last executing test programs: 2m36.90300821s ago: executing program 2 (id=1023): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sndpcmp(0x0, 0x80000000000000, 0x321200) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000780)) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014"], 0xf0}}, 0x0) ioprio_set$uid(0x3, 0xee00, 0x4007) socket$inet(0x2, 0x1, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4b, &(0x7f0000000080)) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r4}, 0x33) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYBLOB="78fa5c3dd3099db77fdea54d5508ea20f098f5779a6a1eba740e81fa89f3b033a10311e3683aace91c8518553d4bcd17d8b0fc1694c1f26c67b147bbbba1a988032f2d30e8d4835ab91bd2363bc6551084a00c3f8bd4aecdcfa2b130cebdcd439bcfa0599d3ad6d72b9f8007069f41a1d9c197a7e5e31841cdfd96ffa38dd478f596070df02c098736c10a2b07efc318d285977526a9801840ad656cd6a5daabfd52da4d934703bc589c29c15436f016bc895b585b4f32bed8b3147dc132ff7c2483a82563fdd408641e21e6cd6bd65509a800adb001506e1006fc111e90e2278d07644eabe644ad36579993"], &(0x7f0000000500)=""/172, 0x64, 0xac, 0x0, 0x6, 0x10000, @value=r6}, 0x28) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}, {&(0x7f0000000740)="0ed2fd6710ecb1f36d8d45895498d85941d54c78d3aaad68efa39d6d9bd70d78", 0x20}, {&(0x7f0000000800)="4deafeab7481bfc70d21996970f6e53f9b531a621d47a488cf958ed22938866dc73ffe024d773f1a1c1da96b3365e4f2a8c6a509d7e9a4ca673dff974f553d132e50253423d1b31a7338d95a192a500c9949691a114095397afd20de66ec820ff42b0dda358d26534521bef885d9756c7366aaac30a721315095e6c1", 0x7c}], 0x3, 0x0, 0x0, 0x4a0f0000}, 0x48010) fsopen(&(0x7f0000000380)='smb3\x00', 0x0) r8 = shmget(0x1, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180080000000000000000000ffffff806400020001000000c500fcff00000000850000009c00000095000000000000004cdf3f01040204b8ff87d3e849b19fa43749022cd731508ef526b5b0f0a3aaaca13927dc7c45d5d383fbf0cc82c5e99446aadde6"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m35.761343087s ago: executing program 2 (id=1026): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x0, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000370401000000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c04000000000090c112800900010069706970000000000c001f800500090004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r8 = syz_open_pts(r7, 0x101) r9 = dup3(r8, r7, 0x0) r10 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r10, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$UHID_INPUT(r9, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) write$char_usb(r13, &(0x7f0000000100)="29a01acbcbd1534c06754ccd2e0b12cf87cc538e0ed1b8d1841cc7c50090d2d353220db53527bf0f704698ad3ec91065", 0x30) 2m34.416136665s ago: executing program 2 (id=1032): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0x4, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x48, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 2m33.952694738s ago: executing program 2 (id=1036): semop(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x20) 2m33.264315685s ago: executing program 2 (id=1040): timer_create(0x0, &(0x7f0000000500)={0x0, 0x21}, &(0x7f0000000300)) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x2e, 0x2, @thr={&(0x7f00000000c0)="8a0bfea8c7fdd2dc0aeba16afac525c5e70813d1c83a7f2d7c3b6f186566c66bd44229383bb34b3a0765ac5fdc41f21b66fdeabbfd78ce5c152ad5abf5857e983c64ae69a03d5dc24020c87419c14cc23953550a567c5cb7a915b7037653f483aaeb60", &(0x7f0000000140)="70962a672e5afe462a82206a98b9ffe3fe4dafc3a79577b79a8c269d260215b0dc363f3124251aed99748a728489d372fad8ba2a34fdf94cd2dcb0dbd597586300fa91"}}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket(0xa, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x81, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[@hopopts={0xff}]}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x7, 0x0, 0x80000001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) 2m32.751894268s ago: executing program 2 (id=1043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000f40)={0x0, 0xf0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 2m17.201275092s ago: executing program 32 (id=1043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000f40)={0x0, 0xf0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 9.558004807s ago: executing program 4 (id=1544): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdir(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000580)="1e965a4851e6a3e0da7fba7fdb7c2ec2ab29dc09ef6c56b27ce4965afea8ca061d1a012c9c575f589d8e9332c42e58a8cd3cd9500b6510b27cb04cc4cc527d694c68daabe0227a66c2aef2b23659969d3f307968377be2b619fed93c4914d60739403c693ad4fba3ac9d5d9be4fbe6ee762070", 0x73}, {&(0x7f0000000600)="7f6783df779f2c8ae9e22e0654e7b97f44dc400e6c8c61b3688483a27dd70ede888936dbd7ecfaf478e7060d6e72", 0x2e}, {&(0x7f0000000640)="8951fdfcc9337d6fdb2ee80987fca5eefbb83998abdfceab8c157dcd30e1124745fc3b48f5469a1c94d35bdb5a956afb", 0x30}, {&(0x7f0000000680)="007a43b8d7644ce158afef269868d1b096b38a0e314995c3d55ff0162bf839c24df4606de068480b8ba3eb022fef5166360d6bee2073a9dac5cb9ecb379389a72d1a12079278747b4a2b38029c9084f4e589d87f8d6cbd2e7c", 0x59}, {&(0x7f0000000780)="e155a33a82bc1d3d215865e01d0577171b6c5539b2dad8271d5b67fd16abad9c565f9f56e212b2e19e29d669d87f3204174f8d05ad6126c9a86a12edb2ce6144a98578a1115683d8c9f19c2cdc678b0ce4e0d6bbf77b680390625a49f5cc312f50dcfcd831569411ef41a893949417c0b3421d5347fa553038c4f1a90fd96ea01b1e77808f4160068401177bfcbd407b99cb3f1193df3ff84edeeca3e4a3762d0ea7a0711d328dbcbd2edc3d98016fe16b082e2bded01bbc3444d7562d8b806db974d48353a7fc6428355031776d96f93f1722599fd347c2", 0xd8}, {&(0x7f0000000880)="f945f6d2a708605888ae1b0c09d755f8565fd2fee3114f2249135064191e19461ed1e91cc5396f07b0465d245ec9d41a6dd93b5ca3b21806bc58ab124ae000583e4ca66ffba1d1464dc6daf3a19b3cf1c2466792517c30de5ad5bd8ee0a34952b272c8eb89b69434235fac09f1cfc68513194f25c09d47140cd3d584dc81972e767ce7cd9bbf6091227fc4cee56ddccb35f5d5efac95128aee8b67af2bae2e7221fccc0ff977cd40f790910e2c3872042d1249ae6a43c8bcd41c743d47f4fb2188b7d1ecc0e31caab7b1c06928db7de5408a9e22bb0a4fb50cfe7fe6f54040d15a15a7dff76ba2e30617d8c593a33a5145c94fbdb0f6", 0xf6}], 0x7, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c00ef002d1f81339500000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414bb7f00000100000000a800000000000000000000000700000000866d0000000206020504b529070c98f0ccca51879cebda530505e3e238051032c914154516b68de433c9e406d70509c59cdeaaca881905115d8cf4017de0270616408297c9f012050afee808149943fd58070f3d484e5485974aa02ed0274904020d4a5fb7fc748d57efbc69cd01440c4471ffffffff00000004441c2d01e0000002000000080a0101010000d4e30a0101000000000500140000000000000000000000020000001000000000000000140000000000000000000000020000000400000000000000"], 0xf8}}, {{&(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000b00)="e849d41fd7a802a04787f3df123d8054c1272a4d2eca29028e73456035948cf890105d62c3909fbe457a27f87b98f6aa2251dab5dfb1ff437ce698683ba0690d9b76888cc844190750ea5cd901e33a9f359786fb6f03f721ebcf77d296f66c78face3dd984da1f1cfdda42db3bf3a68d25c3f2eaf0a0ba4e6160", 0x7a}, {&(0x7f0000000b80)="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", 0xfa}, {&(0x7f0000000c80)="945bcfee1cb27108fb9b89db93f2cbbd93e7050fcd3ee824067c3dd8f54cf70326f0b077035d4416b5dd14d1c14498d66ac7fa05b7711dda592e284b6b209b922db556b2b515b38399e4a6e5b1cc75d9af52ed3f05b1384c5f22427499ee90f5f0956112c49bf3abfe02266ee33368da3d17c5308acf13be6a372591ef0a586e49c3572f13cc8cd0cbcbd55a8ca09d20d468fcf88a34928a80d1fdf5668e5cfd07c98f37d9868ec32a584750cb40", 0xae}], 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="90000000000000000000000007000000442cf3210a010100000000006401010000000005e0000002000000037f00000100007fffe0000002000000014414e420000000070000000701400000000000038907110000000001831727ac14140c0a010100ac1414aaffffffffffffffff891b88ac1414aae0000001ffffffffac1414157f000001ac1e0001940400000000140000000000000000000000010000000b0000000000000084000000000000000000000007000000866200000001010e0b14377f0bbac7ae46b36dfd0711fcc62774822cde60492c6205f3a28d020d85b86fa307a9d8670a1a6706057674780102050857566f6092da0012ab00000000375bb39096d74a2685e2cf0205370720000a231f553c4d62c1c3830ff26401010064010101e00000020001000000000014000000000000000000000001000000ffffffff00000000140000000000000000000000020000000900000000000000140000000000000000000000010000000000000000000000110000000000000000000000010000000900000000000000140000000000000000000000010000004600000000000000140000000000000000000000010000000900000000000000140000000000000000000000020000000f00000000000000"], 0x1d8}}], 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x43}, @loopback}, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) umount2(&(0x7f0000000000)='./file0/file0\x00', 0xe) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300), 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0xffffffdb, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x1000, 0x0, 0x7}, 0x0) (async) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="6f731b136e8fede4564344e4965f4532c73800000900"/37], &(0x7f0000000200)='/dev/fuse\x00', 0xa, 0x1) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40010, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64, @ANYRES16=0x0]) 9.184940989s ago: executing program 0 (id=1548): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mremap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x3) sendmsg$AUDIT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x0, 0x70bd2a, 0x25dfdbfc, {0x63, 0x1, 0x1, r1, 0x10000, 0x0, 0x2, 0x3, 0x0, 0x2, 0x246f}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x400c041) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) 8.091981553s ago: executing program 5 (id=1550): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x14) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='ns\x00') r2 = fanotify_init(0x40, 0x40000) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000140)=""/138, 0x8a}, {&(0x7f0000000540)=""/226, 0xe2}, {}], 0x6) fanotify_mark(r2, 0x1, 0x40001019, r1, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0xa, 0x8000, 0x6}) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 8.008955612s ago: executing program 4 (id=1551): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x14, r3, 0x1, 0x703d25, 0x25dfdbfb}, 0x14}}, 0x2400c842) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x0, r0, 'id0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r6, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000080)=0x2, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x2880, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec0000000001010800000000000000000300000980000e8006000340000200000c000280050001000100000014002180080001000000000008000200e00000012c0001801400030000000000010000000000ffffac1414aa14000400fe8000000000000000000000000000250c0002800500010001000000140001800800010800020064010102140005800e0001006972632d32303030300000003c0002800c00028005000100210000002c000180140003000000000000000000200000000000fe88000000000000000000000000000108001a4000000400"/236], 0xec}, 0x1, 0x0, 0x0, 0xc005}, 0x200441c4) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0xec}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x8c, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) 7.797242867s ago: executing program 5 (id=1552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b11721147fe993f32534b3dd", 0x46}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa2c", 0x59}, {&(0x7f0000000080)}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b95ff3461cadb5ff282471e30d4fab8", 0x3d}], 0x5, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) 6.848611145s ago: executing program 4 (id=1555): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000004c0)=0x10, 0x4) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0}) 6.846071622s ago: executing program 5 (id=1556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000140)=[&(0x7f0000a0d000/0x3000)=nil, &(0x7f0000a3a000/0x1000)=nil, &(0x7f0000fc7000/0x13000)=nil], &(0x7f0000000240)=[0x1], &(0x7f0000000000), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="110000000400000004", @ANYRES32, @ANYBLOB="000000000000000000000000d82b629b9db602007582091142916f27a65dd065203c9d558be61e120beb54312d3d3f7203d970f7773535c05e632d42c156f10769d2621f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r4, 0x0, &(0x7f00000015c0)=""/132}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) read$msr(r5, &(0x7f0000002240)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000040)}], 0x1) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$MSR(&(0x7f0000000480), 0x5, 0x0) add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000000140), 0x0, r7) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) io_uring_setup(0x46e4, &(0x7f0000000340)={0x0, 0xc60e, 0x400, 0x1, 0x25c, 0x0, r8}) socket(0x10, 0x3, 0x0) 6.420731051s ago: executing program 3 (id=1557): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1) read(r2, 0x0, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140), &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xa9d7, 0x800, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) syz_open_dev$radio(&(0x7f00000003c0), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) 5.543847917s ago: executing program 5 (id=1559): socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000018}) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) epoll_create1(0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) sched_setaffinity(0x0, 0xff02, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x10}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x38, 0x2c, 0x1, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}, 0x6e) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0x7, 0x2, "2692"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="001d7d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca4bb6", "9ecb592c6ee49fbd"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000280)=""/203, 0xcb}, {0x0}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x5) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x400000}, 0xc) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) 5.463569783s ago: executing program 0 (id=1560): r0 = syz_open_dev$sndctrl(0x0, 0x2000000000, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$kcm(0x11, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f00000001c0)=0x4e1) 5.10001416s ago: executing program 4 (id=1562): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x40000) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.020186691s ago: executing program 0 (id=1563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005f700000000004a000000000000", @ANYRES32=0x0, @ANYBLOB="1100000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xa8, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6f8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000020}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x66, &(0x7f0000001300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0xf9, 0xa0, 0x9, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x9a, {{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x8e, 0xfffb, 0x9, 0xfe}, [@mdlm_detail={0x4, 0x24, 0x13, 0x94}, @mdlm={0x15, 0x24, 0x12, 0x371}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x10, 0x9, 0x94}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x6, 0x9}}}}}]}}]}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, 0x0) 3.73403573s ago: executing program 1 (id=1564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xe0700, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000700)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c000280080001407f000001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3.479919197s ago: executing program 1 (id=1565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x11400240bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) r4 = socket$kcm(0x2d, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r5, &(0x7f00000005c0)={0x2d, 0x0, r7, 0xc}, 0x10) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r2) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x14, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) 2.93704826s ago: executing program 1 (id=1566): io_setup(0x10000, &(0x7f0000000800)) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x12840, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000002100)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, 0x2}, 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000002e80)={0x2020, 0x0, 0x0}, 0xfffffd30) (rerun: 32) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000002280)={0x130, 0xfffffffffffffffe, r8, {0x7, 0xc1, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, 0x0, 0x0, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x3, 0x3e3}, {0x1, 0x1}, {0x80000000000001, 0x51bb}, 0xff, 0xffffffa8, 0x2, 0x10000000}}}, 0x130) (async) splice(r5, 0x0, r7, 0x0, 0x6, 0x8) (async) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000002080)="66b8ff008ed8ff2a0f290fb9800000c00f3235004000000f300f78052d16000066baf80cb830d0178cef66bafc0cedc4c27d3443848fe978d642000f38c804d7670fc72e825f", 0x46}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) (async) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) (async, rerun: 64) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 64) io_setup(0x9, &(0x7f0000002e40)) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc}) 2.834136825s ago: executing program 3 (id=1567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) 2.752724304s ago: executing program 3 (id=1568): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000080)=0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x100000000000aa54, 0xa00) ioctl$EVIOCGSND(r2, 0x8040451a, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000000)=""/215) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x140d, 0x413, 0x70bd3d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000100)=0x6, 0x9, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10) 2.584045964s ago: executing program 3 (id=1569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000140)=[&(0x7f0000a0d000/0x3000)=nil, &(0x7f0000a3a000/0x1000)=nil, &(0x7f0000fc7000/0x13000)=nil], &(0x7f0000000240)=[0x1], &(0x7f0000000000), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="110000000400000004", @ANYRES32, @ANYBLOB="000000000000000000000000d82b629b9db602007582091142916f27a65dd065203c9d558be61e120beb54312d3d3f7203d970f7773535c05e632d42c156f10769d2621f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r4, 0x0, &(0x7f00000015c0)=""/132}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) read$msr(r5, &(0x7f0000002240)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000040)}], 0x1) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$MSR(&(0x7f0000000480), 0x5, 0x0) add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000000140), 0x0, r7) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) io_uring_setup(0x46e4, &(0x7f0000000340)={0x0, 0xc60e, 0x400, 0x1, 0x25c, 0x0, r8}) socket(0x10, 0x3, 0x0) 2.391242866s ago: executing program 4 (id=1570): dup(0xffffffffffffffff) syz_io_uring_setup(0x608a, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000480)={0x4000000, &(0x7f0000000440), &(0x7f0000000280), &(0x7f00000002c0), {0x5}, &(0x7f0000000600)=""/186, 0xba, 0x0, &(0x7f00000004c0)}, 0x58) sched_setattr(r3, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000001a00000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009a1ff1e88fa1c9b3030906166e55b97b1473e801140c2f1dafe30d65f9b0a35b6e0af5e2bb2a196f9ed3df994bc9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x980) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80b, 0x2}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4c00) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 2.036068429s ago: executing program 4 (id=1571): dup(0xffffffffffffffff) syz_io_uring_setup(0x608a, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000480)={0x4000000, &(0x7f0000000440), &(0x7f0000000280), &(0x7f00000002c0), {0x5}, &(0x7f0000000600)=""/186, 0xba, 0x0, &(0x7f00000004c0)}, 0x58) sched_setattr(r3, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000001a00000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009a1ff1e88fa1c9b3030906166e55b97b1473e801140c2f1dafe30d65f9b0a35b6e0af5e2bb2a196f9ed3df994bc9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x980) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80b, 0x2}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4c00) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 1.967954722s ago: executing program 1 (id=1572): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x4, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x48, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x401}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 1.689271391s ago: executing program 0 (id=1573): r0 = syz_open_dev$sndctrl(0x0, 0x2000000000, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$kcm(0x11, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f00000001c0)=0x4e1) 1.264083973s ago: executing program 0 (id=1574): r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0xfffffffe}, {}, {0x6}]}) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x21, &(0x7f0000000480)={[{@max={'max', 0x3d, 0x7}}, {@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0x26}}, {@stats}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x7}}], [{@subj_user={'subj_user', 0x3d, '/dev/cpu/#/msr\x00'}}, {@flag='lazytime'}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@flag='async'}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfsroot={'smackfsroot', 0x3d, ')$$)}'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@subj_type={'subj_type', 0x3d, '/dev/cpu/#/msr\x00'}}]}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) close(0x3) getresuid(&(0x7f00000000c0), 0x0, &(0x7f0000000140)=0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, r4, &(0x7f00000001c0)) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, r4, &(0x7f00000003c0)={0xd, 0x2, 0x4, 0x6, 0xdf0, 0x5, 0x7, 0x3, 0x81}) mmap$IORING_OFF_SQ_RING(&(0x7f00009fb000/0x4000)=nil, 0x4000, 0x1, 0x2010, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x95d913cc3bd236dc) r5 = syz_open_dev$sg(0x0, 0xa, 0x40000) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) 848.135314ms ago: executing program 1 (id=1575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x11400240bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) r4 = socket$kcm(0x2d, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r5, &(0x7f00000005c0)={0x2d, 0x0, r7, 0xc}, 0x10) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r2) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x14, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) 843.583342ms ago: executing program 3 (id=1576): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10007, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001040)=ANY=[], 0x108}}], 0x2, 0xc040) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x2000, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@broadcast, 0x80000, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0xffffffffffffffff}, {0x4}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd2a, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x80, 0x5, 0x0, 0x6, 0x0}) 460.023072ms ago: executing program 3 (id=1577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000001000000000000000000000000003300000000000000"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8004d7, 0xfc}, 0x0) setrlimit(0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x46, 0x2, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4048aec9, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB], 0x50) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x5, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x7, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x2, 0x8, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x3, 0x981, 0x4, 0x100, 0x3ff, 0x2, 0xfffffffe, 0x0, 0x1000001, 0x7, 0x1, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x405, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000009, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x2, 0x5, 0x6, 0xda, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x8, 0x3, 0x50, 0x2, 0x6, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x203fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0xfc9, 0x8a8, 0x2, 0x3, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0x9, 0x2, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) socket(0x80000000000000a, 0x2, 0x0) 197.67108ms ago: executing program 5 (id=1578): pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x8000000000000}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x0, 0x0) 131.772151ms ago: executing program 1 (id=1579): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x380000, 0x6794, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xc, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5, 0x0, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffe, 0x5, 0x7, 0x7, 0x3, 0x6}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"3fd9918161fa1d088a0661eb4ec8208eb3400a1051e779f9b6e55454b3e33240", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0x40103e05, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x89b91a6da383ac1d, 0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) 93.852016ms ago: executing program 0 (id=1580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x11400240bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) r4 = socket$kcm(0x2d, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r5, &(0x7f00000005c0)={0x2d, 0x0, r7, 0xc}, 0x10) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r2) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x14, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) 0s ago: executing program 5 (id=1581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$inet(0x2, 0x6, 0x407) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x452280, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22c8210}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0xd8, 0x1403, 0x8, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40050}, 0x20000091) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) kernel console output (not intermixed with test programs): 3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.882290][ T30] audit: type=1400 audit(1759648006.155:806): avc: denied { mounton } for pid=10110 comm="syz-executor" path="/root/syzkaller.k9LOwD/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 415.926514][ T30] audit: type=1400 audit(1759648006.165:807): avc: denied { mount } for pid=10110 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 415.979066][ T30] audit: type=1400 audit(1759648006.165:808): avc: denied { mounton } for pid=10110 comm="syz-executor" path="/root/syzkaller.k9LOwD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 416.103371][ T1912] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 416.111647][ T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 416.137646][ T30] audit: type=1400 audit(1759648006.165:809): avc: denied { mounton } for pid=10110 comm="syz-executor" path="/root/syzkaller.k9LOwD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=31040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 416.264421][ T1912] usb 4-1: device descriptor read/64, error -71 [ 416.290180][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.300162][ T43] usb 1-1: config 0 has no interface number 0 [ 416.306679][ T43] usb 1-1: too many endpoints for config 0 interface 1 altsetting 254: 128, using maximum allowed: 30 [ 416.323745][ T43] usb 1-1: config 0 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 416.337716][ T43] usb 1-1: config 0 interface 1 has no altsetting 0 [ 416.344442][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.353793][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.377543][ T1912] usb usb4-port1: attempt power cycle [ 416.405734][ T43] usb 1-1: config 0 descriptor?? [ 416.424916][ T43] cp210x 1-1:0.1: cp210x converter detected [ 416.462255][T10355] bridge_slave_0: entered promiscuous mode [ 416.481417][T10354] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 416.507460][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.516972][T10354] CIFS: Unable to determine destination address [ 416.748643][ T1912] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 416.784393][ T1912] usb 4-1: device descriptor read/8, error -71 [ 416.830723][ T43] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 417.273982][ T1912] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 417.283425][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 417.313355][ T1912] usb 4-1: device descriptor read/8, error -71 [ 417.423649][T10371] blktrace: Concurrent blktraces are not allowed on sg0 [ 417.434240][ T1912] usb usb4-port1: unable to enumerate USB device [ 417.613283][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 418.194474][ T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.202781][ T43] usb 6-1: config 0 has no interface number 0 [ 418.211534][ T43] usb 6-1: too many endpoints for config 0 interface 1 altsetting 254: 128, using maximum allowed: 30 [ 418.226977][ T43] usb 6-1: config 0 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 418.240916][ T43] usb 6-1: config 0 interface 1 has no altsetting 0 [ 418.249080][ T43] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 418.317079][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.339706][ T43] usb 6-1: config 0 descriptor?? [ 418.347085][ T43] cp210x 6-1:0.1: cp210x converter detected [ 418.370358][T10378] FAULT_INJECTION: forcing a failure. [ 418.370358][T10378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.383807][T10378] CPU: 1 UID: 0 PID: 10378 Comm: syz.3.1168 Not tainted syzkaller #0 PREEMPT(full) [ 418.383833][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 418.383843][T10378] Call Trace: [ 418.383849][T10378] [ 418.383855][T10378] dump_stack_lvl+0x16c/0x1f0 [ 418.383882][T10378] should_fail_ex+0x512/0x640 [ 418.383907][T10378] _copy_to_user+0x32/0xd0 [ 418.383931][T10378] simple_read_from_buffer+0xcb/0x170 [ 418.383951][T10378] proc_fail_nth_read+0x197/0x240 [ 418.383974][T10378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.383998][T10378] ? rw_verify_area+0xcf/0x6c0 [ 418.384024][T10378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.384046][T10378] vfs_read+0x1e1/0xcf0 [ 418.384068][T10378] ? __pfx___mutex_lock+0x10/0x10 [ 418.384090][T10378] ? __pfx_vfs_read+0x10/0x10 [ 418.384115][T10378] ? __fget_files+0x20e/0x3c0 [ 418.384143][T10378] ksys_read+0x12a/0x250 [ 418.384160][T10378] ? __pfx_ksys_read+0x10/0x10 [ 418.384179][T10378] ? keyctl_keyring_move+0x117/0x150 [ 418.384202][T10378] do_syscall_64+0xcd/0x4e0 [ 418.384227][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.384245][T10378] RIP: 0033:0x7f3f6f38d8dc [ 418.384260][T10378] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 418.384276][T10378] RSP: 002b:00007f3f7015e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.384292][T10378] RAX: ffffffffffffffda RBX: 00007f3f6f5e5fa0 RCX: 00007f3f6f38d8dc [ 418.384304][T10378] RDX: 000000000000000f RSI: 00007f3f7015e0a0 RDI: 0000000000000003 [ 418.384315][T10378] RBP: 00007f3f7015e090 R08: 0000000000000000 R09: 0000000000000000 [ 418.384325][T10378] R10: 0000000021e91c63 R11: 0000000000000246 R12: 0000000000000001 [ 418.384336][T10378] R13: 00007f3f6f5e6038 R14: 00007f3f6f5e5fa0 R15: 00007ffe1e1a0258 [ 418.384360][T10378] [ 418.830227][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 418.830328][ T30] audit: type=1400 audit(1759648009.055:853): avc: denied { write } for pid=10381 comm="syz.3.1170" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 418.920352][ T43] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 419.073739][ T30] audit: type=1400 audit(1759648009.075:854): avc: denied { setopt } for pid=10381 comm="syz.3.1170" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.106988][ T30] audit: type=1400 audit(1759648009.075:855): avc: denied { read } for pid=10381 comm="syz.3.1170" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.137435][ T30] audit: type=1400 audit(1759648009.105:856): avc: denied { create } for pid=10379 comm="syz.1.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 419.173727][ T30] audit: type=1400 audit(1759648009.105:857): avc: denied { write } for pid=10379 comm="syz.1.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 419.216461][ T43] usb 6-1: cp210x converter now attached to ttyUSB1 [ 419.666252][ T43] usb 1-1: USB disconnect, device number 36 [ 419.683893][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 419.823256][ T43] cp210x 1-1:0.1: device disconnected [ 420.181343][ T30] audit: type=1400 audit(1759648010.455:858): avc: denied { create } for pid=10395 comm="syz.4.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 420.303183][ T30] audit: type=1400 audit(1759648010.455:859): avc: denied { write } for pid=10395 comm="syz.4.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 420.323260][ T30] audit: type=1400 audit(1759648010.455:860): avc: denied { connect } for pid=10395 comm="syz.4.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 420.342988][ T30] audit: type=1400 audit(1759648010.455:861): avc: denied { name_connect } for pid=10395 comm="syz.4.1174" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 420.393966][ T30] audit: type=1400 audit(1759648010.515:862): avc: denied { create } for pid=10395 comm="syz.4.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 420.476147][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.503245][T10401] CIFS mount error: No usable UNC path provided in device string! [ 420.503245][T10401] [ 420.513467][T10401] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 420.529910][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.639625][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.643038][ T5965] usb 6-1: USB disconnect, device number 2 [ 420.648273][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.667669][ T5965] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 420.704714][ T5965] cp210x 6-1:0.1: device disconnected [ 421.553752][T10409] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1176'. [ 422.213186][T10428] fuse: Bad value for 'fd' [ 422.232135][ T43] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 422.427998][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 422.439863][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.517951][ T43] usb 4-1: Product: syz [ 422.528070][ T43] usb 4-1: Manufacturer: syz [ 422.537914][ T43] usb 4-1: SerialNumber: syz [ 422.952137][T10433] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 422.970505][T10419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.979224][T10419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.994220][T10433] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1178'. [ 423.016268][T10434] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 423.110303][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 423.135407][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 423.146279][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 423.159326][ T43] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 423.167473][ T5913] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 423.179447][ T43] usb 4-1: USB disconnect, device number 54 [ 423.329635][ T5913] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.337911][ T5913] usb 6-1: config 0 has no interface number 0 [ 423.349112][ T5913] usb 6-1: too many endpoints for config 0 interface 1 altsetting 254: 128, using maximum allowed: 30 [ 423.366759][ T5913] usb 6-1: config 0 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 423.380463][ T5913] usb 6-1: config 0 interface 1 has no altsetting 0 [ 423.387798][ T5913] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 423.396879][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.411921][ T5913] usb 6-1: config 0 descriptor?? [ 423.421452][ T5913] cp210x 6-1:0.1: cp210x converter detected [ 423.547055][T10443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.556440][T10443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.568801][T10443] FAULT_INJECTION: forcing a failure. [ 423.568801][T10443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.582183][T10443] CPU: 0 UID: 0 PID: 10443 Comm: syz.1.1187 Not tainted syzkaller #0 PREEMPT(full) [ 423.582207][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 423.582216][T10443] Call Trace: [ 423.582223][T10443] [ 423.582229][T10443] dump_stack_lvl+0x16c/0x1f0 [ 423.582255][T10443] should_fail_ex+0x512/0x640 [ 423.582278][T10443] _copy_from_user+0x2e/0xd0 [ 423.582298][T10443] snd_seq_write+0x3ed/0x6d0 [ 423.582317][T10443] ? __pfx_snd_seq_write+0x10/0x10 [ 423.582334][T10443] ? bpf_lsm_file_permission+0x9/0x10 [ 423.582346][T10443] ? security_file_permission+0x71/0x210 [ 423.582363][T10443] ? rw_verify_area+0xcf/0x6c0 [ 423.582391][T10443] ? __pfx_snd_seq_write+0x10/0x10 [ 423.582411][T10443] vfs_write+0x2a0/0x11d0 [ 423.582433][T10443] ? __pfx_vfs_write+0x10/0x10 [ 423.582446][T10443] ? find_held_lock+0x2b/0x80 [ 423.582462][T10443] ? __fget_files+0x204/0x3c0 [ 423.582477][T10443] ? __fget_files+0x20e/0x3c0 [ 423.582493][T10443] ksys_write+0x1f8/0x250 [ 423.582505][T10443] ? __pfx_ksys_write+0x10/0x10 [ 423.582530][T10443] do_syscall_64+0xcd/0x4e0 [ 423.582552][T10443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.582568][T10443] RIP: 0033:0x7f7043b8eec9 [ 423.582582][T10443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.582594][T10443] RSP: 002b:00007f7044b0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.582605][T10443] RAX: ffffffffffffffda RBX: 00007f7043de5fa0 RCX: 00007f7043b8eec9 [ 423.582612][T10443] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000006 [ 423.582618][T10443] RBP: 00007f7044b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 423.582624][T10443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.582630][T10443] R13: 00007f7043de6038 R14: 00007f7043de5fa0 R15: 00007fffed5b2f18 [ 423.582645][T10443] [ 423.828529][ T5913] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 423.833352][ T5955] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 423.888942][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 423.888952][ T30] audit: type=1400 audit(1759648014.165:890): avc: denied { create } for pid=10447 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 424.046334][ T5955] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 424.054862][ T5913] usb 6-1: cp210x converter now attached to ttyUSB0 [ 424.056588][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.077320][ T5955] usb 1-1: config 0 descriptor?? [ 424.284253][ T30] audit: type=1400 audit(1759648014.455:891): avc: denied { create } for pid=10447 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 424.485701][ T5955] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 424.496303][ T30] audit: type=1400 audit(1759648014.455:892): avc: denied { ioctl } for pid=10447 comm="syz.3.1189" path="socket:[32713]" dev="sockfs" ino=32713 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 424.733360][T10453] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1190'. [ 424.803141][T10457] random: crng reseeded on system resumption [ 424.852792][ T30] audit: type=1400 audit(1759648015.075:893): avc: denied { read write } for pid=10451 comm="syz.1.1190" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 425.028571][ T30] audit: type=1400 audit(1759648015.075:894): avc: denied { ioctl open } for pid=10451 comm="syz.1.1190" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 425.196347][ T5955] gp8psk: usb in 128 operation failed. [ 425.481325][T10440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.585897][T10440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.721229][ T5955] gp8psk: usb in 137 operation failed. [ 425.726799][ T5955] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 425.737366][ T30] audit: type=1400 audit(1759648015.995:895): avc: denied { ioctl } for pid=10439 comm="syz.0.1186" path="socket:[31338]" dev="sockfs" ino=31338 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 425.762538][ T5955] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 425.839168][ T43] usb 6-1: USB disconnect, device number 3 [ 425.843450][ T5955] usb 1-1: USB disconnect, device number 37 [ 425.849186][T10470] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1195'. [ 425.861682][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 425.906009][ T43] cp210x 6-1:0.1: device disconnected [ 426.040658][T10473] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1196'. [ 426.368532][ T30] audit: type=1400 audit(1759648016.645:896): avc: denied { create } for pid=10478 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 426.392909][ T30] audit: type=1400 audit(1759648016.675:897): avc: denied { connect } for pid=10478 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 426.836741][ T30] audit: type=1400 audit(1759648017.115:898): avc: denied { create } for pid=10487 comm="syz.5.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 427.042793][ T30] audit: type=1326 audit(1759648017.285:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.5.1200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe04b38eec9 code=0x0 [ 427.095207][T10492] blktrace: Concurrent blktraces are not allowed on sg0 [ 428.750126][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1203'. [ 429.012964][T10525] syzkaller0: entered promiscuous mode [ 429.022939][T10525] syzkaller0: entered allmulticast mode [ 429.080112][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 429.080126][ T30] audit: type=1400 audit(1759648019.355:904): avc: denied { getopt } for pid=10500 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 429.198211][T10526] lo speed is unknown, defaulting to 1000 [ 429.241536][ T30] audit: type=1326 audit(1759648019.515:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4058eec9 code=0x7ffc0000 [ 429.272572][ T30] audit: type=1326 audit(1759648019.545:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4058eec9 code=0x7ffc0000 [ 429.299767][ T30] audit: type=1326 audit(1759648019.545:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a4058eec9 code=0x7ffc0000 [ 429.325198][ T30] audit: type=1326 audit(1759648019.545:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4058eec9 code=0x7ffc0000 [ 429.348664][ T30] audit: type=1326 audit(1759648019.545:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4058eec9 code=0x7ffc0000 [ 429.415413][ T30] audit: type=1326 audit(1759648019.545:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a4058eec9 code=0x7ffc0000 [ 429.438781][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.483423][ T30] audit: type=1326 audit(1759648019.545:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4058eec9 code=0x7ffc0000 [ 429.506787][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.518153][ T30] audit: type=1326 audit(1759648019.545:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4058eec9 code=0x7ffc0000 [ 429.541520][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.975334][ T30] audit: type=1326 audit(1759648019.545:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a4058eec9 code=0x7ffc0000 [ 430.043403][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1210'. [ 430.463603][ T5913] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 430.626377][ T5913] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 430.673132][ T5913] usb 5-1: config 0 has no interface number 0 [ 430.695872][ T5913] usb 5-1: too many endpoints for config 0 interface 1 altsetting 254: 128, using maximum allowed: 30 [ 430.724768][ T5913] usb 5-1: config 0 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 430.751836][ T5913] usb 5-1: config 0 interface 1 has no altsetting 0 [ 430.764302][ T5913] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 430.774095][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.798333][ T5913] usb 5-1: config 0 descriptor?? [ 430.921650][ T5913] cp210x 5-1:0.1: cp210x converter detected [ 431.588952][ T5913] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 431.928846][ T5913] usb 5-1: cp210x converter now attached to ttyUSB0 [ 432.083318][ T43] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 432.273132][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 432.293595][ T43] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 432.302833][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.330150][ T43] usb 1-1: Product: syz [ 432.335210][ T43] usb 1-1: Manufacturer: syz [ 432.340045][ T43] usb 1-1: SerialNumber: syz [ 432.362805][ T43] usb 1-1: config 0 descriptor?? [ 432.372070][ T43] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 433.322650][ T43] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 433.337035][ T43] visor 1-1:0.0: probe with driver visor failed with error -71 [ 433.371621][ T43] usb 1-1: USB disconnect, device number 38 [ 433.794335][T10594] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 433.836428][ T5965] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 433.907033][ T5913] usb 5-1: USB disconnect, device number 31 [ 433.916334][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 433.938252][ T5913] cp210x 5-1:0.1: device disconnected [ 434.117752][ T5965] usb 6-1: Using ep0 maxpacket: 32 [ 434.141002][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 434.142967][T10601] binder: Unknown parameter 'subj_user' [ 434.172429][ T30] audit: type=1326 audit(1759648024.355:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10597 comm="syz.1.1230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7043b8eec9 code=0x0 [ 434.197271][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 434.207281][ T5965] usb 6-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 434.218217][ T5965] usb 6-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.243868][ T30] audit: type=1400 audit(1759648024.415:994): avc: denied { remount } for pid=10597 comm="syz.1.1230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 434.294920][ T5965] usb 6-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.308721][ T5965] usb 6-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 434.323779][ T5965] usb 6-1: config 64 interface 0 has no altsetting 0 [ 434.330959][ T5965] usb 6-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 434.340441][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.387287][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 434.396928][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.416287][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 434.440796][T10604] fuse: Bad value for 'fd' [ 434.470817][ T10] usb 1-1: config 1 has no interface number 0 [ 434.482863][ T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 434.495272][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 434.519774][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.533473][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.541608][ T10] usb 1-1: Product: syz [ 434.550195][ T10] usb 1-1: Manufacturer: syz [ 434.570631][ T10] usb 1-1: SerialNumber: syz [ 434.684171][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 434.851272][ T30] audit: type=1400 audit(1759648025.055:995): avc: denied { append } for pid=10607 comm="syz.3.1233" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.894898][ T5965] hid-rmi 0003:17EF:6085.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.5-1/input0 [ 435.163237][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 435.169743][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 435.200790][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 435.205038][ T30] audit: type=1400 audit(1759648025.475:996): avc: denied { mount } for pid=10595 comm="syz.0.1229" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 435.230804][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 435.258501][T10616] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 435.268896][T10616] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 435.519871][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 435.528743][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 435.544460][ T30] audit: type=1326 audit(1759648025.585:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10612 comm="syz.1.1234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7043b8eec9 code=0x0 [ 435.569602][ T30] audit: type=1400 audit(1759648025.655:998): avc: denied { read write } for pid=10612 comm="syz.1.1234" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 435.595238][ T30] audit: type=1400 audit(1759648025.655:999): avc: denied { open } for pid=10612 comm="syz.1.1234" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 435.843462][T10596] comedi comedi0: reset error (fatal) [ 435.870212][ T10] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 435.881971][ T10] usb 1-1: USB disconnect, device number 39 [ 436.043465][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 436.058381][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 436.221521][T10628] FAULT_INJECTION: forcing a failure. [ 436.221521][T10628] name failslab, interval 1, probability 0, space 0, times 0 [ 436.234715][T10628] CPU: 1 UID: 0 PID: 10628 Comm: syz.1.1238 Not tainted syzkaller #0 PREEMPT(full) [ 436.234738][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.234747][T10628] Call Trace: [ 436.234753][T10628] [ 436.234759][T10628] dump_stack_lvl+0x16c/0x1f0 [ 436.234785][T10628] should_fail_ex+0x512/0x640 [ 436.234806][T10628] ? __kmalloc_cache_noprof+0x5f/0x780 [ 436.234836][T10628] should_failslab+0xc2/0x120 [ 436.234859][T10628] __kmalloc_cache_noprof+0x72/0x780 [ 436.234886][T10628] ? create_io_worker+0xc9/0x5b0 [ 436.234909][T10628] ? find_held_lock+0x2b/0x80 [ 436.234935][T10628] ? create_io_worker+0x1f/0x5b0 [ 436.234956][T10628] ? create_io_worker+0xc9/0x5b0 [ 436.234978][T10628] create_io_worker+0xc9/0x5b0 [ 436.235002][T10628] io_wq_enqueue+0x4cc/0x980 [ 436.235026][T10628] ? __pfx_io_wq_enqueue+0x10/0x10 [ 436.235044][T10628] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 436.235060][T10628] ? io_prep_async_work+0x654/0x770 [ 436.235077][T10628] io_queue_iowq+0x246/0x530 [ 436.235093][T10628] io_queue_async+0x113/0x130 [ 436.235108][T10628] io_submit_sqes+0x174d/0x2710 [ 436.235133][T10628] __do_sys_io_uring_enter+0xd69/0x1630 [ 436.235152][T10628] ? __fget_files+0x20e/0x3c0 [ 436.235164][T10628] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 436.235182][T10628] ? fput+0x9b/0xd0 [ 436.235196][T10628] ? ksys_write+0x1ac/0x250 [ 436.235207][T10628] ? __pfx_ksys_write+0x10/0x10 [ 436.235222][T10628] do_syscall_64+0xcd/0x4e0 [ 436.235236][T10628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.235247][T10628] RIP: 0033:0x7f7043b8eec9 [ 436.235257][T10628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.235267][T10628] RSP: 002b:00007f7044b0e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 436.235278][T10628] RAX: ffffffffffffffda RBX: 00007f7043de5fa0 RCX: 00007f7043b8eec9 [ 436.235285][T10628] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 436.235291][T10628] RBP: 00007f7044b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 436.235297][T10628] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 436.235308][T10628] R13: 00007f7043de6038 R14: 00007f7043de5fa0 R15: 00007fffed5b2f18 [ 436.235322][T10628] [ 436.506428][ T5955] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 436.605609][T10588] ceph: No mds server is up or the cluster is laggy [ 437.070362][ T30] audit: type=1400 audit(1759648026.975:1000): avc: denied { read } for pid=10629 comm="syz.3.1239" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 437.144728][ T30] audit: type=1400 audit(1759648026.975:1001): avc: denied { open } for pid=10629 comm="syz.3.1239" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 437.173475][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 437.187339][ T30] audit: type=1400 audit(1759648026.975:1002): avc: denied { ioctl } for pid=10629 comm="syz.3.1239" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 437.194588][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.312980][ T10] usb 6-1: USB disconnect, device number 4 [ 437.334416][ T5955] usb 5-1: config 0 has no interfaces? [ 437.347221][ T5955] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bd [ 437.357108][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.065604][ T5955] usb 5-1: Product: syz [ 438.071441][ T5955] usb 5-1: Manufacturer: syz [ 438.078293][ T5955] usb 5-1: SerialNumber: syz [ 438.097096][ T5955] usb 5-1: config 0 descriptor?? [ 438.396879][T10648] loop6: detected capacity change from 0 to 524288000 [ 438.465532][T10646] batman_adv: batadv0: Adding interface: ipvlan2 [ 438.484807][T10646] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.524559][T10646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.547363][T10646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.568496][T10646] batman_adv: batadv0: Interface activated: ipvlan2 [ 438.818692][T10652] Bluetooth: MGMT ver 1.23 [ 439.087845][T10662] vxfs: unable to read disk superblock at 1 [ 439.096483][T10662] vxfs: unable to read disk superblock at 8 [ 439.103252][T10662] vxfs: can't find superblock. [ 439.189452][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 439.189511][ T30] audit: type=1400 audit(1759648029.465:1016): avc: denied { write } for pid=10660 comm="syz.1.1246" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 439.516468][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.522800][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.056483][T10663] infiniband syz2: set active [ 440.061276][T10663] infiniband syz2: added bond0 [ 440.273945][ T30] audit: type=1400 audit(1759648030.355:1017): avc: denied { bind } for pid=10660 comm="syz.1.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 440.317945][T10663] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 440.320204][T10663] infiniband syz2: Couldn't open port 1 [ 440.371714][T10669] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 440.387244][T10663] RDS/IB: syz2: added [ 440.411134][ T30] audit: type=1400 audit(1759648030.685:1018): avc: denied { unlink } for pid=10667 comm="syz.3.1247" name="#f" dev="tmpfs" ino=1521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 440.505328][ T30] audit: type=1400 audit(1759648030.685:1019): avc: denied { mount } for pid=10667 comm="syz.3.1247" name="/" dev="overlay" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 440.637368][ T30] audit: type=1400 audit(1759648030.915:1020): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 440.810199][ T5913] usb 5-1: USB disconnect, device number 32 [ 441.033957][ T10] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 441.267361][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 441.514935][ T10] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 441.965913][T10688] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1253'. [ 441.982738][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 442.098440][ T30] audit: type=1326 audit(1759648032.355:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.5.1254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe04b38eec9 code=0x0 [ 442.205691][ T10] usb usb4-port1: attempt power cycle [ 442.414558][T10687] random: crng reseeded on system resumption [ 442.603364][ T10] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 442.793650][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 443.053356][ T10] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 443.111271][T10703] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1257'. [ 443.138967][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 443.144810][ T10] usb usb4-port1: unable to enumerate USB device [ 443.242402][T10708] lo speed is unknown, defaulting to 1000 [ 443.269441][T10701] random: crng reseeded on system resumption [ 443.736217][T10716] blktrace: Concurrent blktraces are not allowed on sg0 [ 444.240204][T10720] lo speed is unknown, defaulting to 1000 [ 444.520717][ T5965] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 444.537106][T10725] FAULT_INJECTION: forcing a failure. [ 444.537106][T10725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.650816][T10728] netlink: 'syz.1.1265': attribute type 2 has an invalid length. [ 444.673166][T10725] CPU: 0 UID: 0 PID: 10725 Comm: syz.5.1264 Not tainted syzkaller #0 PREEMPT(full) [ 444.673196][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.673207][T10725] Call Trace: [ 444.673213][T10725] [ 444.673219][T10725] dump_stack_lvl+0x16c/0x1f0 [ 444.673246][T10725] should_fail_ex+0x512/0x640 [ 444.673271][T10725] _copy_from_user+0x2e/0xd0 [ 444.673295][T10725] binder_thread_write+0x126e/0x4e70 [ 444.673328][T10725] ? __lock_acquire+0xb97/0x1ce0 [ 444.673347][T10725] ? __pfx_binder_thread_write+0x10/0x10 [ 444.673376][T10725] ? binder_debug+0xde/0x1a0 [ 444.673394][T10725] ? __pfx_binder_debug+0x10/0x10 [ 444.673414][T10725] ? find_held_lock+0x2b/0x80 [ 444.673438][T10725] ? __might_fault+0xe3/0x190 [ 444.673453][T10725] ? __might_fault+0x13b/0x190 [ 444.673479][T10725] binder_ioctl+0x253d/0x71f0 [ 444.673512][T10725] ? tomoyo_path_number_perm+0x18d/0x580 [ 444.673538][T10725] ? __pfx_binder_ioctl+0x10/0x10 [ 444.673563][T10725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.673590][T10725] ? do_vfs_ioctl+0x128/0x14f0 [ 444.673615][T10725] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 444.673641][T10725] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 444.673671][T10725] ? hook_file_ioctl_common+0x145/0x410 [ 444.673702][T10725] ? selinux_file_ioctl+0x180/0x270 [ 444.673721][T10725] ? selinux_file_ioctl+0xb4/0x270 [ 444.673742][T10725] ? __pfx_binder_ioctl+0x10/0x10 [ 444.673765][T10725] __x64_sys_ioctl+0x18e/0x210 [ 444.673793][T10725] do_syscall_64+0xcd/0x4e0 [ 444.673816][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.673833][T10725] RIP: 0033:0x7fe04b38eec9 [ 444.673847][T10725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.673864][T10725] RSP: 002b:00007fe04c26c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.673880][T10725] RAX: ffffffffffffffda RBX: 00007fe04b5e5fa0 RCX: 00007fe04b38eec9 [ 444.673891][T10725] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003 [ 444.673902][T10725] RBP: 00007fe04c26c090 R08: 0000000000000000 R09: 0000000000000000 [ 444.673912][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.673921][T10725] R13: 00007fe04b5e6038 R14: 00007fe04b5e5fa0 R15: 00007ffddaa302a8 [ 444.673945][T10725] [ 444.673953][T10725] binder: 10724:10725 ioctl c0306201 200000000640 returned -14 [ 444.699370][ T30] audit: type=1400 audit(1759648034.975:1022): avc: denied { create } for pid=10726 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 444.723369][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 444.787901][ T30] audit: type=1400 audit(1759648034.975:1023): avc: denied { ioctl } for pid=10726 comm="syz.1.1265" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33435 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 444.828212][ T5965] usb 4-1: config 0 has an invalid interface number: 209 but max is 0 [ 444.974069][ T5965] usb 4-1: config 0 has no interface number 0 [ 444.984488][ T5965] usb 4-1: config 0 interface 209 has no altsetting 0 [ 444.991632][ T30] audit: type=1400 audit(1759648035.035:1024): avc: denied { getopt } for pid=10729 comm="syz.0.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 445.074140][ T30] audit: type=1400 audit(1759648035.305:1025): avc: denied { read } for pid=10731 comm="syz.5.1267" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 445.108348][T10735] syzkaller0: entered promiscuous mode [ 445.108598][ T30] audit: type=1400 audit(1759648035.305:1026): avc: denied { open } for pid=10731 comm="syz.5.1267" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 445.142542][ T5965] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 445.153440][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.163220][T10735] syzkaller0: entered allmulticast mode [ 445.178530][ T5965] usb 4-1: Product: syz [ 445.197726][ T5965] usb 4-1: Manufacturer: syz [ 445.205180][ T5965] usb 4-1: SerialNumber: syz [ 445.382969][ T30] audit: type=1400 audit(1759648035.325:1027): avc: denied { create } for pid=10731 comm="syz.5.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 445.403279][ T5965] usb 4-1: config 0 descriptor?? [ 445.408499][ T30] audit: type=1400 audit(1759648035.325:1028): avc: denied { ioctl } for pid=10731 comm="syz.5.1267" path="socket:[34004]" dev="sockfs" ino=34004 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 445.434510][ T5955] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 445.444423][ T30] audit: type=1400 audit(1759648035.465:1029): avc: denied { append } for pid=10736 comm="syz.0.1268" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 445.467710][ T30] audit: type=1400 audit(1759648035.475:1030): avc: denied { write } for pid=10736 comm="syz.0.1268" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 445.569699][T10743] siw: device registration error -23 [ 445.593201][ T5955] usb 6-1: device descriptor read/64, error -71 [ 445.869484][ T30] audit: type=1400 audit(1759648036.145:1031): avc: denied { create } for pid=10719 comm="syz.3.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 445.895830][ T5965] usb 4-1: USB disconnect, device number 59 [ 445.924357][ T5955] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 446.073266][ T5955] usb 6-1: device descriptor read/64, error -71 [ 446.108084][T10748] FAULT_INJECTION: forcing a failure. [ 446.108084][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 446.131127][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.1.1271 Not tainted syzkaller #0 PREEMPT(full) [ 446.131150][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 446.131161][T10748] Call Trace: [ 446.131168][T10748] [ 446.131174][T10748] dump_stack_lvl+0x16c/0x1f0 [ 446.131201][T10748] should_fail_ex+0x512/0x640 [ 446.131227][T10748] ? fs_reclaim_acquire+0xae/0x150 [ 446.131251][T10748] should_failslab+0xc2/0x120 [ 446.131274][T10748] __kmalloc_noprof+0xdd/0x880 [ 446.131301][T10748] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 446.131329][T10748] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 446.131349][T10748] tomoyo_realpath_from_path+0xc2/0x6e0 [ 446.131373][T10748] ? tomoyo_profile+0x47/0x60 [ 446.131400][T10748] tomoyo_path_number_perm+0x245/0x580 [ 446.131417][T10748] ? tomoyo_path_number_perm+0x237/0x580 [ 446.131438][T10748] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 446.131458][T10748] ? find_held_lock+0x2b/0x80 [ 446.131506][T10748] ? find_held_lock+0x2b/0x80 [ 446.131531][T10748] ? hook_file_ioctl_common+0x145/0x410 [ 446.131561][T10748] ? __fget_files+0x20e/0x3c0 [ 446.131585][T10748] security_file_ioctl+0x9b/0x240 [ 446.131608][T10748] __x64_sys_ioctl+0xb7/0x210 [ 446.131637][T10748] do_syscall_64+0xcd/0x4e0 [ 446.131662][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.131679][T10748] RIP: 0033:0x7f7043b8eec9 [ 446.131694][T10748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.131711][T10748] RSP: 002b:00007f7044b0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.131728][T10748] RAX: ffffffffffffffda RBX: 00007f7043de5fa0 RCX: 00007f7043b8eec9 [ 446.131740][T10748] RDX: 0000200000000100 RSI: 0000000000005411 RDI: 0000000000000004 [ 446.131751][T10748] RBP: 00007f7044b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 446.131761][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.131771][T10748] R13: 00007f7043de6038 R14: 00007f7043de5fa0 R15: 00007fffed5b2f18 [ 446.131796][T10748] [ 446.131803][T10748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.346877][ T5955] usb usb6-port1: attempt power cycle [ 446.723446][ T5955] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 446.731748][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.741073][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.749558][ T5955] usb 6-1: device descriptor read/8, error -71 [ 446.758941][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.767694][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.801132][T10761] blktrace: Concurrent blktraces are not allowed on sg0 [ 447.443246][ T5955] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 447.792700][ T5955] usb 6-1: device descriptor read/8, error -71 [ 447.859048][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'. [ 448.191531][ T5955] usb usb6-port1: unable to enumerate USB device [ 448.487519][ T1912] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 449.363355][ T1912] usb 5-1: Using ep0 maxpacket: 8 [ 449.380931][ T1912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 449.407044][ T1912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29282, setting to 64 [ 449.504392][ T1912] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 449.542594][ T1912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.663186][ T1912] usb 5-1: Product: syz [ 449.738576][ T1912] usb 5-1: Manufacturer: syz [ 449.779188][ T1912] usb 5-1: SerialNumber: syz [ 449.790150][ T1912] usb 5-1: config 0 descriptor?? [ 449.926258][ T1912] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 450.128172][ T1912] usb 5-1: USB disconnect, device number 33 [ 451.306773][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 451.306787][ T30] audit: type=1400 audit(1759648041.585:1043): avc: denied { map } for pid=10825 comm="syz.3.1287" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 451.363963][T10840] blktrace: Concurrent blktraces are not allowed on sg0 [ 452.483244][ T43] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 452.553223][ T30] audit: type=1400 audit(1759648042.805:1044): avc: denied { bind } for pid=10848 comm="syz.4.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 453.165143][T10854] 9pnet_fd: Insufficient options for proto=fd [ 453.226732][ T30] audit: type=1326 audit(1759648043.505:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.1294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7043b8eec9 code=0x0 [ 453.266118][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.277429][ T43] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 453.286898][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.313598][ T43] usb 1-1: config 0 descriptor?? [ 453.320965][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 453.338192][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 453.490163][T10860] fuseblk: Unknown parameter 'rootmde' [ 453.571477][T10862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.591481][T10862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.725230][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 453.741381][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 453.753716][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 453.773540][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 453.874031][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 453.880895][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 453.888434][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 453.928929][T10866] 9pnet: Found fid 0 not clunked [ 453.946299][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 453.959799][ T30] audit: type=1400 audit(1759648044.235:1046): avc: denied { append } for pid=10859 comm="syz.4.1296" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 453.993406][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 454.013706][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 454.023977][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 454.031763][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 454.153407][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 454.170794][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 454.177977][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 454.191304][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 454.198667][ T43] pwc: Registered as video103. [ 454.253286][T10869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.262254][T10869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.314036][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 454.352252][ T43] usb 1-1: USB disconnect, device number 40 [ 454.358393][ T30] audit: type=1400 audit(1759648044.625:1047): avc: denied { read } for pid=5180 comm="acpid" name="event4" dev="devtmpfs" ino=3315 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.667183][ T30] audit: type=1400 audit(1759648044.625:1048): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3315 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.695453][ T30] audit: type=1400 audit(1759648044.625:1049): avc: denied { ioctl } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3315 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.282374][T10880] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1302'. [ 455.407783][T10879] syzkaller0: entered promiscuous mode [ 455.413358][T10879] syzkaller0: entered allmulticast mode [ 455.520805][T10883] random: crng reseeded on system resumption [ 455.568625][ T30] audit: type=1400 audit(1759648045.845:1050): avc: denied { create } for pid=10887 comm="syz.3.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 455.637806][ T30] audit: type=1326 audit(1759648045.915:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.5.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04b38eec9 code=0x7ffc0000 [ 455.677704][ T30] audit: type=1326 audit(1759648045.915:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.5.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04b38eec9 code=0x7ffc0000 [ 456.318834][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1309'. [ 456.517474][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 456.517489][ T30] audit: type=1326 audit(1759648046.755:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.5.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04b38eec9 code=0x7ffc0000 [ 456.568291][ T30] audit: type=1400 audit(1759648046.845:1079): avc: denied { wake_alarm } for pid=10908 comm="syz.4.1310" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 457.412677][ T5965] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 457.420405][ T1912] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 457.593314][ T1912] usb 1-1: Using ep0 maxpacket: 8 [ 457.634730][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 457.653168][ T5965] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 457.662265][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.691341][ T5965] usb 5-1: config 0 descriptor?? [ 457.724141][ T1912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 457.848840][ T1912] usb 1-1: config 7 has an invalid interface number: 58 but max is 0 [ 457.873484][ T1912] usb 1-1: config 7 has no interface number 0 [ 457.883130][ T1912] usb 1-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 457.917090][ T1912] usb 1-1: No eUSB2 isoc ep 14 companion for config 7 interface 58 altsetting 3 [ 457.960464][ T1912] usb 1-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.023372][ T1912] usb 1-1: config 7 interface 58 has no altsetting 0 [ 458.032820][ T1912] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 458.042103][ T1912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.051058][ T1912] usb 1-1: Product: syz [ 458.058074][ T1912] usb 1-1: Manufacturer: Ь [ 458.062654][ T1912] usb 1-1: SerialNumber: syz [ 458.218595][ T10] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 458.227859][T10909] syzkaller1: entered promiscuous mode [ 458.233407][ T30] audit: type=1400 audit(1759648048.515:1080): avc: denied { ioctl } for pid=10908 comm="syz.4.1310" path="socket:[34449]" dev="sockfs" ino=34449 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 458.262458][T10909] syzkaller1: entered allmulticast mode [ 458.281076][T10927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.414367][ T10] usb 6-1: device descriptor read/64, error -71 [ 458.421299][ T30] audit: type=1400 audit(1759648048.675:1081): avc: denied { mount } for pid=10923 comm="syz.1.1315" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 458.658024][ T5965] usbhid 5-1:0.0: can't add hid device: -71 [ 458.743167][ T10] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 458.783789][ T5965] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 458.800380][ T30] audit: type=1400 audit(1759648048.765:1082): avc: denied { read write } for pid=10923 comm="syz.1.1315" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 458.824586][ T5965] usb 5-1: USB disconnect, device number 34 [ 458.865783][ T30] audit: type=1400 audit(1759648048.765:1083): avc: denied { open } for pid=10923 comm="syz.1.1315" path="/268/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 458.923299][ T10] usb 6-1: device descriptor read/64, error -71 [ 459.044487][ T10] usb usb6-port1: attempt power cycle [ 459.150314][ T30] audit: type=1400 audit(1759648049.425:1084): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 459.315684][T10936] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1319'. [ 459.384631][T10939] random: crng reseeded on system resumption [ 459.553121][ T10] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 459.591192][ T10] usb 6-1: device descriptor read/8, error -71 [ 459.609442][ T1912] usb 1-1: USB disconnect, device number 41 [ 459.824293][ T30] audit: type=1400 audit(1759648050.065:1085): avc: denied { getopt } for pid=10941 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 459.974557][T10946] tmpfs: Unknown parameter ' 00000000000000000000010 ' [ 459.989286][ T30] audit: type=1400 audit(1759648050.085:1086): avc: denied { write } for pid=10941 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 460.011326][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.019852][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.039883][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 460.048905][ T10] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 460.049348][T10948] tmpfs: Bad value for 'mpol' [ 460.093609][ T10] usb 6-1: device descriptor read/8, error -71 [ 460.101317][ T30] audit: type=1400 audit(1759648050.265:1087): avc: denied { read write } for pid=10945 comm="syz.1.1321" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 460.204383][ T10] usb usb6-port1: unable to enumerate USB device [ 460.613119][ T1912] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 460.733420][T10968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.759793][T10968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.804762][ T1912] usb 1-1: Using ep0 maxpacket: 8 [ 460.811573][ T1912] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 460.821653][ T1912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 54240, setting to 1024 [ 460.876799][ T1912] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 460.968568][ T1912] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.075095][T10973] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1327'. [ 461.147516][T10974] random: crng reseeded on system resumption [ 461.295792][ T1912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 461.321323][ T1912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.339678][ T1912] usb 1-1: Product: syz [ 461.348825][ T1912] usb 1-1: Manufacturer: syz [ 461.360328][ T1912] usb 1-1: SerialNumber: syz [ 461.384414][T10961] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 461.391670][T10961] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 461.718855][T10961] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1322' resets device [ 461.749605][ T1912] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 461.787492][ T1912] usbtest 1-1:1.0: Linux user mode ISO test driver [ 461.826630][ T1912] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 461.865293][ T1912] usb 1-1: USB disconnect, device number 42 [ 462.558751][ T5965] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 462.713583][ T5965] usb 6-1: Using ep0 maxpacket: 32 [ 462.721628][ T5965] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.729925][ T5965] usb 6-1: config 0 has no interface number 0 [ 462.803800][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 462.803827][ T30] audit: type=1400 audit(1759648053.065:1090): avc: denied { bind } for pid=10995 comm="syz.3.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 463.143179][ T5965] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 463.159530][ T5965] usb 6-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 463.163114][ T30] audit: type=1400 audit(1759648053.065:1091): avc: denied { node_bind } for pid=10995 comm="syz.3.1334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 463.206807][ T5965] usb 6-1: Product: syz [ 463.213136][ T5965] usb 6-1: Manufacturer: syz [ 463.217777][ T5965] usb 6-1: SerialNumber: syz [ 463.224575][ T5965] usb 6-1: config 0 descriptor?? [ 463.242183][ T5965] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 463.251054][ T5965] usb 6-1: selecting invalid altsetting 1 [ 463.258925][ T5965] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 463.280089][ T5965] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 463.292424][T11000] tipc: Enabled bearer , priority 0 [ 463.305911][ T5965] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 463.315883][ T5965] usb 6-1: media controller created [ 463.315997][T11000] syzkaller0: entered promiscuous mode [ 463.329188][T11000] syzkaller0: entered allmulticast mode [ 463.334444][ T5965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.375956][T10999] tipc: Resetting bearer [ 463.388967][T10999] tipc: Disabling bearer [ 463.874728][T11011] can: request_module (can-proto-0) failed. [ 464.173162][ T5955] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 464.389096][ T5955] usb 5-1: device descriptor read/64, error -71 [ 464.473418][ T5965] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 464.480460][ T5965] zl10353_read_register: readreg error (reg=127, ret==-110) [ 464.533896][T10988] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 464.559565][ T5965] usb 6-1: USB disconnect, device number 13 [ 464.696301][ T30] audit: type=1400 audit(1759648054.975:1092): avc: denied { create } for pid=11024 comm="syz.0.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 464.703132][ T5955] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 465.066258][ T5955] usb 5-1: device descriptor read/64, error -71 [ 465.174170][ T5955] usb usb5-port1: attempt power cycle [ 465.246143][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1344'. [ 465.513649][ T5955] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 465.536167][ T5955] usb 5-1: device descriptor read/8, error -71 [ 466.320320][ T5955] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 466.330822][ T30] audit: type=1400 audit(1759648056.575:1093): avc: denied { ioctl } for pid=11042 comm="syz.5.1347" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 466.363244][ T1912] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 466.366218][T11044] can0: slcan on ttyS3. [ 466.378993][ T5955] usb 5-1: device descriptor read/8, error -71 [ 466.521821][ T5955] usb usb5-port1: unable to enumerate USB device [ 466.593734][T11045] can0 (unregistered): slcan off ttyS3. [ 466.616104][ T1912] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 466.627314][ T1912] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 466.639380][ T1912] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 466.649890][ T1912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.663421][T11041] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 466.672502][ T1912] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 468.637880][ T30] audit: type=1400 audit(1759648058.915:1094): avc: denied { kexec_image_load } for pid=11040 comm="syz.3.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 468.861996][ T30] audit: type=1326 audit(1759648059.075:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6f38eec9 code=0x7ffc0000 [ 468.889102][ T30] audit: type=1326 audit(1759648059.075:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6f38eec9 code=0x7ffc0000 [ 468.942216][ T30] audit: type=1326 audit(1759648059.085:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3f6f38eec9 code=0x7ffc0000 [ 468.966324][T11063] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 468.972834][T11063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 469.013992][T11063] vhci_hcd vhci_hcd.0: Device attached [ 469.048750][ T30] audit: type=1326 audit(1759648059.085:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6f38eec9 code=0x7ffc0000 [ 469.089262][ T30] audit: type=1326 audit(1759648059.095:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6f38eec9 code=0x7ffc0000 [ 469.166529][ T5965] usb 4-1: USB disconnect, device number 60 [ 469.200783][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 469.241106][ T30] audit: type=1326 audit(1759648059.095:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3f6f38eec9 code=0x7ffc0000 [ 469.243161][ T1203] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 469.408433][ T5955] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 469.654683][ T30] audit: type=1326 audit(1759648059.095:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6f38eec9 code=0x7ffc0000 [ 469.695132][ T1203] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 469.713308][ T1203] usb 6-1: config 0 has no interface number 0 [ 469.893366][ T1203] usb 6-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 469.954146][ T30] audit: type=1326 audit(1759648059.095:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6f38eec9 code=0x7ffc0000 [ 470.012481][ T1203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.074233][ T1203] usb 6-1: config 0 descriptor?? [ 470.084806][ T30] audit: type=1326 audit(1759648059.105:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f3f6f38eec9 code=0x7ffc0000 [ 470.112176][ T1203] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.105/input/input31 [ 470.435088][T11064] usbip_core: unknown command [ 470.438565][T11063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.440483][T11064] vhci_hcd: unknown pdu 302055424 [ 470.580184][T11064] usbip_core: unknown command [ 470.593849][T11063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.601665][ T36] vhci_hcd: stop threads [ 470.608248][ T36] vhci_hcd: release socket [ 470.621309][ T36] vhci_hcd: disconnect device [ 470.656774][ T5180] bcm5974 6-1:0.105: could not read from device [ 470.664211][ T5180] bcm5974 6-1:0.105: could not read from device [ 470.677971][ T1203] usb 6-1: USB disconnect, device number 14 [ 470.694102][ T5180] bcm5974 6-1:0.105: could not read from device [ 470.896481][T11092] [U] ² [ 470.906899][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.915514][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.073433][ T43] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 471.244336][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 471.252861][ T43] usb 1-1: config 0 has no interface number 0 [ 471.273493][ T5851] Bluetooth: hci3: command 0x0405 tx timeout [ 471.283359][ T43] usb 1-1: too many endpoints for config 0 interface 1 altsetting 254: 128, using maximum allowed: 30 [ 471.313408][ T43] usb 1-1: config 0 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 471.329894][T11096] FAULT_INJECTION: forcing a failure. [ 471.329894][T11096] name failslab, interval 1, probability 0, space 0, times 0 [ 471.342760][T11096] CPU: 0 UID: 0 PID: 11096 Comm: syz.1.1360 Not tainted syzkaller #0 PREEMPT(full) [ 471.342782][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.342792][T11096] Call Trace: [ 471.342798][T11096] [ 471.342804][T11096] dump_stack_lvl+0x16c/0x1f0 [ 471.342831][T11096] should_fail_ex+0x512/0x640 [ 471.342853][T11096] ? fs_reclaim_acquire+0xae/0x150 [ 471.342879][T11096] should_failslab+0xc2/0x120 [ 471.342901][T11096] __kmalloc_noprof+0xdd/0x880 [ 471.342928][T11096] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 471.342953][T11096] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 471.342966][T11096] tomoyo_realpath_from_path+0xc2/0x6e0 [ 471.342980][T11096] ? tomoyo_profile+0x47/0x60 [ 471.342997][T11096] tomoyo_path_number_perm+0x245/0x580 [ 471.343007][T11096] ? tomoyo_path_number_perm+0x237/0x580 [ 471.343019][T11096] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 471.343031][T11096] ? find_held_lock+0x2b/0x80 [ 471.343077][T11096] ? find_held_lock+0x2b/0x80 [ 471.343101][T11096] ? hook_file_ioctl_common+0x145/0x410 [ 471.343130][T11096] ? __fget_files+0x20e/0x3c0 [ 471.343154][T11096] security_file_ioctl+0x9b/0x240 [ 471.343176][T11096] __x64_sys_ioctl+0xb7/0x210 [ 471.343204][T11096] do_syscall_64+0xcd/0x4e0 [ 471.343229][T11096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.343246][T11096] RIP: 0033:0x7f7043b8eec9 [ 471.343260][T11096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.343277][T11096] RSP: 002b:00007f7044aed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.343294][T11096] RAX: ffffffffffffffda RBX: 00007f7043de6090 RCX: 00007f7043b8eec9 [ 471.343306][T11096] RDX: 00002000000000c0 RSI: 0000000000004b72 RDI: 0000000000000005 [ 471.343316][T11096] RBP: 00007f7044aed090 R08: 0000000000000000 R09: 0000000000000000 [ 471.343326][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.343336][T11096] R13: 00007f7043de6128 R14: 00007f7043de6090 R15: 00007fffed5b2f18 [ 471.343360][T11096] [ 471.611357][ T43] usb 1-1: config 0 interface 1 has no altsetting 0 [ 471.614202][T11096] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.629491][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 471.635374][T11098] syz_tun: entered allmulticast mode [ 471.638581][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.756723][ T43] usb 1-1: config 0 descriptor?? [ 471.763919][ T43] cp210x 1-1:0.1: cp210x converter detected [ 471.855109][T11100] usb usb5: usbfs: process 11100 (syz.5.1361) did not claim interface 0 before use [ 472.391976][ T43] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 472.450838][T11097] syz_tun: left allmulticast mode [ 472.565544][T11107] netlink: 'syz.4.1363': attribute type 1 has an invalid length. [ 472.634445][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 472.766677][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'. [ 472.767019][T11112] gretap1: entered promiscuous mode [ 472.856058][T11113] nfs4: Unknown parameter '/file0/file0' [ 472.928290][T11115] macvlan2: entered promiscuous mode [ 473.859679][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 473.859714][ T30] audit: type=1400 audit(1759648064.135:1129): avc: denied { mount } for pid=11125 comm="syz.5.1366" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 473.915162][T11115] macvlan2: entered allmulticast mode [ 474.152563][T11115] bond1: (slave macvlan2): Opening slave failed [ 474.159245][ T30] audit: type=1400 audit(1759648064.195:1130): avc: denied { setopt } for pid=11125 comm="syz.5.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 474.743188][ T5955] vhci_hcd: vhci_device speed not set [ 475.970940][T11118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.073483][ T30] audit: type=1400 audit(1759648066.355:1131): avc: denied { unmount } for pid=10110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 476.660077][ T30] audit: type=1400 audit(1759648066.935:1132): avc: denied { connect } for pid=11136 comm="syz.5.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 476.753499][ T30] audit: type=1400 audit(1759648066.955:1133): avc: denied { write } for pid=11136 comm="syz.5.1370" laddr=fe80::13 lport=20279 faddr=fe80::aa fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 476.770875][ T5807] usb 1-1: USB disconnect, device number 43 [ 476.880411][ T5807] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 476.954585][ T5807] cp210x 1-1:0.1: device disconnected [ 477.553379][ T5807] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 477.586789][T11148] siw: device registration error -23 [ 477.765289][ T5807] usb 1-1: unable to get BOS descriptor or descriptor too short [ 478.305108][T11156] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 479.030790][ T5807] usb 1-1: not running at top speed; connect to a high speed hub [ 479.047466][ T5807] usb 1-1: config 3 has an invalid interface number: 229 but max is 0 [ 479.058453][ T5807] usb 1-1: config 3 has no interface number 0 [ 479.067727][ T5807] usb 1-1: config 3 interface 229 has no altsetting 0 [ 479.088680][ T5807] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=58.b1 [ 479.103128][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.113145][ T5807] usb 1-1: Product: syz [ 479.133183][ T5807] usb 1-1: Manufacturer: syz [ 479.138016][ T5807] usb 1-1: SerialNumber: syz [ 479.208462][T11152] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1375'. [ 479.237289][T11152] random: crng reseeded on system resumption [ 479.311015][T11165] vxfs: unable to read disk superblock at 1 [ 479.317042][T11165] vxfs: unable to read disk superblock at 8 [ 479.322930][T11165] vxfs: can't find superblock. [ 479.568108][T11170] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1378'. [ 480.438335][T11183] serio: Serial port ptm0 [ 480.741272][ T5807] ipw 1-1:3.229: IPWireless converter converter detected [ 480.852257][ T5807] usb 1-1: USB disconnect, device number 44 [ 480.909132][ T30] audit: type=1400 audit(1759648071.185:1134): avc: denied { setopt } for pid=11189 comm="syz.4.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 481.183296][ T5807] ipw 1-1:3.229: device disconnected [ 482.733359][T11204] lo speed is unknown, defaulting to 1000 [ 483.417680][T11219] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 483.439549][ T30] audit: type=1400 audit(1759648073.695:1135): avc: denied { setopt } for pid=11216 comm="syz.5.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 484.004871][ T30] audit: type=1400 audit(1759648074.265:1136): avc: denied { read } for pid=11225 comm="syz.0.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 485.166818][T11237] siw: device registration error -23 [ 486.278353][T11257] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1398'. [ 486.572347][T11264] FAULT_INJECTION: forcing a failure. [ 486.572347][T11264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.585665][T11264] CPU: 0 UID: 0 PID: 11264 Comm: syz.3.1400 Not tainted syzkaller #0 PREEMPT(full) [ 486.585686][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.585696][T11264] Call Trace: [ 486.585701][T11264] [ 486.585705][T11264] dump_stack_lvl+0x16c/0x1f0 [ 486.585723][T11264] should_fail_ex+0x512/0x640 [ 486.585738][T11264] _copy_from_user+0x2e/0xd0 [ 486.585752][T11264] copy_msghdr_from_user+0x98/0x160 [ 486.585767][T11264] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 486.585787][T11264] ___sys_sendmsg+0xfe/0x1d0 [ 486.585801][T11264] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.585835][T11264] __sys_sendmsg+0x16d/0x220 [ 486.585849][T11264] ? __pfx___sys_sendmsg+0x10/0x10 [ 486.585871][T11264] do_syscall_64+0xcd/0x4e0 [ 486.585886][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.585897][T11264] RIP: 0033:0x7f3f6f38eec9 [ 486.585906][T11264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.585917][T11264] RSP: 002b:00007f3f6d5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.585927][T11264] RAX: ffffffffffffffda RBX: 00007f3f6f5e6090 RCX: 00007f3f6f38eec9 [ 486.585934][T11264] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 486.585941][T11264] RBP: 00007f3f6d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 486.585947][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.585954][T11264] R13: 00007f3f6f5e6128 R14: 00007f3f6f5e6090 R15: 00007ffe1e1a0258 [ 486.585968][T11264] [ 486.589486][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 487.237603][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 487.676536][T11275] vxfs: unable to read disk superblock at 1 [ 487.682603][T11275] vxfs: unable to read disk superblock at 8 [ 487.688585][T11275] vxfs: can't find superblock. [ 488.364694][T11282] UBIFS error (pid: 11282): cannot open "c:::", error -22 [ 488.394038][ T30] audit: type=1400 audit(1759648078.645:1137): avc: denied { create } for pid=11279 comm="syz.5.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 490.711792][T11315] vxfs: unable to read disk superblock at 1 [ 490.718098][T11315] vxfs: unable to read disk superblock at 8 [ 490.724063][T11315] vxfs: can't find superblock. [ 490.739671][ T30] audit: type=1400 audit(1759648081.015:1138): avc: denied { bind } for pid=11316 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 491.454325][ T5955] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 491.490891][T11329] FAULT_INJECTION: forcing a failure. [ 491.490891][T11329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.515724][T11329] CPU: 1 UID: 0 PID: 11329 Comm: syz.1.1417 Not tainted syzkaller #0 PREEMPT(full) [ 491.515746][T11329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 491.515756][T11329] Call Trace: [ 491.515767][T11329] [ 491.515773][T11329] dump_stack_lvl+0x16c/0x1f0 [ 491.515791][T11329] should_fail_ex+0x512/0x640 [ 491.515806][T11329] _copy_from_iter+0x29f/0x1720 [ 491.515824][T11329] ? __pfx__copy_from_iter+0x10/0x10 [ 491.515838][T11329] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 491.515857][T11329] skb_copy_datagram_from_iter+0x124/0x740 [ 491.515870][T11329] ? dev_get_by_index+0x17c/0x380 [ 491.515886][T11329] packet_sendmsg+0x2294/0x5850 [ 491.515908][T11329] ? sock_has_perm+0x259/0x2f0 [ 491.515919][T11329] ? __pfx_sock_has_perm+0x10/0x10 [ 491.515930][T11329] ? __pfx_packet_sendmsg+0x10/0x10 [ 491.515951][T11329] __sys_sendto+0x4a0/0x520 [ 491.515963][T11329] ? __pfx___sys_sendto+0x10/0x10 [ 491.515986][T11329] ? ksys_write+0x1ac/0x250 [ 491.515998][T11329] ? __pfx_ksys_write+0x10/0x10 [ 491.516011][T11329] __x64_sys_sendto+0xe0/0x1c0 [ 491.516022][T11329] ? do_syscall_64+0x91/0x4e0 [ 491.516035][T11329] ? lockdep_hardirqs_on+0x7c/0x110 [ 491.516047][T11329] do_syscall_64+0xcd/0x4e0 [ 491.516061][T11329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.516073][T11329] RIP: 0033:0x7f7043b8eec9 [ 491.516082][T11329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.516092][T11329] RSP: 002b:00007f7044b0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 491.516103][T11329] RAX: ffffffffffffffda RBX: 00007f7043de5fa0 RCX: 00007f7043b8eec9 [ 491.516110][T11329] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 491.516116][T11329] RBP: 00007f7044b0e090 R08: 0000200000000200 R09: 0000000000000014 [ 491.516123][T11329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.516129][T11329] R13: 00007f7043de6038 R14: 00007f7043de5fa0 R15: 00007fffed5b2f18 [ 491.516142][T11329] [ 491.753225][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 491.845112][ T5955] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 491.858660][ T5955] usb 5-1: config 0 has no interface number 0 [ 491.873141][ T5913] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 491.925311][ T5955] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 491.951022][ T30] audit: type=1400 audit(1759648082.225:1139): avc: denied { accept } for pid=11330 comm="syz.1.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 491.952101][ T5955] usb 5-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 492.047567][T11332] hugetlbfs: syz.1.1418 (11332): Using mlock ulimits for SHM_HUGETLB is obsolete [ 492.256246][ T30] audit: type=1400 audit(1759648082.315:1140): avc: denied { map } for pid=11330 comm="syz.1.1418" path="socket:[36496]" dev="sockfs" ino=36496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 492.313411][ T5955] usb 5-1: Product: syz [ 492.317578][ T5955] usb 5-1: Manufacturer: syz [ 492.322277][ T30] audit: type=1400 audit(1759648082.315:1141): avc: denied { read } for pid=11330 comm="syz.1.1418" path="socket:[36496]" dev="sockfs" ino=36496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 492.345770][ T5955] usb 5-1: SerialNumber: syz [ 492.353470][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 492.363930][ T5955] usb 5-1: config 0 descriptor?? [ 492.371845][ T5955] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 492.374471][ T5913] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 492.413655][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.413784][ T5955] usb 5-1: selecting invalid altsetting 1 [ 492.428162][ T5913] usb 1-1: config 0 descriptor?? [ 492.456519][ T5913] as10x_usb: device has been detected [ 492.466244][ T5955] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 492.466436][ T5913] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 492.490942][ T5955] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 492.637816][ T5955] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 492.638156][ T5913] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 492.653196][ T5955] usb 5-1: media controller created [ 492.715088][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.858573][ T30] audit: type=1400 audit(1759648083.135:1142): avc: denied { firmware_load } for pid=5913 comm="kworker/1:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 492.859610][ T5913] as10x_usb: error during firmware upload part1 [ 493.062768][ T30] audit: type=1326 audit(1759648083.235:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11340 comm="syz.1.1422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7043b8eec9 code=0x0 [ 493.092297][ T5913] Registered device nBox DVB-T Dongle [ 493.238523][ T5913] usb 1-1: USB disconnect, device number 45 [ 493.286807][ T5913] Unregistered device nBox DVB-T Dongle [ 493.289022][ T5913] as10x_usb: device has been disconnected [ 493.758655][T11320] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 493.813675][ T5955] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 493.822533][ T5955] zl10353_read_register: readreg error (reg=127, ret==-71) [ 493.835551][ T5955] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 493.847076][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 493.857376][T11356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.913191][ T30] audit: type=1400 audit(1759648084.185:1144): avc: denied { write } for pid=11359 comm="syz.0.1428" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 493.940205][ T5955] usb 5-1: USB disconnect, device number 39 [ 494.000142][ T30] audit: type=1400 audit(1759648084.275:1145): avc: denied { read } for pid=11361 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 494.036675][T11363] syzkaller0: entered promiscuous mode [ 494.042144][T11363] syzkaller0: entered allmulticast mode [ 494.051689][T11364] FAULT_INJECTION: forcing a failure. [ 494.051689][T11364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.137018][T11364] CPU: 1 UID: 0 PID: 11364 Comm: syz.0.1429 Not tainted syzkaller #0 PREEMPT(full) [ 494.137042][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.137053][T11364] Call Trace: [ 494.137059][T11364] [ 494.137065][T11364] dump_stack_lvl+0x16c/0x1f0 [ 494.137092][T11364] should_fail_ex+0x512/0x640 [ 494.137115][T11364] _copy_from_user+0x2e/0xd0 [ 494.137139][T11364] copy_msghdr_from_user+0x98/0x160 [ 494.137160][T11364] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 494.137185][T11364] ? kfree+0x252/0x6d0 [ 494.137216][T11364] ___sys_recvmsg+0xdb/0x1a0 [ 494.137237][T11364] ? __pfx____sys_recvmsg+0x10/0x10 [ 494.137272][T11364] ? __pfx___might_resched+0x10/0x10 [ 494.137298][T11364] ? read_tsc+0x9/0x20 [ 494.137321][T11364] ? ktime_get_ts64+0x256/0x400 [ 494.137342][T11364] do_recvmmsg+0x2fe/0x750 [ 494.137367][T11364] ? __pfx_do_recvmmsg+0x10/0x10 [ 494.137385][T11364] ? find_held_lock+0x2b/0x80 [ 494.137408][T11364] ? __might_fault+0xe3/0x190 [ 494.137424][T11364] ? __might_fault+0x13b/0x190 [ 494.137450][T11364] ? __pfx_get_timespec64+0x10/0x10 [ 494.137466][T11364] ? __fget_files+0x20e/0x3c0 [ 494.137498][T11364] __x64_sys_recvmmsg+0x199/0x280 [ 494.137521][T11364] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 494.137551][T11364] do_syscall_64+0xcd/0x4e0 [ 494.137575][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.137592][T11364] RIP: 0033:0x7ff68438eec9 [ 494.137606][T11364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.137623][T11364] RSP: 002b:00007ff6825f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 494.137639][T11364] RAX: ffffffffffffffda RBX: 00007ff6845e5fa0 RCX: 00007ff68438eec9 [ 494.137649][T11364] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 494.137660][T11364] RBP: 00007ff6825f6090 R08: 0000200000000480 R09: 0000000000000000 [ 494.137670][T11364] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 494.137681][T11364] R13: 00007ff6845e6038 R14: 00007ff6845e5fa0 R15: 00007ffe555104e8 [ 494.137703][T11364] [ 494.357957][T11366] tipc: Started in network mode [ 494.362801][T11366] tipc: Node identity 7e0d9a5ab5cd, cluster identity 4711 [ 494.369989][T11366] tipc: Enabled bearer , priority 0 [ 494.376735][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.385057][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.393636][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.401922][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.410242][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.418550][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.426857][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.435166][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.443469][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.451750][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.460042][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.468382][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.476707][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.485027][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.493325][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.501733][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.510102][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.518454][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.526790][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.535095][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.543392][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.551666][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.559989][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.568296][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.576611][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.584925][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.593258][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.601667][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.609959][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.618261][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.626581][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.634935][T11366] tipc: Enabling of bearer rejected, already enabled [ 494.644205][T11366] syzkaller0: entered promiscuous mode [ 494.649659][T11366] syzkaller0: entered allmulticast mode [ 494.822887][T11374] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1430'. [ 494.972297][T11374] tipc: Resetting bearer [ 495.006432][T11374] tipc: Disabling bearer [ 495.383722][ T1912] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 495.564293][ T1912] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 495.572368][ T1912] usb 1-1: config 0 has no interface number 0 [ 495.578457][ T1912] usb 1-1: too many endpoints for config 0 interface 1 altsetting 254: 128, using maximum allowed: 30 [ 495.589439][ T1912] usb 1-1: config 0 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 496.043400][ T5913] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 496.056796][ T1912] usb 1-1: config 0 interface 1 has no altsetting 0 [ 496.064860][ T1912] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 496.064924][ T1912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.121478][ T1912] usb 1-1: config 0 descriptor?? [ 496.131659][ T1912] cp210x 1-1:0.1: cp210x converter detected [ 496.320313][ T5913] usb 5-1: not running at top speed; connect to a high speed hub [ 496.472540][ T5913] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 496.617409][ T5913] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.628314][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.636421][ T5913] usb 5-1: Product: syz [ 496.640723][ T5913] usb 5-1: Manufacturer: syz [ 496.646955][ T5913] usb 5-1: SerialNumber: syz [ 496.647160][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.660625][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.670436][T11385] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 496.710937][ T30] audit: type=1400 audit(1759648086.985:1146): avc: denied { write } for pid=11399 comm="syz.3.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 496.796763][ T30] audit: type=1400 audit(1759648087.075:1147): avc: denied { read } for pid=11402 comm="syz.5.1442" name="card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 496.826590][ T1912] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 496.834861][ T30] audit: type=1400 audit(1759648087.075:1148): avc: denied { open } for pid=11402 comm="syz.5.1442" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 496.860625][ T30] audit: type=1400 audit(1759648087.125:1149): avc: denied { write } for pid=11402 comm="syz.5.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 496.883420][ T30] audit: type=1400 audit(1759648087.125:1150): avc: denied { nlmsg_write } for pid=11402 comm="syz.5.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 496.945652][ T30] audit: type=1400 audit(1759648087.225:1151): avc: denied { getopt } for pid=11384 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 496.998982][ T5913] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 497.053582][ T5913] usb 5-1: USB disconnect, device number 40 [ 497.153472][ T1912] usb 1-1: cp210x converter now attached to ttyUSB0 [ 497.300948][ T30] audit: type=1400 audit(1759648087.575:1152): avc: denied { name_bind } for pid=11407 comm="syz.1.1445" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 497.419592][ T30] audit: type=1400 audit(1759648087.695:1153): avc: denied { ioctl } for pid=11407 comm="syz.1.1445" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 499.836999][T11421] random: crng reseeded on system resumption [ 499.932738][ T5913] usb 1-1: USB disconnect, device number 46 [ 500.177412][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 500.215244][ T5913] cp210x 1-1:0.1: device disconnected [ 500.963432][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.972758][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.355920][ T30] audit: type=1804 audit(1759648091.625:1154): pid=11454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1457" name="/newroot/63/file1" dev="fuse" ino=1 res=1 errno=0 [ 501.377454][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.501164][T11457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=11457 comm=syz.3.1458 [ 501.699210][ T30] audit: type=1400 audit(1759648091.955:1155): avc: denied { setopt } for pid=11461 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 502.139930][T11468] FAULT_INJECTION: forcing a failure. [ 502.139930][T11468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.153112][T11468] CPU: 0 UID: 0 PID: 11468 Comm: syz.4.1461 Not tainted syzkaller #0 PREEMPT(full) [ 502.153134][T11468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.153145][T11468] Call Trace: [ 502.153151][T11468] [ 502.153158][T11468] dump_stack_lvl+0x16c/0x1f0 [ 502.153184][T11468] should_fail_ex+0x512/0x640 [ 502.153208][T11468] _copy_from_user+0x2e/0xd0 [ 502.153230][T11468] csum_and_copy_from_iter_full+0x21a/0x1f90 [ 502.153267][T11468] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 502.153295][T11468] ? rcu_is_watching+0x12/0xc0 [ 502.153320][T11468] ? trace_kmalloc+0x2b/0xd0 [ 502.153338][T11468] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 502.153360][T11468] ? __alloc_skb+0x166/0x380 [ 502.153376][T11468] ? rcu_watching_snap_stopped_since+0x41/0x110 [ 502.153408][T11468] ip_generic_getfrag+0x170/0x270 [ 502.153433][T11468] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 502.153462][T11468] ? __alloc_skb+0x200/0x380 [ 502.153481][T11468] ? __pfx___alloc_skb+0x10/0x10 [ 502.153503][T11468] raw_getfrag+0x22d/0x2a0 [ 502.153520][T11468] ? __ip_append_data+0x203a/0x41a0 [ 502.153548][T11468] __ip_append_data+0x34e9/0x41a0 [ 502.153578][T11468] ? __pfx_raw_getfrag+0x10/0x10 [ 502.153603][T11468] ? ip_dst_mtu_maybe_forward.constprop.0+0x332/0x750 [ 502.153623][T11468] ? __pfx___ip_append_data+0x10/0x10 [ 502.153654][T11468] ip_append_data+0x10f/0x1a0 [ 502.153681][T11468] ? __pfx_raw_getfrag+0x10/0x10 [ 502.153700][T11468] raw_sendmsg+0xeee/0x38b0 [ 502.153729][T11468] ? __pfx_raw_sendmsg+0x10/0x10 [ 502.153749][T11468] ? avc_has_perm_noaudit+0x149/0x3b0 [ 502.153778][T11468] ? avc_has_perm+0x144/0x1f0 [ 502.153814][T11468] ? sock_has_perm+0x259/0x2f0 [ 502.153846][T11468] ? __pfx_raw_sendmsg+0x10/0x10 [ 502.153866][T11468] inet_sendmsg+0x11c/0x140 [ 502.153886][T11468] ____sys_sendmsg+0x973/0xc70 [ 502.153915][T11468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.153937][T11468] ? trace_sched_exit_tp+0xd1/0x120 [ 502.153972][T11468] ___sys_sendmsg+0x134/0x1d0 [ 502.153995][T11468] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.154049][T11468] __sys_sendmsg+0x16d/0x220 [ 502.154070][T11468] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.154107][T11468] do_syscall_64+0xcd/0x4e0 [ 502.154131][T11468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.154149][T11468] RIP: 0033:0x7f7a4058eec9 [ 502.154164][T11468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.154182][T11468] RSP: 002b:00007f7a413e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.154199][T11468] RAX: ffffffffffffffda RBX: 00007f7a407e6180 RCX: 00007f7a4058eec9 [ 502.154211][T11468] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000007 [ 502.154221][T11468] RBP: 00007f7a413e4090 R08: 0000000000000000 R09: 0000000000000000 [ 502.154232][T11468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.154241][T11468] R13: 00007f7a407e6218 R14: 00007f7a407e6180 R15: 00007fff8e4d2348 [ 502.154266][T11468] [ 502.456160][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.542743][T11483] netlink: 'syz.4.1462': attribute type 30 has an invalid length. [ 503.653623][ T30] audit: type=1400 audit(1759648093.905:1156): avc: denied { mounton } for pid=11469 comm="syz.4.1462" path="/proc/987/task" dev="proc" ino=37524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 504.554791][ T30] audit: type=1400 audit(1759648094.835:1157): avc: denied { create } for pid=11477 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 504.753353][ T30] audit: type=1400 audit(1759648095.025:1158): avc: denied { ioctl } for pid=11490 comm="syz.5.1466" path="socket:[37543]" dev="sockfs" ino=37543 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 505.153658][ T30] audit: type=1400 audit(1759648095.385:1159): avc: denied { shutdown } for pid=11497 comm="syz.0.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.226417][ T30] audit: type=1400 audit(1759648095.455:1160): avc: denied { getopt } for pid=11497 comm="syz.0.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 506.001634][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056609000: rx timeout, send abort [ 506.012321][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056609000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 506.206038][ T30] audit: type=1400 audit(1759648096.485:1161): avc: denied { mount } for pid=11507 comm="syz.1.1472" name="/" dev="ramfs" ino=37577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 506.308888][ T30] audit: type=1400 audit(1759648096.515:1162): avc: denied { getopt } for pid=11507 comm="syz.1.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 506.348724][T11515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.415079][T11517] siw: device registration error -23 [ 506.613764][T11515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.630341][ T30] audit: type=1326 audit(1759648096.525:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7043b8eec9 code=0x7ffc0000 [ 506.663200][ T30] audit: type=1326 audit(1759648096.525:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f7043b8eec9 code=0x7ffc0000 [ 506.699255][ T30] audit: type=1326 audit(1759648096.525:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7043b8eec9 code=0x7ffc0000 [ 506.723760][ T30] audit: type=1326 audit(1759648096.525:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7043b8eec9 code=0x7ffc0000 [ 507.144611][ T5955] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 507.185410][ T30] audit: type=1400 audit(1759648097.465:1167): avc: denied { create } for pid=11531 comm="syz.3.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 507.296394][ T5955] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 507.307490][ T5955] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.333901][ T5955] usb 6-1: config 0 interface 0 has no altsetting 0 [ 507.352487][T11535] blktrace: Concurrent blktraces are not allowed on sg0 [ 507.363236][ T5955] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 507.471699][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.487014][ T5955] usb 6-1: config 0 descriptor?? [ 507.523132][ T5965] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 507.703479][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.718501][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.824979][ T5965] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 507.887194][ T5965] usb 4-1: config 0 has no interface number 0 [ 507.893523][ T5965] usb 4-1: config 0 interface 41 has no altsetting 0 [ 507.906289][ T5965] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 507.923206][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.931955][ T5965] usb 4-1: Product: syz [ 507.936217][ T5965] usb 4-1: Manufacturer: syz [ 507.941909][ T5965] usb 4-1: SerialNumber: syz [ 507.947951][ T5955] apple 0003:05AC:027A.000E: unknown main item tag 0x0 [ 508.720216][ T30] audit: type=1400 audit(1759648098.295:1168): avc: denied { mounton } for pid=11541 comm="syz.1.1480" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 508.816943][ T5955] apple 0003:05AC:027A.000E: unknown main item tag 0x0 [ 508.824544][ T5965] usb 4-1: config 0 descriptor?? [ 508.829670][ T5955] apple 0003:05AC:027A.000E: unknown main item tag 0x0 [ 508.837389][ T5955] apple 0003:05AC:027A.000E: unknown main item tag 0x0 [ 508.957684][ T30] audit: type=1400 audit(1759648099.195:1169): avc: denied { read } for pid=11545 comm="syz.4.1481" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 508.957706][ T5955] apple 0003:05AC:027A.000E: unknown main item tag 0x0 [ 508.981751][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.004124][ T30] audit: type=1400 audit(1759648099.195:1170): avc: denied { open } for pid=11545 comm="syz.4.1481" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 509.029052][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.041684][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.054567][ T30] audit: type=1400 audit(1759648099.205:1171): avc: denied { read } for pid=11545 comm="syz.4.1481" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 509.092891][T11552] syzkaller0: entered promiscuous mode [ 509.098405][T11552] syzkaller0: entered allmulticast mode [ 509.133281][ T30] audit: type=1400 audit(1759648099.205:1172): avc: denied { open } for pid=11545 comm="syz.4.1481" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 509.369456][ T5955] apple 0003:05AC:027A.000E: hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0 [ 509.444812][ T5955] usb 6-1: USB disconnect, device number 15 [ 509.693746][ T5913] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 509.841987][ T5965] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 509.864856][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 509.878023][ T5913] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 509.887151][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.898625][ T5913] usb 1-1: config 0 has no interface number 0 [ 509.904888][ T5913] usb 1-1: config 0 interface 216 has no altsetting 0 [ 509.970503][T11567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.644462][ T5913] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 510.703228][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.887926][ T5913] usb 1-1: config 0 descriptor?? [ 510.970749][T11571] fuseblk: Unknown parameter 'rootmde' [ 510.978149][T11573] blktrace: Concurrent blktraces are not allowed on sg0 [ 511.140183][T11554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1484'. [ 511.154714][ T5913] usb 1-1: USB disconnect, device number 47 [ 511.238917][T11581] input: syz1 as /devices/virtual/input/input34 [ 511.397307][T11584] siw: device registration error -23 [ 511.684736][ T5965] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 511.700931][ T5965] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 511.729404][ T5965] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 511.761749][ T5965] usb 4-1: USB disconnect, device number 61 [ 512.277227][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 512.277237][ T30] audit: type=1400 audit(1759648102.555:1177): avc: denied { read } for pid=11597 comm="syz.5.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 512.445969][ T30] audit: type=1400 audit(1759648102.725:1178): avc: denied { read } for pid=11593 comm="syz.3.1498" path="socket:[37843]" dev="sockfs" ino=37843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 512.492059][ T30] audit: type=1400 audit(1759648102.735:1179): avc: denied { watch } for pid=11593 comm="syz.3.1498" path="/file5" dev="ramfs" ino=37842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 512.530569][ T30] audit: type=1400 audit(1759648102.735:1180): avc: denied { watch_sb watch_reads } for pid=11593 comm="syz.3.1498" path="/file5" dev="ramfs" ino=37842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 512.575159][T11589] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.1494'. [ 513.538645][T11623] blktrace: Concurrent blktraces are not allowed on sg0 [ 513.722732][ T5807] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 513.853338][ T5974] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 513.934382][ T5807] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 513.944892][ T5807] usb 6-1: config 0 has no interface number 0 [ 513.952251][ T5807] usb 6-1: too many endpoints for config 0 interface 1 altsetting 254: 128, using maximum allowed: 30 [ 513.964220][ T5807] usb 6-1: config 0 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 513.988333][ T5807] usb 6-1: config 0 interface 1 has no altsetting 0 [ 513.998568][ T5807] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 514.015972][ T5974] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.016867][T11633] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1507'. [ 514.024232][ T5974] usb 5-1: config 0 has no interface number 0 [ 514.040624][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.055455][ T5974] usb 5-1: too many endpoints for config 0 interface 1 altsetting 254: 128, using maximum allowed: 30 [ 514.068736][ T5807] usb 6-1: config 0 descriptor?? [ 514.073979][ T5974] usb 5-1: config 0 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 514.093792][ T5974] usb 5-1: config 0 interface 1 has no altsetting 0 [ 514.101317][ T5807] cp210x 6-1:0.1: cp210x converter detected [ 514.107562][ T5974] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 514.116725][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.128688][ T5974] usb 5-1: config 0 descriptor?? [ 514.317516][T11633] random: crng reseeded on system resumption [ 514.507248][ T5974] cp210x 5-1:0.1: cp210x converter detected [ 514.674799][ T5807] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 514.887240][ T5807] usb 6-1: cp210x converter now attached to ttyUSB0 [ 514.897341][ T5974] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 515.026419][T11640] siw: device registration error -23 [ 515.194307][ T5974] usb 5-1: cp210x converter now attached to ttyUSB1 [ 515.755865][T11652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.771163][ T30] audit: type=1400 audit(1759648106.025:1181): avc: denied { connect } for pid=11651 comm="syz.1.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 517.418534][ T5974] usb 6-1: USB disconnect, device number 16 [ 517.434989][ T5974] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 517.476374][ T5974] cp210x 6-1:0.1: device disconnected [ 517.510237][ T30] audit: type=1400 audit(1759648107.785:1182): avc: denied { read } for pid=11670 comm="syz.5.1516" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 517.553485][ T30] audit: type=1400 audit(1759648107.815:1183): avc: denied { open } for pid=11670 comm="syz.5.1516" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 517.553642][ T30] audit: type=1400 audit(1759648107.825:1184): avc: denied { ioctl } for pid=11670 comm="syz.5.1516" path="/dev/fb0" dev="devtmpfs" ino=628 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 517.630173][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 517.887301][T11676] blktrace: Concurrent blktraces are not allowed on sg0 [ 518.620704][ T30] audit: type=1400 audit(1759648108.895:1185): avc: denied { associate } for pid=11667 comm="syz.1.1515" name="hugetlb.2MB.usage_in_bytes" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 518.661523][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.670156][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.778129][ T5974] usb 5-1: USB disconnect, device number 41 [ 518.787501][ T5974] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 518.835436][ T5974] cp210x 5-1:0.1: device disconnected [ 518.851572][ T30] audit: type=1400 audit(1759648109.115:1186): avc: denied { map } for pid=11685 comm="syz.3.1520" path="socket:[38805]" dev="sockfs" ino=38805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 518.929638][ T30] audit: type=1400 audit(1759648109.115:1187): avc: denied { read } for pid=11685 comm="syz.3.1520" path="socket:[38805]" dev="sockfs" ino=38805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 519.029897][T11692] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1521'. [ 519.499238][T11688] random: crng reseeded on system resumption [ 519.893147][ T30] audit: type=1400 audit(1759648110.115:1188): avc: denied { ioctl } for pid=11701 comm="syz.1.1522" path="socket:[38826]" dev="sockfs" ino=38826 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 520.701154][T11719] trusted_key: encrypted_key: insufficient parameters specified [ 520.748824][ T30] audit: type=1326 audit(1759648111.025:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.1.1528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7043b8eec9 code=0x0 [ 523.768186][ T5851] Bluetooth: hci3: command 0x0405 tx timeout [ 524.227187][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 526.006640][ T30] audit: type=1326 audit(1759648116.275:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.0.1542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff68438eec9 code=0x0 [ 526.432231][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.465382][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.424527][ T5807] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 527.603114][ T5807] usb 1-1: device descriptor read/64, error -71 [ 527.623512][ T30] audit: type=1400 audit(1759648117.895:1191): avc: denied { audit_write } for pid=11823 comm="syz.5.1550" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 527.697151][ T30] audit: type=1400 audit(1759648117.975:1192): avc: denied { watch watch_reads } for pid=11823 comm="syz.5.1550" path="/proc/288/ns" dev="proc" ino=40017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 527.822402][T11829] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1551'. [ 527.873176][ T5807] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 528.562616][ T5807] usb 1-1: device descriptor read/64, error -71 [ 528.673417][ T5807] usb usb1-port1: attempt power cycle [ 529.024064][ T5974] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 529.031757][ T5807] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 529.183540][ T5807] usb 1-1: device descriptor read/8, error -71 [ 529.314370][ T5974] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 529.323636][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.344122][ T5974] usb 5-1: config 0 descriptor?? [ 529.423457][ T5807] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 529.721788][ T5974] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 529.760385][ T5974] [drm:udl_init] *ERROR* Selecting channel failed [ 529.766960][ T5807] usb 1-1: device descriptor read/8, error -71 [ 529.787494][ T5974] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 529.794717][ T5974] [drm] Initialized udl on minor 2 [ 529.884817][ T5807] usb usb1-port1: unable to enumerate USB device [ 529.898331][T11854] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1558'. [ 529.898344][ T5974] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 529.979560][T11856] random: crng reseeded on system resumption [ 530.116435][ T5974] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 530.126614][ T5807] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 530.135453][ T5807] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 530.147553][ T5974] usb 5-1: USB disconnect, device number 42 [ 530.413394][ T5807] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 530.644715][ T5807] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.652984][ T5807] usb 6-1: config 0 has no interface number 0 [ 530.659882][ T5807] usb 6-1: too many endpoints for config 0 interface 1 altsetting 254: 128, using maximum allowed: 30 [ 530.671046][ T5807] usb 6-1: config 0 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 531.227222][T11869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=11869 comm=syz.0.1563 [ 531.240203][ T5807] usb 6-1: config 0 interface 1 has no altsetting 0 [ 531.330317][ T5955] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 531.924066][ T5807] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 531.933737][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.943759][ T5807] usb 6-1: config 0 descriptor?? [ 531.950551][ T5807] cp210x 6-1:0.1: cp210x converter detected [ 532.003117][ T5955] usb 5-1: Using ep0 maxpacket: 8 [ 532.009802][ T5955] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 532.017270][ T5955] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 532.030650][ T5955] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.042439][ T5955] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 532.043078][ T1912] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 532.053748][ T5955] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 532.072338][ T5955] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 532.080244][ T5955] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 532.091579][ T5955] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.103403][ T5955] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 532.114557][ T5955] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 532.134385][ T5955] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 532.142754][ T5955] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 532.160096][ T5955] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.171849][ T5955] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 532.183883][ T5955] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 532.199289][ T5955] usb 5-1: string descriptor 0 read error: -22 [ 532.206766][ T5955] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 532.213112][ T1912] usb 1-1: Using ep0 maxpacket: 8 [ 532.215860][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.222416][ T1912] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 532.233337][ T5955] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 532.242855][ T1912] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 532.284974][ T1912] usb 1-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.315098][ T1912] usb 1-1: config 1 interface 0 has no altsetting 0 [ 532.608240][ T5807] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 532.615884][ T1912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.625397][ T1912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.626093][T11866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1562'. [ 532.633598][ T1912] usb 1-1: Product: syz [ 532.650276][ T1912] usb 1-1: Manufacturer: syz [ 532.655224][ T1912] usb 1-1: SerialNumber: syz [ 532.681108][ T5955] usb 5-1: USB disconnect, device number 43 [ 532.687357][T11872] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 532.694781][T11872] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 532.915606][ T30] audit: type=1400 audit(1759648123.185:1193): avc: denied { ioctl } for pid=11868 comm="syz.0.1563" path="socket:[40265]" dev="sockfs" ino=40265 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 532.940293][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.949492][ T5807] usb 6-1: cp210x converter now attached to ttyUSB0 [ 533.584948][T11895] vxfs: unable to read disk superblock at 1 [ 533.590945][T11895] vxfs: unable to read disk superblock at 8 [ 533.596930][T11895] vxfs: can't find superblock. [ 533.972265][ T1912] usb 1-1: bad CDC descriptors [ 534.017731][T11909] vxfs: unable to read disk superblock at 1 [ 534.024162][T11909] vxfs: unable to read disk superblock at 8 [ 534.035891][T11909] vxfs: can't find superblock. [ 534.048800][ T1912] usb 1-1: USB disconnect, device number 52 [ 534.400580][ T5965] usb 6-1: USB disconnect, device number 17 [ 534.408299][ T5965] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 534.424301][ T5965] cp210x 6-1:0.1: device disconnected [ 534.822222][ T30] audit: type=1326 audit(1759648125.095:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.0.1574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff68438eec9 code=0x0 [ 535.572690][T11927] input: syz1 as /devices/virtual/input/input36 [ 644.323477][ C0] ------------[ cut here ]------------ [ 644.329816][ C0] WARNING: CPU: 0 PID: 13 at kernel/rcu/tree_stall.h:1050 rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 644.340761][ C0] Modules linked in: [ 644.345012][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 644.354286][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 644.364333][ C0] Workqueue: events_unbound toggle_allocation_gate [ 644.370836][ C0] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 644.377764][ C0] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 80 10 8a 9a e8 60 e3 82 00 b8 01 00 00 00 87 05 35 65 e9 18 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 f4 c7 5f 90 48 81 fd c0 d1 1c 8e 74 5a 48 b8 00 [ 644.397361][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00010046 [ 644.403422][ C0] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a0ab40 [ 644.411382][ C0] RDX: fffffbfff3514210 RSI: 0000000000000004 RDI: ffffffff9a8a1080 [ 644.419343][ C0] RBP: ffffffff8e1cd1c0 R08: 0000000000000001 R09: fffffbfff3514210 [ 644.427303][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffffffff1bc2240 [ 644.435261][ C0] R13: 0000000000000246 R14: ffffffff8e1cd1c0 R15: ffff8880b863b312 [ 644.443219][ C0] FS: 0000000000000000(0000) GS:ffff888124e77000(0000) knlGS:0000000000000000 [ 644.452139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.458719][ C0] CR2: 0000001b31f21ff8 CR3: 000000000df80000 CR4: 00000000003526f0 [ 644.466680][ C0] Call Trace: [ 644.469946][ C0] [ 644.472781][ C0] rcu_core+0x4cf/0x1530 [ 644.477017][ C0] ? sched_clock+0x38/0x60 [ 644.481424][ C0] ? sched_clock_cpu+0x6c/0x530 [ 644.486268][ C0] ? __pfx_rcu_core+0x10/0x10 [ 644.490946][ C0] ? mark_held_locks+0x49/0x80 [ 644.495707][ C0] handle_softirqs+0x219/0x8e0 [ 644.500475][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 644.505762][ C0] __irq_exit_rcu+0x109/0x170 [ 644.510434][ C0] irq_exit_rcu+0x9/0x30 [ 644.514676][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 644.520300][ C0] [ 644.523221][ C0] [ 644.526144][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 644.532128][ C0] RIP: 0010:smp_call_function_many_cond+0xdfd/0x1600 [ 644.538810][ C0] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 b5 0c 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 [ 644.558408][ C0] RSP: 0018:ffffc90000127888 EFLAGS: 00000293 [ 644.564466][ C0] RAX: 0000000000000000 RBX: ffff8880b87402e0 RCX: ffffffff81af06a1 [ 644.572427][ C0] RDX: ffff88801d6f8000 RSI: ffffffff81af067b RDI: 0000000000000005 [ 644.580387][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 644.588344][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 644.596304][ C0] R13: ffffed10170e805d R14: 0000000000000001 R15: 0000000000000001 [ 644.604271][ C0] ? smp_call_function_many_cond+0xe21/0x1600 [ 644.610336][ C0] ? smp_call_function_many_cond+0xdfb/0x1600 [ 644.616410][ C0] ? smp_call_function_many_cond+0xdfb/0x1600 [ 644.622479][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 644.627506][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 644.633840][ C0] ? __pfx___text_poke+0x10/0x10 [ 644.638775][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 644.643796][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 644.648908][ C0] ? __kmalloc_node_track_caller_noprof+0xf4/0x8a0 [ 644.655403][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 644.661120][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 644.666142][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 644.672397][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 644.678634][ C0] ? find_held_lock+0x2b/0x80 [ 644.683317][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 644.689294][ C0] jump_label_update+0x376/0x550 [ 644.694232][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 644.700124][ C0] static_key_enable+0x1a/0x20 [ 644.704884][ C0] toggle_allocation_gate+0xfa/0x280 [ 644.710164][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 644.716059][ C0] ? rcu_is_watching+0x12/0xc0 [ 644.720825][ C0] process_one_work+0x9cc/0x1b70 [ 644.725769][ C0] ? __pfx_process_one_work+0x10/0x10 [ 644.731146][ C0] ? assign_work+0x1a0/0x250 [ 644.735735][ C0] worker_thread+0x6c8/0xf10 [ 644.740336][ C0] ? __pfx_worker_thread+0x10/0x10 [ 644.745443][ C0] kthread+0x3c5/0x780 [ 644.749506][ C0] ? __pfx_kthread+0x10/0x10 [ 644.754095][ C0] ? rcu_is_watching+0x12/0xc0 [ 644.758858][ C0] ? __pfx_kthread+0x10/0x10 [ 644.763445][ C0] ret_from_fork+0x56d/0x730 [ 644.768028][ C0] ? __pfx_kthread+0x10/0x10 [ 644.772613][ C0] ret_from_fork_asm+0x1a/0x30 [ 644.777390][ C0] [ 644.780402][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 644.787670][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 644.796945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 644.806990][ C0] Workqueue: events_unbound toggle_allocation_gate [ 644.813488][ C0] Call Trace: [ 644.816771][ C0] [ 644.819608][ C0] dump_stack_lvl+0x3d/0x1f0 [ 644.824198][ C0] vpanic+0x640/0x6f0 [ 644.828175][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 644.834498][ C0] panic+0xca/0xd0 [ 644.838210][ C0] ? __pfx_panic+0x10/0x10 [ 644.842628][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 644.847733][ C0] check_panic_on_warn+0xab/0xb0 [ 644.852663][ C0] __warn+0xf6/0x3c0 [ 644.856551][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 644.862872][ C0] report_bug+0x3c3/0x580 [ 644.867200][ C0] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 644.873520][ C0] handle_bug+0x184/0x210 [ 644.877848][ C0] exc_invalid_op+0x17/0x50 [ 644.882350][ C0] asm_exc_invalid_op+0x1a/0x20 [ 644.887193][ C0] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 644.894121][ C0] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 80 10 8a 9a e8 60 e3 82 00 b8 01 00 00 00 87 05 35 65 e9 18 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 f4 c7 5f 90 48 81 fd c0 d1 1c 8e 74 5a 48 b8 00 [ 644.913717][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00010046 [ 644.919774][ C0] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a0ab40 [ 644.927736][ C0] RDX: fffffbfff3514210 RSI: 0000000000000004 RDI: ffffffff9a8a1080 [ 644.935696][ C0] RBP: ffffffff8e1cd1c0 R08: 0000000000000001 R09: fffffbfff3514210 [ 644.943654][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffffffff1bc2240 [ 644.951613][ C0] R13: 0000000000000246 R14: ffffffff8e1cd1c0 R15: ffff8880b863b312 [ 644.959581][ C0] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 644.965909][ C0] rcu_core+0x4cf/0x1530 [ 644.970146][ C0] ? sched_clock+0x38/0x60 [ 644.974555][ C0] ? sched_clock_cpu+0x6c/0x530 [ 644.979400][ C0] ? __pfx_rcu_core+0x10/0x10 [ 644.984079][ C0] ? mark_held_locks+0x49/0x80 [ 644.988840][ C0] handle_softirqs+0x219/0x8e0 [ 644.993608][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 644.998901][ C0] __irq_exit_rcu+0x109/0x170 [ 645.003574][ C0] irq_exit_rcu+0x9/0x30 [ 645.007814][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 645.013441][ C0] [ 645.016360][ C0] [ 645.019281][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 645.025251][ C0] RIP: 0010:smp_call_function_many_cond+0xdfd/0x1600 [ 645.031925][ C0] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 b5 0c 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 [ 645.051522][ C0] RSP: 0018:ffffc90000127888 EFLAGS: 00000293 [ 645.057577][ C0] RAX: 0000000000000000 RBX: ffff8880b87402e0 RCX: ffffffff81af06a1 [ 645.065537][ C0] RDX: ffff88801d6f8000 RSI: ffffffff81af067b RDI: 0000000000000005 [ 645.073500][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 645.081462][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 645.089420][ C0] R13: ffffed10170e805d R14: 0000000000000001 R15: 0000000000000001 [ 645.097386][ C0] ? smp_call_function_many_cond+0xe21/0x1600 [ 645.103453][ C0] ? smp_call_function_many_cond+0xdfb/0x1600 [ 645.109524][ C0] ? smp_call_function_many_cond+0xdfb/0x1600 [ 645.115592][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 645.120647][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 645.126981][ C0] ? __pfx___text_poke+0x10/0x10 [ 645.131916][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 645.136935][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 645.142045][ C0] ? __kmalloc_node_track_caller_noprof+0xf4/0x8a0 [ 645.148541][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 645.154261][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 645.159285][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 645.165527][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 645.171766][ C0] ? find_held_lock+0x2b/0x80 [ 645.176449][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 645.182428][ C0] jump_label_update+0x376/0x550 [ 645.187365][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 645.193256][ C0] static_key_enable+0x1a/0x20 [ 645.198019][ C0] toggle_allocation_gate+0xfa/0x280 [ 645.203297][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 645.209192][ C0] ? rcu_is_watching+0x12/0xc0 [ 645.213959][ C0] process_one_work+0x9cc/0x1b70 [ 645.218906][ C0] ? __pfx_process_one_work+0x10/0x10 [ 645.224285][ C0] ? assign_work+0x1a0/0x250 [ 645.228873][ C0] worker_thread+0x6c8/0xf10 [ 645.233475][ C0] ? __pfx_worker_thread+0x10/0x10 [ 645.238584][ C0] kthread+0x3c5/0x780 [ 645.242649][ C0] ? __pfx_kthread+0x10/0x10 [ 645.247235][ C0] ? rcu_is_watching+0x12/0xc0 [ 645.252001][ C0] ? __pfx_kthread+0x10/0x10 [ 645.256586][ C0] ret_from_fork+0x56d/0x730 [ 645.261168][ C0] ? __pfx_kthread+0x10/0x10 [ 645.265799][ C0] ret_from_fork_asm+0x1a/0x30 [ 645.270572][ C0] [ 646.366777][ C0] Shutting down cpus with NMI [ 646.371665][ C0] Kernel Offset: disabled [ 646.375965][ C0] Rebooting in 86400 seconds..