SerialNumber: syz [ 941.883378][T12676] usb 8-1: config 0 descriptor?? [ 941.896800][T12676] usb 8-1: selecting invalid altsetting 0 [ 941.934450][T15356] overlayfs: failed to resolve '/006': -2 [ 942.102357][T12676] usb 8-1: USB disconnect, device number 22 [ 942.938098][ T30] audit: type=1400 audit(1762537074.738:1348): avc: denied { listen } for pid=15370 comm="syz.5.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 943.004360][ T30] audit: type=1400 audit(1762537074.738:1349): avc: denied { accept } for pid=15370 comm="syz.5.2345" lport=43479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 943.191109][T12877] hid-generic 0000:01FF:0003.0003: unknown main item tag 0x0 [ 943.208427][T12877] hid-generic 0000:01FF:0003.0003: unknown main item tag 0x0 [ 943.226107][T12877] hid-generic 0000:01FF:0003.0003: unknown main item tag 0x0 [ 943.235808][T12877] hid-generic 0000:01FF:0003.0003: unknown main item tag 0x0 [ 943.251865][T12877] hid-generic 0000:01FF:0003.0003: unknown main item tag 0x0 [ 943.276233][T12877] hid-generic 0000:01FF:0003.0003: unknown main item tag 0x0 [ 943.366587][T12877] hid-generic 0000:01FF:0003.0003: unknown main item tag 0x0 [ 943.416640][T12877] hid-generic 0000:01FF:0003.0003: unknown main item tag 0x0 [ 943.424500][T12877] hid-generic 0000:01FF:0003.0003: unknown main item tag 0x0 [ 943.433152][T12877] hid-generic 0000:01FF:0003.0003: unknown main item tag 0x0 [ 943.983410][T12877] hid-generic 0000:01FF:0003.0003: hidraw0: HID vdd.f0 Device [syz1] on syz0 [ 944.178765][T15383] fido_id[15383]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 944.992234][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2353'. [ 946.612833][T15417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.644978][T15417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.008827][ T5826] Bluetooth: hci1: unexpected event for opcode 0x202a [ 948.389061][T15439] batman_adv: batadv0: Adding interface: gretap1 [ 948.395555][T15439] batman_adv: batadv0: The MTU of interface gretap1 is too small (1000) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.421199][T15439] batman_adv: batadv0: Interface activated: gretap1 [ 949.003548][T15441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.025228][T15441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.041260][T15441] FAULT_INJECTION: forcing a failure. [ 949.041260][T15441] name failslab, interval 1, probability 0, space 0, times 0 [ 949.054278][T15441] CPU: 1 UID: 0 PID: 15441 Comm: syz.5.2362 Not tainted syzkaller #0 PREEMPT(full) [ 949.054302][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 949.054311][T15441] Call Trace: [ 949.054317][T15441] [ 949.054323][T15441] dump_stack_lvl+0x16c/0x1f0 [ 949.054354][T15441] should_fail_ex+0x512/0x640 [ 949.054372][T15441] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 949.054399][T15441] should_failslab+0xc2/0x120 [ 949.054416][T15441] kmem_cache_alloc_noprof+0x75/0x6e0 [ 949.054438][T15441] ? alloc_empty_file+0x55/0x1e0 [ 949.054462][T15441] ? alloc_empty_file+0x55/0x1e0 [ 949.054481][T15441] alloc_empty_file+0x55/0x1e0 [ 949.054502][T15441] path_openat+0xda/0x2cb0 [ 949.054530][T15441] ? __pfx_path_openat+0x10/0x10 [ 949.054549][T15441] ? __lock_acquire+0xb8a/0x1c90 [ 949.054577][T15441] do_filp_open+0x20b/0x470 [ 949.054596][T15441] ? __pfx_do_filp_open+0x10/0x10 [ 949.054630][T15441] ? alloc_fd+0x471/0x7d0 [ 949.054655][T15441] do_sys_openat2+0x11b/0x1d0 [ 949.054671][T15441] ? __pfx_do_sys_openat2+0x10/0x10 [ 949.054686][T15441] ? __fget_files+0x20e/0x3c0 [ 949.054699][T15441] __x64_sys_openat+0x174/0x210 [ 949.054713][T15441] ? __pfx___x64_sys_openat+0x10/0x10 [ 949.054726][T15441] ? ksys_write+0x1ac/0x250 [ 949.054741][T15441] do_syscall_64+0xcd/0xfa0 [ 949.054752][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.054763][T15441] RIP: 0033:0x7f8c63d8df10 [ 949.054772][T15441] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 949.054782][T15441] RSP: 002b:00007f8c64b81b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 949.054792][T15441] RAX: ffffffffffffffda RBX: 0000000000165400 RCX: 00007f8c63d8df10 [ 949.054799][T15441] RDX: 0000000000165400 RSI: 00007f8c64b81c10 RDI: 00000000ffffff9c [ 949.054805][T15441] RBP: 00007f8c64b81c10 R08: 0000000000000000 R09: 0000000000000000 [ 949.054811][T15441] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 949.054817][T15441] R13: 00007f8c63fe6038 R14: 00007f8c63fe5fa0 R15: 00007ffe8c77c4d8 [ 949.054833][T15441] [ 950.620884][ T30] audit: type=1400 audit(1762537082.448:1350): avc: denied { map } for pid=15453 comm="syz.5.2366" path="socket:[51669]" dev="sockfs" ino=51669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 950.662897][ T30] audit: type=1400 audit(1762537082.448:1352): avc: denied { read } for pid=15453 comm="syz.5.2366" path="socket:[51669]" dev="sockfs" ino=51669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 950.721509][ T30] audit: type=1400 audit(1762537082.448:1351): avc: denied { setattr } for pid=15453 comm="syz.5.2366" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 950.779661][T15459] FAULT_INJECTION: forcing a failure. [ 950.779661][T15459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.841913][ T30] audit: type=1400 audit(1762537082.608:1353): avc: denied { append } for pid=15458 comm="syz.5.2367" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 950.865574][T15459] CPU: 0 UID: 0 PID: 15459 Comm: syz.5.2367 Not tainted syzkaller #0 PREEMPT(full) [ 950.865591][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 950.865598][T15459] Call Trace: [ 950.865602][T15459] [ 950.865607][T15459] dump_stack_lvl+0x16c/0x1f0 [ 950.865630][T15459] should_fail_ex+0x512/0x640 [ 950.865645][T15459] _copy_from_user+0x2e/0xd0 [ 950.865659][T15459] memdup_user+0x6b/0xe0 [ 950.865671][T15459] nvram_misc_write+0x92/0xf0 [ 950.865689][T15459] ? __pfx_nvram_misc_write+0x10/0x10 [ 950.865704][T15459] vfs_write+0x2a0/0x11d0 [ 950.865718][T15459] ? __pfx_vfs_write+0x10/0x10 [ 950.865726][T15459] ? find_held_lock+0x2b/0x80 [ 950.865741][T15459] ? __fget_files+0x204/0x3c0 [ 950.865754][T15459] ? __fget_files+0x20e/0x3c0 [ 950.865768][T15459] ksys_write+0x12a/0x250 [ 950.865777][T15459] ? __pfx_ksys_write+0x10/0x10 [ 950.865791][T15459] do_syscall_64+0xcd/0xfa0 [ 950.865803][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.865814][T15459] RIP: 0033:0x7f8c63d8f6c9 [ 950.865822][T15459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.865833][T15459] RSP: 002b:00007f8c64b82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 950.865843][T15459] RAX: ffffffffffffffda RBX: 00007f8c63fe5fa0 RCX: 00007f8c63d8f6c9 [ 950.865850][T15459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 950.865856][T15459] RBP: 00007f8c64b82090 R08: 0000000000000000 R09: 0000000000000000 [ 950.865862][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.865868][T15459] R13: 00007f8c63fe6038 R14: 00007f8c63fe5fa0 R15: 00007ffe8c77c4d8 [ 950.865883][T15459] [ 951.085418][ T30] audit: type=1400 audit(1762537082.618:1354): avc: denied { open } for pid=15458 comm="syz.5.2367" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 951.964368][ T30] audit: type=1400 audit(1762537083.778:1355): avc: denied { ioctl } for pid=15462 comm="syz.7.2368" path="socket:[51688]" dev="sockfs" ino=51688 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 952.425853][ T30] audit: type=1400 audit(1762537084.258:1356): avc: denied { append } for pid=15482 comm="syz.3.2372" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 952.426841][T15484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2372'. [ 952.690175][ T30] audit: type=1400 audit(1762537084.528:1357): avc: denied { getopt } for pid=15482 comm="syz.3.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 952.691533][T15488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15488 comm=syz.3.2372 [ 952.905827][ T30] audit: type=1400 audit(1762537084.738:1358): avc: denied { map } for pid=15492 comm="syz.5.2374" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 953.412952][T15512] siw: device registration error -23 [ 953.600014][T15512] input: syz0 as /devices/virtual/input/input38 [ 954.596614][ T5859] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 954.746523][ T5859] usb 8-1: Using ep0 maxpacket: 8 [ 954.769955][ T5859] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 954.782889][ T5859] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 954.800348][ T5859] usb 8-1: config 0 has no interface number 0 [ 954.824398][ T5859] usb 8-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 954.926187][ T5859] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 955.013404][ T5859] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 955.032632][ T5859] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 955.055432][ T5859] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 955.082388][ T5859] usb 8-1: Product: syz [ 955.137040][ T5859] usb 8-1: config 0 descriptor?? [ 955.143546][T15542] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 955.237200][ T30] audit: type=1326 audit(1762537087.058:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15555 comm="syz.3.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffb58f6c9 code=0x7ffc0000 [ 957.683166][ T5859] usb 8-1: USB disconnect, device number 23 [ 957.688692][T15574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.755623][T15574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.804883][T15582] lo speed is unknown, defaulting to 1000 [ 959.007020][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 959.911660][ T1205] kernel read not supported for file /asound/seq/clients (pid: 1205 comm: kworker/0:2) [ 960.709438][T15623] netlink: 'syz.5.2404': attribute type 4 has an invalid length. [ 961.156400][T15628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.539711][T15628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.795727][T15632] syz_tun: entered allmulticast mode [ 961.915712][T15632] syz_tun: left allmulticast mode [ 963.239475][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 963.239493][ T30] audit: type=1400 audit(1762537095.078:1371): avc: denied { shutdown } for pid=15655 comm="syz.7.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 963.497555][ T6691] Bluetooth: hci5: Frame reassembly failed (-84) [ 964.964277][T15664] netlink: 'syz.3.2416': attribute type 8 has an invalid length. [ 964.978094][ T30] audit: type=1400 audit(1762537096.798:1372): avc: denied { setopt } for pid=15663 comm="syz.3.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 965.400648][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'. [ 965.596987][T13613] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 966.957101][T15691] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 967.199675][T15695] FAULT_INJECTION: forcing a failure. [ 967.199675][T15695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.212881][T15695] CPU: 0 UID: 0 PID: 15695 Comm: syz.5.2425 Not tainted syzkaller #0 PREEMPT(full) [ 967.212897][T15695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 967.212903][T15695] Call Trace: [ 967.212907][T15695] [ 967.212911][T15695] dump_stack_lvl+0x16c/0x1f0 [ 967.212943][T15695] should_fail_ex+0x512/0x640 [ 967.212967][T15695] _copy_from_user+0x2e/0xd0 [ 967.212991][T15695] do_sock_getsockopt+0x3ca/0x440 [ 967.213011][T15695] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 967.213026][T15695] ? __fget_files+0x204/0x3c0 [ 967.213044][T15695] __sys_getsockopt+0x12f/0x260 [ 967.213061][T15695] __x64_sys_getsockopt+0xbd/0x160 [ 967.213073][T15695] ? do_syscall_64+0x91/0xfa0 [ 967.213083][T15695] ? lockdep_hardirqs_on+0x7c/0x110 [ 967.213101][T15695] do_syscall_64+0xcd/0xfa0 [ 967.213111][T15695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.213122][T15695] RIP: 0033:0x7f8c63d8f6c9 [ 967.213132][T15695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.213142][T15695] RSP: 002b:00007f8c64b82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 967.213153][T15695] RAX: ffffffffffffffda RBX: 00007f8c63fe5fa0 RCX: 00007f8c63d8f6c9 [ 967.213159][T15695] RDX: 0000000000000003 RSI: 000000000000011c RDI: 0000000000000007 [ 967.213165][T15695] RBP: 00007f8c64b82090 R08: 0000200000000000 R09: 0000000000000000 [ 967.213172][T15695] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 967.213178][T15695] R13: 00007f8c63fe6038 R14: 00007f8c63fe5fa0 R15: 00007ffe8c77c4d8 [ 967.213193][T15695] [ 967.396861][ T1205] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 967.565553][ T30] audit: type=1400 audit(1762537099.398:1373): avc: denied { execute } for pid=15696 comm="syz.5.2427" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 968.087625][ T1205] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 968.099101][ T1205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.107683][ T1205] usb 8-1: Product: syz [ 968.111992][ T1205] usb 8-1: Manufacturer: syz [ 968.117349][ T1205] usb 8-1: SerialNumber: syz [ 968.362443][T15703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15703 comm=syz.6.2428 [ 968.364461][ T1205] usb 8-1: config 0 descriptor?? [ 968.397721][T15703] netlink: 'syz.6.2428': attribute type 1 has an invalid length. [ 968.423672][ T1205] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 968.452968][ T1205] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 968.476176][ T1205] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 969.127695][ T5826] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 969.612390][T15703] bond1: (slave geneve2): making interface the new active one [ 969.651927][T15703] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 969.939215][ T6690] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 969.953152][ T6690] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 970.057456][ T6690] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 970.166074][ T6690] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 970.185836][T15726] FAULT_INJECTION: forcing a failure. [ 970.185836][T15726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.257688][T15726] CPU: 1 UID: 0 PID: 15726 Comm: syz.3.2435 Not tainted syzkaller #0 PREEMPT(full) [ 970.257726][T15726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 970.257737][T15726] Call Trace: [ 970.257743][T15726] [ 970.257750][T15726] dump_stack_lvl+0x16c/0x1f0 [ 970.257781][T15726] should_fail_ex+0x512/0x640 [ 970.257805][T15726] _copy_from_user+0x2e/0xd0 [ 970.257828][T15726] copy_msghdr_from_user+0x98/0x160 [ 970.257852][T15726] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 970.257888][T15726] ___sys_sendmsg+0xfe/0x1d0 [ 970.257912][T15726] ? __pfx____sys_sendmsg+0x10/0x10 [ 970.257932][T15726] ? __lock_acquire+0x622/0x1c90 [ 970.257991][T15726] __sys_sendmsg+0x16d/0x220 [ 970.258015][T15726] ? __pfx___sys_sendmsg+0x10/0x10 [ 970.258055][T15726] do_syscall_64+0xcd/0xfa0 [ 970.258074][T15726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.258091][T15726] RIP: 0033:0x7f5ffb58f6c9 [ 970.258105][T15726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.258120][T15726] RSP: 002b:00007f5ff97f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.258138][T15726] RAX: ffffffffffffffda RBX: 00007f5ffb7e5fa0 RCX: 00007f5ffb58f6c9 [ 970.258150][T15726] RDX: 00000000200040b4 RSI: 0000200000000040 RDI: 0000000000000003 [ 970.258160][T15726] RBP: 00007f5ff97f6090 R08: 0000000000000000 R09: 0000000000000000 [ 970.258170][T15726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.258180][T15726] R13: 00007f5ffb7e6038 R14: 00007f5ffb7e5fa0 R15: 00007ffcb4fa9658 [ 970.258207][T15726] [ 970.482366][ T5826] Bluetooth: hci1: unexpected event for opcode 0x202a [ 970.600727][ T1205] usb 8-1: USB disconnect, device number 24 [ 971.756551][T12877] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 971.916734][T12877] usb 8-1: Using ep0 maxpacket: 16 [ 971.941432][T12877] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.976565][T12877] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 972.018905][T12877] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 972.073977][T12877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.137402][T12877] usb 8-1: config 0 descriptor?? [ 972.142846][T15759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.193817][T15759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.428449][ T30] audit: type=1400 audit(1762537104.268:1374): avc: denied { map } for pid=15763 comm="syz.3.2443" path="pipe:[5365]" dev="pipefs" ino=5365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 972.452750][ T30] audit: type=1400 audit(1762537104.268:1375): avc: denied { map } for pid=15763 comm="syz.3.2443" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 972.556518][ T3093] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 972.707982][ T3093] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 972.716767][ T3093] usb 7-1: config 0 has no interface number 0 [ 972.727627][ T3093] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 972.737599][ T3093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.746199][ T3093] usb 7-1: Product: syz [ 972.750836][ T3093] usb 7-1: Manufacturer: syz [ 972.755605][ T3093] usb 7-1: SerialNumber: syz [ 972.913358][ T3093] usb 7-1: config 0 descriptor?? [ 973.593782][ T30] audit: type=1400 audit(1762537105.428:1376): avc: denied { map } for pid=15761 comm="syz.6.2442" path="socket:[52741]" dev="sockfs" ino=52741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 973.605894][ T3093] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 973.617051][ C0] vkms_vblank_simulate: vblank timer overrun [ 973.636729][ T30] audit: type=1400 audit(1762537105.438:1377): avc: denied { read } for pid=15761 comm="syz.6.2442" path="socket:[52741]" dev="sockfs" ino=52741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 973.666005][ T3093] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 973.679122][ T3093] asix 7-1:0.251: probe with driver asix failed with error -5 [ 973.744707][ T3093] usb 7-1: USB disconnect, device number 18 [ 974.493810][ T5881] usb 8-1: USB disconnect, device number 25 [ 974.727040][T12676] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 975.219859][T12676] usb 7-1: Using ep0 maxpacket: 16 [ 975.228902][T12676] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.276556][T12676] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 975.287764][T15801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.311621][T12676] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 975.334016][T15801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.521326][ T30] audit: type=1400 audit(1762537107.348:1378): avc: denied { getopt } for pid=15798 comm="syz.3.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 975.584243][T12676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.660145][T12676] usb 7-1: config 0 descriptor?? [ 976.280693][T15811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.387873][T15811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.397062][T15811] netlink: 'syz.4.2457': attribute type 1 has an invalid length. [ 977.153836][ T30] audit: type=1400 audit(1762537108.428:1379): avc: denied { ioctl } for pid=15809 comm="syz.5.2456" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 977.179190][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.304449][T12877] usb 7-1: USB disconnect, device number 19 [ 978.854520][T15831] syz.4.2460 (15831): drop_caches: 2 [ 982.221865][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2474'. [ 985.996546][ T3093] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 986.322820][ T3093] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.372995][ T3093] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 986.382202][ T3093] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.403052][ T3093] usb 8-1: Product: syz [ 986.408512][ T3093] usb 8-1: Manufacturer: syz [ 986.438968][ T3093] usb 8-1: SerialNumber: syz [ 987.013313][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.167022][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.287251][T15967] Invalid ELF header type: 3 != 1 [ 987.292373][T15967] Invalid ELF header type: 3 != 1 [ 987.297518][ T30] audit: type=1400 audit(1762537119.128:1380): avc: denied { module_load } for pid=15961 comm="syz.3.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 987.446388][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2491'. [ 987.788322][T15973] netlink: 'syz.6.2495': attribute type 10 has an invalid length. [ 987.802499][T15973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.410104][ T3093] cdc_ncm 8-1:1.0: failed to get mac address [ 988.481349][ T3093] cdc_ncm 8-1:1.0: bind() failure [ 988.496865][T15977] netlink: 'syz.6.2495': attribute type 10 has an invalid length. [ 988.504861][T15977] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2495'. [ 988.555697][T15977] batadv0: entered promiscuous mode [ 988.562791][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 988.568131][ T3093] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 988.578763][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2491'. [ 988.602614][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 988.626196][T15977] batadv0: entered allmulticast mode [ 988.761236][ T3093] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 988.779518][ T3093] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 989.311706][T15977] bridge0: port 3(batadv0) entered blocking state [ 989.320312][T15977] bridge0: port 3(batadv0) entered disabled state [ 989.337168][ T3093] usb 8-1: USB disconnect, device number 26 [ 989.807018][ T6988] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 989.816342][ T6988] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 989.846852][T15992] netlink: 'syz.4.2500': attribute type 1 has an invalid length. [ 990.010839][T15992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.184094][T15999] bond0: (slave veth5): Enslaving as an active interface with an up link [ 990.196963][T16007] Failed to initialize the IGMP autojoin socket (err -2) [ 990.416595][ T1205] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 990.918426][ T1205] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 990.928627][ T1205] usb 7-1: config 0 interface 0 has no altsetting 0 [ 990.952736][ T1205] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 990.964649][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 990.976937][ T1205] usb 7-1: Product: syz [ 990.981127][ T1205] usb 7-1: Manufacturer: syz [ 990.986339][ T1205] usb 7-1: SerialNumber: syz [ 991.000298][ T1205] usb 7-1: config 0 descriptor?? [ 991.013149][ T1205] usb 7-1: selecting invalid altsetting 0 [ 991.184791][T16029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.202646][T16029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.223053][T16029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.247341][T16029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.263831][ T3093] usb 7-1: USB disconnect, device number 20 [ 992.769983][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.776981][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1097.566377][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1097.573347][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16043/1:b..l [ 1097.581756][ C1] rcu: (detected by 1, t=10502 jiffies, g=71821, q=298 ncpus=2) [ 1097.589443][ C1] task:syz.7.2512 state:R running task stack:26168 pid:16043 tgid:16041 ppid:12665 task_flags:0x400140 flags:0x00080001 [ 1097.603506][ C1] Call Trace: [ 1097.606773][ C1] [ 1097.609684][ C1] __schedule+0x1190/0x5de0 [ 1097.614170][ C1] ? __irq_work_queue_local+0x1d7/0x580 [ 1097.619691][ C1] ? __phys_addr+0xe1/0x180 [ 1097.624175][ C1] ? __pfx___schedule+0x10/0x10 [ 1097.629001][ C1] ? find_held_lock+0x2b/0x80 [ 1097.633651][ C1] ? mark_held_locks+0x49/0x80 [ 1097.638408][ C1] preempt_schedule_irq+0x51/0x90 [ 1097.643410][ C1] irqentry_exit+0x36/0x90 [ 1097.647808][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1097.653759][ C1] RIP: 0010:unwind_next_frame+0xae/0x20a0 [ 1097.659452][ C1] Code: 48 89 04 24 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 38 18 00 00 49 8b 45 38 48 89 44 24 10 e8 32 b1 35 00 <31> d2 45 31 c9 45 31 c0 48 8d 05 00 00 00 00 50 b9 02 00 00 00 31 [ 1097.679044][ C1] RSP: 0018:ffffc900114defd0 EFLAGS: 00000293 [ 1097.685093][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffc900114df128 [ 1097.693033][ C1] RDX: 0000000000000000 RSI: ffff88802feb4900 RDI: ffff88802feb4d84 [ 1097.700975][ C1] RBP: ffffc900114df0d8 R08: 0000000000000001 R09: 0000000000000000 [ 1097.708917][ C1] R10: ffffc900114df090 R11: dffffc0000000000 R12: fffff5200229be14 [ 1097.716860][ C1] R13: ffffc900114df090 R14: ffffc900114df090 R15: ffffc900114df098 [ 1097.724812][ C1] ? __unwind_start+0x574/0x7f0 [ 1097.729635][ C1] ? get_stack_info_noinstr+0x18/0x120 [ 1097.735070][ C1] __unwind_start+0x45f/0x7f0 [ 1097.739720][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1097.745847][ C1] arch_stack_walk+0x73/0x100 [ 1097.750511][ C1] ? __unwind_start+0x574/0x7f0 [ 1097.755336][ C1] stack_trace_save+0x8e/0xc0 [ 1097.759987][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1097.765335][ C1] save_stack+0x160/0x1f0 [ 1097.769646][ C1] ? __pfx_save_stack+0x10/0x10 [ 1097.774495][ C1] __set_page_owner+0x91/0x560 [ 1097.779232][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1097.784577][ C1] post_alloc_hook+0x1c0/0x230 [ 1097.789317][ C1] get_page_from_freelist+0x10a3/0x3a30 [ 1097.794844][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 1097.800101][ C1] ? rcu_is_watching+0x12/0xc0 [ 1097.804841][ C1] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1097.810712][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 1097.816582][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1097.822893][ C1] ? __lock_acquire+0x622/0x1c90 [ 1097.827809][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1097.833678][ C1] ? policy_nodemask+0xea/0x4e0 [ 1097.838513][ C1] alloc_pages_mpol+0x1fb/0x550 [ 1097.843335][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1097.848681][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1097.854026][ C1] vma_alloc_folio_noprof+0xed/0x1e0 [ 1097.859286][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1097.865156][ C1] do_pte_missing+0x2202/0x3ba0 [ 1097.869983][ C1] ? find_held_lock+0x2b/0x80 [ 1097.874639][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 1097.879728][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1097.885160][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 1097.890589][ C1] ? find_held_lock+0x2b/0x80 [ 1097.895242][ C1] ? follow_page_pte+0x5cf/0x1390 [ 1097.900243][ C1] handle_mm_fault+0x589/0xd10 [ 1097.904986][ C1] __get_user_pages+0x54e/0x3530 [ 1097.909923][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1097.915272][ C1] populate_vma_page_range+0x267/0x3f0 [ 1097.920719][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1097.926697][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1097.932495][ C1] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1097.938204][ C1] __mm_populate+0x1d8/0x380 [ 1097.942773][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1097.947869][ C1] ? up_write+0x1b2/0x520 [ 1097.952183][ C1] do_mlock+0x441/0x800 [ 1097.956316][ C1] ? __pfx_do_mlock+0x10/0x10 [ 1097.960968][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 1097.965874][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 1097.970795][ C1] ? xfd_validate_state+0x61/0x180 [ 1097.975883][ C1] ? __pfx___do_sys_prctl+0x10/0x10 [ 1097.981056][ C1] __x64_sys_mlock+0x59/0x80 [ 1097.985623][ C1] do_syscall_64+0xcd/0xfa0 [ 1097.990100][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.995976][ C1] RIP: 0033:0x7fbf63f8f6c9 [ 1098.000362][ C1] RSP: 002b:00007fbf64e99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1098.008745][ C1] RAX: ffffffffffffffda RBX: 00007fbf641e5fa0 RCX: 00007fbf63f8f6c9 [ 1098.016686][ C1] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 1098.024629][ C1] RBP: 00007fbf64011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1098.032571][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.040523][ C1] R13: 00007fbf641e6038 R14: 00007fbf641e5fa0 R15: 00007ffc761ee138 [ 1098.048478][ C1] [ 1098.051470][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10515 jiffies! g71821 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1098.063758][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=79488 [ 1098.071611][ C1] rcu: rcu_preempt kthread starved for 10521 jiffies! g71821 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1098.082954][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1098.092892][ C1] rcu: RCU grace-period kthread stack dump: [ 1098.098749][ C1] task:rcu_preempt state:I stack:28088 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1098.110625][ C1] Call Trace: [ 1098.113876][ C1] [ 1098.116781][ C1] __schedule+0x1190/0x5de0 [ 1098.121271][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.126448][ C1] ? __pfx___schedule+0x10/0x10 [ 1098.131275][ C1] ? lock_acquire+0x62/0x350 [ 1098.135834][ C1] ? find_held_lock+0x2b/0x80 [ 1098.140497][ C1] ? schedule+0x2d7/0x3a0 [ 1098.144803][ C1] schedule+0xe7/0x3a0 [ 1098.148846][ C1] schedule_timeout+0x123/0x290 [ 1098.153674][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1098.159022][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1098.164294][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1098.170075][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1098.175535][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1098.180305][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1098.185563][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.190742][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1098.195649][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1098.200475][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1098.206259][ C1] rcu_gp_kthread+0x26d/0x380 [ 1098.210906][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1098.216072][ C1] ? rcu_is_watching+0x12/0xc0 [ 1098.220810][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.225984][ C1] ? __kthread_parkme+0x19e/0x250 [ 1098.231070][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1098.236239][ C1] kthread+0x3c5/0x780 [ 1098.240287][ C1] ? __pfx_kthread+0x10/0x10 [ 1098.244849][ C1] ? rcu_is_watching+0x12/0xc0 [ 1098.249585][ C1] ? __pfx_kthread+0x10/0x10 [ 1098.254145][ C1] ret_from_fork+0x675/0x7d0 [ 1098.258703][ C1] ? __pfx_kthread+0x10/0x10 [ 1098.263277][ C1] ret_from_fork_asm+0x1a/0x30 [ 1098.268023][ C1] [ 1098.271014][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1098.277308][ C1] CPU: 1 UID: 0 PID: 1296 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1098.286296][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1098.296334][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1098.302743][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 8a 35 f6 48 89 df e8 1e de 35 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 e6 25 f6 65 8b 05 7e 25 3e 08 85 c0 74 16 5b [ 1098.322325][ C1] RSP: 0018:ffffc9000421f958 EFLAGS: 00000246 [ 1098.328362][ C1] RAX: 0000000000000006 RBX: ffffffff9add9280 RCX: 0000000000000002 [ 1098.336304][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b754 RDI: ffffffff8bf07040 [ 1098.344246][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 1098.352190][ C1] R10: ffffffff90820cd7 R11: 0000000000000001 R12: ffffffff8f05d460 [ 1098.360133][ C1] R13: ffffffff9add9388 R14: 0000000000000000 R15: ffffffff9add93c0 [ 1098.368086][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 1098.376987][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1098.383542][ C1] CR2: 000000110c35b3b8 CR3: 0000000060917000 CR4: 00000000003526f0 [ 1098.391501][ C1] Call Trace: [ 1098.394752][ C1] [ 1098.397663][ C1] uart_write_room+0x2d9/0x940 [ 1098.402405][ C1] ? __pfx_uart_write_room+0x10/0x10 [ 1098.407664][ C1] tty_write_room+0x66/0x90 [ 1098.412149][ C1] handle_tx+0x14f/0x630 [ 1098.416373][ C1] dev_hard_start_xmit+0x97/0x740 [ 1098.421387][ C1] __dev_queue_xmit+0xa46/0x4490 [ 1098.426302][ C1] ? rcu_is_watching+0x12/0xc0 [ 1098.431042][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1098.436387][ C1] ? rcu_is_watching+0x12/0xc0 [ 1098.441129][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1098.446043][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1098.450974][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1098.456015][ C1] ? rcu_is_watching+0x12/0xc0 [ 1098.460781][ C1] tx+0xcc/0x190 [ 1098.464304][ C1] ? __pfx_tx+0x10/0x10 [ 1098.468430][ C1] kthread+0x1e4/0x3e0 [ 1098.472471][ C1] ? find_held_lock+0x2b/0x80 [ 1098.477130][ C1] ? __pfx_kthread+0x10/0x10 [ 1098.481689][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 1098.487483][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.492661][ C1] ? __kthread_parkme+0x19e/0x250 [ 1098.497662][ C1] ? __pfx_kthread+0x10/0x10 [ 1098.502235][ C1] kthread+0x3c5/0x780 [ 1098.506294][ C1] ? __pfx_kthread+0x10/0x10 [ 1098.510867][ C1] ? rcu_is_watching+0x12/0xc0 [ 1098.515608][ C1] ? __pfx_kthread+0x10/0x10 [ 1098.520180][ C1] ret_from_fork+0x675/0x7d0 [ 1098.524740][ C1] ? __pfx_kthread+0x10/0x10 [ 1098.529297][ C1] ret_from_fork_asm+0x1a/0x30 [ 1098.534043][ C1]