last executing test programs: 10.693733811s ago: executing program 1 (id=2810): shutdown(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3}) close(r4) 9.631319189s ago: executing program 1 (id=2814): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x6}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2, 0xfffffffd}}, 0x0, 0x0}}) 9.222294767s ago: executing program 1 (id=2817): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a0000000850000e5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.091606538s ago: executing program 1 (id=2820): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a0000000850000e50d0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0x1c, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) listen(r4, 0xc) fsopen(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.724311703s ago: executing program 1 (id=2826): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fed000/0x1000)=nil, 0x0, 0x36}, 0x68) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f00000d5000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00000fb000/0x4000)=nil) socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x3) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0xbb, 0x8b}, 0x0) 7.681147496s ago: executing program 3 (id=2827): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x6}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2, 0xfffffffd}}, 0x0, 0x0}}) 7.53227423s ago: executing program 3 (id=2828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000140)={0x100, {{0xa, 0x4e21, 0x101, @empty, 0x7}}, {{0xa, 0x4e23, 0x6, @private1, 0x5}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = socket$isdn(0x22, 0x2, 0x10) r4 = socket$isdn(0x22, 0x2, 0x2) dup3(r4, r3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x2800048, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x7d) socketpair$unix(0x1, 0x4, 0x0, 0x0) 6.900994774s ago: executing program 3 (id=2829): r0 = socket$tipc(0x1e, 0x2, 0x0) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000005100)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES64=r2], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="e05a5de397ee362f573ea834553caa1da54c10e2b1d5db38cac6689e25a2cbda", 0x20}], 0x1, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x240000c5}], 0x1, 0x40180a0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) socket$netlink(0x10, 0x3, 0x0) 6.733713622s ago: executing program 1 (id=2830): socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$vbi(&(0x7f00000003c0), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000008c0)={0x4, @sliced={0x9, [0x10, 0x4, 0x7, 0x7, 0x2, 0x4ac, 0x7, 0x7, 0x80, 0x7, 0x1, 0x8, 0xfffd, 0x4, 0xfffb, 0x3, 0x401, 0x0, 0xd, 0x6, 0x7, 0x0, 0xe, 0x6b, 0x6, 0x400, 0x4, 0x7, 0x2, 0xd6c, 0xad9, 0x7, 0x9, 0xfffb, 0xb229, 0x8, 0x7, 0x4, 0x7fff, 0xfff9, 0xa07, 0x9, 0x3, 0x2, 0x9, 0xb]}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019300)=ANY=[@ANYBLOB="4800000010000305000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000008000002800128008000100687372001c00028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x48}}, 0x0) 6.171400505s ago: executing program 0 (id=2832): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000580)=""/43, 0x2b}], 0x3, 0xc1, 0xffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000017c0)={@loopback, 0xffffffac, 0x0, 0x1, 0x8, 0x4, 0xa9}, &(0x7f0000000280)=0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="650f340f3566b842005b0fd8d805000000b9a00000000f01c13e0f070fde460b0f01300f01b3f5620000f2360f217a0f07", 0x31}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x50) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.816276196s ago: executing program 0 (id=2835): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000580)=""/43, 0x2b}], 0x3, 0xc1, 0xffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000017c0)={@loopback, 0xffffffac, 0x0, 0x1, 0x8, 0x4, 0xa9}, &(0x7f0000000280)=0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="650f340f3566b842005b0fd8d805000000b9a00000000f01c13e0f070fde460b0f01300f01b3f5620000f2360f217a0f07", 0x31}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x50) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.596300687s ago: executing program 2 (id=2837): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a0000000850000e50d0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0x1c, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) listen(r4, 0xc) fsopen(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.083382785s ago: executing program 3 (id=2838): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x4000000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="840100001000130400000000fbdbdf250a0101dd000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000400", @ANYRES32=r3, @ANYRES32=0x0], 0x184}}, 0x4048851) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r7, r8, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x8, 0x40, 0x80000001, 0x400, {{0x28, 0x4, 0x0, 0x2, 0xa0, 0x65, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x43, 0x1, 0xb, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @timestamp_addr={0x44, 0x54, 0x4a, 0x1, 0x9, [{@remote, 0x401}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x30}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@multicast1, 0xf}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x9}, {@empty, 0xfffffff7}, {@empty, 0x2}]}, @rr={0x7, 0xf, 0x75, [@dev={0xac, 0x14, 0x14, 0x2}, @empty, @dev={0xac, 0x14, 0x14, 0x42}]}, @generic={0x89, 0x7, "4598e596c6"}, @rr={0x7, 0xb, 0x42, [@remote, @rand_addr=0x64010100]}]}}}}}) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000800)=@newpolicy={0x314, 0x13, 0x200, 0x70bd29, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@empty, 0x4e23, 0x5, 0x4e20, 0x5, 0xa, 0x20, 0xc0, 0x2f, r5, r7}, {0x78, 0x0, 0xd445, 0x4, 0x7, 0x7, 0x5, 0x2}, {0x6, 0x78dd, 0x2928, 0x2}, 0x401, 0x6e6bb3}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @tmpl={0x84, 0x5, [{{@in=@private=0xa010102, 0x4d5, 0x33}, 0xa, @in=@empty, 0x3501, 0x0, 0x2, 0x1, 0x2fd, 0x9, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in=@multicast1, 0x3501, 0x2, 0x0, 0xc0, 0xa1, 0x8, 0x4}]}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd26, 0x70bd27, 0x70bd28, 0x70bd2d, 0xffffffff, [0xba, 0x7e34359f, 0xfffffffc, 0x100]}}, @algo_crypt={0x136, 0x2, {{'cbc-aes-neonbs\x00'}, 0x770, "2d2fa95fe342bc6f5759229cda7ec6b56c1f92316a176497ad2542d4bebc407449f06845a01e699967a40fc36fd539d14bb0390c8bff84d0f4376aa46cd6bd7fd785fd500789e262f4d182ee9c385eed882c56a2dfe51c46c0d4c3493c8f26c9fd695dae7f0012c17fca269c64b7cea37b0b4a4d6415318d21d55ef52bbbf86b50740ead4c7bf8360755f0c2a8f7c579412aac896de9a3e050ff58fc7a32ca6e4f640cfe4cd0f6e5647ff283a659254633e400de3fdd5c422718f577da43241f5d70eb4023d589216db8670b1f481396ff3bb2ad9840d7a17627b2eee619743e9fe2bdc6439ea3115f0a9a5b0608"}}, @mark={0xc, 0x15, {0x35075b, 0xd89}}, @coaddr={0x14, 0xe, @in6=@empty}, @replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0xff}, 0x8, @in6=@local, 0x3502, 0x2, 0x0, 0x4, 0x2, 0x0, 0x9}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) 4.906782384s ago: executing program 4 (id=2839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000806}, 0x80) 4.765794917s ago: executing program 4 (id=2840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r7, 0x80000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x4c, 0x1000000, 0x0}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_emit_ethernet(0x6a, &(0x7f00000005c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @rand_addr=0x64010102}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "fc27ac0241edc906a98919f3ae93716c8ba7ea7851aa2ff9", "f6c5fb48182c247e3e04aadbfbe58bcae2a326f81ef709ba547ae97ea35a145a"}}}}}}, 0x0) 4.656811233s ago: executing program 2 (id=2841): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x20000000000000ed, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec80fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xcc000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a4, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c084}, 0x4048000) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r5, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r5, &(0x7f0000000440)={0x1, {&(0x7f0000000080)=""/102, 0x66, 0x0, 0xb0b1e5602f67cafb, 0x1}}, 0xfffffffffffffef5) 4.491441897s ago: executing program 0 (id=2842): socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$vbi(&(0x7f00000003c0), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000008c0)={0x4, @sliced={0x9, [0x10, 0x4, 0x7, 0x7, 0x2, 0x4ac, 0x7, 0x7, 0x80, 0x7, 0x1, 0x8, 0xfffd, 0x4, 0xfffb, 0x3, 0x401, 0x0, 0xd, 0x6, 0x7, 0x0, 0xe, 0x6b, 0x6, 0x400, 0x4, 0x7, 0x2, 0xd6c, 0xad9, 0x7, 0x9, 0xfffb, 0xb229, 0x8, 0x7, 0x4, 0x7fff, 0xfff9, 0xa07, 0x9, 0x3, 0x2, 0x9, 0xb]}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019300)=ANY=[@ANYBLOB="4800000010000305000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000008000002800128008000100687372001c00028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x48}}, 0x0) 3.771044223s ago: executing program 0 (id=2843): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x4000000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="840100001000130400000000fbdbdf250a0101dd000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000400", @ANYRES32=r3, @ANYRES32=0x0], 0x184}}, 0x4048851) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r7, r8, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x8, 0x40, 0x80000001, 0x400, {{0x28, 0x4, 0x0, 0x2, 0xa0, 0x65, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x43, 0x1, 0xb, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @timestamp_addr={0x44, 0x54, 0x4a, 0x1, 0x9, [{@remote, 0x401}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x30}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@multicast1, 0xf}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x9}, {@empty, 0xfffffff7}, {@empty, 0x2}]}, @rr={0x7, 0xf, 0x75, [@dev={0xac, 0x14, 0x14, 0x2}, @empty, @dev={0xac, 0x14, 0x14, 0x42}]}, @generic={0x89, 0x7, "4598e596c6"}, @rr={0x7, 0xb, 0x42, [@remote, @rand_addr=0x64010100]}]}}}}}) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000800)=@newpolicy={0x314, 0x13, 0x200, 0x70bd29, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@empty, 0x4e23, 0x5, 0x4e20, 0x5, 0xa, 0x20, 0xc0, 0x2f, r5, r7}, {0x78, 0x0, 0xd445, 0x4, 0x7, 0x7, 0x5, 0x2}, {0x6, 0x78dd, 0x2928, 0x2}, 0x401, 0x6e6bb3}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @tmpl={0x84, 0x5, [{{@in=@private=0xa010102, 0x4d5, 0x33}, 0xa, @in=@empty, 0x3501, 0x0, 0x2, 0x1, 0x2fd, 0x9, 0x1}, {{@in=@broadcast, 0x4d3, 0x33}, 0xa, @in=@multicast1, 0x3501, 0x2, 0x0, 0xc0, 0xa1, 0x8, 0x4}]}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd26, 0x70bd27, 0x70bd28, 0x70bd2d, 0xffffffff, [0xba, 0x7e34359f, 0xfffffffc, 0x100]}}, @algo_crypt={0x136, 0x2, {{'cbc-aes-neonbs\x00'}, 0x770, "2d2fa95fe342bc6f5759229cda7ec6b56c1f92316a176497ad2542d4bebc407449f06845a01e699967a40fc36fd539d14bb0390c8bff84d0f4376aa46cd6bd7fd785fd500789e262f4d182ee9c385eed882c56a2dfe51c46c0d4c3493c8f26c9fd695dae7f0012c17fca269c64b7cea37b0b4a4d6415318d21d55ef52bbbf86b50740ead4c7bf8360755f0c2a8f7c579412aac896de9a3e050ff58fc7a32ca6e4f640cfe4cd0f6e5647ff283a659254633e400de3fdd5c422718f577da43241f5d70eb4023d589216db8670b1f481396ff3bb2ad9840d7a17627b2eee619743e9fe2bdc6439ea3115f0a9a5b0608"}}, @mark={0xc, 0x15, {0x35075b, 0xd89}}, @coaddr={0x14, 0xe, @in6=@empty}, @replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0xff}, 0x8, @in6=@local, 0x3502, 0x2, 0x0, 0x4, 0x2, 0x0, 0x9}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) 3.692571801s ago: executing program 4 (id=2844): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000580)=""/43, 0x2b}], 0x3, 0xc1, 0xffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000017c0)={@loopback, 0xffffffac, 0x0, 0x1, 0x8, 0x4, 0xa9}, &(0x7f0000000280)=0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="650f340f3566b842005b0fd8d805000000b9a00000000f01c13e0f070fde460b0f01300f01b3f5620000f2360f217a0f07", 0x31}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x50) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.104724426s ago: executing program 4 (id=2845): writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000021780)={{{@in=@empty, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000021880)=0xe8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x802) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) 3.052815343s ago: executing program 2 (id=2846): syz_open_dev$usbfs(&(0x7f00000002c0), 0x75, 0x44500) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x8, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}}, 0x108) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200), 0x80) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24040800) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x94, r6, 0x48d3d8990dd3efd7, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x6e}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x58, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8d}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x163}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x26}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x2400c095}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x4000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) 2.070868787s ago: executing program 4 (id=2847): r0 = socket$tipc(0x1e, 0x2, 0x0) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000005100)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES64=r2], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="e05a5de397ee362f573ea834553caa1da54c10e2b1d5db38cac6689e25a2cbda", 0x20}], 0x1, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x240000c5}], 0x1, 0x40180a0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) socket$netlink(0x10, 0x3, 0x0) 2.056771403s ago: executing program 3 (id=2848): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002180)={0x6, 0x0, &(0x7f0000001bc0), &(0x7f0000001c00)='GPL\x00', 0x4, 0x76, &(0x7f0000001c40)=""/118, 0x1f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e40)={0x0, 0xa, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002100)=[{0x2, 0x2, 0x8, 0x4}, {0x2, 0x5, 0x2, 0x9}, {0x3, 0x2, 0x1, 0x4}, {0x5, 0x1, 0xc, 0x4}, {0x2, 0x1, 0x3, 0x9}, {0x2, 0x2, 0xe, 0x6}], 0x10, 0xffffffff}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x19, r8, 0x1, 0x0, 0x6, @random="000000000004"}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4000, &(0x7f0000000080)={0x11, 0x1e, r9, 0x1, 0xff, 0x6, @broadcast}, 0x14) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)) 1.429423321s ago: executing program 0 (id=2849): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000580)=""/43, 0x2b}], 0x3, 0xc1, 0xffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000017c0)={@loopback, 0xffffffac, 0x0, 0x1, 0x8, 0x4, 0xa9}, &(0x7f0000000280)=0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x50) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.422280663s ago: executing program 2 (id=2850): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a0000000850000e50d0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0x1c, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) listen(r4, 0xc) fsopen(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.303461295s ago: executing program 3 (id=2851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r5) (async, rerun: 32) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 32) recvmsg(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000640)=""/68, 0x44}, 0x40010000) (async) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) (async, rerun: 64) connect$nfc_llcp(r4, &(0x7f0000000100)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x53, 0x7, "07cbdd3199047dc26d311f0f244b25ba35ea8f61cd07e107dab26da8d164f15b35c0b7669366c634dd2326e7f6dccdec8306910919e39811abd472ad0eab81", 0xd}, 0x60) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000040)={0x54, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x973c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x148, r8, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x75}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8cf53208}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async, rerun: 32) eventfd(0x0) (rerun: 32) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) 819.663844ms ago: executing program 4 (id=2852): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0xfffffffc], [0x80, 0x0, 0x0, 0xffffffff]}) r4 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) unshare(0x60060200) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRES8=r4], 0x5c}, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c64d2, &(0x7f0000000200)={r3}) 662.32315ms ago: executing program 0 (id=2853): r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x101c, 0x4, 0x0, 0x0, 0x5, 0x4}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sg(&(0x7f00000001c0), 0x40000000, 0x248204) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) r4 = syz_usb_connect$uac1(0x1, 0xd5, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x7f, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x2, "bd74f4"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x3, 0xb, "cee5b48fff"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x200, 0x6, "46eb36dd"}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x1858, 0x16, "b624"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf, 0x3, 0x5, 0x10, 'q', "75f7a7"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7d, 0x2, 0x9, 0x3, '\x00}'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x8, 0xdf}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x4, 0x5, 0x5, "95e430285dc5d3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0xc, 0xc3, {0x7, 0x25, 0x1, 0x0, 0x6, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4b, 0x8, 0x1007}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x4, 0x7, {0x7, 0x25, 0x1, 0x1, 0x8, 0x2}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1b, 0x42, 0x2, 0x78, 0x7f}, 0x13c, &(0x7f0000000380)={0x5, 0xf, 0x13c, 0x4, [@generic={0x57, 0x10, 0xa, "f43c96f5a8c9947feb1872e12c08bea7fd1e03ef68a9c6aab04f1e20b617a7bdad2959ee953bfd335b05cfddca27fe3ace8993d84661a0c4a69b420b846b495e6409e6d2b99164f1e4d4ea7f975f0891816fdfd0"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "1e7d9a4a4cbd804bc56b67ee13cc4557"}, @ptm_cap={0x3}, @generic={0xc9, 0x10, 0x2, "5a62e1bb2720a5121974e1b215fd57042c7582ea1f992c8be69ac53a106f8b6dad164727e2496c71fb2bd2dcefed6b6bf6b13e1d42d91e8f0919bb112216839f8e2a6590db37b0e01a28512226911e56cb809a66e9b5a15064d3c118973509357d2401a3d4ea4d74432ef52095223f59d64ed533af410bbdb1ba80a142d0e7deaf1bc4315f694f013d3b25d84137c8baf641efdcc96438ed2d59d1ba1de8dde1dfa719dac14de067bdd07741fbb32de9753579112efd3a3643b8cab4cde07e2f0da0f070b2b6"}]}, 0x4, [{0xa2, &(0x7f00000004c0)=@string={0xa2, 0x3, "bb2016f0fe2d01e998c4078bf4f8dee5188fa97c9ba894b662b9d006f58f07c708445549d9d30ce0f7285d85a56caf141bf98df6a7a6b65851134ad51e9e10eb8f7485d637617d18f9359923b88868c2aa8fdffa548a7d11aff9828a8f81fb49e5f705c6d8dcf4333c571d83609528bdf6a7ab6fee8f8c956e45a09ef1a446b25c827afa9748e3a31d71a5c20c27835d955f063ad143c1f0657302579976d80d"}}, {0xb, &(0x7f0000000200)=ANY=[@ANYBLOB]}, {0xcd, &(0x7f0000000580)=@string={0xcd, 0x3, "2905d6be13b5290eae1ba3ba55b950a457390a7e53db99a845b7d86fca4afef7fe55615be8bdd99bd2c5fe51bfaf5f368dc56d05e97b44a8a4f774aef8fa747dc3df95cc37e80de115edbe68ce465e145873ec1a1cc2458bdafe645124b22691c9af34406f0fbe38ecef6047ded3d322af84524630287fced59afd0eb33704e50c34bdf2a07dbc301549149c4c295d3e75e82332a5da125e20f114fd1cd9de75224dcb37d72524b33c411e8f02e6cccc9062988cb97b62e59a781ae998127db9c5c7b206036726a8325c3c"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x403}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000780)={0x14, &(0x7f0000000740)={0x20, 0x22, 0x32, {0x32, 0x3, "bc54f92a9fca3e17b8db8009357393b70a6746c6ac10fe9f8e3d333b121ef06d0e17b690075bdddae95c1e327ea86095"}}, &(0x7f0000001080)=ANY=[@ANYBLOB="0003e7000000e7036ce8cdaaacd311ca73bbdad998a8b86b74dff698f3971b6d24881dab2ddb8323c2517315632581c7f76c96fbea2aea1f1892eb4b1ef2a4ea6bf16cb8dded1b0aa00338b0eaf504bc2220aa70e8a0e440529c35e1f4a5f42900a28c4a8a68c892692a815eeb889d24dc8ea1b08ef00a8d6531ed4902401cb502bade2b780099391e3228198eeb2d507f575517de2a1ff31830d3954ac41435d473bb9e94ff8b134bf839c1bde9bbc736d655166de7ff5b750dfe40206fdd1bb6a06daaf1601ac20f0ea18512e45f4f05b701a8b010fc6f076d9a1891afcfb4ac8abbdfb6bf4a06cd38ce1dd21123d56462cf4000001d2cbe94f1e1242c0e2ffe1606b3bd82d6d81d023dc79bcbc7a52cf69e5e9165f8d01d600bcef86f660779ab30c2793c9842f214eb435ee062f12e95a9feda1e25a0a6b9b62bf5a48c119e13f26b8d2b3d55250a33ce99eef05bd47e5a6ddb"]}, &(0x7f0000000b80)={0x44, &(0x7f0000000800)={0x0, 0x16, 0x8e, "892f0f397d210a23b645ea0ceacd5e79603b7f84db282653d084005a04c1170c87be4ef2866e4deeb572227c4cd5dd1aa202bf76f5b0cd2bc3eeefefcce896c4a90c8b3b3302a998d63745caa37e8d8ff3e3cb5a9661440f77c14c20451bcad7c5db002973f33fdaeebea577cf89395ccd98caec8a4188bd2aed51e85bfabd4d9b769c3e00e61bb677924ead32f2"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x81, 0x2, "a3d8"}, &(0x7f0000000a80)={0x20, 0x82, 0x3, "b32b37"}, &(0x7f0000000ac0)={0x20, 0x83, 0x1, "f3"}, &(0x7f0000000b00)={0x20, 0x84, 0x4, "7986f925"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "bf53bb"}}) r5 = syz_usb_connect$uac1(0x2, 0x142, &(0x7f0000000c00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x3, 0x1, 0x3, 0x30, 0xd5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa9}, [@mixer_unit={0x9, 0x24, 0x4, 0x1, 0x4, "28eb19c5"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x3, 0x6, [0xe, 0x7, 0x6, 0x9, 0x5, 0x0], 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x3, 0x6, 0x6, 0x5, 0x9c}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x4, 0x6, [0x7, 0xa, 0x3, 0x3, 0x5, 0x8], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x2, 0x4, 0x94}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x0, 0x7, "16"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0xe2, "4c59f6df601500"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x2, 0x33, 0x9, "809e91a96600e0"}, @as_header={0x7, 0x24, 0x1, 0x5c}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x3, 0x5, 0x80, 'N'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x68, 0x4, 0x2, 0x74}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0x7, 0x1, {0x7, 0x25, 0x1, 0x81, 0x11, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0xa, 0x10, "e39f8386"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x3, 0x2b, 0x5, "3114b1ce334550e8b1"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x101, 0xa3, "666a1b605535"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0xfffd, 0x7, "735a27a6aa427fd45a"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x4e, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, "", "7a86"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xfd, 0x8, {0x7, 0x25, 0x1, 0x2, 0x2, 0xd727}}}}}}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x310, 0x8, 0xe, 0xe7, 0x40, 0xfd}, 0xe5, &(0x7f0000000dc0)={0x5, 0xf, 0xe5, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x7, 0x11, 0xa73d, [0xcf, 0xffcf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x49, 0x1, 0xb8, 0xe, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x0, 0x7}, @generic={0xba, 0x10, 0xb, "14edfb92504ec48412220fef5883ed3224b671e257033331e121ca0c46b964ce09cdc1330e46427cc520be0ab4c3f75397c750623f5d14c2d4268cc9babdeeee764756c14f38c69da436d094b0045ba98c2f20b4388ed4cc3578c24f48aed5313a9c3c2e739f56d9474b77921245be78454c7efa564cac3edcc8563c24e2143f98fc3aa0e294be20c714b17030d7d1664b9e5a967ba89d4e70a46764b8d60df21cb98413bd0ba36eb88b5229c0b51385c4dc3c0a8a29de"}]}, 0x2, [{0x52, &(0x7f0000000ec0)=@string={0x52, 0x3, "82315620206caf8e9d3a2831911beb87cf9a692630d9e4e70aacffd75463ee4c561d56999911a9935de1a1985f40c95a5764f1957cbe5d3c437ac178c33ddb883df02abdbe2f97d18fba63e227ee5e3b"}}, {0xf5, &(0x7f0000000f40)=ANY=[@ANYBLOB="f5038738cff028275d2bef2e826124ecb2689834140fab1d621824156dbe622fec2ce8ba3cff179275175f2802cb2e7da7d62faec26e71540f4164f468de51c617d65ec11fb46d5f2eb51b6713388babbb196a000069d4644e9cafa1c526bf4bbe5202d512bbcbb667b4be4fb682fa1482c10557598e9d835e7b2117c3f051d4ce31511fbb621943260e801f56bcf2f49895b81f207a8500f86e1dd32e700ddd26c4aa421d141d05ef40a36d8d5c93ffd987713e033a79e3c5dcf6a1882077f1761be2dc347174e79c3c41c0cce5373a963cdba3aea05b67329ed6f6cfa3627141095f1a4a9c92ed32a49f56faf3fa9b0409591106"]}]}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 75.209867ms ago: executing program 2 (id=2854): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x400, 0x1000, &(0x7f00000006c0)=""/4096, 0x40f00, 0x48, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x7, 0xff800000, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) 0s ago: executing program 2 (id=2855): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000000), 0x4003) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0) kernel console output (not intermixed with test programs): e failslab, interval 1, probability 0, space 0, times 0 [ 811.854956][T14623] CPU: 0 UID: 0 PID: 14623 Comm: syz.3.2376 Not tainted syzkaller #0 PREEMPT(full) [ 811.854981][T14623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 811.854992][T14623] Call Trace: [ 811.854999][T14623] [ 811.855007][T14623] dump_stack_lvl+0x16c/0x1f0 [ 811.855042][T14623] should_fail_ex+0x512/0x640 [ 811.855063][T14623] ? __kmalloc_cache_noprof+0x5f/0x780 [ 811.855091][T14623] should_failslab+0xc2/0x120 [ 811.855111][T14623] __kmalloc_cache_noprof+0x72/0x780 [ 811.855137][T14623] ? alloc_mnt_ns+0xce/0x380 [ 811.855168][T14623] ? alloc_mnt_ns+0xce/0x380 [ 811.855192][T14623] alloc_mnt_ns+0xce/0x380 [ 811.855219][T14623] copy_mnt_ns+0x112/0xac0 [ 811.855239][T14623] ? create_new_namespaces+0x30/0xa90 [ 811.855270][T14623] create_new_namespaces+0xd3/0xa90 [ 811.855292][T14623] ? bpf_lsm_capable+0x9/0x10 [ 811.855313][T14623] ? security_capable+0x7e/0x260 [ 811.855344][T14623] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 811.855370][T14623] ksys_unshare+0x45b/0xa40 [ 811.855395][T14623] ? __pfx_ksys_unshare+0x10/0x10 [ 811.855424][T14623] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 811.855453][T14623] __x64_sys_unshare+0x31/0x40 [ 811.855477][T14623] do_syscall_64+0xcd/0xfa0 [ 811.855501][T14623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.855519][T14623] RIP: 0033:0x7f6079d8f6c9 [ 811.855533][T14623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.855551][T14623] RSP: 002b:00007f607abd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 811.855569][T14623] RAX: ffffffffffffffda RBX: 00007f6079fe6180 RCX: 00007f6079d8f6c9 [ 811.855581][T14623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060060200 [ 811.855592][T14623] RBP: 00007f607abd3090 R08: 0000000000000000 R09: 0000000000000000 [ 811.855603][T14623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.855613][T14623] R13: 00007f6079fe6218 R14: 00007f6079fe6180 R15: 00007ffe3ec46818 [ 811.855639][T14623] [ 812.060030][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.183061][T14628] trusted_key: encrypted_key: master key parameter '' is invalid [ 812.215185][ T30] audit: type=1400 audit(1762743171.713:661): avc: denied { write } for pid=14630 comm="syz.4.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 812.236291][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.259832][ T30] audit: type=1400 audit(1762743171.763:662): avc: denied { getopt } for pid=14613 comm="syz.2.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 812.406649][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2380'. [ 814.736312][ T5818] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 815.367689][ T5818] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 815.378521][ T5818] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.395253][ T5818] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 815.413207][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.637974][ T5818] usb 1-1: usb_control_msg returned -32 [ 815.645810][ T5818] usbtmc 1-1:16.0: can't read capabilities [ 817.960798][T14692] random: crng reseeded on system resumption [ 818.949486][T14697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14697 comm=syz.1.2395 [ 818.962954][T14696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14696 comm=syz.1.2395 [ 819.036470][ T5892] usb 1-1: USB disconnect, device number 41 [ 819.202740][T14698] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 819.676847][ T5892] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 820.033759][T14720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2399'. [ 820.158764][ T5892] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 820.195083][ T5892] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 820.211261][ T5892] usb 4-1: config 0 has no interface number 0 [ 820.243420][ T5892] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 820.311985][ T5892] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 820.397759][ T5892] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 820.431164][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.467497][ T5892] usb 4-1: config 0 descriptor?? [ 820.680255][ T5892] usb 4-1: USB disconnect, device number 54 [ 822.765443][ T5892] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 823.417332][ T5892] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.525476][T14752] ieee802154 phy0 wpan0: encryption failed: -22 [ 823.532820][T12333] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 823.579952][ T30] audit: type=1326 audit(1762743183.083:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.0.2410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff58518f6c9 code=0x0 [ 823.716740][T12333] usb 3-1: Using ep0 maxpacket: 8 [ 823.724220][T12333] usb 3-1: unable to get BOS descriptor or descriptor too short [ 823.739996][T12333] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 823.752949][T12333] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 823.769882][T12333] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 823.787187][T12333] usb 3-1: config 1 interface 0 has no altsetting 0 [ 823.800581][T12333] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 823.811343][T12333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.824834][T12333] usb 3-1: Product: syz [ 823.830016][T12333] usb 3-1: Manufacturer: syz [ 823.835184][T12333] usb 3-1: SerialNumber: syz [ 823.855051][T14744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 823.868678][T14744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 823.926777][ T5818] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 824.076818][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 824.080882][ T5892] usb 5-1: config 0 has no interface number 0 [ 824.093743][ T5892] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 824.106526][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.166757][ T5892] usb 5-1: config 0 descriptor?? [ 824.229277][ T5892] usb 5-1: selecting invalid altsetting 1 [ 824.271860][ T5892] dvb_ttusb_budget: ttusb_init_controller: error [ 824.318411][ T5892] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 825.619604][ T5818] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 825.636566][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.710712][ T5892] DVB: Unable to find symbol cx22700_attach() [ 826.677521][ T5818] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 826.699444][ T5818] usb 1-1: config 0 has no interface number 0 [ 826.833202][ T5892] DVB: Unable to find symbol tda10046_attach() [ 826.868260][ T5818] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 826.891560][T12333] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 826.916288][ T5892] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 826.920915][T12333] usb 3-1: USB disconnect, device number 52 [ 826.931343][ T5818] usb 1-1: string descriptor 0 read error: -71 [ 826.965048][ T5818] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 826.973030][ T5892] usb 5-1: USB disconnect, device number 56 [ 827.023431][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.279172][T14775] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2414'. [ 827.291401][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2414'. [ 827.444219][ T5818] usb 1-1: config 0 descriptor?? [ 827.529406][ T5818] usb 1-1: can't set config #0, error -71 [ 827.584765][ T5818] usb 1-1: USB disconnect, device number 42 [ 827.952064][T14787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2416'. [ 828.126333][ T5893] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 828.147884][T14788] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2417'. [ 828.161356][ T30] audit: type=1400 audit(1762743187.653:664): avc: denied { write } for pid=14782 comm="syz.0.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 828.346283][ T30] audit: type=1400 audit(1762743187.653:665): avc: denied { nlmsg_write } for pid=14782 comm="syz.0.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 828.398855][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 828.425594][T14794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2418'. [ 828.537551][ T5892] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 828.549303][ T5893] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 828.559275][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.582785][ T5893] usb 3-1: config 0 descriptor?? [ 828.779997][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 828.877540][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.069903][ T5892] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 829.082871][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.182494][ T5892] usb 4-1: config 0 descriptor?? [ 829.291701][ T5893] lenovo 0003:17EF:60EE.0022: hidraw0: USB HID v1.01 Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 829.497762][T12333] usb 3-1: USB disconnect, device number 53 [ 829.797466][T14804] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 829.883328][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 829.906203][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 829.936643][ T5892] usb 4-1: USB disconnect, device number 55 [ 830.376733][T14823] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2426'. [ 830.386428][ T5892] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 830.394332][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2426'. [ 830.466627][ T5818] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 830.671881][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 830.683708][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 830.699559][ T5818] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 830.717594][ T5818] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 830.731398][ T5818] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.747656][ T5818] usb 2-1: config 1 interface 0 has no altsetting 0 [ 830.757843][ T5818] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.758347][ T5892] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 830.768101][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.787219][ T5818] usb 2-1: Product: syz [ 830.791667][ T5818] usb 2-1: Manufacturer: syz [ 831.177485][T14824] block nbd3: shutting down sockets [ 831.182447][ T5892] usb 5-1: config 0 interface 0 has no altsetting 0 [ 831.182808][ T5818] usb 2-1: SerialNumber: syz [ 831.191634][ T5892] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 831.207988][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 831.222269][ T5892] usb 5-1: Product: syz [ 831.232212][T14814] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 831.232993][ T5892] usb 5-1: Manufacturer: syz [ 831.255809][ T5892] usb 5-1: SerialNumber: syz [ 831.255876][T14814] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 831.292536][ T5892] usb 5-1: config 0 descriptor?? [ 831.310967][ T5892] usb 5-1: selecting invalid altsetting 0 [ 831.393307][ T30] audit: type=1400 audit(1762743190.893:666): avc: denied { mounton } for pid=14833 comm="syz.2.2430" path="/485/file1" dev="tmpfs" ino=2672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 831.691366][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 832.998432][ T5818] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 833.038654][ T5818] usb 2-1: USB disconnect, device number 38 [ 833.056471][ T5884] usb 5-1: USB disconnect, device number 57 [ 833.116733][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 833.128816][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.157783][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 833.205840][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.232105][ T24] usb 4-1: config 0 descriptor?? [ 833.887559][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 833.903187][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 833.927658][ T24] usb 4-1: USB disconnect, device number 56 [ 833.937176][T14854] random: crng reseeded on system resumption [ 837.186511][ T5884] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 837.902289][ T5884] usb 5-1: string descriptor 0 read error: -22 [ 837.908800][ T5884] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 837.920480][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.194462][ T5884] usb 5-1: USB disconnect, device number 58 [ 839.261706][ T30] audit: type=1400 audit(1762743198.730:667): avc: denied { listen } for pid=14915 comm="syz.0.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 839.283856][ T30] audit: type=1326 audit(1762743198.780:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.1.2453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f222c38f6c9 code=0x0 [ 841.254933][T14937] ieee802154 phy0 wpan0: encryption failed: -22 [ 841.405105][T14928] loop2: detected capacity change from 0 to 63 [ 842.409460][ T5818] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 842.513193][T14952] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 843.107673][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.163325][ T5818] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 843.178697][ T5818] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.188938][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.200124][ T5818] usb 4-1: Product: syz [ 843.204377][ T5818] usb 4-1: Manufacturer: syz [ 843.210183][ T5818] usb 4-1: SerialNumber: syz [ 843.465377][T14964] kAFS: unparsable volume name [ 843.546833][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 843.634891][ T5818] usb 4-1: cannot find UAC_HEADER [ 843.764062][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 843.819219][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 843.841787][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 843.859549][ T5818] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 843.870717][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 843.887155][ T5818] usb 4-1: USB disconnect, device number 57 [ 843.896920][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.002885][T14260] udevd[14260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.039780][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 844.107944][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.425209][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 844.449597][ T24] usbtmc 3-1:16.0: can't read capabilities [ 844.571293][T14972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2468'. [ 844.640815][ T24] usb 3-1: USB disconnect, device number 54 [ 844.660755][T14978] random: crng reseeded on system resumption [ 844.752448][T14982] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.766773][T12333] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 844.806170][ T5884] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 844.916623][T12333] usb 2-1: Using ep0 maxpacket: 32 [ 844.923384][T12333] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.934120][T12333] usb 2-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.947717][T12333] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 844.959606][T12333] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 844.970006][T12333] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 844.983369][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 844.990058][T12333] usb 2-1: config 0 interface 0 has no altsetting 0 [ 844.990186][ T5884] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 844.997590][T12333] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 845.016996][ T5884] usb 5-1: New USB device found, idVendor=06cd, idProduct=0402, bcdDevice=21.39 [ 845.016996][T12333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.025687][T12333] usb 2-1: config 0 descriptor?? [ 845.031041][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.303342][ T5884] usb 5-1: string descriptor 0 read error: -71 [ 845.325466][ T5884] usb 5-1: USB disconnect, device number 59 [ 845.571751][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'. [ 845.630608][T14989] : entered promiscuous mode [ 845.677883][T14974] /dev/nullb0: Can't open blockdev [ 845.774965][T14987] netlink: 'syz.2.2473': attribute type 3 has an invalid length. [ 847.463870][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2481'. [ 847.599189][T12333] usbhid 2-1:0.0: can't add hid device: -71 [ 847.629000][T12333] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 847.861650][T12333] usb 2-1: USB disconnect, device number 39 [ 848.302170][T15017] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2482'. [ 848.311544][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2482'. [ 848.607886][ T30] audit: type=1400 audit(1762743208.110:669): avc: denied { ioctl } for pid=15035 comm="syz.3.2488" path="socket:[64528]" dev="sockfs" ino=64528 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 848.681426][ T30] audit: type=1400 audit(1762743208.130:670): avc: denied { connect } for pid=15035 comm="syz.3.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 848.710395][T15042] overlayfs: upper fs does not support file handles, falling back to index=off. [ 848.792035][ T30] audit: type=1400 audit(1762743208.210:671): avc: denied { write } for pid=15035 comm="syz.3.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 849.177002][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2488'. [ 850.490666][T15065] FAULT_INJECTION: forcing a failure. [ 850.490666][T15065] name failslab, interval 1, probability 0, space 0, times 0 [ 850.589772][T15065] CPU: 0 UID: 0 PID: 15065 Comm: syz.4.2494 Not tainted syzkaller #0 PREEMPT(full) [ 850.589799][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 850.589808][T15065] Call Trace: [ 850.589814][T15065] [ 850.589821][T15065] dump_stack_lvl+0x16c/0x1f0 [ 850.589847][T15065] should_fail_ex+0x512/0x640 [ 850.589861][T15065] ? __kmalloc_noprof+0xca/0x880 [ 850.589877][T15065] should_failslab+0xc2/0x120 [ 850.589890][T15065] __kmalloc_noprof+0xdd/0x880 [ 850.589904][T15065] ? bpf_test_init.isra.0+0x88/0x130 [ 850.589920][T15065] ? bpf_test_init.isra.0+0x88/0x130 [ 850.589931][T15065] bpf_test_init.isra.0+0x88/0x130 [ 850.589946][T15065] bpf_prog_test_run_flow_dissector+0x236/0x980 [ 850.589965][T15065] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 850.589981][T15065] ? find_held_lock+0x2b/0x80 [ 850.589995][T15065] ? __fget_files+0x204/0x3c0 [ 850.590007][T15065] ? __fget_files+0x20e/0x3c0 [ 850.590016][T15065] ? __might_fault+0x20/0x190 [ 850.590034][T15065] ? fput+0x9b/0xd0 [ 850.590046][T15065] ? __bpf_prog_get+0x97/0x2a0 [ 850.590064][T15065] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 850.590079][T15065] __sys_bpf+0x1035/0x4980 [ 850.590097][T15065] ? __pfx___sys_bpf+0x10/0x10 [ 850.590112][T15065] ? find_held_lock+0x2b/0x80 [ 850.590127][T15065] ? find_held_lock+0x2b/0x80 [ 850.590142][T15065] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 850.590161][T15065] ? fput+0x9b/0xd0 [ 850.590173][T15065] ? ksys_write+0x1ac/0x250 [ 850.590183][T15065] ? __pfx_ksys_write+0x10/0x10 [ 850.590195][T15065] __x64_sys_bpf+0x78/0xc0 [ 850.590210][T15065] ? lockdep_hardirqs_on+0x7c/0x110 [ 850.590226][T15065] do_syscall_64+0xcd/0xfa0 [ 850.590236][T15065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.590247][T15065] RIP: 0033:0x7fe1e678f6c9 [ 850.590256][T15065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.590266][T15065] RSP: 002b:00007fe1e7638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 850.590277][T15065] RAX: ffffffffffffffda RBX: 00007fe1e69e6090 RCX: 00007fe1e678f6c9 [ 850.590284][T15065] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 850.590290][T15065] RBP: 00007fe1e7638090 R08: 0000000000000000 R09: 0000000000000000 [ 850.590295][T15065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.590301][T15065] R13: 00007fe1e69e6128 R14: 00007fe1e69e6090 R15: 00007ffdb11644b8 [ 850.590317][T15065] [ 850.851416][ T5884] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 851.035364][ T5884] usb 3-1: config 0 has no interfaces? [ 851.043049][ T5884] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 851.057459][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.067977][ T5884] usb 3-1: config 0 descriptor?? [ 851.266672][T15076] netlink: 'syz.3.2497': attribute type 8 has an invalid length. [ 852.041731][T15084] Failed to initialize the IGMP autojoin socket (err -2) [ 852.666767][ T5893] usb 3-1: USB disconnect, device number 55 [ 852.744610][T15059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.025281][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2503'. [ 853.177345][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2503'. [ 853.507109][ T3502] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.701792][T15125] netlink: 'syz.4.2511': attribute type 10 has an invalid length. [ 854.716141][T15125] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2511'. [ 854.818198][T15127] block nbd1: Device being setup by another task [ 854.825975][T15122] block nbd1: shutting down sockets [ 855.006160][ T5884] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 855.017767][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2513'. [ 855.347792][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 855.365116][ T5884] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 855.397457][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 855.408215][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 855.420446][ T5884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 855.430778][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.440910][ T5884] usb 5-1: Product: syz [ 855.445140][ T5884] usb 5-1: Manufacturer: syz [ 855.451132][ T5884] usb 5-1: SerialNumber: syz [ 855.558196][ T30] audit: type=1326 audit(1762743215.060:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15138 comm="syz.2.2515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9036b8f6c9 code=0x0 [ 855.636615][ T1206] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 855.788255][ T1206] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 855.800424][ T1206] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.820896][ T1206] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 855.833564][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.898475][ T30] audit: type=1326 audit(1762743215.400:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15124 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e678f6c9 code=0x7ffc0000 [ 855.924380][ T5893] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 855.932179][ T30] audit: type=1326 audit(1762743215.400:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15124 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e678f6c9 code=0x7ffc0000 [ 855.958592][ T30] audit: type=1326 audit(1762743215.400:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15124 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1e678f6c9 code=0x7ffc0000 [ 855.984688][ T30] audit: type=1326 audit(1762743215.400:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15124 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e678f6c9 code=0x7ffc0000 [ 856.013090][ T30] audit: type=1326 audit(1762743215.400:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15124 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e678f6c9 code=0x7ffc0000 [ 856.039239][ T30] audit: type=1326 audit(1762743215.400:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15124 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1e678f6c9 code=0x7ffc0000 [ 856.064021][ T30] audit: type=1326 audit(1762743215.400:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15124 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e678f6c9 code=0x7ffc0000 [ 856.090697][ T1206] usb 1-1: usb_control_msg returned -32 [ 856.098197][ T1206] usbtmc 1-1:16.0: can't read capabilities [ 856.105724][ T30] audit: type=1326 audit(1762743215.400:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15124 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e678f6c9 code=0x7ffc0000 [ 856.127231][ T5884] usb 5-1: 0:2 : does not exist [ 856.130193][ T30] audit: type=1326 audit(1762743215.400:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15124 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe1e678f6c9 code=0x7ffc0000 [ 856.138122][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 856.169191][ T5893] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 856.177888][ T5884] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 856.186169][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.196923][ T5893] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 856.207958][ T5893] usb 3-1: config 0 has no interface number 0 [ 856.226154][ T5893] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 856.245227][ T5884] usb 5-1: USB disconnect, device number 60 [ 856.285366][T14260] udevd[14260]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.316008][ T5893] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 856.328272][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.339033][ T5893] usb 3-1: Product: syz [ 856.343217][ T5893] usb 3-1: Manufacturer: syz [ 856.349707][ T5893] usb 3-1: SerialNumber: syz [ 856.360091][ T5893] usb 3-1: config 0 descriptor?? [ 856.373740][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 856.404451][ T5893] snd-usb-audio 3-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 856.439870][T14260] udevd[14260]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.836281][T15149] tmpfs: Unknown parameter 'fsuuid' [ 858.976473][ T5893] usb 3-1: USB disconnect, device number 56 [ 859.049965][ T1206] usb 1-1: USB disconnect, device number 43 [ 859.151056][ T24] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 859.316452][T15180] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2525'. [ 859.325571][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2525'. [ 859.367540][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 859.441414][ T24] usb 4-1: config 0 has no interface number 0 [ 859.525970][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 859.536200][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.555413][ T24] usb 4-1: config 0 descriptor?? [ 859.585336][ T24] usb 4-1: selecting invalid altsetting 1 [ 859.607118][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 859.657075][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 859.859921][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 860.205204][ T24] DVB: Unable to find symbol cx22700_attach() [ 861.383063][T15199] trusted_key: syz.1.2531 sent an empty control message without MSG_MORE. [ 861.696210][ T24] DVB: Unable to find symbol tda10046_attach() [ 861.713972][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 861.790207][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 861.790223][ T30] audit: type=1400 audit(1762743221.290:720): avc: denied { create } for pid=15187 comm="syz.0.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 861.870717][ T30] audit: type=1400 audit(1762743221.320:721): avc: denied { write } for pid=15187 comm="syz.0.2529" path="socket:[65119]" dev="sockfs" ino=65119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 861.905527][T15210] Failed to initialize the IGMP autojoin socket (err -2) [ 862.444168][ T30] audit: type=1400 audit(1762743221.320:722): avc: denied { read } for pid=15187 comm="syz.0.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 862.475958][T15213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=15213 comm=syz.0.2529 [ 862.547162][T15215] nbd1: detected capacity change from 0 to 8 [ 862.563077][T15218] block nbd1: shutting down sockets [ 862.621941][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.631202][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 862.676436][ T56] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.688430][ T56] Buffer I/O error on dev nbd1, logical block 0, async page read [ 862.752814][T14260] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.768009][ T24] usb 4-1: USB disconnect, device number 58 [ 862.786350][T14260] Buffer I/O error on dev nbd1, logical block 0, async page read [ 862.795208][T14260] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.806663][T14260] Buffer I/O error on dev nbd1, logical block 0, async page read [ 862.817473][T14260] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.828971][T14260] Buffer I/O error on dev nbd1, logical block 0, async page read [ 862.837620][T14260] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.847344][T14260] Buffer I/O error on dev nbd1, logical block 0, async page read [ 862.855438][T14260] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 862.866612][T14260] Buffer I/O error on dev nbd1, logical block 0, async page read [ 862.874700][T14260] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 863.056121][T14260] Buffer I/O error on dev nbd1, logical block 0, async page read [ 863.071249][T14260] ldm_validate_partition_table(): Disk read failed. [ 863.121775][T14260] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 863.296983][T14260] Buffer I/O error on dev nbd1, logical block 0, async page read [ 863.317037][ T30] audit: type=1400 audit(1762743222.670:723): avc: denied { create } for pid=15228 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 863.342282][T14260] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 863.362370][ T30] audit: type=1400 audit(1762743222.670:724): avc: denied { write } for pid=15228 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 863.388577][ T30] audit: type=1400 audit(1762743222.670:725): avc: denied { read } for pid=15228 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 863.388617][T14260] Buffer I/O error on dev nbd1, logical block 0, async page read [ 863.435088][ T30] audit: type=1400 audit(1762743222.670:726): avc: denied { prog_load } for pid=15228 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 863.435350][T14260] Dev nbd1: unable to read RDB block 0 [ 863.472243][T14260] nbd1: unable to read partition table [ 863.478979][T14260] nbd1: partition table beyond EOD, truncated [ 863.488124][ T5185] ldm_validate_partition_table(): Disk read failed. [ 863.501237][ T5185] Dev nbd1: unable to read RDB block 0 [ 863.514137][ T5185] nbd1: unable to read partition table [ 863.527866][ T5185] nbd1: partition table beyond EOD, truncated [ 863.542029][ T30] audit: type=1400 audit(1762743222.670:727): avc: denied { bpf } for pid=15228 comm="syz.4.2536" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 863.593934][ T30] audit: type=1400 audit(1762743222.670:728): avc: denied { create } for pid=15228 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 863.617263][ T30] audit: type=1400 audit(1762743222.670:729): avc: denied { execmem } for pid=15228 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 863.618938][T14260] ldm_validate_partition_table(): Disk read failed. [ 863.655320][T14260] Dev nbd1: unable to read RDB block 0 [ 863.662811][T14260] nbd1: unable to read partition table [ 863.669101][T14260] nbd1: partition table beyond EOD, truncated [ 863.936993][T15241] binder: 15235:15241 ioctl c0306201 200000000040 returned -14 [ 864.396713][ T5893] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 864.716496][T15244] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2539'. [ 864.725828][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2539'. [ 864.916259][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2541'. [ 865.117067][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 865.173875][ T5893] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 865.192521][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.324574][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 865.334537][ T5893] usb 1-1: config 0 has no interface number 0 [ 865.348648][ T5893] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 865.362446][ T5893] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 865.866103][ T2149] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 865.879943][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.888241][ T5893] usb 1-1: Product: syz [ 865.892486][ T5893] usb 1-1: Manufacturer: syz [ 865.897397][ T5893] usb 1-1: SerialNumber: syz [ 865.911299][ T5893] usb 1-1: config 0 descriptor?? [ 865.925960][ T5893] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 865.974534][ T5893] snd-usb-audio 1-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 866.048953][T14260] udevd[14260]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.083626][ T2149] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 866.096084][ T2149] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.154656][ T2149] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 866.185093][ T2149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.228600][T15270] FAULT_INJECTION: forcing a failure. [ 866.228600][T15270] name failslab, interval 1, probability 0, space 0, times 0 [ 866.247006][T15270] CPU: 1 UID: 0 PID: 15270 Comm: syz.3.2548 Not tainted syzkaller #0 PREEMPT(full) [ 866.247033][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 866.247045][T15270] Call Trace: [ 866.247053][T15270] [ 866.247060][T15270] dump_stack_lvl+0x16c/0x1f0 [ 866.247096][T15270] should_fail_ex+0x512/0x640 [ 866.247118][T15270] ? fs_reclaim_acquire+0xae/0x150 [ 866.247150][T15270] should_failslab+0xc2/0x120 [ 866.247173][T15270] __kmalloc_noprof+0xdd/0x880 [ 866.247200][T15270] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 866.247229][T15270] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 866.247251][T15270] tomoyo_realpath_from_path+0xc2/0x6e0 [ 866.247276][T15270] ? tomoyo_profile+0x47/0x60 [ 866.247303][T15270] tomoyo_path_number_perm+0x245/0x580 [ 866.247332][T15270] ? tomoyo_path_number_perm+0x237/0x580 [ 866.247364][T15270] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 866.247396][T15270] ? find_held_lock+0x2b/0x80 [ 866.247446][T15270] ? find_held_lock+0x2b/0x80 [ 866.247469][T15270] ? hook_file_ioctl_common+0x145/0x410 [ 866.247501][T15270] ? __fget_files+0x20e/0x3c0 [ 866.247525][T15270] security_file_ioctl+0x9b/0x240 [ 866.247549][T15270] __x64_sys_ioctl+0xb7/0x210 [ 866.247578][T15270] do_syscall_64+0xcd/0xfa0 [ 866.247598][T15270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.247617][T15270] RIP: 0033:0x7f6079d8f6c9 [ 866.247634][T15270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.247652][T15270] RSP: 002b:00007f607ac15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.247671][T15270] RAX: ffffffffffffffda RBX: 00007f6079fe5fa0 RCX: 00007f6079d8f6c9 [ 866.247683][T15270] RDX: 0000200000001ac0 RSI: 0000000000004c0a RDI: 0000000000000007 [ 866.247694][T15270] RBP: 00007f607ac15090 R08: 0000000000000000 R09: 0000000000000000 [ 866.247706][T15270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.247717][T15270] R13: 00007f6079fe6038 R14: 00007f6079fe5fa0 R15: 00007ffe3ec46818 [ 866.247746][T15270] [ 866.247754][T15270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 866.421623][ T2149] usb 2-1: usb_control_msg returned -32 [ 866.464928][T15275] tmpfs: Unknown parameter 'fsuuid' [ 866.925187][ T2149] usbtmc 2-1:16.0: can't read capabilities [ 866.942905][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 866.942921][ T30] audit: type=1400 audit(1762743226.440:772): avc: denied { write } for pid=15237 comm="syz.0.2538" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 866.972005][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.482614][ T30] audit: type=1400 audit(1762743226.980:773): avc: denied { create } for pid=15282 comm="syz.3.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 867.504127][ T30] audit: type=1400 audit(1762743227.000:774): avc: denied { listen } for pid=15282 comm="syz.3.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 867.524474][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.073316][T15289] use of bytesused == 0 is deprecated and will be removed in the future, [ 868.088292][T15289] use the actual size instead. [ 868.294241][ T30] audit: type=1400 audit(1762743227.790:775): avc: denied { write } for pid=15290 comm="syz.3.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 868.294552][T15294] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2553'. [ 868.375731][ T30] audit: type=1400 audit(1762743227.790:776): avc: denied { nlmsg_write } for pid=15290 comm="syz.3.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 868.527476][ T5892] usb 2-1: USB disconnect, device number 40 [ 868.595682][ T24] usb 1-1: USB disconnect, device number 44 [ 868.767572][T15298] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2554'. [ 869.622975][ T30] audit: type=1400 audit(1762743228.970:777): avc: denied { create } for pid=15308 comm="syz.3.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 869.852464][ T30] audit: type=1400 audit(1762743228.970:778): avc: denied { read write } for pid=15308 comm="syz.3.2558" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 870.049302][ T30] audit: type=1400 audit(1762743228.970:779): avc: denied { open } for pid=15308 comm="syz.3.2558" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 870.514488][ T30] audit: type=1400 audit(1762743229.270:780): avc: denied { create } for pid=15308 comm="syz.3.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 870.580707][ T30] audit: type=1400 audit(1762743229.280:781): avc: denied { bind } for pid=15308 comm="syz.3.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 871.066891][T12333] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 871.179453][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.186223][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.236848][T12333] usb 3-1: Using ep0 maxpacket: 8 [ 871.257798][T12333] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 871.660415][T12333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.676504][T12333] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 871.685464][T12333] usb 3-1: config 0 has no interface number 0 [ 871.695986][T12333] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 871.722426][T12333] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 871.726361][T15339] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2568'. [ 871.747588][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2568'. [ 871.833199][T12333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.056985][T12333] usb 3-1: Product: syz [ 872.085658][T12333] usb 3-1: Manufacturer: syz [ 872.131297][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 872.131309][ T30] audit: type=1400 audit(1762743231.630:796): avc: denied { read } for pid=15344 comm="syz.3.2569" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 872.263870][T12333] usb 3-1: SerialNumber: syz [ 872.274574][T12333] usb 3-1: config 0 descriptor?? [ 872.288846][ T30] audit: type=1400 audit(1762743231.630:797): avc: denied { open } for pid=15344 comm="syz.3.2569" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 872.327508][T12333] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 872.338611][T15346] /dev/nullb0: Can't open blockdev [ 872.360777][ T30] audit: type=1400 audit(1762743231.830:798): avc: denied { mounton } for pid=15342 comm="syz.0.2570" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 872.591069][ T5818] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 872.837623][ T30] audit: type=1400 audit(1762743231.940:799): avc: denied { ioctl } for pid=15344 comm="syz.3.2569" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 872.882132][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 873.071699][T15355] tmpfs: Unknown parameter 'fsuuid' [ 873.072777][T12333] snd-usb-audio 3-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 873.088142][ T5818] usb 1-1: device descriptor read/64, error -32 [ 873.098721][ T30] audit: type=1400 audit(1762743232.590:800): avc: denied { create } for pid=15351 comm="syz.4.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 873.134540][T15352] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.245201][ T30] audit: type=1400 audit(1762743232.630:801): avc: denied { write } for pid=15351 comm="syz.4.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 873.290471][T14260] udevd[14260]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.362805][ T5818] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 873.373445][T15354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15354 comm=syz.3.2573 [ 873.449841][T15357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15357 comm=syz.3.2573 [ 875.399546][ T30] audit: type=1400 audit(1762743232.770:802): avc: denied { allowed } for pid=15353 comm="syz.3.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 875.543448][ T30] audit: type=1400 audit(1762743232.770:803): avc: denied { create } for pid=15353 comm="syz.3.2573" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 875.570550][ T5892] usb 3-1: USB disconnect, device number 57 [ 875.657172][ T30] audit: type=1400 audit(1762743232.770:804): avc: denied { map } for pid=15353 comm="syz.3.2573" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 875.855426][T15367] FAULT_INJECTION: forcing a failure. [ 875.855426][T15367] name failslab, interval 1, probability 0, space 0, times 0 [ 875.920266][T15367] CPU: 0 UID: 0 PID: 15367 Comm: syz.1.2577 Not tainted syzkaller #0 PREEMPT(full) [ 875.920297][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 875.920308][T15367] Call Trace: [ 875.920316][T15367] [ 875.920325][T15367] dump_stack_lvl+0x16c/0x1f0 [ 875.920359][T15367] should_fail_ex+0x512/0x640 [ 875.920381][T15367] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 875.920404][T15367] should_failslab+0xc2/0x120 [ 875.920427][T15367] __kmalloc_node_noprof+0xe0/0x8a0 [ 875.920445][T15367] ? crypto_alg_lookup+0x113/0x1e0 [ 875.920470][T15367] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 875.920497][T15367] ? __pfx_crypto_skcipher_extsize+0x10/0x10 [ 875.920525][T15367] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 875.920548][T15367] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 875.920575][T15367] crypto_create_tfm_node+0x85/0x350 [ 875.920602][T15367] crypto_alloc_tfm_node+0x102/0x260 [ 875.920630][T15367] init_skcipher_req.constprop.0+0x1f/0x230 [ 875.920659][T15367] derived_key_encrypt.constprop.0+0x10c/0x6f0 [ 875.920690][T15367] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 875.920732][T15367] ? get_derived_key+0x10d/0x150 [ 875.920759][T15367] encrypted_read+0x2a5/0x820 [ 875.920793][T15367] ? __pfx_encrypted_read+0x10/0x10 [ 875.920818][T15367] ? __pfx___might_resched+0x10/0x10 [ 875.920848][T15367] ? down_read+0x13d/0x480 [ 875.920865][T15367] ? selinux_key_permission+0x162/0x1d0 [ 875.920892][T15367] ? __pfx_down_read+0x10/0x10 [ 875.920909][T15367] ? keyctl_read_key+0x232/0x4f0 [ 875.920935][T15367] ? keyctl_read_key+0x2d1/0x4f0 [ 875.920965][T15367] keyctl_read_key+0x2c0/0x4f0 [ 875.920995][T15367] __do_sys_keyctl+0x3d9/0x590 [ 875.921014][T15367] do_syscall_64+0xcd/0xfa0 [ 875.921032][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.921047][T15367] RIP: 0033:0x7f222c38f6c9 [ 875.921062][T15367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.921078][T15367] RSP: 002b:00007f222d2df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 875.921097][T15367] RAX: ffffffffffffffda RBX: 00007f222c5e5fa0 RCX: 00007f222c38f6c9 [ 875.921108][T15367] RDX: 0000200000000240 RSI: 00000000342c4fc4 RDI: 000000000000000b [ 875.921119][T15367] RBP: 00007f222d2df090 R08: 0000000000000000 R09: 0000000000000000 [ 875.921129][T15367] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000001 [ 875.921139][T15367] R13: 00007f222c5e6038 R14: 00007f222c5e5fa0 R15: 00007fff2842f2d8 [ 875.921166][T15367] [ 875.921175][T15367] trusted_key: encrypted_key: failed to load cbc(aes) transform (-12) [ 875.944571][ T30] audit: type=1400 audit(1762743232.770:805): avc: denied { read write } for pid=15353 comm="syz.3.2573" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 876.186416][T15372] hub 9-0:1.0: USB hub found [ 876.238500][T15372] hub 9-0:1.0: 1 port detected [ 876.503312][T15377] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2580'. [ 877.786339][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 877.786359][ T30] audit: type=1400 audit(1762743237.280:815): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 877.941137][ T30] audit: type=1400 audit(1762743237.440:816): avc: denied { create } for pid=15398 comm="syz.0.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 877.943436][T15394] netlink: 'syz.2.2583': attribute type 8 has an invalid length. [ 878.075985][T15392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15392 comm=syz.3.2586 [ 878.090205][T15392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15392 comm=syz.3.2586 [ 878.586718][ T30] audit: type=1400 audit(1762743238.060:817): avc: denied { listen } for pid=15412 comm="syz.3.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 879.564827][ T30] audit: type=1400 audit(1762743238.960:818): avc: denied { create } for pid=15416 comm="syz.2.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 880.256312][ T5818] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 880.541715][ T30] audit: type=1400 audit(1762743240.040:819): avc: denied { write } for pid=15426 comm="syz.4.2594" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 880.668266][ T5818] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 880.738951][ T5818] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 880.749649][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=238 [ 880.759696][ T5818] usb 4-1: Product: syz [ 880.764500][ T5818] usb 4-1: Manufacturer: syz [ 880.772448][ T5818] usb 4-1: SerialNumber: syz [ 880.789292][ T5818] usb 4-1: config 0 descriptor?? [ 881.616850][T15438] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2596'. [ 881.625951][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2596'. [ 881.823746][ T30] audit: type=1400 audit(1762743241.320:820): avc: denied { read } for pid=15440 comm="syz.4.2598" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 881.856838][ T30] audit: type=1400 audit(1762743241.320:821): avc: denied { open } for pid=15440 comm="syz.4.2598" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 881.880928][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.045100][ T30] audit: type=1400 audit(1762743241.460:822): avc: denied { create } for pid=15441 comm="syz.2.2597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 882.059905][T15442] input: syz1 as /devices/virtual/input/input54 [ 882.071201][T15442] input: failed to attach handler leds to device input54, error: -6 [ 882.122459][T15447] netlink: 'syz.1.2599': attribute type 2 has an invalid length. [ 882.123956][ T30] audit: type=1400 audit(1762743241.460:823): avc: denied { getopt } for pid=15441 comm="syz.2.2597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 882.363246][ T30] audit: type=1400 audit(1762743241.460:824): avc: denied { setopt } for pid=15441 comm="syz.2.2597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 882.606967][T15449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15449 comm=syz.1.2600 [ 882.620458][T15449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15449 comm=syz.1.2600 [ 883.058850][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 883.059939][ T30] audit: type=1400 audit(1762743242.550:834): avc: denied { read write } for pid=15453 comm="syz.4.2602" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 883.169771][ T5893] usb 4-1: USB disconnect, device number 59 [ 883.280532][ T30] audit: type=1400 audit(1762743242.550:835): avc: denied { open } for pid=15453 comm="syz.4.2602" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 883.445929][ T30] audit: type=1400 audit(1762743242.560:836): avc: denied { watch watch_reads } for pid=15453 comm="syz.4.2602" path="/497" dev="tmpfs" ino=2721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 883.950605][ T30] audit: type=1400 audit(1762743242.730:837): avc: denied { execute } for pid=15453 comm="syz.4.2602" path="/497/cpuacct.usage_percpu" dev="tmpfs" ino=2727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 884.038421][ T30] audit: type=1400 audit(1762743242.730:838): avc: denied { read } for pid=15453 comm="syz.4.2602" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 884.140254][ T30] audit: type=1400 audit(1762743242.730:839): avc: denied { open } for pid=15453 comm="syz.4.2602" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 884.164147][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.181016][T15466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2605'. [ 884.298818][T15472] /dev/nullb0: Can't open blockdev [ 884.317693][T15472] fuse: Bad value for 'fd' [ 884.692090][ T30] audit: type=1400 audit(1762743244.190:840): avc: denied { map } for pid=15475 comm="syz.1.2608" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 884.715093][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.874759][ T30] audit: type=1400 audit(1762743244.190:841): avc: denied { execute } for pid=15475 comm="syz.1.2608" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 884.930680][ T30] audit: type=1400 audit(1762743244.280:842): avc: denied { create } for pid=15475 comm="syz.1.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 885.425282][T15486] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2610'. [ 885.434965][T15486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 885.606303][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2611'. [ 885.841093][T15490] fuse: Bad value for 'fd' [ 885.862539][ T30] audit: type=1400 audit(1762743245.360:843): avc: denied { append } for pid=15491 comm="syz.1.2613" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 886.120308][T15497] FAULT_INJECTION: forcing a failure. [ 886.120308][T15497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.133956][T15497] CPU: 0 UID: 0 PID: 15497 Comm: syz.1.2613 Not tainted syzkaller #0 PREEMPT(full) [ 886.133976][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 886.133983][T15497] Call Trace: [ 886.133987][T15497] [ 886.133992][T15497] dump_stack_lvl+0x16c/0x1f0 [ 886.134012][T15497] should_fail_ex+0x512/0x640 [ 886.134027][T15497] _copy_from_user+0x2e/0xd0 [ 886.134040][T15497] kstrtouint_from_user+0xd6/0x1d0 [ 886.134056][T15497] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 886.134071][T15497] ? __lock_acquire+0xb8a/0x1c90 [ 886.134089][T15497] ? __kasan_check_write+0x8/0x20 [ 886.134109][T15497] proc_fail_nth_write+0x83/0x220 [ 886.134124][T15497] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 886.134139][T15497] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 886.134150][T15497] vfs_write+0x2a0/0x11d0 [ 886.134162][T15497] ? __pfx___mutex_lock+0x10/0x10 [ 886.134173][T15497] ? __pfx_vfs_write+0x10/0x10 [ 886.134186][T15497] ? __fget_files+0x20e/0x3c0 [ 886.134200][T15497] ksys_write+0x12a/0x250 [ 886.134210][T15497] ? __pfx_ksys_write+0x10/0x10 [ 886.134223][T15497] do_syscall_64+0xcd/0xfa0 [ 886.134234][T15497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.134245][T15497] RIP: 0033:0x7f222c38e17f [ 886.134254][T15497] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 886.134265][T15497] RSP: 002b:00007f222d29d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 886.134275][T15497] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f222c38e17f [ 886.134282][T15497] RDX: 0000000000000001 RSI: 00007f222d29d0a0 RDI: 000000000000000a [ 886.134288][T15497] RBP: 00007f222d29d090 R08: 0000000000000000 R09: 0000000000000000 [ 886.134294][T15497] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 886.134300][T15497] R13: 00007f222c5e6218 R14: 00007f222c5e6180 R15: 00007fff2842f2d8 [ 886.134314][T15497] [ 886.880603][T15507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 886.887877][T15507] IPv6: NLM_F_CREATE should be set when creating new route [ 886.895088][T15507] IPv6: NLM_F_CREATE should be set when creating new route [ 886.902317][T15507] IPv6: NLM_F_CREATE should be set when creating new route [ 887.274341][T15517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2618'. [ 887.765368][T15518] infiniband syz2: set down [ 887.770261][T15518] infiniband syz2: added ipvlan0 [ 887.777913][T15518] syz2: rxe_create_qp: returned err = -2 [ 887.784027][T15518] infiniband syz2: Couldn't create ib_mad QP1 [ 887.793356][T15518] infiniband syz2: Couldn't open port 1 [ 888.273021][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 888.273039][ T30] audit: type=1400 audit(1762743246.880:849): avc: denied { write } for pid=15513 comm="syz.2.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 888.302689][T15518] RDS/IB: syz2: added [ 888.307170][T15518] smc: adding ib device syz2 with port count 1 [ 888.313523][T15518] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 889.962465][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'. [ 890.170835][T15535] fuse: Bad value for 'fd' [ 890.205930][ T30] audit: type=1400 audit(1762743249.700:850): avc: denied { sys_module } for pid=15528 comm="syz.4.2624" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 890.549208][T15540] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2626'. [ 890.558616][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2626'. [ 890.916826][ T5892] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 891.266129][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 891.321682][ T5892] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 891.341703][ T5892] usb 2-1: config 0 has no interface number 0 [ 891.378477][ T5892] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 891.744833][ T5892] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 891.756330][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.764448][ T5892] usb 2-1: Product: syz [ 891.769228][ T5892] usb 2-1: Manufacturer: syz [ 891.774248][ T5892] usb 2-1: SerialNumber: syz [ 891.787360][ T5893] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 891.807287][ T5892] usb 2-1: config 0 descriptor?? [ 891.830431][T15544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 891.854045][T15557] binder: 15554:15557 ioctl c0306201 200000000040 returned -14 [ 892.046459][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 892.114393][ T5893] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 892.123616][T15544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 892.146331][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.155861][ T5893] usb 4-1: Product: syz [ 892.161919][ T5893] usb 4-1: Manufacturer: syz [ 892.167963][ T5893] usb 4-1: SerialNumber: syz [ 892.177664][ T5893] usb 4-1: config 0 descriptor?? [ 892.187528][ T5893] gspca_main: sq930x-2.14.0 probing 2770:930c [ 892.551997][ T30] audit: type=1400 audit(1762743252.050:851): avc: denied { write } for pid=15561 comm="syz.4.2633" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 892.577443][T15564] random: crng reseeded on system resumption [ 892.600744][ T30] audit: type=1400 audit(1762743252.080:852): avc: denied { open } for pid=15561 comm="syz.4.2633" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 892.806725][T15552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.824298][T15552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.828817][T15567] /dev/nullb0: Can't open blockdev [ 892.878367][T15567] fuse: Bad value for 'fd' [ 893.006077][ T30] audit: type=1400 audit(1762743252.490:853): avc: denied { read } for pid=15542 comm="syz.1.2627" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 893.046589][ T30] audit: type=1400 audit(1762743252.490:854): avc: denied { open } for pid=15542 comm="syz.1.2627" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 893.098721][ T30] audit: type=1400 audit(1762743252.500:855): avc: denied { ioctl } for pid=15542 comm="syz.1.2627" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 893.327180][ T30] audit: type=1400 audit(1762743252.830:856): avc: denied { unlink } for pid=15550 comm="syz.3.2630" name="#61" dev="tmpfs" ino=2839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 893.360404][T15576] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2635'. [ 893.478651][ T30] audit: type=1400 audit(1762743252.830:857): avc: denied { mount } for pid=15550 comm="syz.3.2630" name="/" dev="overlay" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 893.546907][ T5893] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 893.550887][T15570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.552831][ T5893] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 893.562794][T15570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.580569][ T5893] usb 4-1: USB disconnect, device number 60 [ 894.223311][ T30] audit: type=1400 audit(1762743253.710:858): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 894.614762][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2639'. [ 895.073195][ T30] audit: type=1400 audit(1762743254.570:859): avc: denied { ioctl } for pid=15596 comm="syz.2.2641" path="socket:[67512]" dev="sockfs" ino=67512 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 896.249136][ T5892] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 896.266126][ T5892] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 896.402778][ T30] audit: type=1400 audit(1762743255.870:860): avc: denied { write } for pid=15605 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 896.483015][ T5892] asix 2-1:0.188: probe with driver asix failed with error -71 [ 896.751513][ T30] audit: type=1400 audit(1762743256.250:861): avc: denied { ioctl } for pid=15611 comm="syz.1.2646" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 896.776379][ T5892] usb 2-1: USB disconnect, device number 41 [ 896.965633][T15623] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2647'. [ 898.028721][T15637] SELinux: policydb version 0 does not match my version range 15-35 [ 898.031228][ T30] audit: type=1400 audit(1762743257.530:862): avc: denied { load_policy } for pid=15636 comm="syz.3.2653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 898.060308][T15637] SELinux: failed to load policy [ 898.228137][T15642] netlink: 'syz.1.2654': attribute type 1 has an invalid length. [ 898.752140][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'. [ 898.762926][T15649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2656'. [ 900.426700][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2662'. [ 900.546738][ T1206] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 900.594777][T15675] overlayfs: missing 'lowerdir' [ 900.925461][ T30] audit: type=1800 audit(1762743260.360:863): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2663" name="bus" dev="overlay" ino=3067 res=0 errno=0 [ 900.976722][ T1206] usb 1-1: device descriptor read/64, error -71 [ 901.565219][ T1206] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 902.142757][ T30] audit: type=1400 audit(1762743261.630:864): avc: denied { ioctl } for pid=15685 comm="syz.1.2667" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 902.225838][ T1206] usb 1-1: device descriptor read/64, error -71 [ 902.475437][ T30] audit: type=1400 audit(1762743261.640:865): avc: denied { write } for pid=15685 comm="syz.1.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 902.514623][T15692] ieee802154 phy0 wpan0: encryption failed: -22 [ 902.529228][ T1206] usb usb1-port1: attempt power cycle [ 902.825852][T15698] binder: 15693:15698 ioctl c0306201 200000000040 returned -14 [ 903.226878][ T1206] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 903.457147][ T30] audit: type=1400 audit(1762743262.960:866): avc: denied { write } for pid=15696 comm="syz.1.2670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 904.101856][ T1206] usb 1-1: device not accepting address 49, error -71 [ 904.983447][T15721] 9pnet_fd: Insufficient options for proto=fd [ 905.220880][ T30] audit: type=1400 audit(1762743264.470:867): avc: denied { read } for pid=15714 comm="syz.3.2676" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 905.604993][ T30] audit: type=1400 audit(1762743264.470:868): avc: denied { open } for pid=15714 comm="syz.3.2676" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 905.750913][ T30] audit: type=1400 audit(1762743264.470:869): avc: denied { ioctl } for pid=15714 comm="syz.3.2676" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 906.126893][ T30] audit: type=1400 audit(1762743264.770:870): avc: denied { create } for pid=15711 comm="syz.4.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 906.151515][ T30] audit: type=1400 audit(1762743264.790:871): avc: denied { listen } for pid=15711 comm="syz.4.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 906.174214][T15733] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2678'. [ 907.527337][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2684'. [ 907.814673][T15755] ieee802154 phy0 wpan0: encryption failed: -22 [ 908.644690][T15763] FAULT_INJECTION: forcing a failure. [ 908.644690][T15763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.657956][T15763] CPU: 0 UID: 0 PID: 15763 Comm: syz.3.2687 Not tainted syzkaller #0 PREEMPT(full) [ 908.657979][T15763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 908.657991][T15763] Call Trace: [ 908.657997][T15763] [ 908.658005][T15763] dump_stack_lvl+0x16c/0x1f0 [ 908.658036][T15763] should_fail_ex+0x512/0x640 [ 908.658060][T15763] _copy_to_user+0x32/0xd0 [ 908.658083][T15763] simple_read_from_buffer+0xcb/0x170 [ 908.658112][T15763] proc_fail_nth_read+0x197/0x240 [ 908.658133][T15763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 908.658156][T15763] ? rw_verify_area+0xcf/0x6c0 [ 908.658180][T15763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 908.658200][T15763] vfs_read+0x1e4/0xcf0 [ 908.658220][T15763] ? __pfx___mutex_lock+0x10/0x10 [ 908.658238][T15763] ? __pfx_vfs_read+0x10/0x10 [ 908.658261][T15763] ? __fget_files+0x20e/0x3c0 [ 908.658286][T15763] ksys_read+0x12a/0x250 [ 908.658302][T15763] ? __pfx_ksys_read+0x10/0x10 [ 908.658325][T15763] do_syscall_64+0xcd/0xfa0 [ 908.658344][T15763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.658361][T15763] RIP: 0033:0x7f6079d8e0dc [ 908.658375][T15763] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 908.658391][T15763] RSP: 002b:00007f607abd3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 908.658408][T15763] RAX: ffffffffffffffda RBX: 00007f6079fe6180 RCX: 00007f6079d8e0dc [ 908.658420][T15763] RDX: 000000000000000f RSI: 00007f607abd30a0 RDI: 0000000000000008 [ 908.658430][T15763] RBP: 00007f607abd3090 R08: 0000000000000000 R09: 0000000000000000 [ 908.658447][T15763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.658457][T15763] R13: 00007f6079fe6218 R14: 00007f6079fe6180 R15: 00007ffe3ec46818 [ 908.658483][T15763] [ 908.836766][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.065095][ T30] audit: type=1400 audit(1762743268.560:872): avc: denied { create } for pid=15764 comm="syz.0.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 909.087915][T15765] FAULT_INJECTION: forcing a failure. [ 909.087915][T15765] name failslab, interval 1, probability 0, space 0, times 0 [ 909.122474][T15765] CPU: 0 UID: 0 PID: 15765 Comm: syz.0.2690 Not tainted syzkaller #0 PREEMPT(full) [ 909.122499][T15765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 909.122509][T15765] Call Trace: [ 909.122516][T15765] [ 909.122522][T15765] dump_stack_lvl+0x16c/0x1f0 [ 909.122554][T15765] should_fail_ex+0x512/0x640 [ 909.122574][T15765] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 909.122605][T15765] should_failslab+0xc2/0x120 [ 909.122626][T15765] kmem_cache_alloc_node_noprof+0x78/0x770 [ 909.122650][T15765] ? __alloc_skb+0x2b2/0x380 [ 909.122676][T15765] ? __alloc_skb+0x2b2/0x380 [ 909.122694][T15765] ? __pfx_avc_has_perm+0x10/0x10 [ 909.122714][T15765] __alloc_skb+0x2b2/0x380 [ 909.122734][T15765] ? __pfx___alloc_skb+0x10/0x10 [ 909.122751][T15765] ? trace_event_raw_event_bpf_trace_printk+0x1a2/0x260 [ 909.122773][T15765] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 909.122800][T15765] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 909.122833][T15765] netlink_alloc_large_skb+0x69/0x140 [ 909.122859][T15765] netlink_sendmsg+0x698/0xdd0 [ 909.122887][T15765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 909.122919][T15765] ____sys_sendmsg+0xa98/0xc70 [ 909.122936][T15765] ? copy_msghdr_from_user+0x10a/0x160 [ 909.122957][T15765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 909.122984][T15765] ___sys_sendmsg+0x134/0x1d0 [ 909.123007][T15765] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.123027][T15765] ? __lock_acquire+0x622/0x1c90 [ 909.123081][T15765] __sys_sendmsg+0x16d/0x220 [ 909.123103][T15765] ? __pfx___sys_sendmsg+0x10/0x10 [ 909.123141][T15765] do_syscall_64+0xcd/0xfa0 [ 909.123158][T15765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.123176][T15765] RIP: 0033:0x7ff58518f6c9 [ 909.123191][T15765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.123208][T15765] RSP: 002b:00007ff5860b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.123225][T15765] RAX: ffffffffffffffda RBX: 00007ff5853e5fa0 RCX: 00007ff58518f6c9 [ 909.123237][T15765] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 909.123248][T15765] RBP: 00007ff5860b4090 R08: 0000000000000000 R09: 0000000000000000 [ 909.123259][T15765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.123269][T15765] R13: 00007ff5853e6038 R14: 00007ff5853e5fa0 R15: 00007ffcb1244cf8 [ 909.123294][T15765] [ 909.360938][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.257284][ T5893] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 910.361298][T15785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2696'. [ 910.557762][T15789] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2695'. [ 910.576231][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.116799][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.126926][ T5893] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 911.193741][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.267382][ T5893] usb 1-1: config 0 descriptor?? [ 912.240856][T15801] FAULT_INJECTION: forcing a failure. [ 912.240856][T15801] name failslab, interval 1, probability 0, space 0, times 0 [ 912.270968][T15801] CPU: 1 UID: 0 PID: 15801 Comm: syz.1.2699 Not tainted syzkaller #0 PREEMPT(full) [ 912.270991][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 912.271002][T15801] Call Trace: [ 912.271007][T15801] [ 912.271014][T15801] dump_stack_lvl+0x16c/0x1f0 [ 912.271045][T15801] should_fail_ex+0x512/0x640 [ 912.271064][T15801] ? fs_reclaim_acquire+0xae/0x150 [ 912.271085][T15801] should_failslab+0xc2/0x120 [ 912.271104][T15801] __kmalloc_noprof+0xdd/0x880 [ 912.271128][T15801] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 912.271153][T15801] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 912.271171][T15801] tomoyo_realpath_from_path+0xc2/0x6e0 [ 912.271193][T15801] ? tomoyo_profile+0x47/0x60 [ 912.271218][T15801] tomoyo_path_number_perm+0x245/0x580 [ 912.271243][T15801] ? tomoyo_path_number_perm+0x237/0x580 [ 912.271270][T15801] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 912.271296][T15801] ? find_held_lock+0x2b/0x80 [ 912.271338][T15801] ? find_held_lock+0x2b/0x80 [ 912.271353][T15801] ? hook_file_ioctl_common+0x145/0x410 [ 912.271371][T15801] ? __fget_files+0x20e/0x3c0 [ 912.271392][T15801] security_file_ioctl+0x9b/0x240 [ 912.271411][T15801] __x64_sys_ioctl+0xb7/0x210 [ 912.271443][T15801] do_syscall_64+0xcd/0xfa0 [ 912.271461][T15801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.271476][T15801] RIP: 0033:0x7f222c38f6c9 [ 912.271490][T15801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.271504][T15801] RSP: 002b:00007f222d2df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.271516][T15801] RAX: ffffffffffffffda RBX: 00007f222c5e5fa0 RCX: 00007f222c38f6c9 [ 912.271523][T15801] RDX: 0000200000000080 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 912.271529][T15801] RBP: 00007f222d2df090 R08: 0000000000000000 R09: 0000000000000000 [ 912.271536][T15801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.271542][T15801] R13: 00007f222c5e6038 R14: 00007f222c5e5fa0 R15: 00007fff2842f2d8 [ 912.271566][T15801] [ 912.475420][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.486136][T15801] ERROR: Out of memory at tomoyo_realpath_from_path. [ 912.726119][ T30] audit: type=1400 audit(1762743272.220:873): avc: denied { bind } for pid=15777 comm="syz.0.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 913.544080][ T30] audit: type=1400 audit(1762743273.040:874): avc: denied { ioctl } for pid=15810 comm="syz.2.2703" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=68821 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 913.888478][ T1206] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 914.030419][ T5892] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 914.104910][ T1206] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 914.139893][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.182007][ T1206] usb 4-1: Product: syz [ 914.196074][ T5892] usb 3-1: device descriptor read/64, error -71 [ 914.197683][ T1206] usb 4-1: Manufacturer: syz [ 914.228316][ T1206] usb 4-1: SerialNumber: syz [ 914.239949][T15802] block nbd0: shutting down sockets [ 914.297431][ T5893] usbhid 1-1:0.0: can't add hid device: -71 [ 914.303421][ T5893] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 914.421154][ T5893] usb 1-1: USB disconnect, device number 51 [ 914.436576][ T5892] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 914.469285][ T30] audit: type=1400 audit(1762743273.970:875): avc: denied { write } for pid=15815 comm="syz.3.2704" path="socket:[68866]" dev="sockfs" ino=68866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 914.606969][ T5892] usb 3-1: device descriptor read/64, error -71 [ 914.643232][ T30] audit: type=1400 audit(1762743274.130:876): avc: denied { mount } for pid=15815 comm="syz.3.2704" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 914.665166][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.719558][ T5892] usb usb3-port1: attempt power cycle [ 914.934899][T15836] random: crng reseeded on system resumption [ 915.276118][ T5892] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 915.300208][ T5892] usb 3-1: device descriptor read/8, error -71 [ 915.354689][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 915.416785][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 915.466772][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 915.507606][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 915.537674][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 915.565706][ T5892] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 915.566873][ T1206] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 915.607754][ T5892] usb 3-1: device descriptor read/8, error -71 [ 915.790312][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'. [ 915.835964][ T1206] usb 4-1: USB disconnect, device number 61 [ 915.896488][ T5892] usb usb3-port1: unable to enumerate USB device [ 916.368225][T15848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15848 comm=syz.0.2711 [ 916.383703][T15848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15848 comm=syz.0.2711 [ 917.186299][ T30] audit: type=1400 audit(1762743276.660:877): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 917.223256][ T30] audit: type=1400 audit(1762743276.720:878): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 917.401705][ T30] audit: type=1400 audit(1762743276.890:879): avc: denied { append } for pid=15856 comm="syz.4.2715" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 917.593649][T15863] FAULT_INJECTION: forcing a failure. [ 917.593649][T15863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 918.045956][T15863] CPU: 1 UID: 0 PID: 15863 Comm: syz.1.2717 Not tainted syzkaller #0 PREEMPT(full) [ 918.045981][T15863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 918.045991][T15863] Call Trace: [ 918.045997][T15863] [ 918.046007][T15863] dump_stack_lvl+0x16c/0x1f0 [ 918.046040][T15863] should_fail_ex+0x512/0x640 [ 918.046061][T15863] should_fail_alloc_page+0xe7/0x130 [ 918.046081][T15863] prepare_alloc_pages+0x3c2/0x610 [ 918.046104][T15863] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 918.046137][T15863] ? find_held_lock+0x2b/0x80 [ 918.046159][T15863] ? is_bpf_text_address+0x8a/0x1a0 [ 918.046178][T15863] ? bpf_ksym_find+0x127/0x1c0 [ 918.046201][T15863] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 918.046222][T15863] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 918.046247][T15863] ? kernel_text_address+0x8d/0x100 [ 918.046267][T15863] ? __kernel_text_address+0xd/0x40 [ 918.046297][T15863] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 918.046320][T15863] ? policy_nodemask+0xea/0x4e0 [ 918.046343][T15863] alloc_pages_mpol+0x1fb/0x550 [ 918.046364][T15863] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 918.046390][T15863] folio_alloc_mpol_noprof+0x36/0x2f0 [ 918.046414][T15863] vma_alloc_folio_noprof+0xed/0x1e0 [ 918.046436][T15863] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 918.046467][T15863] do_pte_missing+0x2202/0x3ba0 [ 918.046492][T15863] ? find_held_lock+0x2b/0x80 [ 918.046520][T15863] __handle_mm_fault+0x1556/0x2aa0 [ 918.046550][T15863] ? __pfx___handle_mm_fault+0x10/0x10 [ 918.046576][T15863] ? lock_vma_under_rcu+0x176/0x530 [ 918.046607][T15863] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 918.046637][T15863] handle_mm_fault+0x589/0xd10 [ 918.046667][T15863] ? __pkru_allows_pkey+0x21/0xb0 [ 918.046689][T15863] do_user_addr_fault+0x60c/0x1370 [ 918.046709][T15863] ? rcu_is_watching+0x12/0xc0 [ 918.046734][T15863] exc_page_fault+0x64/0xc0 [ 918.046761][T15863] asm_exc_page_fault+0x26/0x30 [ 918.046777][T15863] RIP: 0033:0x7f222c25691a [ 918.046792][T15863] Code: b2 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 bf 00 00 c0 fe 41 56 41 55 41 54 45 31 e4 55 53 48 81 ec 08 1b 00 00 <48> 89 7c 24 78 48 8d 9c 24 f0 06 00 00 48 89 74 24 70 48 89 54 24 [ 918.046809][T15863] RSP: 002b:00007f222d2dd4f0 EFLAGS: 00010206 [ 918.046822][T15863] RAX: 00007f222c256900 RBX: 00007f222c5e5fa0 RCX: 0000200000000300 [ 918.046834][T15863] RDX: 0000200000fe6000 RSI: 0000000000000005 RDI: 0000000000000004 [ 918.046844][T15863] RBP: 00007f222d2df090 R08: 0000000000000001 R09: 0000000000000010 [ 918.046855][T15863] R10: 0000000000000004 R11: 0000200000fe6000 R12: 0000000000000000 [ 918.046865][T15863] R13: 00007f222c5e6038 R14: 00007f222c5e5fa0 R15: 00000000fec00000 [ 918.046890][T15863] [ 918.304548][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.424723][T15863] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 918.497003][T15864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2715'. [ 919.533288][ T30] audit: type=1400 audit(1762743279.030:880): avc: denied { ioctl } for pid=15883 comm="syz.1.2724" path="socket:[69069]" dev="sockfs" ino=69069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 919.574599][ T30] audit: type=1400 audit(1762743279.060:881): avc: denied { ioctl } for pid=15883 comm="syz.1.2724" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 920.574896][ T30] audit: type=1400 audit(1762743280.060:882): avc: denied { create } for pid=15890 comm="syz.0.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 920.977987][ T30] audit: type=1400 audit(1762743280.160:883): avc: denied { bind } for pid=15890 comm="syz.0.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 921.055352][ T30] audit: type=1400 audit(1762743280.160:884): avc: denied { write } for pid=15890 comm="syz.0.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 921.406133][T15904] binder: 15898:15904 ioctl c0306201 200000000040 returned -22 [ 921.780527][T15903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15903 comm=syz.0.2729 [ 921.799221][T15903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15903 comm=syz.0.2729 [ 923.168329][T15910] netlink: 'syz.3.2731': attribute type 8 has an invalid length. [ 923.786252][ T30] audit: type=1400 audit(1762743283.290:885): avc: denied { ioctl } for pid=15922 comm="syz.2.2734" path="socket:[68299]" dev="sockfs" ino=68299 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 924.048605][T15924] tmpfs: Bad value for 'mpol' [ 924.458844][T15937] overlayfs: missing 'lowerdir' [ 924.530247][T15940] FAULT_INJECTION: forcing a failure. [ 924.530247][T15940] name failslab, interval 1, probability 0, space 0, times 0 [ 924.666598][T15940] CPU: 1 UID: 0 PID: 15940 Comm: syz.1.2738 Not tainted syzkaller #0 PREEMPT(full) [ 924.666624][T15940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 924.666633][T15940] Call Trace: [ 924.666639][T15940] [ 924.666645][T15940] dump_stack_lvl+0x16c/0x1f0 [ 924.666673][T15940] should_fail_ex+0x512/0x640 [ 924.666691][T15940] ? fs_reclaim_acquire+0xae/0x150 [ 924.666710][T15940] should_failslab+0xc2/0x120 [ 924.666726][T15940] __kmalloc_noprof+0xdd/0x880 [ 924.666747][T15940] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 924.666768][T15940] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 924.666783][T15940] tomoyo_realpath_from_path+0xc2/0x6e0 [ 924.666802][T15940] ? tomoyo_profile+0x47/0x60 [ 924.666826][T15940] tomoyo_path_number_perm+0x245/0x580 [ 924.666851][T15940] ? tomoyo_path_number_perm+0x237/0x580 [ 924.666877][T15940] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 924.666902][T15940] ? find_held_lock+0x2b/0x80 [ 924.666936][T15940] ? find_held_lock+0x2b/0x80 [ 924.666952][T15940] ? hook_file_ioctl_common+0x145/0x410 [ 924.666976][T15940] ? __fget_files+0x20e/0x3c0 [ 924.666993][T15940] security_file_ioctl+0x9b/0x240 [ 924.667010][T15940] __x64_sys_ioctl+0xb7/0x210 [ 924.667031][T15940] do_syscall_64+0xcd/0xfa0 [ 924.667045][T15940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.667059][T15940] RIP: 0033:0x7f222c38f6c9 [ 924.667072][T15940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.667086][T15940] RSP: 002b:00007f222d2df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 924.667100][T15940] RAX: ffffffffffffffda RBX: 00007f222c5e5fa0 RCX: 00007f222c38f6c9 [ 924.667109][T15940] RDX: 0000200000000140 RSI: 0000000080106408 RDI: 0000000000000003 [ 924.667117][T15940] RBP: 00007f222d2df090 R08: 0000000000000000 R09: 0000000000000000 [ 924.667125][T15940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.667133][T15940] R13: 00007f222c5e6038 R14: 00007f222c5e5fa0 R15: 00007fff2842f2d8 [ 924.667156][T15940] [ 924.667194][T15940] ERROR: Out of memory at tomoyo_realpath_from_path. [ 925.147860][ T30] audit: type=1800 audit(1762743284.620:886): pid=15939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2735" name="bus" dev="overlay" ino=2892 res=0 errno=0 [ 925.249127][ T30] audit: type=1400 audit(1762743284.750:887): avc: denied { ioctl } for pid=15947 comm="syz.3.2740" path="socket:[69212]" dev="sockfs" ino=69212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 925.249964][T15949] FAULT_INJECTION: forcing a failure. [ 925.249964][T15949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.411367][T15949] CPU: 0 UID: 0 PID: 15949 Comm: syz.3.2740 Not tainted syzkaller #0 PREEMPT(full) [ 925.411392][T15949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 925.411402][T15949] Call Trace: [ 925.411407][T15949] [ 925.411414][T15949] dump_stack_lvl+0x16c/0x1f0 [ 925.411445][T15949] should_fail_ex+0x512/0x640 [ 925.411468][T15949] _copy_from_user+0x2e/0xd0 [ 925.411489][T15949] copy_msghdr_from_user+0x98/0x160 [ 925.411511][T15949] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 925.411543][T15949] ___sys_sendmsg+0xfe/0x1d0 [ 925.411566][T15949] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.411585][T15949] ? __lock_acquire+0x622/0x1c90 [ 925.411639][T15949] __sys_sendmsg+0x16d/0x220 [ 925.411660][T15949] ? __pfx___sys_sendmsg+0x10/0x10 [ 925.411696][T15949] do_syscall_64+0xcd/0xfa0 [ 925.411712][T15949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.411728][T15949] RIP: 0033:0x7f6079d8f6c9 [ 925.411742][T15949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.411757][T15949] RSP: 002b:00007f607ac15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.411773][T15949] RAX: ffffffffffffffda RBX: 00007f6079fe5fa0 RCX: 00007f6079d8f6c9 [ 925.411783][T15949] RDX: 0000000000000040 RSI: 0000200000000a00 RDI: 0000000000000004 [ 925.411793][T15949] RBP: 00007f607ac15090 R08: 0000000000000000 R09: 0000000000000000 [ 925.411803][T15949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.411812][T15949] R13: 00007f6079fe6038 R14: 00007f6079fe5fa0 R15: 00007ffe3ec46818 [ 925.411836][T15949] [ 925.806710][T15962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 925.888374][T15966] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 926.036878][T15968] /dev/nullb0: Can't open blockdev [ 926.077486][T15968] fuse: Bad value for 'fd' [ 926.416779][T15970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2743'. [ 926.607614][T15972] kvm: user requested TSC rate below hardware speed [ 926.654780][T15972] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 927.002209][T15975] kvm: user requested TSC rate below hardware speed [ 927.045140][T15975] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 927.072332][T15975] FAULT_INJECTION: forcing a failure. [ 927.072332][T15975] name failslab, interval 1, probability 0, space 0, times 0 [ 927.117371][T15975] CPU: 1 UID: 0 PID: 15975 Comm: syz.4.2748 Not tainted syzkaller #0 PREEMPT(full) [ 927.117396][T15975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 927.117407][T15975] Call Trace: [ 927.117414][T15975] [ 927.117421][T15975] dump_stack_lvl+0x16c/0x1f0 [ 927.117453][T15975] should_fail_ex+0x512/0x640 [ 927.117471][T15975] ? fs_reclaim_acquire+0xae/0x150 [ 927.117494][T15975] should_failslab+0xc2/0x120 [ 927.117513][T15975] __kmalloc_noprof+0xdd/0x880 [ 927.117537][T15975] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 927.117562][T15975] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 927.117580][T15975] tomoyo_realpath_from_path+0xc2/0x6e0 [ 927.117600][T15975] ? tomoyo_profile+0x47/0x60 [ 927.117623][T15975] tomoyo_path_number_perm+0x245/0x580 [ 927.117648][T15975] ? tomoyo_path_number_perm+0x237/0x580 [ 927.117678][T15975] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 927.117707][T15975] ? find_held_lock+0x2b/0x80 [ 927.117752][T15975] ? find_held_lock+0x2b/0x80 [ 927.117773][T15975] ? hook_file_ioctl_common+0x145/0x410 [ 927.117801][T15975] ? __fget_files+0x20e/0x3c0 [ 927.117824][T15975] security_file_ioctl+0x9b/0x240 [ 927.117845][T15975] __x64_sys_ioctl+0xb7/0x210 [ 927.117872][T15975] do_syscall_64+0xcd/0xfa0 [ 927.117890][T15975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.117908][T15975] RIP: 0033:0x7fe1e678f6c9 [ 927.117922][T15975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.117939][T15975] RSP: 002b:00007fe1e7659038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 927.117956][T15975] RAX: ffffffffffffffda RBX: 00007fe1e69e5fa0 RCX: 00007fe1e678f6c9 [ 927.117967][T15975] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 927.117978][T15975] RBP: 00007fe1e7659090 R08: 0000000000000000 R09: 0000000000000000 [ 927.117988][T15975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.117998][T15975] R13: 00007fe1e69e6038 R14: 00007fe1e69e5fa0 R15: 00007ffdb11644b8 [ 927.118024][T15975] [ 927.118031][T15975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 927.716165][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 929.916073][ T5884] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 930.070981][ T24] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 930.086451][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 930.195178][T16031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=16031 comm=syz.2.2765 [ 930.278975][T16032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16032 comm=syz.2.2765 [ 930.377794][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 930.571113][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.668015][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 930.733097][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.945574][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 930.959485][ T5884] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 930.976176][ T5884] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 930.987808][ T5884] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 931.004148][ T5884] usb 1-1: config 1 interface 0 has no altsetting 0 [ 931.023400][ T5884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.032870][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.041434][ T5884] usb 1-1: Product: syz [ 931.045676][ T5884] usb 1-1: Manufacturer: syz [ 931.050284][ T5884] usb 1-1: SerialNumber: syz [ 931.057744][T16016] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 931.065228][T16016] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 931.190058][ T24] usb 5-1: usb_control_msg returned -32 [ 931.195719][ T24] usbtmc 5-1:16.0: can't read capabilities [ 931.331378][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2767'. [ 931.735414][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 931.748915][ T5884] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 932.210330][ T5884] usb 1-1: USB disconnect, device number 52 [ 932.488399][T16048] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 932.620298][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.626875][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.250144][T16059] netlink: 'syz.3.2772': attribute type 10 has an invalid length. [ 933.270079][T16059] team0: Device ipvlan1 failed to register rx_handler [ 933.623548][ T5884] usb 5-1: USB disconnect, device number 61 [ 933.691538][T16067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.453796][T16080] kvm: pic: non byte write [ 935.527729][ T30] audit: type=1400 audit(1762743295.030:888): avc: denied { map } for pid=16090 comm="syz.1.2783" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 935.613167][ T30] audit: type=1400 audit(1762743295.030:889): avc: denied { execute } for pid=16090 comm="syz.1.2783" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 935.793123][ T30] audit: type=1400 audit(1762743295.290:890): avc: denied { create } for pid=16097 comm="syz.4.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 935.837148][T16099] kvm: user requested TSC rate below hardware speed [ 935.911693][ T30] audit: type=1400 audit(1762743295.410:891): avc: denied { mounton } for pid=16078 comm="syz.3.2780" path="/proc/1895/task" dev="proc" ino=70770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 935.952576][ T30] audit: type=1400 audit(1762743295.410:892): avc: denied { mount } for pid=16078 comm="syz.3.2780" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 936.152190][T16107] FAULT_INJECTION: forcing a failure. [ 936.152190][T16107] name failslab, interval 1, probability 0, space 0, times 0 [ 936.166322][T16107] CPU: 0 UID: 0 PID: 16107 Comm: syz.1.2787 Not tainted syzkaller #0 PREEMPT(full) [ 936.166347][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 936.166358][T16107] Call Trace: [ 936.166364][T16107] [ 936.166371][T16107] dump_stack_lvl+0x16c/0x1f0 [ 936.166404][T16107] should_fail_ex+0x512/0x640 [ 936.166424][T16107] ? fs_reclaim_acquire+0xae/0x150 [ 936.166446][T16107] should_failslab+0xc2/0x120 [ 936.166465][T16107] __kmalloc_noprof+0xdd/0x880 [ 936.166489][T16107] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 936.166514][T16107] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 936.166532][T16107] tomoyo_realpath_from_path+0xc2/0x6e0 [ 936.166554][T16107] ? tomoyo_profile+0x47/0x60 [ 936.166578][T16107] tomoyo_path_number_perm+0x245/0x580 [ 936.166601][T16107] ? tomoyo_path_number_perm+0x237/0x580 [ 936.166627][T16107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 936.166654][T16107] ? find_held_lock+0x2b/0x80 [ 936.166702][T16107] ? find_held_lock+0x2b/0x80 [ 936.166722][T16107] ? hook_file_ioctl_common+0x145/0x410 [ 936.166750][T16107] ? __fget_files+0x20e/0x3c0 [ 936.166772][T16107] security_file_ioctl+0x9b/0x240 [ 936.166792][T16107] __x64_sys_ioctl+0xb7/0x210 [ 936.166818][T16107] do_syscall_64+0xcd/0xfa0 [ 936.166836][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.166853][T16107] RIP: 0033:0x7f222c38f6c9 [ 936.166867][T16107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.166881][T16107] RSP: 002b:00007f222d2df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 936.166898][T16107] RAX: ffffffffffffffda RBX: 00007f222c5e5fa0 RCX: 00007f222c38f6c9 [ 936.166909][T16107] RDX: 0000200000000080 RSI: 00000000c048aeca RDI: 000000000000000a [ 936.166920][T16107] RBP: 00007f222d2df090 R08: 0000000000000000 R09: 0000000000000000 [ 936.166929][T16107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.166940][T16107] R13: 00007f222c5e6038 R14: 00007f222c5e5fa0 R15: 00007fff2842f2d8 [ 936.166964][T16107] [ 936.168396][T16107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 936.418099][T16109] FAULT_INJECTION: forcing a failure. [ 936.418099][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 936.430809][T16109] CPU: 0 UID: 0 PID: 16109 Comm: syz.0.2788 Not tainted syzkaller #0 PREEMPT(full) [ 936.430832][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 936.430842][T16109] Call Trace: [ 936.430848][T16109] [ 936.430854][T16109] dump_stack_lvl+0x16c/0x1f0 [ 936.430877][T16109] should_fail_ex+0x512/0x640 [ 936.430889][T16109] ? fs_reclaim_acquire+0xae/0x150 [ 936.430903][T16109] should_failslab+0xc2/0x120 [ 936.430915][T16109] __kmalloc_noprof+0xdd/0x880 [ 936.430930][T16109] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 936.430945][T16109] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 936.430956][T16109] tomoyo_realpath_from_path+0xc2/0x6e0 [ 936.430969][T16109] ? tomoyo_profile+0x47/0x60 [ 936.430984][T16109] tomoyo_path_number_perm+0x245/0x580 [ 936.430999][T16109] ? tomoyo_path_number_perm+0x237/0x580 [ 936.431016][T16109] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 936.431033][T16109] ? find_held_lock+0x2b/0x80 [ 936.431059][T16109] ? find_held_lock+0x2b/0x80 [ 936.431073][T16109] ? hook_file_ioctl_common+0x145/0x410 [ 936.431097][T16109] ? __fget_files+0x20e/0x3c0 [ 936.431112][T16109] security_file_ioctl+0x9b/0x240 [ 936.431125][T16109] __x64_sys_ioctl+0xb7/0x210 [ 936.431140][T16109] do_syscall_64+0xcd/0xfa0 [ 936.431152][T16109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.431162][T16109] RIP: 0033:0x7ff58518f6c9 [ 936.431171][T16109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.431182][T16109] RSP: 002b:00007ff5860b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 936.431192][T16109] RAX: ffffffffffffffda RBX: 00007ff5853e5fa0 RCX: 00007ff58518f6c9 [ 936.431199][T16109] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 936.431205][T16109] RBP: 00007ff5860b4090 R08: 0000000000000000 R09: 0000000000000000 [ 936.431211][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.431217][T16109] R13: 00007ff5853e6038 R14: 00007ff5853e5fa0 R15: 00007ffcb1244cf8 [ 936.431231][T16109] [ 936.431236][T16109] ERROR: Out of memory at tomoyo_realpath_from_path. [ 936.697657][ T5893] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 936.761416][T16113] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 936.964297][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 936.972725][ T5893] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 936.983120][T16122] FAULT_INJECTION: forcing a failure. [ 936.983120][T16122] name failslab, interval 1, probability 0, space 0, times 0 [ 937.024378][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.816072][ T5893] usb 5-1: Product: syz [ 937.820279][ T5893] usb 5-1: Manufacturer: syz [ 937.825125][ T5893] usb 5-1: SerialNumber: syz [ 937.930864][T16122] CPU: 1 UID: 0 PID: 16122 Comm: syz.2.2790 Not tainted syzkaller #0 PREEMPT(full) [ 937.930887][T16122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 937.930896][T16122] Call Trace: [ 937.930902][T16122] [ 937.930909][T16122] dump_stack_lvl+0x16c/0x1f0 [ 937.930938][T16122] should_fail_ex+0x512/0x640 [ 937.930956][T16122] ? fs_reclaim_acquire+0xae/0x150 [ 937.930979][T16122] should_failslab+0xc2/0x120 [ 937.930999][T16122] __kmalloc_noprof+0xdd/0x880 [ 937.931022][T16122] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 937.931047][T16122] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 937.931053][ T5893] usb 5-1: config 0 descriptor?? [ 937.931066][T16122] tomoyo_realpath_from_path+0xc2/0x6e0 [ 937.931087][T16122] ? tomoyo_profile+0x47/0x60 [ 937.931113][T16122] tomoyo_path_number_perm+0x245/0x580 [ 937.931135][T16122] ? tomoyo_path_number_perm+0x237/0x580 [ 937.931159][T16122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 937.931184][T16122] ? find_held_lock+0x2b/0x80 [ 937.931225][T16122] ? find_held_lock+0x2b/0x80 [ 937.931242][T16122] ? hook_file_ioctl_common+0x145/0x410 [ 937.931267][T16122] ? __fget_files+0x20e/0x3c0 [ 937.931286][T16122] security_file_ioctl+0x9b/0x240 [ 937.931304][T16122] __x64_sys_ioctl+0xb7/0x210 [ 937.931326][T16122] do_syscall_64+0xcd/0xfa0 [ 937.931342][T16122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.931357][T16122] RIP: 0033:0x7f9036b8f6c9 [ 937.931370][T16122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.931384][T16122] RSP: 002b:00007f9037a9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 937.931400][T16122] RAX: ffffffffffffffda RBX: 00007f9036de6090 RCX: 00007f9036b8f6c9 [ 937.931410][T16122] RDX: 0000200000000180 RSI: 000000004010ae67 RDI: 0000000000000004 [ 937.931420][T16122] RBP: 00007f9037a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 937.931429][T16122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.931438][T16122] R13: 00007f9036de6128 R14: 00007f9036de6090 R15: 00007ffcf8d96fc8 [ 937.931461][T16122] [ 937.943990][T16122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 938.077960][ T5893] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 938.178121][T16129] binder: 16119:16129 ioctl c0306201 200000000040 returned -22 [ 938.552555][ T5893] pctv452e: pctv452e_power_ctrl: 1 [ 938.552555][ T5893] [ 938.653390][ T5893] usb 5-1: selecting invalid altsetting 3 [ 938.683664][ T5893] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 938.683664][ T5893] [ 938.734336][ T5893] dvb-usb: bulk message failed: -22 (5/0) [ 939.200560][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 939.215728][ T5893] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 939.236078][ T5893] usb 5-1: media controller created [ 939.241715][ T5893] dvb-usb: bulk message failed: -22 (8/0) [ 939.339196][ T5893] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 939.378474][ T5893] dvb-usb: MAC address reading failed. [ 939.439181][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 939.449312][T16151] FAULT_INJECTION: forcing a failure. [ 939.449312][T16151] name failslab, interval 1, probability 0, space 0, times 0 [ 939.495866][T16151] CPU: 0 UID: 0 PID: 16151 Comm: syz.4.2797 Not tainted syzkaller #0 PREEMPT(full) [ 939.495893][T16151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 939.495904][T16151] Call Trace: [ 939.495910][T16151] [ 939.495918][T16151] dump_stack_lvl+0x16c/0x1f0 [ 939.495951][T16151] should_fail_ex+0x512/0x640 [ 939.495972][T16151] ? fs_reclaim_acquire+0xae/0x150 [ 939.495997][T16151] should_failslab+0xc2/0x120 [ 939.496015][T16151] __kmalloc_noprof+0xdd/0x880 [ 939.496036][T16151] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 939.496067][T16151] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 939.496086][T16151] tomoyo_realpath_from_path+0xc2/0x6e0 [ 939.496108][T16151] ? tomoyo_profile+0x47/0x60 [ 939.496134][T16151] tomoyo_path_number_perm+0x245/0x580 [ 939.496160][T16151] ? tomoyo_path_number_perm+0x237/0x580 [ 939.496190][T16151] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 939.496219][T16151] ? find_held_lock+0x2b/0x80 [ 939.496264][T16151] ? find_held_lock+0x2b/0x80 [ 939.496285][T16151] ? hook_file_ioctl_common+0x145/0x410 [ 939.496314][T16151] ? __fget_files+0x20e/0x3c0 [ 939.496336][T16151] security_file_ioctl+0x9b/0x240 [ 939.496357][T16151] __x64_sys_ioctl+0xb7/0x210 [ 939.496383][T16151] do_syscall_64+0xcd/0xfa0 [ 939.496402][T16151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.496420][T16151] RIP: 0033:0x7fe1e678f6c9 [ 939.496436][T16151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.496453][T16151] RSP: 002b:00007fe1e7659038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.496470][T16151] RAX: ffffffffffffffda RBX: 00007fe1e69e5fa0 RCX: 00007fe1e678f6c9 [ 939.496482][T16151] RDX: 00002000000001c0 RSI: 000000004008ae6a RDI: 0000000000000004 [ 939.496493][T16151] RBP: 00007fe1e7659090 R08: 0000000000000000 R09: 0000000000000000 [ 939.496503][T16151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.496513][T16151] R13: 00007fe1e69e6038 R14: 00007fe1e69e5fa0 R15: 00007ffdb11644b8 [ 939.496539][T16151] [ 939.756870][ T1206] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 939.776985][T16151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 940.189096][ T1206] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 940.204955][ T5893] DVB: Unable to find symbol stb0899_attach() [ 940.204949][ T1206] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.205028][ T1206] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 940.211540][ T5893] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 940.335029][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.382402][ T30] audit: type=1400 audit(1762743299.880:893): avc: denied { create } for pid=16158 comm="syz.0.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 940.406436][ T5893] rc_core: IR keymap rc-tt-1500 not found [ 940.415360][ T5893] Registered IR keymap rc-empty [ 940.456796][ T5893] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 940.460758][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2800'. [ 940.487687][ T5893] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input56 [ 940.488454][T16166] FAULT_INJECTION: forcing a failure. [ 940.488454][T16166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.510476][ T5893] dvb-usb: schedule remote query interval to 100 msecs. [ 940.524785][T16166] CPU: 1 UID: 0 PID: 16166 Comm: syz.4.2801 Not tainted syzkaller #0 PREEMPT(full) [ 940.524810][T16166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 940.524820][T16166] Call Trace: [ 940.524829][T16166] [ 940.524836][T16166] dump_stack_lvl+0x16c/0x1f0 [ 940.524866][T16166] should_fail_ex+0x512/0x640 [ 940.524890][T16166] _copy_to_user+0x32/0xd0 [ 940.524911][T16166] simple_read_from_buffer+0xcb/0x170 [ 940.524940][T16166] proc_fail_nth_read+0x197/0x240 [ 940.524959][T16166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 940.524981][T16166] ? rw_verify_area+0xcf/0x6c0 [ 940.525006][T16166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 940.525024][T16166] vfs_read+0x1e4/0xcf0 [ 940.525043][T16166] ? __pfx___mutex_lock+0x10/0x10 [ 940.525061][T16166] ? __pfx_vfs_read+0x10/0x10 [ 940.525083][T16166] ? __fget_files+0x20e/0x3c0 [ 940.525108][T16166] ksys_read+0x12a/0x250 [ 940.525124][T16166] ? __pfx_ksys_read+0x10/0x10 [ 940.525148][T16166] do_syscall_64+0xcd/0xfa0 [ 940.525165][T16166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.525183][T16166] RIP: 0033:0x7fe1e678e0dc [ 940.525198][T16166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 940.525215][T16166] RSP: 002b:00007fe1e7638030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 940.525232][T16166] RAX: ffffffffffffffda RBX: 00007fe1e69e6090 RCX: 00007fe1e678e0dc [ 940.525244][T16166] RDX: 000000000000000f RSI: 00007fe1e76380a0 RDI: 0000000000000005 [ 940.525254][T16166] RBP: 00007fe1e7638090 R08: 0000000000000000 R09: 0000000000000000 [ 940.525264][T16166] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 940.525274][T16166] R13: 00007fe1e69e6128 R14: 00007fe1e69e6090 R15: 00007ffdb11644b8 [ 940.525300][T16166] [ 940.706503][ T5893] pctv452e: pctv452e_power_ctrl: 0 [ 940.706503][ T5893] [ 940.713844][ T5893] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 940.720102][ T1206] usb 2-1: usb_control_msg returned -32 [ 940.729263][ T1206] usbtmc 2-1:16.0: can't read capabilities [ 940.786085][ T5893] usb 5-1: USB disconnect, device number 62 [ 940.895300][ T30] audit: type=1400 audit(1762743300.390:894): avc: denied { map } for pid=16170 comm="syz.3.2804" path="socket:[70477]" dev="sockfs" ino=70477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 940.986673][ T30] audit: type=1400 audit(1762743300.390:895): avc: denied { read } for pid=16170 comm="syz.3.2804" path="socket:[70477]" dev="sockfs" ino=70477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 941.302041][T16177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=16177 comm=syz.4.2805 [ 941.318600][T16177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16177 comm=syz.4.2805 [ 942.136447][ T5893] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 943.965412][ T5893] usb 2-1: USB disconnect, device number 42 [ 944.443727][ T30] audit: type=1400 audit(1762743303.800:896): avc: denied { write } for pid=16198 comm="syz.4.2811" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 944.564860][T16198] delete_channel: no stack [ 945.562233][T16221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.971779][ T30] audit: type=1400 audit(1762743305.280:897): avc: denied { execute } for pid=16215 comm="syz.3.2815" dev="hugetlbfs" ino=71273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 946.116411][ T30] audit: type=1400 audit(1762743305.290:898): avc: denied { execute_no_trans } for pid=16215 comm="syz.3.2815" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=71273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 946.207347][ T5884] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 946.216198][ T30] audit: type=1400 audit(1762743305.310:899): avc: denied { map } for pid=16215 comm="syz.3.2815" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 946.608035][T16244] 9pnet_fd: Insufficient options for proto=fd [ 946.658188][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 946.903610][T16239] delete_channel: no stack [ 946.908631][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.927119][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 946.996067][ T5884] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 947.035852][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.067954][ T5884] usb 5-1: config 0 descriptor?? [ 947.416523][T16260] delete_channel: no stack [ 947.623602][ T5884] hid_parser_main: 8 callbacks suppressed [ 947.623615][ T5884] dragonrise 0003:0079:0011.0023: unknown main item tag 0x0 [ 947.701923][ T5884] dragonrise 0003:0079:0011.0023: unknown main item tag 0x0 [ 947.719488][ T5884] dragonrise 0003:0079:0011.0023: unknown main item tag 0x0 [ 947.748161][ T5884] dragonrise 0003:0079:0011.0023: unknown main item tag 0x0 [ 947.771619][ T5884] dragonrise 0003:0079:0011.0023: unknown main item tag 0x0 [ 947.782911][T16221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.793100][ T5884] dragonrise 0003:0079:0011.0023: unbalanced collection at end of report description [ 947.823201][ T5884] dragonrise 0003:0079:0011.0023: parse failed [ 947.857880][T16221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.944716][ T5884] dragonrise 0003:0079:0011.0023: probe with driver dragonrise failed with error -22 [ 947.978942][ T5884] usb 5-1: USB disconnect, device number 63 [ 948.161618][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 948.794597][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2833'. [ 949.091667][ T1206] kernel write not supported for file /cpu/0/msr (pid: 1206 comm: kworker/1:2) [ 949.104222][T16279] delete_channel: no stack [ 949.772234][T15808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 949.781380][ T30] audit: type=1400 audit(1762743309.270:900): avc: denied { ioctl } for pid=16296 comm="syz-executor" path="socket:[72027]" dev="sockfs" ino=72027 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 949.826997][T16298] /dev/nullb0: Can't open blockdev [ 949.841248][T15808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 949.852087][T15808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 949.860498][T15808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 949.868658][T15808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 949.886455][T16298] fuse: Bad value for 'fd' [ 949.924201][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 949.951547][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 949.968762][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 949.978217][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 949.988615][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 950.002569][ T30] audit: type=1400 audit(1762743309.500:901): avc: denied { mounton } for pid=16296 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 950.011208][T16296] Failed to initialize the IGMP autojoin socket (err -2) [ 950.353489][T16311] binder: 16304:16311 ioctl c0306201 200000000040 returned -22 [ 950.850282][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 951.178148][T16319] /dev/nullb0: Can't open blockdev [ 951.234387][T16319] fuse: Bad value for 'fd' [ 951.279886][T16296] chnl_net:caif_netlink_parms(): no params data found [ 951.914040][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.087533][T15808] Bluetooth: hci5: command tx timeout [ 952.400418][T16331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2846'. [ 952.805957][T16337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.918394][T16296] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.935932][T16296] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.976508][T16296] bridge_slave_0: entered allmulticast mode [ 952.983859][T16296] bridge_slave_0: entered promiscuous mode [ 953.035220][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.075893][T16296] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.090700][T16296] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.116320][T16296] bridge_slave_1: entered allmulticast mode [ 953.251983][T16296] bridge_slave_1: entered promiscuous mode [ 953.358589][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.759778][T16296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.877884][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.941034][T16296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.136416][T15808] Bluetooth: hci5: command tx timeout [ 954.575400][T16358] Failed to initialize the IGMP autojoin socket (err -2) [ 954.630040][T16296] team0: Port device team_slave_0 added [ 954.730068][T16296] team0: Port device team_slave_1 added [ 954.800769][T16355] ------------[ cut here ]------------ [ 954.806272][T16355] WARNING: CPU: 0 PID: 16355 at drivers/gpu/drm/drm_prime.c:223 drm_prime_destroy_file_private+0x43/0x60 [ 954.817519][T16355] Modules linked in: [ 954.821692][T16355] CPU: 0 UID: 0 PID: 16355 Comm: syz.4.2852 Not tainted syzkaller #0 PREEMPT(full) [ 954.831670][T16355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 954.841750][T16355] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 954.848464][T16355] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 63 2d 74 fc e8 5e 2d 74 fc 90 <0f> 0b 90 5b e9 54 2d 74 fc e8 2f bc dc fc eb d8 66 66 2e 0f 1f 84 [ 954.868568][T16355] RSP: 0018:ffffc9000b4b7cc8 EFLAGS: 00010293 [ 954.874690][T16355] RAX: 0000000000000000 RBX: ffff88807a207380 RCX: ffffffff8b61eb01 [ 954.882677][T16355] RDX: ffff88802685c900 RSI: ffffffff8548cb72 RDI: ffff88807a207410 [ 954.890708][T16355] RBP: ffff88807a207000 R08: 0000000000000001 R09: fffff52001696f79 [ 954.898748][T16355] R10: ffffc9000b4b7bcf R11: 0000000000000000 R12: ffff8880257f0000 [ 954.906736][T16355] R13: ffff88807a2072b0 R14: 0000000000000000 R15: ffff88807a2072d8 [ 954.914700][T16355] FS: 0000555558a8a500(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 954.923926][T16355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.930554][T16355] CR2: 0000001b303faff8 CR3: 000000005b6ba000 CR4: 00000000003526f0 [ 954.938602][T16355] Call Trace: [ 954.941867][T16355] [ 954.944772][T16355] drm_file_free.part.0+0x7ee/0xcd0 [ 954.949981][T16355] drm_close_helper.isra.0+0x186/0x1f0 [ 954.955415][T16355] drm_release+0x1ab/0x360 [ 954.959829][T16355] ? __pfx_drm_release+0x10/0x10 [ 954.964737][T16355] __fput+0x402/0xb70 [ 954.968725][T16355] task_work_run+0x150/0x240 [ 954.973316][T16355] ? __pfx_task_work_run+0x10/0x10 [ 954.978455][T16355] ? __pfx___do_sys_close_range+0x10/0x10 [ 954.984190][T16355] exit_to_user_mode_loop+0xec/0x130 [ 954.989514][T16355] do_syscall_64+0x426/0xfa0 [ 954.994109][T16355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.000050][T16355] RIP: 0033:0x7fe1e678f6c9 [ 955.004465][T16355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 955.024483][T16355] RSP: 002b:00007ffdb1164618 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 955.032944][T16355] RAX: 0000000000000000 RBX: 00007fe1e69e7da0 RCX: 00007fe1e678f6c9 [ 955.040970][T16355] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 955.048975][T16355] RBP: 00007fe1e69e7da0 R08: 000000000002821c R09: 00000019b116490f [ 955.056959][T16355] R10: 00007fe1e69e7cb0 R11: 0000000000000246 R12: 00000000000e915f [ 955.064922][T16355] R13: 00007fe1e69e6270 R14: ffffffffffffffff R15: 00007ffdb1164730 [ 955.072921][T16355] [ 955.075933][T16355] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 955.083202][T16355] CPU: 0 UID: 0 PID: 16355 Comm: syz.4.2852 Not tainted syzkaller #0 PREEMPT(full) [ 955.092567][T16355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 955.102612][T16355] Call Trace: [ 955.105882][T16355] [ 955.108801][T16355] dump_stack_lvl+0x3d/0x1f0 [ 955.113394][T16355] vpanic+0x640/0x6f0 [ 955.117377][T16355] ? drm_prime_destroy_file_private+0x43/0x60 [ 955.123437][T16355] panic+0xca/0xd0 [ 955.127159][T16355] ? __pfx_panic+0x10/0x10 [ 955.131582][T16355] ? check_panic_on_warn+0x1f/0xb0 [ 955.136697][T16355] check_panic_on_warn+0xab/0xb0 [ 955.141633][T16355] __warn+0xf6/0x3c0 [ 955.145518][T16355] ? drm_prime_destroy_file_private+0x43/0x60 [ 955.151581][T16355] report_bug+0x3c3/0x580 [ 955.155911][T16355] ? drm_prime_destroy_file_private+0x43/0x60 [ 955.161969][T16355] handle_bug+0x184/0x210 [ 955.166290][T16355] exc_invalid_op+0x17/0x50 [ 955.170787][T16355] asm_exc_invalid_op+0x1a/0x20 [ 955.175629][T16355] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 955.182302][T16355] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 63 2d 74 fc e8 5e 2d 74 fc 90 <0f> 0b 90 5b e9 54 2d 74 fc e8 2f bc dc fc eb d8 66 66 2e 0f 1f 84 [ 955.201899][T16355] RSP: 0018:ffffc9000b4b7cc8 EFLAGS: 00010293 [ 955.207958][T16355] RAX: 0000000000000000 RBX: ffff88807a207380 RCX: ffffffff8b61eb01 [ 955.215919][T16355] RDX: ffff88802685c900 RSI: ffffffff8548cb72 RDI: ffff88807a207410 [ 955.223881][T16355] RBP: ffff88807a207000 R08: 0000000000000001 R09: fffff52001696f79 [ 955.231842][T16355] R10: ffffc9000b4b7bcf R11: 0000000000000000 R12: ffff8880257f0000 [ 955.239805][T16355] R13: ffff88807a2072b0 R14: 0000000000000000 R15: ffff88807a2072d8 [ 955.247773][T16355] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 955.253403][T16355] ? drm_prime_destroy_file_private+0x42/0x60 [ 955.259467][T16355] ? drm_prime_destroy_file_private+0x42/0x60 [ 955.265528][T16355] drm_file_free.part.0+0x7ee/0xcd0 [ 955.270725][T16355] drm_close_helper.isra.0+0x186/0x1f0 [ 955.276179][T16355] drm_release+0x1ab/0x360 [ 955.280591][T16355] ? __pfx_drm_release+0x10/0x10 [ 955.285521][T16355] __fput+0x402/0xb70 [ 955.289514][T16355] task_work_run+0x150/0x240 [ 955.294101][T16355] ? __pfx_task_work_run+0x10/0x10 [ 955.299208][T16355] ? __pfx___do_sys_close_range+0x10/0x10 [ 955.304930][T16355] exit_to_user_mode_loop+0xec/0x130 [ 955.310210][T16355] do_syscall_64+0x426/0xfa0 [ 955.314836][T16355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.320809][T16355] RIP: 0033:0x7fe1e678f6c9 [ 955.325225][T16355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 955.344825][T16355] RSP: 002b:00007ffdb1164618 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 955.353233][T16355] RAX: 0000000000000000 RBX: 00007fe1e69e7da0 RCX: 00007fe1e678f6c9 [ 955.361199][T16355] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 955.369164][T16355] RBP: 00007fe1e69e7da0 R08: 000000000002821c R09: 00000019b116490f [ 955.377126][T16355] R10: 00007fe1e69e7cb0 R11: 0000000000000246 R12: 00000000000e915f [ 955.385084][T16355] R13: 00007fe1e69e6270 R14: ffffffffffffffff R15: 00007ffdb1164730 [ 955.393321][T16355] [ 955.396535][T16355] Kernel Offset: disabled [ 955.400856][T16355] Rebooting in 86400 seconds..