last executing test programs: 7.49456354s ago: executing program 3 (id=2627): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) syncfs(r0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x3}]}}]}, 0x3c}}, 0x4044) 5.498219135s ago: executing program 0 (id=2646): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) r2 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) close(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7, 0x40, 0x0, 0x3, {{0x5, 0x4, 0x3, 0xd, 0x14, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010102, @loopback}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) clock_gettime(0x0, 0x0) 5.301743675s ago: executing program 3 (id=2650): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x1bc, &(0x7f0000000040)={0x0, 0xccb5, 0x200, 0x0, 0x23b}, 0x0, &(0x7f0000000100)) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x80000000fffffffb, 0x6, 0x5, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000380)={0x4, &(0x7f00000000c0)=[{0x9, 0x4, 0x7a, 0x1000000}, {0x6, 0x1, 0x6, 0x3}, {0x9, 0x4, 0x8, 0xfff}, {0x3, 0x46, 0x5}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd=r0, 0xb, 0x5, 0x8020, 0xd, 0x0, {0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 4.657919497s ago: executing program 0 (id=2655): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000f842d463000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) ppoll(&(0x7f0000000000)=[{r1, 0x400}], 0x1, 0x0, 0x0, 0x0) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = dup(r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x700, 0x80, 0xffffff80, 0x6, {{0x19, 0x4, 0x2, 0x3, 0x64, 0x65, 0x0, 0x10, 0x4, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0x7, 0xe5, [@empty]}, @lsrr={0x83, 0x1f, 0x71, [@remote, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @remote, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0xa6, [@rand_addr=0x64010100, @rand_addr=0x64010101, @broadcast, @remote, @multicast2, @multicast1]}, @ssrr={0x89, 0xb, 0x31, [@private=0xa010101, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f00000004c0)={'syztnl2\x00', r4, 0x8, 0x80, 0x8, 0x6, {{0x19, 0x4, 0x1, 0x3d, 0x64, 0x65, 0x0, 0xb4, 0x4, 0x0, @remote, @remote, {[@timestamp={0x44, 0x24, 0x42, 0x0, 0x9, [0x7, 0xff, 0x92, 0x400, 0xffff7fff, 0x6, 0x6, 0x3]}, @timestamp_prespec={0x44, 0x2c, 0x45, 0x3, 0x6, [{@multicast2, 0x5}, {@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0xfffffff9}]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 4.189374003s ago: executing program 3 (id=2660): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @private2}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x40, 0x9, 0x7, {0x7, 0xf, "89b8187597"}}, 0x0}, 0x0) 3.768244319s ago: executing program 0 (id=2661): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x7) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040005) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) accept4(r0, 0x0, 0x0, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.699625557s ago: executing program 0 (id=2662): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000000000140012000000fa9bc12ecfdd04968e8dc9d61e8dd6a1bd51a7e5dcd1497a4b91763d9f852bdaca0dbd6dd11fa431065972a82d9ce5376958517422841208ddce0fffa859c6ca7bd059c99541d01c8e"], 0x30}}, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r3, &(0x7f0000000200)}, 0x20) listen(r2, 0x58b9) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x48014}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 3.627897184s ago: executing program 1 (id=2664): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3e7"}, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000300)={0x2, 0x1, &(0x7f0000000380)="e3"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x82002, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928", 0xc) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="200616"], 0x0, 0x0}) 3.331684137s ago: executing program 0 (id=2667): io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x1, 0x8001, 0xffffffffffffffff, 0x0}]) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r0, 0x0, &(0x7f000029d000/0x2000)=nil, 0x2000, 0x3ff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480), 0x80101, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000004c0)={0x0, @broadcast, 0x4e23, 0x0, 'lblcr\x00', 0x23, 0x6, 0x56}, 0x2c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x2, @local}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_dest={0x18, 0x114, 0x2, {0x2, 0x7}}], 0x18, 0x400c8c5}, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') setgroups(0x0, 0x0) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x157) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) 3.307654688s ago: executing program 3 (id=2668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000f4ff00000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3.066386406s ago: executing program 3 (id=2670): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e2793b10d105012000090102030109021200010000000009040000004d2f9c00bc9851dfecc144d0e9010c476a7f5b53bdc32056c1dcc2a5b78cf9663fc699b99ba484b4b2efb020dd918e70e0e3b6db08139a3c581adbac6503f181eee520c3d5080002b757e127998703d461530924d80ea6a6f280a2e4bb2afcd83412008dbb5f0e716393620299ca031087f5b3599e8e16786cc3f5e6e5166d38ff50cc50a97cf8401f1cf411"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x20, 0x16, 0x2, "fcca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000240)={0x34, &(0x7f0000000280)={0x20, 0x15, 0x16, "47c731206384d266b6594bf5908579ad228500000000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r2, 0x0, r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001700), 0x80000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x3) readv(r5, &(0x7f0000001640)=[{&(0x7f0000000400)=""/219, 0xdb}], 0x1) lseek(r4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0x1265, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.404083316s ago: executing program 3 (id=2673): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000086021440f4151500bffd010203010902120001010000000904"], 0x0) syz_open_dev$evdev(0x0, 0x3, 0xd8200) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x6, 0x8000000000004) getrlimit(0xe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x9, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r4) 2.313530381s ago: executing program 1 (id=2674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.253921455s ago: executing program 2 (id=2675): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setrlimit(0xa, &(0x7f0000000100)={0x5, 0x2}) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x48001003, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f0000004980)={0x2020}, 0x2020) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0x1000}, 0x18) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f0000001940)=""/4086, 0xff6) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x401}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0xfc, 0x0, 0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xf705, 0x1000000, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x1000008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2.021037495s ago: executing program 2 (id=2676): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000880)={0xa, 0x4e23, 0x173b2a7e, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x19}, 0x1c, 0x0, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000007c0)="8cc3b3df84eef7496ca0b405000000000000002bce6d490a62d2652e922627b012cbfca5bedaee3374e16d0290d17b33f349be9ac26447ffe1eb6d0de9268124b43a2e1cb3f67393c1ee14eb86dbd2b5e6e24185496bfa3389b77671a3fe259d043701e041b2f8e4b53bbf2880068253d50635123f1d04bb26f2bae9333e59c124", 0x81}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000017c0)="359db6a559aae72e61ce3e", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="b15fdafa8882b2ee4ee70596f9f7388df7b2d2df7715c02679d4e6b489f3c64b748531b705973c475a0bef413415f732f050e4760bbb20b93c43c164305cf2e07e7c3d5c714a13def0bab1cac1cd742b99f1d998868a0dd9ebbd553bacdfa79866f1d44cf91bee95b298dffcebf1", 0x6e}, {&(0x7f00000000c0)="380787012da9c3bd30e5d0906c7b0c5f4924c8cc75c2aa4454997388e6132867f65d86295bae6d4095112a019996e815fdabdebcbc35d1a3ceb13fab039e4353cff5f466abbcb030ffa70fa1ade67b3ae6a49feeb905ea6fb96b5ab2fba126be185196cfaa29fca2fb145c5dd01b2ea0aaeb3a31a02b8e09d7371a51e0eecc798bea6082f2a0dc78216d7e60bbfdff267960a20fd7263a0c63aa55187a7b0565959459bd597b1d51a0b4274ed9ee0182b554e31b96fcbc6f5763374c2948ad6ff34633d701d647c01d9594b3128ed299646c3f7dae6ca513a9f4d4d68fe92a906cabf26b575c2477601dfbaee23ce0306870", 0xf2}, {&(0x7f00000001c0)="3e75bcc37459dcb2d12f7968c6571300db4e19bb63245cd7599a5054593dc6e930375684b62aa7c86e902c606d7ede6a9f2c4379e23794a72fabca8f70489c2fa2068e578ddbbc938ccbaa5c21b9f4fb593a72a0d2ae24be291e6548a24eaf69c488481a75b76bf8e1a6a47b2349b3119db2c01cb4fb895ac0bc3549bcc3ef7cd2bfbb3ae3d7f950da858433a7e7da7537f4", 0x92}, {&(0x7f0000000300)="9049656ff88fb2361fa900cf2fd3b7e54952d073d8e63d96a6a8fde7c8115501cea62e83c68ed41e3515effc8d50c19d41395387002b69b01f79785b9ff21e1acd66105f9bee57f52ab1ffa97bdb87fa36cf4625a1a8aba93d2a84649e6aa906de9f2afe9a896b6733751e46ab0b7cf617f3e76f33930247e7dc34b8b749a278fd4da2fd45b5ab1fcbee4f48355a08fd973a54", 0x93}, {&(0x7f00000003c0)="34cb65f9e6a26c7a17e9e68699a8ed0c6abddfc9f24890e6f444a40508d3c99da428f6d2a9088ec4e4933abb642bf3bc7fa91bd5e2910cd3529cbea04ad91b566cd0a47b582d81b82dea0624e60540efc844f0bf76bce2075a8f3ce29d8228b293d0e61f9dea1254cd64e4708f39ef822f1263a41046dac2d9053e93e7a9c3c884a79dca66b1002e7ac687f6394baebe8adc8560aee856827db0b4ca475441dee06beddf3fec9f88651efb11548227ab16a4e2bfa506647729386cad55ddd827d8b7771d51db229c48055bf2cd464c1a094eb91550be710215fe1f591a30632f1ec4248df03b974cbfa4", 0xea}, {&(0x7f00000004c0)="e8f1e8e7e6637ed9f0280faddac42696506c38fbdef7cdc5970852ef9db0a9c926a4ae57744813658cb6166eecc0756fc33859b75c29362616c0f004eff38641e904310d6b9b88111ec551383d6fec8c93a55b83d6bd1bb131abc73676f995fae52a70b0a9968eac8f83066e5792ce937732a15d47235a5fa2ff5be99223e312484db723db6c15c1a3796ae2a8", 0x8d}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000780)="3def0d7f962896b25e58167ba442e0d299dcbb95a8173a3d1c85d99d12aaef8ae9060d5e3ca7a61bd73a6b68e478c282141de2e12c0cc4c3e6", 0x39}], 0x1}}], 0x5, 0x28048085) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x10001, 0xb91) 1.555469744s ago: executing program 4 (id=2679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000007140100000032c83a1100000500"], 0x18}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x8) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0xfffffffffeffffff, 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x7f) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x1802000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2c, 0x803, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r7, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x2000041) r10 = timerfd_create(0x9, 0x800) timerfd_settime(r10, 0x3, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r10, &(0x7f0000000000)) 1.338567807s ago: executing program 2 (id=2680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000c40a0102000000000000000001a800000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000016540000000c0a010309000000000000000100000008000440000000000900010073797a30000000002c00038024000080200001801a0001"], 0xd8}}, 0x0) 1.324125631s ago: executing program 1 (id=2681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x4, 0x2001) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x6, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x63, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}]}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x10, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffff0, 0x614, 0x0, 0x180, 0x100, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.286314566s ago: executing program 4 (id=2682): r0 = syz_io_uring_setup(0x1d9e, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x0, 0x2d4}, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000000)={&(0x7f0000004000)={[{&(0x7f00000001c0)="7e3d3409e9f15985f4bcc57ec173fcdc76824ff17e300684afe2625f60060718c15da35f8c4e7eb817cae7f8caba9ad02cd58c3a1b5adeec19acde9fff21b565f01d8536e3c145fe9085676f17bd212f3e3592c759eec5a9929c092bb60b1d42eb2cbf40246f302f47eada091ba0c7d27fe98886246fec141cea97009313b5469c09b82440c13cedf23c1ce4007336ca175f72bb1595c5f46e9ceaeabbf5da34c77d80f7a4242fcaaed351a3e1202c6b", 0xb0, 0x2}, {&(0x7f0000000440)="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", 0x1000, 0x2}]}, 0x2}, 0x1) 1.226238684s ago: executing program 1 (id=2683): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0xfffffffffffffdd0) io_setup(0x2, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe2$9p(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000540)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400), 0x2a002, 0x0) write$FUSE_BMAP(r6, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x8, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r7}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000180)={@empty, 0x28, r9}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) 1.225427536s ago: executing program 2 (id=2684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x18, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4, 0x0, 0x2800}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRES16=r0, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{}, {0x84e00000, 0x3}]}, 0x18, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) setresuid(0xee01, 0xee01, 0x0) msgget$private(0x0, 0x790) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.224465996s ago: executing program 4 (id=2685): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}, 0x1, 0x0, 0xe000000}, 0x0) 1.162802513s ago: executing program 4 (id=2686): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000065895340f010022067d7010203010902240001fc00000009046b00020a00000009056b10000000000109058a03"], 0x0) (async) r0 = syz_usb_connect_ath9k(0x3, 0xfffffee0, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe98}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "c0d87243", {0x3, 0x104, 0x0, 0xc1, 0x6, 0x6, 0x43}}) 1.13586969s ago: executing program 2 (id=2687): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000004000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800000000000000140000001100"], 0xac}}, 0x0) 854.479989ms ago: executing program 2 (id=2688): socket$inet6(0xa, 0xa, 0x3) syz_open_dev$sndmidi(&(0x7f0000000000), 0x164, 0x210800) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00"], 0x310) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000355, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000880)=""/214, 0xd6}], 0x1, 0x6c, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$vcsu(0x0, 0x8, 0x101) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) 646.198068ms ago: executing program 1 (id=2689): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) (async) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) (async) fallocate(r4, 0x0, 0x1000000, 0x3) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x2, 0x2) (async) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 601.121742ms ago: executing program 4 (id=2690): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000880)={0xa, 0x4e23, 0x173b2a7e, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x19}, 0x1c, 0x0, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000007c0)="8cc3b3df84eef7496ca0b405000000000000002bce6d490a62d2652e922627b012cbfca5bedaee3374e16d0290d17b33f349be9ac26447ffe1eb6d0de9268124b43a2e1cb3f67393c1ee14eb86dbd2b5e6e24185496bfa3389b77671a3fe259d043701e041b2f8e4b53bbf2880068253d50635123f1d04bb26f2bae9333e59c124", 0x81}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000017c0)="359db6a559aae72e61ce3e", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="b15fdafa8882b2ee4ee70596f9f7388df7b2d2df7715c02679d4e6b489f3c64b748531b705973c475a0bef413415f732f050e4760bbb20b93c43c164305cf2e07e7c3d5c714a13def0bab1cac1cd742b99f1d998868a0dd9ebbd553bacdfa79866f1d44cf91bee95b298dffcebf1", 0x6e}, {&(0x7f00000000c0)="380787012da9c3bd30e5d0906c7b0c5f4924c8cc75c2aa4454997388e6132867f65d86295bae6d4095112a019996e815fdabdebcbc35d1a3ceb13fab039e4353cff5f466abbcb030ffa70fa1ade67b3ae6a49feeb905ea6fb96b5ab2fba126be185196cfaa29fca2fb145c5dd01b2ea0aaeb3a31a02b8e09d7371a51e0eecc798bea6082f2a0dc78216d7e60bbfdff267960a20fd7263a0c63aa55187a7b0565959459bd597b1d51a0b4274ed9ee0182b554e31b96fcbc6f5763374c2948ad6ff34633d701d647c01d9594b3128ed299646c3f7dae6ca513a9f4d4d68fe92a906cabf26b575c2477601dfbaee23ce0306870", 0xf2}, {&(0x7f00000001c0)="3e75bcc37459dcb2d12f7968c6571300db4e19bb63245cd7599a5054593dc6e930375684b62aa7c86e902c606d7ede6a9f2c4379e23794a72fabca8f70489c2fa2068e578ddbbc938ccbaa5c21b9f4fb593a72a0d2ae24be291e6548a24eaf69c488481a75b76bf8e1a6a47b2349b3119db2c01cb4fb895ac0bc3549bcc3ef7cd2bfbb3ae3d7f950da858433a7e7da7537f4", 0x92}, {&(0x7f0000000300)="9049656ff88fb2361fa900cf2fd3b7e54952d073d8e63d96a6a8fde7c8115501cea62e83c68ed41e3515effc8d50c19d41395387002b69b01f79785b9ff21e1acd66105f9bee57f52ab1ffa97bdb87fa36cf4625a1a8aba93d2a84649e6aa906de9f2afe9a896b6733751e46ab0b7cf617f3e76f33930247e7dc34b8b749a278fd4da2fd45b5ab1fcbee4f48355a08fd973a54", 0x93}, {&(0x7f00000003c0)="34cb65f9e6a26c7a17e9e68699a8ed0c6abddfc9f24890e6f444a40508d3c99da428f6d2a9088ec4e4933abb642bf3bc7fa91bd5e2910cd3529cbea04ad91b566cd0a47b582d81b82dea0624e60540efc844f0bf76bce2075a8f3ce29d8228b293d0e61f9dea1254cd64e4708f39ef822f1263a41046dac2d9053e93e7a9c3c884a79dca66b1002e7ac687f6394baebe8adc8560aee856827db0b4ca475441dee06beddf3fec9f88651efb11548227ab16a4e2bfa506647729386cad55ddd827d8b7771d51db229c48055bf2cd464c1a094eb91550be710215fe1f591a30632f1ec4248df03b974cbfa4", 0xea}, {&(0x7f00000004c0)="e8f1e8e7e6637ed9f0280faddac42696506c38fbdef7cdc5970852ef9db0a9c926a4ae57744813658cb6166eecc0756fc33859b75c29362616c0f004eff38641e904310d6b9b88111ec551383d6fec8c93a55b83d6bd1bb131abc73676f995fae52a70b0a9968eac8f83066e5792ce937732a15d47235a5fa2ff5be99223e312484db723db6c15c1a3796ae2a8", 0x8d}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000780)="3def0d7f962896b25e58167ba442e0d299dcbb95a8173a3d1c85d99d12aaef8ae9060d5e3ca7a61bd73a6b68e478c282141de2e12c0cc4c3e6", 0x39}], 0x1}}], 0x5, 0x28048085) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x10001, 0xb91) 498.341131ms ago: executing program 1 (id=2691): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="356e85de83fdd69f4e46f28137e60072cc4550105be5a4fe7809313304a43fdae14e0b6da6ab8a2eb0729fea3f60137fc9fa12ff8852e25939a09c06d4112fca7e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r3, 0x40081271, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x24008004) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x1ff6, 0x0, 0x3}, 0x10) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x32, 0x4005, 0xff, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0xfe, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) 268.932841ms ago: executing program 0 (id=2692): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 0s ago: executing program 4 (id=2693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x68, @loopback, 0xc2}]}, &(0x7f0000000180)=0x10) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000001c0), 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0)=[{{&(0x7f0000000280)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000001c0), 0x3c, &(0x7f0000000380)=""/192, 0xc0}, 0x4}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfffffffc, 0x8, 0xb43, 0x3, 0x2, 0x13, 0x80000000}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(adiantum(lrw(serpent),aes-asm,ghash-ce-sync),sha512_m'}, 0x58) ioctl$TIOCMGET(r6, 0x541e, &(0x7f0000000040)) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, 0x0) r9 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r9, &(0x7f0000000080)={0x40000012}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x1003012, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r9, @ANYRESOCT=r3, @ANYRES16=r2, @ANYRESHEX=r0]) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(pcbc(aes),cmac-aes-ce)\x00'}, 0x58) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 497.687832][T12022] openvswitch: netlink: Multiple metadata blocks provided [ 497.711144][T12023] openvswitch: netlink: Multiple metadata blocks provided [ 498.093723][T12027] tipc: Can't bind to reserved service type 0 [ 498.093723][ T30] audit: type=1400 audit(1747517417.474:1283): avc: denied { bind } for pid=12026 comm="syz.3.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 498.249619][T12033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.260343][T12033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.303264][T12039] geneve1: entered allmulticast mode [ 499.509518][ T30] audit: type=1400 audit(1747517418.884:1284): avc: denied { listen } for pid=12042 comm="syz.3.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 499.540526][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 499.987180][ T30] audit: type=1326 audit(1747517419.364:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.4.1684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f626598e969 code=0x0 [ 500.051729][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 500.060561][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 500.071090][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 500.080211][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 500.091337][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 500.104001][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 500.113260][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 500.121405][ T24] usb 3-1: Product: syz [ 500.125577][ T24] usb 3-1: Manufacturer: syz [ 500.134058][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 500.139288][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 500.145449][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 500.151386][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 500.208047][T12053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.404860][ T5866] usb 3-1: USB disconnect, device number 62 [ 500.420694][T12056] netlink: 'syz.0.1685': attribute type 27 has an invalid length. [ 500.464153][T12056] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.1685' sets config #0 [ 501.057657][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.267185][T12069] hsr0 speed is unknown, defaulting to 1000 [ 501.426485][T12069] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1690'. [ 501.438925][T12069] netlink: 'syz.0.1690': attribute type 4 has an invalid length. [ 502.110839][ T3494] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.219305][T12089] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 502.219305][T12089] program syz.4.1694 not setting count and/or reply_len properly [ 502.409414][ T30] audit: type=1400 audit(1747517421.774:1286): avc: denied { connect } for pid=12090 comm="syz.4.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 502.480428][ T30] audit: type=1400 audit(1747517421.774:1287): avc: denied { read } for pid=12090 comm="syz.4.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 502.526383][T12095] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 502.526383][T12095] program syz.0.1696 not setting count and/or reply_len properly [ 502.821751][ T30] audit: type=1400 audit(1747517422.204:1288): avc: denied { ioctl } for pid=12098 comm="syz.4.1699" path="socket:[36069]" dev="sockfs" ino=36069 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 502.982460][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 503.006993][ T30] audit: type=1400 audit(1747517422.384:1289): avc: denied { read append } for pid=12103 comm="syz.0.1700" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 503.035990][ T30] audit: type=1400 audit(1747517422.384:1290): avc: denied { open } for pid=12103 comm="syz.0.1700" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 503.148660][T12105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 503.155132][T12105] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 503.301044][T12105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.307711][T12105] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 503.409728][T12105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 503.417347][T12105] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 503.425777][ T47] Process accounting resumed [ 503.498711][T12105] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 503.506855][T12105] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 504.387447][ T5857] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 504.500221][ T30] audit: type=1326 audit(1747517423.874:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626598e969 code=0x7ffc0000 [ 504.526232][T12131] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 504.541176][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.549003][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.560726][ T5857] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 504.581298][ T5857] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 504.610315][ T5857] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 504.630442][ T5857] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 504.641477][ T30] audit: type=1326 audit(1747517423.874:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626598e969 code=0x7ffc0000 [ 504.641526][ T30] audit: type=1326 audit(1747517423.914:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f626598e969 code=0x7ffc0000 [ 504.641564][ T30] audit: type=1326 audit(1747517423.914:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626598e969 code=0x7ffc0000 [ 504.641598][ T30] audit: type=1326 audit(1747517423.914:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626598e969 code=0x7ffc0000 [ 504.667024][ T5857] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 505.252475][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 505.267522][ T30] audit: type=1326 audit(1747517423.914:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f626598e969 code=0x7ffc0000 [ 505.295865][ T5857] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 505.310058][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 505.320534][ T5857] usb 2-1: Product: syz [ 505.324799][ T5857] usb 2-1: Manufacturer: syz [ 505.367472][ T5857] cdc_wdm 2-1:1.0: skipping garbage [ 505.373635][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 505.376440][ T30] audit: type=1326 audit(1747517423.914:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626598e969 code=0x7ffc0000 [ 505.409859][ T5857] cdc_wdm 2-1:1.0: skipping garbage [ 505.428463][ T5857] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 505.437296][ T5857] cdc_wdm 2-1:1.0: Unknown control protocol [ 505.510784][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 505.693762][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 505.724245][ T30] audit: type=1326 audit(1747517423.914:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f626598e969 code=0x7ffc0000 [ 505.753787][ T30] audit: type=1326 audit(1747517423.914:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626598e969 code=0x7ffc0000 [ 505.783660][ T30] audit: type=1326 audit(1747517423.914:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.4.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626598e969 code=0x7ffc0000 [ 505.817196][T12137] sp0: Synchronizing with TNC [ 505.830749][ T5857] usb 2-1: USB disconnect, device number 52 [ 507.290473][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 507.454167][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 507.454555][ T6013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.570513][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 507.770949][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 507.880450][ T5857] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 508.731626][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.746531][T12186] netlink: 'syz.2.1726': attribute type 9 has an invalid length. [ 508.755501][T12186] netlink: 'syz.2.1726': attribute type 7 has an invalid length. [ 508.761659][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.765435][T12186] netlink: 'syz.2.1726': attribute type 8 has an invalid length. [ 508.774361][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.774387][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 508.774426][ T5857] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 508.774445][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.776317][ T5857] usb 2-1: config 0 descriptor?? [ 508.849581][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'. [ 509.155891][T12205] bridge0: entered allmulticast mode [ 509.165181][T12205] bridge_slave_0: left allmulticast mode [ 509.174031][T12205] bridge_slave_0: left promiscuous mode [ 509.181913][T12205] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.797248][ T5857] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 510.390575][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 510.390592][ T30] audit: type=1400 audit(1747517429.764:1322): avc: denied { associate } for pid=12172 comm="syz.1.1722" name="fscreate" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 510.614151][ T5857] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 510.817490][ T5857] usb 2-1: USB disconnect, device number 53 [ 510.857805][ T30] audit: type=1400 audit(1747517430.234:1323): avc: denied { append } for pid=12217 comm="syz.2.1733" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 511.070044][T12225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1735'. [ 512.665091][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.724483][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1739'. [ 512.789701][T12233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1739'. [ 512.820904][ T30] audit: type=1400 audit(1747517432.194:1324): avc: denied { ioctl } for pid=12232 comm="syz.3.1739" path="socket:[37382]" dev="sockfs" ino=37382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 512.849144][T12233] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1739' resets device [ 513.185246][T12250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.595069][T12250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.007446][ T30] audit: type=1400 audit(1747517433.384:1325): avc: denied { append } for pid=12258 comm="syz.1.1741" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 514.502160][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.686156][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 517.181460][T12283] FAULT_INJECTION: forcing a failure. [ 517.181460][T12283] name failslab, interval 1, probability 0, space 0, times 0 [ 517.194156][T12283] CPU: 0 UID: 0 PID: 12283 Comm: syz.4.1751 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 517.194172][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.194178][T12283] Call Trace: [ 517.194182][T12283] [ 517.194186][T12283] dump_stack_lvl+0x16c/0x1f0 [ 517.194206][T12283] should_fail_ex+0x512/0x640 [ 517.194222][T12283] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 517.194241][T12283] should_failslab+0xc2/0x120 [ 517.194253][T12283] __kmalloc_cache_noprof+0x6a/0x3e0 [ 517.194270][T12283] ? alloc_pipe_info+0x10e/0x590 [ 517.194283][T12283] alloc_pipe_info+0x10e/0x590 [ 517.194295][T12283] splice_direct_to_actor+0x77d/0xa30 [ 517.194314][T12283] ? __pfx_direct_splice_actor+0x10/0x10 [ 517.194331][T12283] ? inode_has_perm+0x16f/0x1d0 [ 517.194345][T12283] ? file_has_perm+0x27d/0x350 [ 517.194357][T12283] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 517.194374][T12283] ? __pfx_file_has_perm+0x10/0x10 [ 517.194389][T12283] do_splice_direct+0x174/0x240 [ 517.194406][T12283] ? __pfx_do_splice_direct+0x10/0x10 [ 517.194423][T12283] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 517.194440][T12283] ? bpf_lsm_file_permission+0x9/0x10 [ 517.194456][T12283] ? security_file_permission+0x71/0x210 [ 517.194473][T12283] ? rw_verify_area+0xcf/0x680 [ 517.194490][T12283] do_sendfile+0xafd/0xe50 [ 517.194508][T12283] ? __pfx_do_sendfile+0x10/0x10 [ 517.194524][T12283] ? __fget_files+0x20e/0x3c0 [ 517.194537][T12283] __x64_sys_sendfile64+0x1d8/0x220 [ 517.194550][T12283] ? ksys_write+0x1b9/0x240 [ 517.194566][T12283] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 517.194582][T12283] do_syscall_64+0xcd/0x260 [ 517.194600][T12283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.194612][T12283] RIP: 0033:0x7f626598e969 [ 517.194621][T12283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.194632][T12283] RSP: 002b:00007f6266770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 517.194643][T12283] RAX: ffffffffffffffda RBX: 00007f6265bb6080 RCX: 00007f626598e969 [ 517.194649][T12283] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 517.194656][T12283] RBP: 00007f6266770090 R08: 0000000000000000 R09: 0000000000000000 [ 517.194662][T12283] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001 [ 517.194668][T12283] R13: 0000000000000000 R14: 00007f6265bb6080 R15: 00007ffe391a5108 [ 517.194682][T12283] [ 517.504264][ T5866] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 518.220309][T12299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.230690][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 518.238563][ T5866] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 518.303661][ T5866] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 518.313501][ T5866] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.336071][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.431457][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 518.441011][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 518.498967][ T5866] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 518.653045][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.670584][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 518.678993][ T5866] usb 3-1: Product: syz [ 518.716562][T12305] lo: entered allmulticast mode [ 518.720402][ T5866] usb 3-1: Manufacturer: syz [ 518.731537][T12308] set match dimension is over the limit! [ 518.733816][ T5866] usb 3-1: SerialNumber: syz [ 518.783663][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 518.825437][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 518.836791][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.886908][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 518.902177][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.923763][ T24] usb 4-1: config 0 descriptor?? [ 518.932211][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 518.961541][ T30] audit: type=1400 audit(1747517438.344:1326): avc: denied { write } for pid=12318 comm="syz.4.1763" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 519.004790][ T30] audit: type=1400 audit(1747517438.384:1327): avc: denied { map } for pid=12318 comm="syz.4.1763" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 519.050543][ T30] audit: type=1400 audit(1747517438.384:1328): avc: denied { execute } for pid=12318 comm="syz.4.1763" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 519.204199][ T5866] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 519.552704][ T5857] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 519.920016][ T24] gspca_vc032x: reg_w err -110 [ 519.930828][ T24] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 520.024554][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.034694][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.092767][ T5857] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 520.104028][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.114867][ T5857] usb 5-1: config 0 descriptor?? [ 520.250795][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.332666][ T5857] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 520.345003][ T5857] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 520.384666][ T5857] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 520.399903][ T5857] [drm] Initialized udl on minor 2 [ 520.556652][ T5857] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 520.578925][ T5857] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 520.610094][ T5866] usb 3-1: current rate 9338393 is different from the runtime rate 9338507 [ 520.803303][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 520.803539][ T24] usb 5-1: USB disconnect, device number 58 [ 520.817001][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 520.840572][T12338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.233584][T12338] netlink: 'syz.0.1769': attribute type 27 has an invalid length. [ 521.242549][T12338] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.1769' sets config #0 [ 521.261486][ T5866] usb 3-1: USB disconnect, device number 63 [ 521.514733][ T24] usb 4-1: USB disconnect, device number 48 [ 521.682107][T12359] syz.3.1774: attempt to access beyond end of device [ 521.682107][T12359] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 521.984529][T12367] netlink: 'syz.0.1775': attribute type 10 has an invalid length. [ 522.024637][T12362] fuse: Bad value for 'fd' [ 522.080995][ T24] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 522.143647][T12367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.174052][T12367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.175049][T12372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.275220][T12376] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.1776' sets config #0 [ 522.310300][ T24] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 522.374521][ T24] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 522.435055][ T24] usb 4-1: config 0 has no interface number 0 [ 522.468794][ T24] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x2 has invalid maxpacket 832, setting to 64 [ 522.519711][ T24] usb 4-1: config 0 interface 235 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.540413][ T24] usb 4-1: config 0 interface 235 has no altsetting 0 [ 523.418312][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 523.430473][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.438496][ T24] usb 4-1: Product: syz [ 523.450502][ T24] usb 4-1: Manufacturer: syz [ 523.455131][ T24] usb 4-1: SerialNumber: syz [ 523.517765][T12383] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 523.517765][T12383] program syz.1.1781 not setting count and/or reply_len properly [ 523.547745][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.561076][ T24] usb 4-1: config 0 descriptor?? [ 523.586556][T12359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 523.610005][ T24] keyspan 4-1:0.235: Keyspan 1 port adapter converter detected [ 523.618822][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 523.635238][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 87 [ 523.643467][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 7 [ 523.652239][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 81 [ 523.667177][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 1 [ 523.675531][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 85 [ 523.683520][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 5 [ 523.708829][ T24] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 523.719534][T12389] netlink: 'syz.4.1784': attribute type 1 has an invalid length. [ 523.735829][T12389] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1784'. [ 523.772374][ T30] audit: type=1400 audit(1747517443.134:1329): avc: denied { setopt } for pid=12388 comm="syz.4.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 523.823865][T12395] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1787'. [ 523.839258][ T24] usb 4-1: USB disconnect, device number 49 [ 523.847754][ T30] audit: type=1400 audit(1747517443.154:1330): avc: denied { read } for pid=12392 comm="syz.0.1786" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 523.872212][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 523.893192][ T24] keyspan 4-1:0.235: device disconnected [ 523.904751][ T30] audit: type=1400 audit(1747517443.154:1331): avc: denied { open } for pid=12392 comm="syz.0.1786" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 523.959381][T12403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.569482][T12404] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.1791' sets config #0 [ 524.580715][ T5817] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 524.866977][ T5817] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 524.876299][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.884381][ T5817] usb 2-1: Product: syz [ 524.897647][ T5817] usb 2-1: Manufacturer: syz [ 524.930086][ T5817] usb 2-1: SerialNumber: syz [ 524.957365][ T5817] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 524.977250][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 524.992937][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1795'. [ 525.003907][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 525.020100][ T5817] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 525.034634][ T5817] usb 2-1: media controller created [ 525.105295][T12417] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 525.105295][T12417] program syz.2.1793 not setting count and/or reply_len properly [ 525.116187][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.193463][T12416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.428988][T12419] netlink: 'syz.3.1796': attribute type 27 has an invalid length. [ 525.478010][T12419] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.1796' sets config #0 [ 525.808649][ T5817] DVB: Unable to find symbol mt352_attach() [ 525.834639][ T5817] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 525.857584][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 525.892567][ T5817] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 525.904625][T12431] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1800'. [ 525.939381][T12431] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1800'. [ 526.051752][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.342851][ T5866] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 526.440614][T12444] binder: BINDER_SET_CONTEXT_MGR already set [ 526.447508][T12443] binder_alloc: binder_alloc_mmap_handler: 12442 200000ffd000-200001000000 already mapped failed -16 [ 526.461370][T12444] binder: 12442:12444 ioctl 4018620d 200000000040 returned -16 [ 526.469428][T12444] binder: BINDER_SET_CONTEXT_MGR already set [ 526.477139][T12444] binder: 12442:12444 ioctl 4018620d 200000000040 returned -16 [ 526.488519][T12443] binder_alloc: binder_alloc_mmap_handler: 12442 200000ffd000-200001000000 already mapped failed -16 [ 526.511915][ T5866] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 526.520211][ T5866] usb 3-1: config 0 has no interface number 0 [ 526.530658][ T5866] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 526.539857][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.564686][ T5866] usb 3-1: Product: syz [ 526.575254][ T5866] usb 3-1: Manufacturer: syz [ 526.586128][ T5866] usb 3-1: SerialNumber: syz [ 526.595438][ T5866] usb 3-1: config 0 descriptor?? [ 526.610515][ T5817] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 526.622329][T12448] @: renamed from vlan0 (while UP) [ 526.760512][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 526.772376][ T5817] usb 5-1: config 0 has no interfaces? [ 526.783312][ T5817] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 526.793654][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.802848][ T5817] usb 5-1: Product: syz [ 526.807297][ T5817] usb 5-1: Manufacturer: syz [ 526.812572][ T5817] usb 5-1: SerialNumber: syz [ 526.819294][ T5817] usb 5-1: config 0 descriptor?? [ 526.991868][ T5857] usb 2-1: USB disconnect, device number 54 [ 527.022308][ T5866] usb 3-1: Firmware: major: 56, minor: 92, hardware type: UNKNOWN (224) [ 527.042622][ T30] audit: type=1400 audit(1747517446.424:1332): avc: denied { read } for pid=12429 comm="syz.4.1800" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.067706][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 527.068464][ T5857] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 527.076343][ T30] audit: type=1400 audit(1747517446.424:1333): avc: denied { open } for pid=12429 comm="syz.4.1800" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.130765][T12457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.140033][T12456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.141160][ T30] audit: type=1400 audit(1747517446.424:1334): avc: denied { ioctl } for pid=12429 comm="syz.4.1800" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.153677][T12456] batadv_slave_0: entered promiscuous mode [ 527.173956][ T30] audit: type=1400 audit(1747517446.504:1335): avc: denied { create } for pid=12429 comm="syz.4.1800" name="#e" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 527.200848][ T30] audit: type=1400 audit(1747517446.504:1336): avc: denied { link } for pid=12429 comm="syz.4.1800" name="#e" dev="tmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 527.224281][ T30] audit: type=1400 audit(1747517446.504:1337): avc: denied { rename } for pid=12429 comm="syz.4.1800" name="#f" dev="tmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 527.248436][ T5817] usb 5-1: USB disconnect, device number 59 [ 527.255130][ T5866] usb 3-1: no permanent extended address found, random address set [ 527.263380][ T5866] usb 3-1: atusb_probe: initialization failed, error = -524 [ 527.273919][ T5866] atusb 3-1:0.128: probe with driver atusb failed with error -524 [ 527.290423][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 527.301888][ T24] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 527.311016][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.319467][ T24] usb 4-1: Product: syz [ 527.327104][ T24] usb 4-1: Manufacturer: syz [ 527.337444][ T24] usb 4-1: SerialNumber: syz [ 527.345745][ T24] usb 4-1: config 0 descriptor?? [ 527.356930][ T30] audit: type=1400 audit(1747517446.734:1338): avc: denied { mounton } for pid=12458 comm="syz.1.1808" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 527.382203][ T24] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 527.383741][T12460] 9pnet_fd: p9_fd_create_tcp (12460): problem connecting socket to 127.0.0.1 [ 527.461086][ T5917] usb 3-1: USB disconnect, device number 64 [ 527.555817][T12449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.566403][T12449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.575924][T12449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.584790][T12449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.594328][T12449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.603058][T12449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.760419][ T5866] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 527.796390][T12468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.884042][T12468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.932919][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 527.943368][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 527.959114][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 527.995723][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 528.032777][ T5866] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 528.062721][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.873039][ T5866] usb 2-1: config 0 descriptor?? [ 528.932776][ T5917] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 529.120421][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 529.137262][ T5917] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 529.291640][ T30] audit: type=1400 audit(1747517448.644:1339): avc: denied { map } for pid=12478 comm="syz.0.1814" path="/proc/1265/ns" dev="proc" ino=37980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 529.313522][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.324785][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.347314][ T5866] kovaplus 0003:1E7D:2D50.001C: unknown main item tag 0x0 [ 529.363494][ T5917] usb 5-1: config 0 descriptor?? [ 529.368797][ T5866] kovaplus 0003:1E7D:2D50.001C: unknown main item tag 0x0 [ 529.592691][ T5917] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 529.614807][ T5866] kovaplus 0003:1E7D:2D50.001C: unknown main item tag 0x0 [ 529.629561][ T5866] kovaplus 0003:1E7D:2D50.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 529.630996][ T24] gspca_m5602: Failed to find a sensor [ 529.641549][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 529.655822][ T24] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 529.656521][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 529.672232][ T5917] usb 5-1: media controller created [ 529.691717][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.707520][ T24] usb 4-1: USB disconnect, device number 50 [ 529.781728][T12470] CIFS: Unable to determine destination address [ 529.789462][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.912039][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 529.921433][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.929325][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 529.960512][ T5866] kovaplus 0003:1E7D:2D50.001C: couldn't init struct kovaplus_device [ 529.968682][ T5866] kovaplus 0003:1E7D:2D50.001C: couldn't install mouse [ 530.019103][ T5917] az6027: usb out operation failed. (-71) [ 530.025773][ T5917] stb0899_attach: Driver disabled by Kconfig [ 530.035422][ T5917] az6027: no front-end attached [ 530.035422][ T5917] [ 530.051455][ T5866] kovaplus 0003:1E7D:2D50.001C: probe with driver kovaplus failed with error -32 [ 530.071084][ T5917] az6027: usb out operation failed. (-71) [ 530.078993][ T5917] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 530.089154][ T5866] usb 2-1: USB disconnect, device number 55 [ 530.096783][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 530.546448][ T5917] dvb-usb: schedule remote query interval to 400 msecs. [ 530.560367][ T5917] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 530.583697][T12498] hsr0 speed is unknown, defaulting to 1000 [ 530.583758][ T5917] usb 5-1: USB disconnect, device number 60 [ 531.522787][ T30] audit: type=1400 audit(1747517450.274:1340): avc: denied { execute_no_trans } for pid=12501 comm="syz.2.1821" path="/342/file0" dev="tmpfs" ino=1809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 531.618714][ T5917] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 531.820549][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 532.461200][ T3494] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.524040][T12521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.552010][T12521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.598877][T12523] hsr0 speed is unknown, defaulting to 1000 [ 532.620512][ T5917] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 532.642942][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 532.665613][ T24] usb 4-1: config 0 has no interfaces? [ 532.672359][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 532.683778][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 532.694862][ T24] usb 4-1: Manufacturer: syz [ 532.705489][ T24] usb 4-1: config 0 descriptor?? [ 532.783602][ T5917] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 532.800422][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.819205][ T5917] usb 5-1: Product: syz [ 532.823674][ T5917] usb 5-1: Manufacturer: syz [ 532.828318][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1825'. [ 532.837345][ T5917] usb 5-1: SerialNumber: syz [ 532.844569][T12523] netlink: 'syz.1.1825': attribute type 4 has an invalid length. [ 532.854439][ T5917] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 532.862541][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 532.882238][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 532.901167][ T5917] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 532.909434][ T5917] usb 5-1: media controller created [ 532.948062][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.033301][ T5917] DVB: Unable to find symbol mt352_attach() [ 533.039369][ T5917] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 533.047176][T12498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.065461][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 533.091277][T12498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.100912][ T5917] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 533.163008][ T5917] usb 4-1: USB disconnect, device number 51 [ 534.043229][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 534.750435][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 534.855558][T11949] usb 5-1: USB disconnect, device number 61 [ 534.978205][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.024491][ T30] audit: type=1400 audit(1747517453.884:1341): avc: denied { ioctl } for pid=12551 comm="syz.2.1835" path="socket:[38292]" dev="sockfs" ino=38292 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 536.340693][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 536.546918][ T24] usb 4-1: config 155 has too many interfaces: 124, using maximum allowed: 32 [ 536.584451][ T30] audit: type=1400 audit(1747517454.164:1342): avc: denied { bind } for pid=12554 comm="syz.0.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 536.613674][ T24] usb 4-1: config 155 has 1 interface, different from the descriptor's value: 124 [ 536.735522][T11949] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 536.737025][ T30] audit: type=1400 audit(1747517454.164:1343): avc: denied { name_bind } for pid=12554 comm="syz.0.1833" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 536.745167][ T24] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 536.767506][ T30] audit: type=1400 audit(1747517454.164:1344): avc: denied { node_bind } for pid=12554 comm="syz.0.1833" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 536.801572][ T30] audit: type=1400 audit(1747517454.174:1345): avc: denied { write } for pid=12554 comm="syz.0.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 536.824436][ T30] audit: type=1400 audit(1747517454.174:1346): avc: denied { ioctl } for pid=12554 comm="syz.0.1833" path="socket:[39192]" dev="sockfs" ino=39192 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 536.850375][ T30] audit: type=1400 audit(1747517454.224:1347): avc: denied { setopt } for pid=12554 comm="syz.0.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 536.910378][ T24] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 536.955414][ T24] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 537.004613][ T24] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 537.021246][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.068288][ T24] usb 4-1: Product: syz [ 537.076114][ T24] usb 4-1: Manufacturer: syz [ 537.090436][ T24] usb 4-1: SerialNumber: syz [ 537.683328][ T24] usb 4-1: can't set config #155, error -71 [ 537.691757][ T24] usb 4-1: USB disconnect, device number 52 [ 537.854195][T12583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1845'. [ 538.171263][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.283660][T12599] hsr0 speed is unknown, defaulting to 1000 [ 539.670526][ T5857] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 540.038206][T12596] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 540.047076][T12596] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 540.179711][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 540.202464][ T5857] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 540.216373][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.260403][ T5857] usb 3-1: Product: syz [ 540.264610][ T5857] usb 3-1: Manufacturer: syz [ 540.274969][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 540.279371][ T5857] usb 3-1: SerialNumber: syz [ 540.316801][ T5857] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 540.324764][ T5857] dvb-usb: bulk message failed: -22 (3/0) [ 540.368782][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.379939][ T5857] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 540.418220][ T5857] usb 3-1: media controller created [ 540.437262][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.627145][ T5857] DVB: Unable to find symbol mt352_attach() [ 540.633507][ T5857] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 540.654708][ T5857] dvb-usb: bulk message failed: -22 (3/0) [ 540.680397][ T5857] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 541.783918][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.795810][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.930451][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 542.120409][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 542.341941][ T5817] usb 3-1: USB disconnect, device number 65 [ 542.374616][ T24] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 542.475882][ T24] usb 5-1: config 0 has no interface number 0 [ 542.586140][ T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 542.813843][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1859'. [ 542.850214][ T5817] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 542.860625][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.884560][ T24] usb 5-1: Product: syz [ 542.922191][T12643] overlayfs: missing 'lowerdir' [ 542.927459][ T24] usb 5-1: Manufacturer: syz [ 543.590459][ T24] usb 5-1: SerialNumber: syz [ 543.600196][T12648] FAULT_INJECTION: forcing a failure. [ 543.600196][T12648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.621730][ T24] usb 5-1: config 0 descriptor?? [ 543.627094][T12648] CPU: 0 UID: 0 PID: 12648 Comm: syz.0.1862 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 543.627120][T12648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.627131][T12648] Call Trace: [ 543.627137][T12648] [ 543.627144][T12648] dump_stack_lvl+0x16c/0x1f0 [ 543.627175][T12648] should_fail_ex+0x512/0x640 [ 543.627203][T12648] _copy_from_user+0x2e/0xd0 [ 543.627228][T12648] memdup_user+0x6b/0xe0 [ 543.627247][T12648] proc_pid_attr_write+0x22e/0x790 [ 543.627268][T12648] vfs_write+0x25f/0x1180 [ 543.627308][T12648] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 543.627328][T12648] ? __pfx___mutex_lock+0x10/0x10 [ 543.627353][T12648] ? __pfx_vfs_write+0x10/0x10 [ 543.627387][T12648] ? __fget_files+0x20e/0x3c0 [ 543.627410][T12648] ksys_write+0x12a/0x240 [ 543.627436][T12648] ? __pfx_ksys_write+0x10/0x10 [ 543.627460][T12648] ? rcu_is_watching+0x12/0xc0 [ 543.627489][T12648] do_syscall_64+0xcd/0x260 [ 543.627516][T12648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.627533][T12648] RIP: 0033:0x7fa74198e969 [ 543.627548][T12648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.627564][T12648] RSP: 002b:00007fa742724038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.627581][T12648] RAX: ffffffffffffffda RBX: 00007fa741bb5fa0 RCX: 00007fa74198e969 [ 543.627592][T12648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 543.627603][T12648] RBP: 00007fa742724090 R08: 0000000000000000 R09: 0000000000000000 [ 543.627614][T12648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.627624][T12648] R13: 0000000000000000 R14: 00007fa741bb5fa0 R15: 00007ffc6caa8ec8 [ 543.627655][T12648] [ 543.665375][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'. [ 543.755240][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.850501][ T24] usb 5-1: can't set config #0, error -71 [ 543.881814][ T24] usb 5-1: USB disconnect, device number 62 [ 543.884404][ T30] audit: type=1400 audit(1747517463.264:1348): avc: denied { write } for pid=12651 comm="syz.0.1864" path="socket:[39460]" dev="sockfs" ino=39460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 543.942043][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.988519][ T30] audit: type=1400 audit(1747517463.354:1349): avc: denied { setopt } for pid=12651 comm="syz.0.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 544.036811][T12653] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 544.036811][T12653] program syz.4.1865 not setting count and/or reply_len properly [ 544.460610][T11949] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 544.629270][T11949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 544.641242][T11949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 544.660465][ T5866] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 544.664866][T11949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 544.702785][ T30] audit: type=1400 audit(1747517464.084:1350): avc: denied { name_bind } for pid=12645 comm="syz.1.1861" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 544.702930][T11949] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 544.723740][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.749747][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.782365][T11949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.802629][T11949] usb 3-1: Product: syz [ 544.803145][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.806835][T11949] usb 3-1: Manufacturer: syz [ 544.829598][T11949] usb 3-1: SerialNumber: syz [ 544.844176][ T5866] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 544.850164][T11949] usb 3-1: config 0 descriptor?? [ 544.858031][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 544.884613][T12663] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 544.890874][ T5866] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 544.904577][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 544.905702][T11949] usb 3-1: ucan: probing device on interface #0 [ 545.035002][T11949] usb 3-1: ucan: invalid endpoint configuration [ 545.099773][T11949] usb 3-1: ucan: probe failed; try to update the device firmware [ 545.265675][T11949] usb 3-1: USB disconnect, device number 66 [ 545.370834][ T5866] usb 5-1: Product: syz [ 545.375036][ T5866] usb 5-1: Manufacturer: syz [ 545.379622][ T5866] usb 5-1: SerialNumber: syz [ 545.401099][ T5866] usb 5-1: config 0 descriptor?? [ 546.013788][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.047932][ T5866] usb 5-1: selecting invalid altsetting 0 [ 546.062621][ T30] audit: type=1400 audit(1747517465.444:1351): avc: denied { accept } for pid=12685 comm="syz.1.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 546.953303][ T5866] usb 5-1: USB disconnect, device number 63 [ 546.971912][ T30] audit: type=1326 audit(1747517466.344:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12694 comm="syz.3.1874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3ac98e969 code=0x0 [ 547.013363][T12692] vivid-000: disconnect [ 547.049976][T12696] FAULT_INJECTION: forcing a failure. [ 547.049976][T12696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.096587][T12696] CPU: 0 UID: 0 PID: 12696 Comm: syz.1.1875 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 547.096616][T12696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.096626][T12696] Call Trace: [ 547.096633][T12696] [ 547.096645][T12696] dump_stack_lvl+0x16c/0x1f0 [ 547.096676][T12696] should_fail_ex+0x512/0x640 [ 547.096706][T12696] _copy_from_user+0x2e/0xd0 [ 547.096733][T12696] kstrtouint_from_user+0xd6/0x1d0 [ 547.096753][T12696] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 547.096772][T12696] ? __lock_acquire+0xaa4/0x1ba0 [ 547.096814][T12696] proc_fail_nth_write+0x83/0x250 [ 547.096842][T12696] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 547.096876][T12696] vfs_write+0x25f/0x1180 [ 547.096900][T12696] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 547.096931][T12696] ? __pfx___mutex_lock+0x10/0x10 [ 547.096957][T12696] ? __pfx_vfs_write+0x10/0x10 [ 547.096991][T12696] ? __fget_files+0x20e/0x3c0 [ 547.097019][T12696] ksys_write+0x12a/0x240 [ 547.097046][T12696] ? __pfx_ksys_write+0x10/0x10 [ 547.097080][T12696] do_syscall_64+0xcd/0x260 [ 547.097108][T12696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.097127][T12696] RIP: 0033:0x7fdb47f8d41f [ 547.097141][T12696] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 547.097158][T12696] RSP: 002b:00007fdb48e83030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 547.097175][T12696] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb47f8d41f [ 547.097186][T12696] RDX: 0000000000000001 RSI: 00007fdb48e830a0 RDI: 0000000000000004 [ 547.097196][T12696] RBP: 00007fdb48e83090 R08: 0000000000000000 R09: 0000000000000000 [ 547.097206][T12696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 547.097216][T12696] R13: 0000000000000001 R14: 00007fdb481b6080 R15: 00007ffe3bd6b2b8 [ 547.097242][T12696] [ 547.686566][T12705] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 547.696651][T12705] SELinux: failed to load policy [ 548.120684][ T30] audit: type=1400 audit(1747517467.064:1353): avc: denied { load_policy } for pid=12699 comm="syz.2.1876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 548.159747][T12686] vivid-000: reconnect [ 549.079951][T12727] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 549.112106][T12727] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 549.276659][T12736] ieee802154 phy1 wpan1: encryption failed: -22 [ 549.834387][ T30] audit: type=1400 audit(1747517468.924:1354): avc: denied { ioctl } for pid=12732 comm="syz.3.1885" path="socket:[38572]" dev="sockfs" ino=38572 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 549.859875][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.976510][ T30] audit: type=1400 audit(1747517469.084:1355): avc: denied { write } for pid=12732 comm="syz.3.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 550.004422][ T30] audit: type=1400 audit(1747517469.094:1356): avc: denied { wake_alarm } for pid=12732 comm="syz.3.1885" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 550.303221][ T5866] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 550.317198][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1890'. [ 550.332083][T12752] openvswitch: netlink: Missing key (keys=40, expected=100) [ 550.355868][ T30] audit: type=1400 audit(1747517469.734:1357): avc: denied { listen } for pid=12751 comm="syz.3.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 550.671350][ T5866] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.700455][ T5866] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 550.851007][ T30] audit: type=1400 audit(1747517470.104:1358): avc: denied { mount } for pid=12759 comm="syz.3.1892" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 550.873075][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.975775][ T30] audit: type=1400 audit(1747517470.124:1359): avc: denied { execute } for pid=12734 comm="syz.1.1886" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=38600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 551.002106][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 551.002141][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.002161][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 551.002184][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 551.045640][ T30] audit: type=1400 audit(1747517470.264:1360): avc: denied { kexec_image_load } for pid=12759 comm="syz.3.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 551.046529][ T5866] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 551.150413][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 551.178843][ T5866] usb 3-1: Product: syz [ 551.236141][ T5866] usb 3-1: Manufacturer: syz [ 551.293173][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 551.312257][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 551.321538][ T5866] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 551.338616][ T5866] cdc_wdm 3-1:1.0: Unknown control protocol [ 551.611611][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.631441][ T5866] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 551.646988][ T5917] usb 3-1: USB disconnect, device number 67 [ 551.812490][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.829489][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.839442][ T5866] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 552.848541][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.858534][ T5866] usb 5-1: config 0 descriptor?? [ 553.030083][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1906'. [ 553.077917][ T5866] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 553.099685][ T5866] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 553.123378][ T5866] playstation 0003:054C:0DF2.001D: item fetching failed at offset 2/5 [ 553.142675][ T5866] playstation 0003:054C:0DF2.001D: Parse failed [ 553.158847][ T5866] playstation 0003:054C:0DF2.001D: probe with driver playstation failed with error -22 [ 553.347203][ T5857] usb 5-1: USB disconnect, device number 64 [ 553.358178][ T30] audit: type=1400 audit(1747517472.724:1361): avc: denied { accept } for pid=12777 comm="syz.4.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 553.407251][ T30] audit: type=1400 audit(1747517472.784:1362): avc: denied { bind } for pid=12817 comm="syz.0.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.434152][ T30] audit: type=1400 audit(1747517472.804:1363): avc: denied { listen } for pid=12817 comm="syz.0.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.453796][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.473206][T12824] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 553.481133][ T5866] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 553.502677][T12824] xt_addrtype: ipv6 does not support BROADCAST matching [ 553.530680][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.636427][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 553.819183][T12831] syz.3.1914 (12831): drop_caches: 2 [ 553.937568][ T5866] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 553.955789][ T5866] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 553.984964][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.055610][ T5866] usb 2-1: config 0 descriptor?? [ 554.113149][T12834] sg_write: data in/out 589948/1 bytes for SCSI command 0x1c-- guessing data in; [ 554.113149][T12834] program syz.4.1916 not setting count and/or reply_len properly [ 554.978633][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 554.978650][ T30] audit: type=1400 audit(1747517474.044:1367): avc: denied { ioctl } for pid=12835 comm="syz.0.1917" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 555.145394][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1920'. [ 556.976377][ T6013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.838853][ T5917] usb 2-1: USB disconnect, device number 56 [ 557.879648][ T30] audit: type=1326 audit(1747517477.244:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.3.1923" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3ac98e969 code=0x0 [ 558.130471][T12857] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 558.135407][ T30] audit: type=1400 audit(1747517477.514:1369): avc: denied { read } for pid=12869 comm="syz.4.1926" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 558.153741][T12872] fuse: Bad value for 'fd' [ 558.442948][T12873] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.1927' sets config #0 [ 558.542368][ T30] audit: type=1400 audit(1747517477.514:1370): avc: denied { open } for pid=12869 comm="syz.4.1926" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 558.839543][T12861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.862807][T12880] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 558.887967][T12861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.940833][ T30] audit: type=1400 audit(1747517478.264:1371): avc: denied { relabelto } for pid=12869 comm="syz.4.1926" name="369" dev="tmpfs" ino=1981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 558.973272][ T30] audit: type=1400 audit(1747517478.284:1372): avc: denied { associate } for pid=12869 comm="syz.4.1926" name="369" dev="tmpfs" ino=1981 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 559.169869][ T30] audit: type=1400 audit(1747517478.544:1373): avc: denied { mount } for pid=12884 comm="syz.2.1931" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 560.082668][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.110134][ T30] audit: type=1400 audit(1747517479.484:1374): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 560.191763][T12895] netlink: 'syz.1.1932': attribute type 2 has an invalid length. [ 560.236928][T12895] : entered promiscuous mode [ 560.740697][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 561.078216][ T30] audit: type=1400 audit(1747517480.294:1375): avc: denied { watch } for pid=12905 comm="syz.3.1937" path="/379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 561.261220][ T30] audit: type=1400 audit(1747517480.294:1376): avc: denied { watch_sb watch_reads } for pid=12905 comm="syz.3.1937" path="/379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 561.380124][T12910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1938'. [ 561.389159][T12910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1938'. [ 561.401405][T12910] batadv0: entered promiscuous mode [ 561.417215][T12910] batadv0: left promiscuous mode [ 561.479799][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'. [ 561.726525][T12913] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1939'. [ 561.801344][ T30] audit: type=1400 audit(1747517481.174:1377): avc: denied { write } for pid=5816 comm="syz-executor" name="369" dev="tmpfs" ino=1981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 561.835353][ T30] audit: type=1400 audit(1747517481.174:1378): avc: denied { remove_name } for pid=5816 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 561.867284][ T30] audit: type=1400 audit(1747517481.174:1379): avc: denied { rmdir } for pid=5816 comm="syz-executor" name="369" dev="tmpfs" ino=1981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 562.358381][T12925] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1942'. [ 562.492564][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.735995][T12927] syz.1.1943 (12927): drop_caches: 2 [ 562.741834][T12927] syz.1.1943 (12927): drop_caches: 2 [ 563.140896][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.869974][T12935] sp0: Synchronizing with TNC [ 564.401198][T12955] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1953'. [ 564.470476][ T5866] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 564.654167][ T5866] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 564.680403][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.707067][ T5866] usb 4-1: Product: syz [ 564.724848][ T5866] usb 4-1: Manufacturer: syz [ 564.739697][ T5866] usb 4-1: SerialNumber: syz [ 564.755343][ T30] audit: type=1400 audit(1747517484.134:1380): avc: denied { getopt } for pid=12967 comm="syz.4.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 564.890563][T12970] batadv1: entered promiscuous mode [ 565.150637][T11949] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 565.261580][ T30] audit: type=1400 audit(1747517484.244:1381): avc: denied { connect } for pid=12962 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 565.283518][ T5866] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 565.300394][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 565.334360][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 565.362593][ T5866] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 565.384936][ T5866] usb 4-1: media controller created [ 565.384993][T11949] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 565.411661][T11949] usb 5-1: config 0 has no interface number 0 [ 565.423939][T11949] usb 5-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=59.66 [ 565.433240][T11949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.452487][T11949] usb 5-1: config 0 descriptor?? [ 565.452934][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.462553][T11949] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 565.470349][ T30] audit: type=1400 audit(1747517484.834:1382): avc: denied { write } for pid=12972 comm="syz.0.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 565.516536][ T30] audit: type=1404 audit(1747517484.834:1383): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 565.533531][ T30] audit: type=1400 audit(1747517484.874:1384): avc: denied { create } for pid=12948 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 565.577002][ T30] audit: type=1400 audit(1747517484.884:1385): avc: denied { prog_load } for pid=12948 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 565.609388][ T5866] DVB: Unable to find symbol mt352_attach() [ 565.640368][ T5866] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 565.648653][ T30] audit: type=1400 audit(1747517484.884:1386): avc: denied { execmem } for pid=12948 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 565.674008][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 565.680161][ T30] audit: type=1400 audit(1747517484.914:1387): avc: denied { read } for pid=12972 comm="syz.0.1960" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 565.703302][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.704393][ T5866] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 565.725692][ T30] audit: type=1400 audit(1747517484.914:1388): avc: denied { read write } for pid=12972 comm="syz.0.1960" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 565.749055][ T30] audit: type=1400 audit(1747517484.954:1389): avc: denied { name_bind } for pid=12948 comm="syz.3.1951" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 565.752435][T11949] usb 5-1: USB disconnect, device number 65 [ 565.802797][ T30] audit: type=1400 audit(1747517484.984:1390): avc: denied { read write } for pid=12977 comm="syz.2.1954" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 565.843162][T12990] ip6gretap0: entered promiscuous mode [ 565.853037][T12990] macsec2: entered promiscuous mode [ 565.860937][T12990] ip6gretap0: left promiscuous mode [ 566.068622][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1968'. [ 566.240267][T13008] hsr0 speed is unknown, defaulting to 1000 [ 566.749863][T13030] macsec3: entered promiscuous mode [ 566.772447][T13030] ip6gretap0: entered promiscuous mode [ 566.781874][T13030] ip6gretap0: left promiscuous mode [ 566.992520][T13037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1982'. [ 567.002411][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 567.012371][T13037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1982'. [ 567.252813][ T5917] usb 4-1: USB disconnect, device number 53 [ 567.289458][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1983'. [ 567.310298][ T5917] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 567.550407][T13059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 567.934771][T13068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1994'. [ 568.136474][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 568.154988][T13075] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1995'. [ 568.164089][T13075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1995'. [ 568.200487][T13075] vlan1: entered allmulticast mode [ 568.246432][T13075] veth0_vlan: entered allmulticast mode [ 568.250905][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.205848][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2005'. [ 569.641759][T13115] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 569.648311][T13115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 569.668296][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.675634][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.687896][T13115] vhci_hcd vhci_hcd.0: Device attached [ 569.706506][T13121] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 569.710060][T13120] bridge0: entered allmulticast mode [ 569.713125][T13121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 569.762587][T13121] vhci_hcd vhci_hcd.0: Device attached [ 569.768907][T13115] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 569.775488][T13115] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 569.802077][T13124] bridge_slave_1: left allmulticast mode [ 569.817090][T13121] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 569.820491][T13124] bridge_slave_1: left promiscuous mode [ 569.836280][T13115] vhci_hcd vhci_hcd.0: Device attached [ 569.840765][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.859064][T13121] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 569.865678][T13121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 569.919473][T13121] vhci_hcd vhci_hcd.0: Device attached [ 569.936038][T13115] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 569.942675][T13115] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 569.950672][ T5857] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 569.964744][T13124] bridge_slave_0: left allmulticast mode [ 569.968386][T13121] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 569.980887][T13124] bridge_slave_0: left promiscuous mode [ 570.080483][T13115] vhci_hcd vhci_hcd.0: Device attached [ 570.119015][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.166439][T13121] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 570.233210][T13115] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 570.284920][T13121] vhci_hcd vhci_hcd.0: port 0 already used [ 570.284926][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 570.284940][ T30] audit: type=1400 audit(1747517489.634:1644): avc: denied { allowed } for pid=13137 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 570.320661][ T30] audit: type=1400 audit(1747517489.704:1645): avc: denied { allowed } for pid=13114 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 570.326110][T13122] vhci_hcd: connection closed [ 570.340852][T13118] vhci_hcd: connection reset by peer [ 570.350289][T13129] vhci_hcd: connection closed [ 570.352550][T13125] vhci_hcd: connection closed [ 570.377889][T13133] vhci_hcd: connection closed [ 570.394377][ T6014] vhci_hcd: stop threads [ 570.433666][ T6014] vhci_hcd: release socket [ 570.449378][ T6014] vhci_hcd: disconnect device [ 570.490262][ T6014] vhci_hcd: stop threads [ 570.491326][ T30] audit: type=1400 audit(1747517489.704:1646): avc: denied { execute } for pid=13114 comm="syz.0.2010" path="/427/cpu.stat" dev="tmpfs" ino=2283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 570.517557][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.523955][ T30] audit: type=1400 audit(1747517489.734:1647): avc: denied { read } for pid=13137 comm="syz.3.2014" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 570.546649][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.553593][ T30] audit: type=1400 audit(1747517489.734:1648): avc: denied { read write } for pid=13137 comm="syz.3.2014" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 570.587084][ T6014] vhci_hcd: release socket [ 570.596482][ T6014] vhci_hcd: disconnect device [ 570.614744][ T6014] vhci_hcd: stop threads [ 570.637710][ T6014] vhci_hcd: release socket [ 570.672629][ T30] audit: type=1400 audit(1747517490.054:1649): avc: denied { create } for pid=13142 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 570.699993][ T30] audit: type=1400 audit(1747517490.084:1650): avc: denied { prog_load } for pid=13142 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 570.705624][ T6014] vhci_hcd: disconnect device [ 570.719486][ T30] audit: type=1400 audit(1747517490.084:1651): avc: denied { map_create } for pid=13142 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 570.743453][ T30] audit: type=1400 audit(1747517490.084:1652): avc: denied { read } for pid=13142 comm="syz.2.2015" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 570.766101][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.772525][ T30] audit: type=1400 audit(1747517490.084:1653): avc: denied { create } for pid=13142 comm="syz.2.2015" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 570.803923][ T6014] vhci_hcd: stop threads [ 570.814178][ T6014] vhci_hcd: release socket [ 570.829603][ T6014] vhci_hcd: disconnect device [ 570.851541][ T6014] vhci_hcd: stop threads [ 570.855987][ T6014] vhci_hcd: release socket [ 570.870723][ T6014] vhci_hcd: disconnect device [ 571.175906][T13161] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 571.184934][T13161] syzkaller1: linktype set to 780 [ 571.451613][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.463440][T13190] __nla_validate_parse: 1 callbacks suppressed [ 572.463458][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2032'. [ 572.607160][T13194] sp0: Synchronizing with TNC [ 573.292262][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.696368][T13225] sp0: Synchronizing with TNC [ 575.028437][T13264] sp0: Synchronizing with TNC [ 575.130530][ T5857] vhci_hcd: vhci_device speed not set [ 575.347632][ T30] kauditd_printk_skb: 465 callbacks suppressed [ 575.347646][ T30] audit: type=1400 audit(1747517494.724:2119): avc: denied { write } for pid=13274 comm="syz.2.2065" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 575.430601][ T30] audit: type=1400 audit(1747517494.774:2120): avc: denied { read } for pid=13274 comm="syz.2.2065" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 575.477936][ T30] audit: type=1400 audit(1747517494.774:2121): avc: denied { create } for pid=13274 comm="syz.2.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 575.501098][ T30] audit: type=1400 audit(1747517494.774:2122): avc: denied { create } for pid=13274 comm="syz.2.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=0 [ 575.521541][ T30] audit: type=1400 audit(1747517494.774:2123): avc: denied { prog_load } for pid=13274 comm="syz.2.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 575.541106][ T30] audit: type=1400 audit(1747517494.774:2124): avc: denied { create } for pid=13274 comm="syz.2.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 575.561056][ T30] audit: type=1400 audit(1747517494.774:2125): avc: denied { create } for pid=13274 comm="syz.2.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 575.606114][ T30] audit: type=1400 audit(1747517494.844:2126): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 575.833920][ T30] audit: type=1400 audit(1747517494.844:2127): avc: denied { write } for pid=13274 comm="syz.2.2065" name="dev" dev="proc" ino=4026532981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 575.860698][ T30] audit: type=1400 audit(1747517494.904:2128): avc: denied { execmem } for pid=13277 comm="syz.3.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 576.099577][T13298] sp0: Synchronizing with TNC [ 576.520498][ T5917] usb usb34-port1: attempt power cycle [ 576.542447][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.963459][T13333] sp0: Synchronizing with TNC [ 577.123263][ T5917] usb usb34-port1: unable to enumerate USB device [ 577.162334][T13346] macsec3: entered promiscuous mode [ 577.167553][T13346] ip6gretap0: entered promiscuous mode [ 577.174342][T13346] ip6gretap0: left promiscuous mode [ 577.577931][T13369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2101'. [ 577.587095][T13369] netlink: 'syz.4.2101': attribute type 3 has an invalid length. [ 578.794180][T13406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2117'. [ 578.803465][T13406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2117'. [ 579.039485][T13410] netlink: 'syz.0.2119': attribute type 10 has an invalid length. [ 579.131104][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.741128][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 580.357687][ T30] kauditd_printk_skb: 441 callbacks suppressed [ 580.357703][ T30] audit: type=1400 audit(1747517499.734:2570): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 580.404788][ T30] audit: type=1400 audit(1747517499.784:2571): avc: denied { prog_load } for pid=13460 comm="syz.3.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 580.429502][ T30] audit: type=1400 audit(1747517499.784:2572): avc: denied { read write } for pid=13460 comm="syz.3.2138" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 580.456122][ T30] audit: type=1400 audit(1747517499.784:2573): avc: denied { mounton } for pid=13460 comm="syz.3.2138" path="/416/file0" dev="tmpfs" ino=2213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 580.480131][ T30] audit: type=1400 audit(1747517499.784:2574): avc: denied { map_create } for pid=13463 comm="syz.1.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 580.500230][ T30] audit: type=1400 audit(1747517499.784:2575): avc: denied { create } for pid=13463 comm="syz.1.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 580.521114][ T30] audit: type=1400 audit(1747517499.784:2576): avc: denied { allowed } for pid=13463 comm="syz.1.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 580.563913][T13468] netlink: 'syz.4.2141': attribute type 10 has an invalid length. [ 580.564956][ T30] audit: type=1400 audit(1747517499.864:2577): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 580.596309][ T30] audit: type=1400 audit(1747517499.884:2578): avc: denied { prog_load } for pid=13465 comm="syz.4.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 580.642041][ T30] audit: type=1400 audit(1747517499.884:2579): avc: denied { create } for pid=13465 comm="syz.4.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 580.669884][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2143'. [ 580.680861][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2143'. [ 582.098574][T13535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2167'. [ 582.108114][T13535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2167'. [ 582.342451][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.548390][T13552] macsec3: entered promiscuous mode [ 582.651360][T13552] ip6gretap0: entered promiscuous mode [ 582.785109][T13552] ip6gretap0: left promiscuous mode [ 583.115408][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 583.405945][T13584] FAULT_INJECTION: forcing a failure. [ 583.405945][T13584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.480688][T13584] CPU: 1 UID: 0 PID: 13584 Comm: syz.2.2188 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 583.480716][T13584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.480727][T13584] Call Trace: [ 583.480732][T13584] [ 583.480740][T13584] dump_stack_lvl+0x16c/0x1f0 [ 583.480770][T13584] should_fail_ex+0x512/0x640 [ 583.480798][T13584] _copy_from_user+0x2e/0xd0 [ 583.480825][T13584] kstrtouint_from_user+0xd6/0x1d0 [ 583.480846][T13584] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 583.480864][T13584] ? __lock_acquire+0xaa4/0x1ba0 [ 583.480904][T13584] proc_fail_nth_write+0x83/0x250 [ 583.480931][T13584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 583.480964][T13584] vfs_write+0x25f/0x1180 [ 583.480989][T13584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 583.481019][T13584] ? __pfx___mutex_lock+0x10/0x10 [ 583.481045][T13584] ? __pfx_vfs_write+0x10/0x10 [ 583.481078][T13584] ? __fget_files+0x20e/0x3c0 [ 583.481104][T13584] ksys_write+0x12a/0x240 [ 583.481129][T13584] ? __pfx_ksys_write+0x10/0x10 [ 583.481153][T13584] ? rcu_is_watching+0x12/0xc0 [ 583.481186][T13584] do_syscall_64+0xcd/0x260 [ 583.481213][T13584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.481231][T13584] RIP: 0033:0x7fb5e878d41f [ 583.481244][T13584] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 583.481261][T13584] RSP: 002b:00007fb5e9623030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 583.481278][T13584] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb5e878d41f [ 583.481289][T13584] RDX: 0000000000000001 RSI: 00007fb5e96230a0 RDI: 0000000000000006 [ 583.481299][T13584] RBP: 00007fb5e9623090 R08: 0000000000000000 R09: 0000000000000000 [ 583.481310][T13584] R10: 0000000000000002 R11: 0000000000000293 R12: 0000000000000001 [ 583.481320][T13584] R13: 0000000000000000 R14: 00007fb5e89b6080 R15: 00007ffc96e48438 [ 583.481346][T13584] [ 584.162062][T13600] ip6gretap0: entered promiscuous mode [ 584.199166][T13600] macsec2: entered promiscuous mode [ 584.222626][T13600] ip6gretap0: left promiscuous mode [ 584.375357][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'. [ 584.426014][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 584.488290][T13612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13612 comm=syz.2.2198 [ 584.535680][T13612] netlink: 'syz.2.2198': attribute type 19 has an invalid length. [ 584.564061][T13612] veth3: entered promiscuous mode [ 584.686057][T13628] netlink: 552 bytes leftover after parsing attributes in process `syz.4.2204'. [ 584.704831][T13628] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 584.910028][ T987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 585.130445][ T5810] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 585.132578][T13571] Bluetooth: hci5: command 0xfc11 tx timeout [ 585.573340][ T30] kauditd_printk_skb: 398 callbacks suppressed [ 585.573356][ T30] audit: type=1400 audit(1747517504.954:2978): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 585.623436][ T30] audit: type=1400 audit(1747517504.964:2979): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 585.662612][ T30] audit: type=1400 audit(1747517505.044:2980): avc: denied { create } for pid=13642 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 585.701889][ T30] audit: type=1400 audit(1747517505.074:2981): avc: denied { allowed } for pid=13642 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 585.724363][T13643] ip6gretap0: entered promiscuous mode [ 585.730275][ T30] audit: type=1400 audit(1747517505.074:2982): avc: denied { create } for pid=13642 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 585.750467][ T30] audit: type=1400 audit(1747517505.074:2983): avc: denied { create } for pid=13642 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 585.767307][T13643] macsec2: entered promiscuous mode [ 585.771318][ T30] audit: type=1400 audit(1747517505.074:2984): avc: denied { create } for pid=13642 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 585.823235][T13643] ip6gretap0: left promiscuous mode [ 585.917109][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2211'. [ 585.966743][ T30] audit: type=1400 audit(1747517505.234:2985): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 585.979323][T13648] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2210'. [ 586.044616][ T30] audit: type=1400 audit(1747517505.294:2986): avc: denied { create } for pid=13644 comm="syz.2.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 586.149161][ T30] audit: type=1400 audit(1747517505.344:2987): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 586.838845][T13651] ceph: No mds server is up or the cluster is laggy [ 587.687405][T13675] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 588.104157][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.447304][T13737] FAULT_INJECTION: forcing a failure. [ 589.447304][T13737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.461435][T13737] CPU: 1 UID: 0 PID: 13737 Comm: syz.1.2242 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 589.461460][T13737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 589.461475][T13737] Call Trace: [ 589.461481][T13737] [ 589.461488][T13737] dump_stack_lvl+0x16c/0x1f0 [ 589.461519][T13737] should_fail_ex+0x512/0x640 [ 589.461547][T13737] _copy_to_user+0x32/0xd0 [ 589.461574][T13737] simple_read_from_buffer+0xcb/0x170 [ 589.461601][T13737] proc_fail_nth_read+0x197/0x270 [ 589.461628][T13737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.461656][T13737] ? rw_verify_area+0xcf/0x680 [ 589.461678][T13737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.461704][T13737] vfs_read+0x1e1/0xc70 [ 589.461733][T13737] ? __pfx___mutex_lock+0x10/0x10 [ 589.461762][T13737] ? __pfx_vfs_read+0x10/0x10 [ 589.461794][T13737] ? __fget_files+0x20e/0x3c0 [ 589.461818][T13737] ksys_read+0x12a/0x240 [ 589.461843][T13737] ? __pfx_ksys_read+0x10/0x10 [ 589.461875][T13737] do_syscall_64+0xcd/0x260 [ 589.461902][T13737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.461920][T13737] RIP: 0033:0x7fdb47f8d37c [ 589.461934][T13737] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 589.461950][T13737] RSP: 002b:00007fdb48e83030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 589.461967][T13737] RAX: ffffffffffffffda RBX: 00007fdb481b6080 RCX: 00007fdb47f8d37c [ 589.461979][T13737] RDX: 000000000000000f RSI: 00007fdb48e830a0 RDI: 0000000000000004 [ 589.461989][T13737] RBP: 00007fdb48e83090 R08: 0000000000000000 R09: 0000000000000000 [ 589.461999][T13737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.462009][T13737] R13: 0000000000000000 R14: 00007fdb481b6080 R15: 00007ffe3bd6b2b8 [ 589.462033][T13737] [ 589.918467][T13744] mkiss: ax0: crc mode is auto. [ 590.114283][T13749] netlink: 'syz.0.2247': attribute type 10 has an invalid length. [ 590.526047][T13751] FAULT_INJECTION: forcing a failure. [ 590.526047][T13751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.539355][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.1.2248 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 590.539377][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 590.539386][T13751] Call Trace: [ 590.539390][T13751] [ 590.539394][T13751] dump_stack_lvl+0x16c/0x1f0 [ 590.539414][T13751] should_fail_ex+0x512/0x640 [ 590.539434][T13751] _copy_to_user+0x32/0xd0 [ 590.539452][T13751] simple_read_from_buffer+0xcb/0x170 [ 590.539471][T13751] proc_fail_nth_read+0x197/0x270 [ 590.539489][T13751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 590.539506][T13751] ? rw_verify_area+0xcf/0x680 [ 590.539521][T13751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 590.539537][T13751] vfs_read+0x1e1/0xc70 [ 590.539555][T13751] ? __pfx___mutex_lock+0x10/0x10 [ 590.539572][T13751] ? __pfx_vfs_read+0x10/0x10 [ 590.539592][T13751] ? __fget_files+0x20e/0x3c0 [ 590.539606][T13751] ksys_read+0x12a/0x240 [ 590.539623][T13751] ? __pfx_ksys_read+0x10/0x10 [ 590.539643][T13751] do_syscall_64+0xcd/0x260 [ 590.539660][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.539672][T13751] RIP: 0033:0x7fdb47f8d37c [ 590.539681][T13751] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 590.539692][T13751] RSP: 002b:00007fdb48ea4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 590.539703][T13751] RAX: ffffffffffffffda RBX: 00007fdb481b5fa0 RCX: 00007fdb47f8d37c [ 590.539709][T13751] RDX: 000000000000000f RSI: 00007fdb48ea40a0 RDI: 0000000000000006 [ 590.539716][T13751] RBP: 00007fdb48ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 590.539722][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.539728][T13751] R13: 0000000000000000 R14: 00007fdb481b5fa0 R15: 00007ffe3bd6b2b8 [ 590.539742][T13751] [ 590.725103][ T987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.750070][ T30] kauditd_printk_skb: 198 callbacks suppressed [ 590.750081][ T30] audit: type=1400 audit(1747517510.124:3186): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 590.785682][ T30] audit: type=1400 audit(1747517510.164:3187): avc: denied { prog_load } for pid=13752 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 590.805702][ T30] audit: type=1400 audit(1747517510.184:3188): avc: denied { read } for pid=13752 comm="syz.1.2249" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 590.830493][ T30] audit: type=1400 audit(1747517510.204:3189): avc: denied { create } for pid=13752 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 590.855907][ T30] audit: type=1400 audit(1747517510.234:3190): avc: denied { read } for pid=13752 comm="syz.1.2249" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 590.897884][ T30] audit: type=1400 audit(1747517510.264:3191): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 590.925147][ T30] audit: type=1400 audit(1747517510.304:3192): avc: denied { create } for pid=13754 comm="syz.0.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 590.948219][ T30] audit: type=1400 audit(1747517510.304:3193): avc: denied { create } for pid=13754 comm="syz.0.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 590.970668][ T30] audit: type=1400 audit(1747517510.334:3194): avc: denied { prog_load } for pid=13754 comm="syz.0.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 590.992102][ T30] audit: type=1400 audit(1747517510.334:3195): avc: denied { mounton } for pid=13754 comm="syz.0.2250" path="/466/bus" dev="tmpfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 591.048267][T13753] sp0: Synchronizing with TNC [ 591.378894][T13780] netlink: 'syz.4.2260': attribute type 10 has an invalid length. [ 592.397493][T13803] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 592.795396][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2275'. [ 593.607089][T13852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2288'. [ 593.851322][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.054775][T13869] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2295'. [ 594.313770][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2299'. [ 595.822916][ T30] kauditd_printk_skb: 702 callbacks suppressed [ 595.822933][ T30] audit: type=1400 audit(1747517515.204:3777): avc: denied { create } for pid=13923 comm="syz.1.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 596.095013][ T30] audit: type=1400 audit(1747517515.464:3778): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 596.166882][ T30] audit: type=1400 audit(1747517515.534:3779): avc: denied { create } for pid=13928 comm="syz.0.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 596.230546][ T30] audit: type=1400 audit(1747517515.534:3780): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 596.300403][ T30] audit: type=1400 audit(1747517515.544:3781): avc: denied { create } for pid=13928 comm="syz.0.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 596.336893][T13933] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.342866][T13931] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.349923][T13931] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 [ 596.360440][ T30] audit: type=1400 audit(1747517515.614:3782): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 596.368506][T13933] audit: audit_lost=43 audit_rate_limit=0 audit_backlog_limit=64 [ 596.411438][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.876947][T13956] hsr0 speed is unknown, defaulting to 1000 [ 596.914393][T13959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2326'. [ 596.975839][T13960] netlink: 'syz.0.2326': attribute type 4 has an invalid length. [ 598.073248][T13983] ip6gretap0: entered promiscuous mode [ 598.082877][T13983] macsec2: entered promiscuous mode [ 598.226947][T13983] ip6gretap0: left promiscuous mode [ 598.803241][T13995] sp0: Synchronizing with TNC [ 598.973229][ T987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 599.609649][T14024] ip6gretap0: entered promiscuous mode [ 599.629649][T14024] macsec2: entered promiscuous mode [ 599.654273][T14024] ip6gretap0: left promiscuous mode [ 600.391721][T14060] ip6gretap0: entered promiscuous mode [ 600.411360][T14060] macsec2: entered promiscuous mode [ 600.573946][T14060] ip6gretap0: left promiscuous mode [ 600.834410][ T30] kauditd_printk_skb: 305 callbacks suppressed [ 600.834425][ T30] audit: type=1400 audit(1747517520.214:4086): avc: denied { read } for pid=14055 comm="syz.4.2360" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 600.835424][T14071] netlink: 'syz.4.2360': attribute type 2 has an invalid length. [ 600.871763][ T30] audit: type=1400 audit(1747517520.214:4087): avc: denied { create } for pid=14055 comm="syz.4.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 600.926685][ T30] audit: type=1400 audit(1747517520.304:4088): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 601.083480][ T30] audit: type=1400 audit(1747517520.344:4089): avc: denied { read } for pid=14055 comm="syz.4.2360" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 601.187811][ T30] audit: type=1400 audit(1747517520.474:4090): avc: denied { create } for pid=14073 comm="syz.1.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 601.272587][ T30] audit: type=1400 audit(1747517520.574:4091): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 601.332635][ T30] audit: type=1400 audit(1747517520.624:4092): avc: denied { read write } for pid=14075 comm="syz.0.2365" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 601.779969][ T30] audit: type=1400 audit(1747517520.624:4093): avc: denied { create } for pid=14078 comm="syz.1.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 601.817378][ T30] audit: type=1400 audit(1747517520.624:4094): avc: denied { execmem } for pid=14078 comm="syz.1.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 601.839321][ T30] audit: type=1400 audit(1747517520.634:4095): avc: denied { create } for pid=14078 comm="syz.1.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 602.076789][T14096] syz.3.2374 (14096): drop_caches: 2 [ 602.174758][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.037607][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 603.234957][T14133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2388'. [ 603.418617][T14141] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 604.731163][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.753024][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 605.851282][ T30] kauditd_printk_skb: 292 callbacks suppressed [ 605.851300][ T30] audit: type=1400 audit(1747517525.174:4388): avc: denied { create } for pid=14218 comm="syz.1.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 605.914237][ T30] audit: type=1400 audit(1747517525.174:4389): avc: denied { create } for pid=14218 comm="syz.1.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 605.974981][ T30] audit: type=1400 audit(1747517525.174:4390): avc: denied { create } for pid=14218 comm="syz.1.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 606.160728][ T30] audit: type=1400 audit(1747517525.174:4391): avc: denied { create } for pid=14218 comm="syz.1.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 606.335290][ T30] audit: type=1400 audit(1747517525.224:4392): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 606.478064][ T30] audit: type=1400 audit(1747517525.264:4393): avc: denied { write } for pid=14226 comm="syz.0.2423" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 606.589877][ T30] audit: type=1400 audit(1747517525.294:4394): avc: denied { read } for pid=14228 comm="syz.1.2424" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 606.658217][ T30] audit: type=1400 audit(1747517525.314:4395): avc: denied { create } for pid=14228 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 606.726426][ T30] audit: type=1400 audit(1747517525.314:4396): avc: denied { prog_load } for pid=14228 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 606.766070][ T30] audit: type=1400 audit(1747517525.314:4397): avc: denied { create } for pid=14228 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 607.930709][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.277977][T14367] syz.3.2480 (14367): drop_caches: 2 [ 610.492354][ T3494] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.633529][T14389] hsr0 speed is unknown, defaulting to 1000 [ 610.684109][T14390] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2489'. [ 610.729902][T14390] netlink: 'syz.3.2489': attribute type 4 has an invalid length. [ 610.897764][ T30] kauditd_printk_skb: 317 callbacks suppressed [ 610.897782][ T30] audit: type=1400 audit(1747517530.254:4715): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 610.989127][ T30] audit: type=1400 audit(1747517530.294:4716): avc: denied { create } for pid=14397 comm="syz.0.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 611.039812][ T30] audit: type=1400 audit(1747517530.294:4717): avc: denied { write } for pid=14397 comm="syz.0.2491" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 611.070373][ T30] audit: type=1400 audit(1747517530.294:4718): avc: denied { prog_load } for pid=14397 comm="syz.0.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 611.117838][ T30] audit: type=1400 audit(1747517530.294:4719): avc: denied { map_create } for pid=14397 comm="syz.0.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 611.154570][ T30] audit: type=1400 audit(1747517530.294:4720): avc: denied { create } for pid=14386 comm="syz.4.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 611.275563][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2498'. [ 611.409131][ T30] audit: type=1400 audit(1747517530.294:4721): avc: denied { prog_load } for pid=14386 comm="syz.4.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 611.469174][ T30] audit: type=1400 audit(1747517530.294:4722): avc: denied { read write } for pid=14386 comm="syz.4.2488" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 611.500553][ T30] audit: type=1400 audit(1747517530.294:4723): avc: denied { create } for pid=14397 comm="syz.0.2491" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 611.549187][ T30] audit: type=1400 audit(1747517530.324:4724): avc: denied { read write } for pid=14400 comm="syz.3.2492" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 612.072072][T14437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2503'. [ 612.075233][T14433] hsr0 speed is unknown, defaulting to 1000 [ 612.094322][T14437] netlink: 'syz.4.2503': attribute type 4 has an invalid length. [ 612.412100][T13571] Bluetooth: hci4: command 0x0406 tx timeout [ 612.776486][T14474] hsr0 speed is unknown, defaulting to 1000 [ 612.928106][T14475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2519'. [ 612.949519][T14475] netlink: 'syz.0.2519': attribute type 4 has an invalid length. [ 613.566910][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2527'. [ 613.576066][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2527'. [ 613.693558][ T987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.332017][ T987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.933863][T14539] FAULT_INJECTION: forcing a failure. [ 614.933863][T14539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.984501][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 615.031050][T14539] CPU: 1 UID: 0 PID: 14539 Comm: syz.4.2541 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 615.031079][T14539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.031091][T14539] Call Trace: [ 615.031097][T14539] [ 615.031104][T14539] dump_stack_lvl+0x16c/0x1f0 [ 615.031136][T14539] should_fail_ex+0x512/0x640 [ 615.031165][T14539] _copy_to_user+0x32/0xd0 [ 615.031194][T14539] simple_read_from_buffer+0xcb/0x170 [ 615.031222][T14539] proc_fail_nth_read+0x197/0x270 [ 615.031250][T14539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.031277][T14539] ? rw_verify_area+0xcf/0x680 [ 615.031299][T14539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.031325][T14539] vfs_read+0x1e1/0xc70 [ 615.031354][T14539] ? __pfx___mutex_lock+0x10/0x10 [ 615.031378][T14539] ? __pfx_vfs_read+0x10/0x10 [ 615.031411][T14539] ? __fget_files+0x20e/0x3c0 [ 615.031435][T14539] ksys_read+0x12a/0x240 [ 615.031459][T14539] ? __pfx_ksys_read+0x10/0x10 [ 615.031499][T14539] do_syscall_64+0xcd/0x260 [ 615.031527][T14539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.031544][T14539] RIP: 0033:0x7f626598d37c [ 615.031558][T14539] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 615.031574][T14539] RSP: 002b:00007f6266791030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 615.031591][T14539] RAX: ffffffffffffffda RBX: 00007f6265bb5fa0 RCX: 00007f626598d37c [ 615.031602][T14539] RDX: 000000000000000f RSI: 00007f62667910a0 RDI: 0000000000000004 [ 615.031613][T14539] RBP: 00007f6266791090 R08: 0000000000000000 R09: 0000000000000000 [ 615.031623][T14539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.031633][T14539] R13: 0000000000000000 R14: 00007f6265bb5fa0 R15: 00007ffe391a5108 [ 615.031659][T14539] [ 615.357171][T14549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2545'. [ 615.409718][T14549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2545'. [ 615.499539][T14555] netlink: 'syz.2.2547': attribute type 10 has an invalid length. [ 616.053782][ T30] kauditd_printk_skb: 297 callbacks suppressed [ 616.053795][ T30] audit: type=1400 audit(1747517535.434:5022): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 616.157278][ T30] audit: type=1400 audit(1747517535.474:5023): avc: denied { read } for pid=14563 comm="syz.1.2550" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 616.189857][ T30] audit: type=1400 audit(1747517535.474:5024): avc: denied { create } for pid=14563 comm="syz.1.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 616.246246][ T30] audit: type=1400 audit(1747517535.504:5025): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 616.251121][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.347544][ T30] audit: type=1400 audit(1747517535.504:5026): avc: denied { bpf } for pid=14566 comm="syz.4.2551" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 616.429311][T14580] netlink: 'syz.0.2556': attribute type 2 has an invalid length. [ 616.435869][ T30] audit: type=1400 audit(1747517535.504:5027): avc: denied { prog_load } for pid=14566 comm="syz.4.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 616.468991][T14580] xt_CT: No such helper "netbios-ns" [ 616.598867][ T30] audit: type=1400 audit(1747517535.524:5028): avc: denied { read append } for pid=14563 comm="syz.1.2550" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 616.649719][ T30] audit: type=1400 audit(1747517535.534:5029): avc: denied { create } for pid=14568 comm="syz.0.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 616.675931][ T30] audit: type=1400 audit(1747517535.534:5030): avc: denied { write } for pid=14568 comm="syz.0.2552" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 616.746216][ T30] audit: type=1400 audit(1747517535.534:5031): avc: denied { create } for pid=14568 comm="syz.0.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 616.867711][T14597] netlink: 'syz.1.2564': attribute type 10 has an invalid length. [ 617.347702][T14623] hsr0 speed is unknown, defaulting to 1000 [ 618.688790][T14664] netlink: 'syz.2.2591': attribute type 10 has an invalid length. [ 619.451227][ T987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.091440][ T987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.362741][T14706] netlink: 'syz.1.2608': attribute type 10 has an invalid length. [ 620.611783][T14711] ip6gretap0: entered promiscuous mode [ 620.617475][T14711] macsec2: entered promiscuous mode [ 620.629400][T14711] ip6gretap0: left promiscuous mode [ 620.665754][T14713] syz.4.2604 (14713): drop_caches: 2 [ 620.734330][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.784748][T14717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2611'. [ 620.795892][T14717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2611'. [ 620.832385][T14719] netlink: 'syz.2.2612': attribute type 39 has an invalid length. [ 620.939201][T14722] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 621.065759][ T30] kauditd_printk_skb: 350 callbacks suppressed [ 621.065773][ T30] audit: type=1400 audit(1747517540.444:5379): avc: denied { map_create } for pid=14723 comm="syz.3.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 621.092498][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.107627][ T30] audit: type=1400 audit(1747517540.484:5380): avc: denied { read } for pid=14728 comm="syz.1.2616" dev="nsfs" ino=4026532800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 621.128819][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.164334][ T30] audit: type=1400 audit(1747517540.484:5381): avc: denied { create } for pid=14728 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 621.211804][ T30] audit: type=1400 audit(1747517540.484:5382): avc: denied { prog_load } for pid=14723 comm="syz.3.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 621.322046][ T30] audit: type=1400 audit(1747517540.484:5383): avc: denied { read } for pid=14723 comm="syz.3.2614" dev="nsfs" ino=4026533379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 621.343247][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.349434][ T30] audit: type=1400 audit(1747517540.484:5384): avc: denied { read } for pid=14723 comm="syz.3.2614" dev="nsfs" ino=4026533379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 621.374051][ T30] audit: type=1400 audit(1747517540.484:5385): avc: denied { create } for pid=14723 comm="syz.3.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 621.394559][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.404712][ T30] audit: type=1400 audit(1747517540.484:5386): avc: denied { read } for pid=14723 comm="syz.3.2614" name="v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 621.427799][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.449748][ T30] audit: type=1400 audit(1747517540.524:5387): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 621.499945][T14735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14735 comm=syz.0.2618 [ 621.514123][ T30] audit: type=1400 audit(1747517540.824:5388): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 621.612961][T14740] ip6gretap0: entered promiscuous mode [ 621.618678][T14740] macsec2: entered promiscuous mode [ 621.626644][T14740] ip6gretap0: left promiscuous mode [ 621.770694][T14753] netlink: 'syz.0.2624': attribute type 10 has an invalid length. [ 621.787698][T14753] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 621.798683][T14753] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 621.811236][T14753] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 621.849591][T14757] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 621.860799][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 622.011808][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.286450][T14784] ip6gretap0: entered promiscuous mode [ 623.292077][T14784] macsec0: entered promiscuous mode [ 623.298847][T14784] ip6gretap0: left promiscuous mode [ 623.930791][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 623.935580][T13571] Bluetooth: hci5: command 0x1003 tx timeout [ 623.946537][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.212719][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 625.212740][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 625.917555][T14853] sp0: Synchronizing with TNC [ 626.077902][ T30] kauditd_printk_skb: 273 callbacks suppressed [ 626.077918][ T30] audit: type=1400 audit(1747517545.454:5662): avc: denied { create } for pid=14859 comm="syz.3.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 626.117396][ T30] audit: type=1400 audit(1747517545.454:5663): avc: denied { prog_load } for pid=14860 comm="syz.2.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 626.140826][ T30] audit: type=1400 audit(1747517545.494:5664): avc: denied { allowed } for pid=14860 comm="syz.2.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 626.165886][ T30] audit: type=1400 audit(1747517545.494:5665): avc: denied { prog_load } for pid=14860 comm="syz.2.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 626.191203][ T30] audit: type=1400 audit(1747517545.524:5666): avc: denied { create } for pid=14857 comm="syz.0.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 626.214583][ T30] audit: type=1400 audit(1747517545.544:5667): avc: denied { mounton } for pid=14857 comm="syz.0.2667" path="/567/bus" dev="tmpfs" ino=3022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 626.242847][ T30] audit: type=1400 audit(1747517545.544:5668): avc: denied { read write } for pid=14857 comm="syz.0.2667" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 626.272374][ T30] audit: type=1400 audit(1747517545.624:5669): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 626.304964][ T30] audit: type=1400 audit(1747517545.684:5670): avc: denied { read write } for pid=14864 comm="syz.3.2670" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 626.361082][ T30] audit: type=1400 audit(1747517545.724:5671): avc: denied { read } for pid=14864 comm="syz.3.2670" name="vsock" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 626.580204][ T987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.525160][T14886] syz.4.2677 (14886): drop_caches: 2 [ 627.771613][ T987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 660.960294][ C0] sched: DL replenish lagged too much [ 734.450264][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 734.457237][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5820/1:b..l P14930/1:b..l [ 734.466876][ C0] rcu: (detected by 0, t=10502 jiffies, g=57329, q=138 ncpus=2) [ 734.474584][ C0] task:syz.0.2692 state:R running task stack:26536 pid:14930 tgid:14927 ppid:5811 task_flags:0x400040 flags:0x00004000 [ 734.488586][ C0] Call Trace: [ 734.491866][ C0] [ 734.494794][ C0] __schedule+0x116f/0x5de0 [ 734.499301][ C0] ? sched_clock+0x38/0x60 [ 734.503731][ C0] ? __pfx___schedule+0x10/0x10 [ 734.508592][ C0] ? mark_held_locks+0x49/0x80 [ 734.513367][ C0] preempt_schedule_irq+0x51/0x90 [ 734.518393][ C0] irqentry_exit+0x36/0x90 [ 734.522805][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 734.528256][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 734.534314][ C0] Code: 46 5f 55 00 48 89 df 5b e9 9d bb 5a 00 be 03 00 00 00 5b e9 82 df 15 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 c8 19 e9 11 65 8b 05 d9 19 e9 [ 734.553916][ C0] RSP: 0018:ffffc900040ff798 EFLAGS: 00000202 [ 734.559980][ C0] RAX: ffffffff820cda37 RBX: 00002000005d5000 RCX: ffffffff820cda58 [ 734.567941][ C0] RDX: ffff888035654880 RSI: 0000000000000000 RDI: 0000000000000005 [ 734.575905][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 734.583871][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900040ff818 [ 734.591831][ C0] R13: ffff88807464e010 R14: ffffc900040ffa60 R15: 0000000000000000 [ 734.599821][ C0] ? ___pte_offset_map+0x37/0x540 [ 734.604851][ C0] ? ___pte_offset_map+0x58/0x540 [ 734.609891][ C0] ? ___pte_offset_map+0x58/0x540 [ 734.614920][ C0] ___pte_offset_map+0x27b/0x540 [ 734.619873][ C0] __pte_offset_map_lock+0x8d/0x2f0 [ 734.625068][ C0] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 734.630876][ C0] ? __folio_throttle_swaprate+0xb3/0x2f0 [ 734.636593][ C0] do_pte_missing+0x24c4/0x3fb0 [ 734.641459][ C0] __handle_mm_fault+0x103d/0x2a40 [ 734.646580][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 734.652041][ C0] ? __pte_offset_map_lock+0x155/0x2f0 [ 734.657497][ C0] ? find_held_lock+0x2b/0x80 [ 734.662169][ C0] ? find_held_lock+0x2b/0x80 [ 734.666861][ C0] handle_mm_fault+0x3fe/0xad0 [ 734.671636][ C0] __get_user_pages+0x771/0x36f0 [ 734.676583][ C0] ? __pfx_mt_find+0x10/0x10 [ 734.681179][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 734.686561][ C0] populate_vma_page_range+0x278/0x3a0 [ 734.692019][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 734.697996][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 734.703808][ C0] __mm_populate+0x1d8/0x380 [ 734.708399][ C0] ? __pfx___mm_populate+0x10/0x10 [ 734.713513][ C0] ? up_write+0x1b2/0x520 [ 734.717841][ C0] do_mlock+0x448/0x810 [ 734.721993][ C0] ? __pfx_do_mlock+0x10/0x10 [ 734.726661][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 734.731599][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 734.736543][ C0] ? xfd_validate_state+0x5d/0x180 [ 734.741650][ C0] ? rcu_is_watching+0x12/0xc0 [ 734.746417][ C0] __x64_sys_mlock+0x59/0x80 [ 734.751002][ C0] do_syscall_64+0xcd/0x260 [ 734.755508][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.761394][ C0] RIP: 0033:0x7fa74198e969 [ 734.765799][ C0] RSP: 002b:00007fa73f7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 734.774206][ C0] RAX: ffffffffffffffda RBX: 00007fa741bb6160 RCX: 00007fa74198e969 [ 734.782167][ C0] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 734.790130][ C0] RBP: 00007fa741a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 734.798094][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.806054][ C0] R13: 0000000000000000 R14: 00007fa741bb6160 R15: 00007ffc6caa8ec8 [ 734.814029][ C0] [ 734.817041][ C0] task:syz-executor state:R running task stack:24040 pid:5820 tgid:5820 ppid:5805 task_flags:0x400140 flags:0x00000000 [ 734.830520][ C0] Call Trace: [ 734.833793][ C0] [ 734.836722][ C0] __schedule+0x116f/0x5de0 [ 734.841222][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 734.846176][ C0] ? __pfx___schedule+0x10/0x10 [ 734.851023][ C0] ? page_table_check_set+0x96f/0xb50 [ 734.856405][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 734.861440][ C0] ? find_held_lock+0x2b/0x80 [ 734.866128][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 734.871503][ C0] preempt_schedule_common+0x44/0xc0 [ 734.876795][ C0] preempt_schedule_thunk+0x16/0x30 [ 734.881992][ C0] _raw_spin_unlock+0x3e/0x50 [ 734.886666][ C0] copy_page_range+0x1948/0x5f80 [ 734.891640][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 734.896934][ C0] ? __pfx___might_resched+0x10/0x10 [ 734.902216][ C0] ? __pfx_mas_store+0x10/0x10 [ 734.906971][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 734.912167][ C0] ? copy_process+0x85dd/0x91a0 [ 734.917017][ C0] ? down_write+0x14d/0x200 [ 734.921515][ C0] ? up_write+0x1b2/0x520 [ 734.925844][ C0] copy_process+0x862b/0x91a0 [ 734.930543][ C0] ? __pfx_copy_process+0x10/0x10 [ 734.935576][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 734.940609][ C0] kernel_clone+0xfc/0x960 [ 734.945033][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 734.950065][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 734.955354][ C0] __do_sys_clone+0xce/0x120 [ 734.959945][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 734.965159][ C0] ? do_user_addr_fault+0x843/0x1370 [ 734.970449][ C0] do_syscall_64+0xcd/0x260 [ 734.974956][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.980842][ C0] RIP: 0033:0x7fb5e87851d3 [ 734.985265][ C0] RSP: 002b:00007ffc96e486b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 734.993692][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb5e87851d3 [ 735.001667][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 735.009629][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 735.017593][ C0] R10: 000055557e9437d0 R11: 0000000000000246 R12: 0000000000000000 [ 735.025555][ C0] R13: 00000000000927c0 R14: 0000000000099a32 R15: 00007ffc96e48850 [ 735.033533][ C0] [ 735.036546][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g57329 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 735.048857][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=40435 [ 735.056730][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g57329 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 735.068086][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 735.078043][ C0] rcu: RCU grace-period kthread stack dump: [ 735.083917][ C0] task:rcu_preempt state:I stack:27848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 735.095831][ C0] Call Trace: [ 735.099103][ C0] [ 735.102031][ C0] __schedule+0x116f/0x5de0 [ 735.106557][ C0] ? __pfx___schedule+0x10/0x10 [ 735.111411][ C0] ? find_held_lock+0x2b/0x80 [ 735.116092][ C0] ? schedule+0x2d7/0x3a0 [ 735.120429][ C0] schedule+0xe7/0x3a0 [ 735.124499][ C0] schedule_timeout+0x123/0x290 [ 735.129349][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 735.134716][ C0] ? __pfx_process_timeout+0x10/0x10 [ 735.140003][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 735.145807][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 735.151271][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 735.156041][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 735.161330][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 735.166189][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 735.172006][ C0] rcu_gp_kthread+0x270/0x380 [ 735.176686][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 735.181885][ C0] ? rcu_is_watching+0x12/0xc0 [ 735.186645][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 735.191845][ C0] ? __kthread_parkme+0x19e/0x250 [ 735.196874][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 735.202073][ C0] kthread+0x3c2/0x780 [ 735.206136][ C0] ? __pfx_kthread+0x10/0x10 [ 735.210720][ C0] ? __pfx_kthread+0x10/0x10 [ 735.215304][ C0] ? __pfx_kthread+0x10/0x10 [ 735.219887][ C0] ? __pfx_kthread+0x10/0x10 [ 735.224469][ C0] ? rcu_is_watching+0x12/0xc0 [ 735.229231][ C0] ? __pfx_kthread+0x10/0x10 [ 735.233817][ C0] ret_from_fork+0x45/0x80 [ 735.238229][ C0] ? __pfx_kthread+0x10/0x10 [ 735.242813][ C0] ret_from_fork_asm+0x1a/0x30 [ 735.247594][ C0] [ 735.250606][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 735.256916][ C0] Sending NMI from CPU 0 to CPUs 1: [ 735.262128][ C1] NMI backtrace for cpu 1 [ 735.262141][ C1] CPU: 1 UID: 0 PID: 14932 Comm: syz.4.2693 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 735.262158][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 735.262165][ C1] RIP: 0010:write_comp_data+0x0/0x90 [ 735.262189][ C1] Code: 48 8b 05 7b 20 e9 11 48 8b 80 30 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 47 20 e9 11 65 8b 05 58 20 [ 735.262201][ C1] RSP: 0018:ffffc90000a08d88 EFLAGS: 00000046 [ 735.262212][ C1] RAX: 0000000000000001 RBX: ffff88805bf9f340 RCX: ffffffff8981e162 [ 735.262221][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 735.262228][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 735.262236][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b8527840 [ 735.262244][ C1] R13: 0000000000000000 R14: ffff88805bf9f340 R15: ffffffff8981e030 [ 735.262252][ C1] FS: 00007f62667916c0(0000) GS:ffff888124ada000(0000) knlGS:0000000000000000 [ 735.262266][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.262275][ C1] CR2: 0000001b2f103ff8 CR3: 000000007a891000 CR4: 00000000003526f0 [ 735.262284][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 735.262291][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 735.262299][ C1] Call Trace: [ 735.262305][ C1] [ 735.262309][ C1] advance_sched+0x132/0xc80 [ 735.262331][ C1] ? find_held_lock+0x2b/0x80 [ 735.262355][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 735.262370][ C1] ? __pfx_advance_sched+0x10/0x10 [ 735.262388][ C1] __hrtimer_run_queues+0x202/0xad0 [ 735.262405][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 735.262418][ C1] ? read_tsc+0x9/0x20 [ 735.262438][ C1] hrtimer_interrupt+0x397/0x8e0 [ 735.262456][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 735.262473][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 735.262491][ C1] [ 735.262495][ C1] [ 735.262500][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 735.262514][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 735.262531][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 06 54 28 f6 48 89 df e8 ae a7 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 14 19 f6 65 8b 05 fe 93 34 08 85 c0 74 16 5b [ 735.262542][ C1] RSP: 0018:ffffc90003e3fca8 EFLAGS: 00000246 [ 735.262552][ C1] RAX: 0000000000000002 RBX: ffff8880b8427840 RCX: 0000000000000007 [ 735.262560][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe422d RDI: ffffffff8bf4a1a0 [ 735.262568][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 735.262575][ C1] R10: ffffffff90852d17 R11: 0000000000000000 R12: 0000000000000000 [ 735.262583][ C1] R13: 1bc16cd4c1f5f894 R14: dffffc0000000000 R15: ffff8880b8427840 [ 735.262598][ C1] clock_was_set+0x599/0x870 [ 735.262615][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 735.262629][ C1] ? rcu_is_watching+0x12/0xc0 [ 735.262643][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 735.262660][ C1] do_settimeofday64+0x323/0x4d0 [ 735.262678][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 735.262694][ C1] ? bpf_lsm_capable+0x9/0x10 [ 735.262706][ C1] ? wacom_mode_change_work+0x65/0x7e0 [ 735.262721][ C1] ? capable+0xd4/0x110 [ 735.262736][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 735.262756][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 735.262769][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 735.262782][ C1] ? rcu_is_watching+0x12/0xc0 [ 735.262799][ C1] do_syscall_64+0xcd/0x260 [ 735.262818][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.262831][ C1] RIP: 0033:0x7f626598e969 [ 735.262842][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.262854][ C1] RSP: 002b:00007f6266791038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 735.262865][ C1] RAX: ffffffffffffffda RBX: 00007f6265bb5fa0 RCX: 00007f626598e969 [ 735.262874][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 735.262882][ C1] RBP: 00007f6265a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 735.262890][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.262897][ C1] R13: 0000000000000000 R14: 00007f6265bb5fa0 R15: 00007ffe391a5108 [ 735.262911][ C1] [ 735.732165][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.743174][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration