last executing test programs: 41.741975014s ago: executing program 3 (id=2927): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0x0, 0x1}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x8, 0x800, 0xca, 0x7}, {0x3, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r0, 0x0, 0x0) 41.572966539s ago: executing program 3 (id=2929): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, 0x0) 41.329390705s ago: executing program 3 (id=2931): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 40.799795163s ago: executing program 3 (id=2932): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e700000000000000000020000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) close(r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800) removexattr(0x0, 0x0) setpgid(0x0, r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200), 0x7a4b9db2d652dbaf, &(0x7f0000000540)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee01, @ANYBLOB=',mode=00000000000000000000006,mode=00000000000000000000001,gid=', @ANYRESHEX, @ANYBLOB=',smackfstransmute=autofs\x00,\rppraise_type=imasig,dont_hash,fsname=autofs\x00,dont_measure,dont_appraise,smackbsfloor=autofs\x00,subj_type=\\.,measure,\x00']) 40.537762489s ago: executing program 3 (id=2934): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x100, 0x1}]}}}}}}}, 0x0) 40.018198449s ago: executing program 1 (id=2936): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:0:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000) pipe(&(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) setfsgid(r5) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000100)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe2(&(0x7f00000001c0), 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)={[{@metacopy_on}]}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000303"], 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000040000000000000000008500000020000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.857058076s ago: executing program 3 (id=2938): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x28, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x28, 0x1e, 0xb7b6511a36acb75d, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) 39.39892447s ago: executing program 32 (id=2938): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x28, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x28, 0x1e, 0xb7b6511a36acb75d, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) 39.381780018s ago: executing program 1 (id=2940): memfd_secret(0x80000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) open(0x0, 0x80140, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r5, 0x101, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 38.858262132s ago: executing program 1 (id=2942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1", 0xa, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 38.270701152s ago: executing program 1 (id=2943): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e700000000000000000020000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) close(r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800) removexattr(0x0, 0x0) setpgid(0x0, r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200), 0x7a4b9db2d652dbaf, &(0x7f0000000540)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee01, @ANYBLOB=',mode=00000000000000000000006,mode=00000000000000000000001,gid=', @ANYRESHEX, @ANYBLOB=',smackfstransmute=autofs\x00,\rppraise_type=imasig,dont_hash,fsname=autofs\x00,dont_measure,dont_appraise,smackbsfloor=autofs\x00,subj_type=\\.,measure,\x00']) 38.133898209s ago: executing program 1 (id=2944): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r1, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x28, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x28, 0x1e, 0xb7b6511a36acb75d, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) 37.784927804s ago: executing program 1 (id=2946): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0xa9, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'macvlan1\x00', &(0x7f0000001640)=@ethtool_coalesce={0xe, 0x400, 0x7fffffff, 0x4, 0x80000001, 0x0, 0xc56, 0x8000, 0x7, 0x80000001, 0x101, 0x101, 0x6, 0x2, 0x1, 0x1, 0x4, 0x4dc, 0x9, 0x3, 0xd5, 0x9, 0x2}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002680)=0xe8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0, 0xffffffffffffffbe}, 0x10000}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, &(0x7f0000001a00), 0x6}, 0x80000000}], 0x4, 0x0, 0x0) 37.054602891s ago: executing program 33 (id=2946): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0xa9, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'macvlan1\x00', &(0x7f0000001640)=@ethtool_coalesce={0xe, 0x400, 0x7fffffff, 0x4, 0x80000001, 0x0, 0xc56, 0x8000, 0x7, 0x80000001, 0x101, 0x101, 0x6, 0x2, 0x1, 0x1, 0x4, 0x4dc, 0x9, 0x3, 0xd5, 0x9, 0x2}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002680)=0xe8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0, 0xffffffffffffffbe}, 0x10000}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, &(0x7f0000001a00), 0x6}, 0x80000000}], 0x4, 0x0, 0x0) 20.55263931s ago: executing program 4 (id=2994): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x77, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0xf, 0x4, 0x1, 0x5, 0x69, 0x64, 0x0, 0x0, 0x6, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x27, 0xfb, [@dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100, @broadcast, @broadcast, @loopback, @rand_addr=0x64010101, @local, @loopback, @remote]}]}}, @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1, 0x2, 0x55f, 0x0, 0x3, 0xa, 0x3, 0x2, 0x2, 0x8, 0x2, 0x4e20, 0x4e22}, 0x2, 0x1}, 0x1, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002000010027bd6900fddbdf250a108010000000081600000014000200fc02000000000000000000000000002014000100200100"/68], 0x44}}, 0x40080) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, r5, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f0000004980), 0x0, 0x20008000) 19.910996235s ago: executing program 4 (id=2997): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r1, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x28, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x28, 0x1e, 0xb7b6511a36acb75d, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 18.110211407s ago: executing program 4 (id=3001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100ffffffff00000000e00000020000000000000000000000000000000000000000000000000000000000000000000400000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000800000000000000000000000000000000000000000000000000000000000000fbffffffff01ffff00000000000000000000000000000000e7000000000000000000000000000000000000000000000000010000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17.305002883s ago: executing program 4 (id=3004): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r3, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14, 0x100010, r1, 0xeefa7000) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x7, 0x8000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 16.411978901s ago: executing program 5 (id=3007): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800010000e500dfff00000000000000950000000000000049adb929b95ca7d9d43d9c86fff1e43a1c1e94c32c078a2c124037189b43c1032c4fe9dbf1dbb91ec3a340edfe8c7b491ef9e1c86654d904"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000008c0)={0xc0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) lstat(0x0, 0x0) 16.140955306s ago: executing program 4 (id=3008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15.15630249s ago: executing program 4 (id=3011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1", 0xa, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.989283611s ago: executing program 5 (id=3012): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x149380, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000003c0), 0x4) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x70) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x18, 0x0, &(0x7f0000001080)) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) 13.207357496s ago: executing program 5 (id=3019): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0x38) writev(r4, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) 12.93689692s ago: executing program 6 (id=3020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.578164003s ago: executing program 6 (id=3023): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x69) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000240)={@empty, @broadcast}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000bf0e000413a1f8480b0027001000000002800000121f", 0x19}], 0x1}, 0x2404c091) (async) socket$rxrpc(0x21, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10.846092021s ago: executing program 2 (id=3026): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}]}, 0x3c}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.380271984s ago: executing program 6 (id=3027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000740)={0x2, 0xebac, 0x3, 0x7, 0x3, 0x18, 0x2, 0x6, r3}, 0x20) 10.017137788s ago: executing program 0 (id=3028): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x149380, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000003c0), 0x4) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x70) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x18, 0x0, &(0x7f0000001080)) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) 9.71543765s ago: executing program 2 (id=3029): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 9.660389438s ago: executing program 2 (id=3030): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x1a, {0x8001, 0x8, 0x2}}]}, 0x28}}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000200), 0x4) bind$bt_hci(r1, &(0x7f0000000040), 0x6) socket$isdn_base(0x22, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x0) r4 = socket$inet(0x2, 0x4, 0x5) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) sendto$inet(r4, &(0x7f0000000180)="e637542079abf03d254422ae95e2e30515765a43cdd482138386c4055016bd6b37cb89f13266105940fd2fa1666fe927e0f214686d779e8b651c540124ea1281e6138985dd8d223f6d4c691d5b6d53cf7d807ea89cb1420ba243eaa833bca9ba2beb73fb90e347f1a3b2a78a6035bdee82e0c0", 0x73, 0x4000044, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001c80)={&(0x7f0000000240)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/63, 0x3f}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/21, 0x15}], 0x8, &(0x7f0000001ac0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7}, &(0x7f0000001700)=0x1, &(0x7f0000001740)=0xf1, 0x10000, 0x3ff, 0x1, 0x1, 0x8, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @mask_cswp={0x58, 0x114, 0x9, {{0x2}, &(0x7f0000001780)=0x3, &(0x7f00000017c0)=0x1, 0x200, 0x0, 0x7fff, 0x2, 0x4, 0xe}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001800)=""/152, 0x98}, &(0x7f00000018c0), 0x4a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x400}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001900)=""/93, 0x5d}, &(0x7f0000001980), 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000019c0)=""/143, 0x8f}, &(0x7f0000001a80), 0x4a}}], 0x188, 0x80}, 0x880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x1c, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) 9.293011966s ago: executing program 2 (id=3031): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], &(0x7f00000000c0)=""/209, 0x2e, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 9.121999756s ago: executing program 0 (id=3032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.913479056s ago: executing program 5 (id=3033): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r2, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x28, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x28, 0x1e, 0xb7b6511a36acb75d, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) 8.610104168s ago: executing program 6 (id=3034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xeefe3000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a88f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153deefe51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53de00000000088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.352937221s ago: executing program 6 (id=3035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) syz_fuse_handle_req(r2, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.785227866s ago: executing program 0 (id=3036): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r2, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x28, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x28, 0x1e, 0xb7b6511a36acb75d, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) 7.702120452s ago: executing program 5 (id=3037): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)='*{(&:\xe3-.{{\x00', 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000a00)="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", 0x1000, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r2, r3}, &(0x7f0000000480)=""/129, 0x81, &(0x7f0000001b00)={&(0x7f0000000540)={'sha384-neon\x00'}, &(0x7f0000001a00)="f94fff782b6dfd9027fcb7d9c3a3b2423cc602b5f192148cb26a57c12beff6008d45d80e2e98c2cbea07231e972a8e64e0e8489a4e1b8bcd3c008d23aad483012e46992ab1ea98b056c937bd5f657cba3ab7623b8a1c94962167195a22c8cd282488ad1406d467849e0f8303933dba83eb705f10f8f1b3001763eae8721b3fcdb27cf6f664945cc79b68919f2213e478b375eff76c936c65fda9bc846f50098c342240861f102ea1e84b95fdd8b1ad80aa07973d6ab071bcf4e52ff8eae010d630de0963799511f892db8b589a306f73e47d1a9e1e5fcbc0c6850ac6", 0xdc}) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b"], 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) add_key$user(&(0x7f00000000c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000280)="fdda04e458fef0e7ae24e32f4bdeec837f25852ef4d741f503d6759a4df163498574d6e755149391973e76050c9a3c516851aa7c625b1fa94f19f793131c204a8e6fa2526660ae5503ca7bbdf0b90f507b36e77304433857d1d5deee64f1367e01f6bc36", 0x64, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r8, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xc, 'tunl0\x00'}) bind$alg(r7, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 7.428955992s ago: executing program 2 (id=3038): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}]}, 0x3c}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.397463461s ago: executing program 6 (id=3039): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, &(0x7f0000000040)='--\x00') r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$packet(0x11, 0x2, 0x300) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 7.32711351s ago: executing program 0 (id=3040): getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) 7.19703314s ago: executing program 2 (id=3041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 7.196688781s ago: executing program 0 (id=3042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r7}, &(0x7f00000007c0), &(0x7f0000000800)=r5}, 0x20) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110000000000fbdbcd252700000008000300", @ANYRES32=r3, @ANYBLOB="0a003400020202020202000008006e80040001000a00060008"], 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x4) 7.099016093s ago: executing program 0 (id=3043): r0 = syz_open_dev$sndmidi(0x0, 0x2002, 0x68e982) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2ded, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000000380)=0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000200)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000006c0)=@adf_dec={@normal='NumberDcInstances\x00', {0x10001}, {&(0x7f0000000540)=@adf_hex={@bank={'Bank', '3', 'CoreAffinity\x00'}, {0x2}}}}}}}, 0x2f}) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c6163636573733d616e792c64666c7475696401ff7b988515abba43132b39268d19e8306e996f059e47b6364e38bd", @ANYRESHEX=0x0, @ANYBLOB=',noxattr,k']) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="81108000"/16, @ANYBLOB="3a85fc8245964247d124ff6db8791139042ac2545d98dd9ca9537da847262baae996dfccc707e7bc3238184237141910f3d9d42f021d8c7552347db68dcaeefaae51a8c4d939fb49406760a88cb616cbc1460eef04577672d57cf98dc548fab0030d72e43971c08adfed95052ef9e07ca582b081a0fe0d0ced79353a86b7f600eebe55be418968b97ef076d36c25067d6d2933c0321b11bf5a72bdeaa6289fe371c7651710866e5d79c2d871b94b95c17bd6b5366ad88b4685c94f43cd9b86ca184a9ef476f1d5037928d0f790d58484f0540d04504e3a2f7fcdf9db443c97b8d17cfd5a4eeb40385f43259b89f22682fedb179747e14c"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000340)) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) r13 = socket(0x29, 0x3, 0x2) write(r13, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca", 0x25) 0s ago: executing program 5 (id=3044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setrlimit(0x9, &(0x7f0000000040)={0x7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000080)=0xd, 0x4) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) r7 = fcntl$dupfd(r6, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) r8 = syz_open_dev$video4linux(&(0x7f0000000040), 0xb, 0x88000) ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f0000000000)={0x980001, 0x100, "798bb088541665a810c0c79c3ec3b9668619c7e8f1f7f74327b619c5d0d2dfa3", 0x8, 0xfffffff3, 0x9, 0x3, 0x1a0}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 58e929 code=0x7ffc0000 [ 748.447140][ T30] audit: type=1326 audit(1750161048.940:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f4ab458e929 code=0x7ffc0000 [ 748.470611][ T30] audit: type=1326 audit(1750161048.940:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab458e929 code=0x7ffc0000 [ 748.494046][ T30] audit: type=1326 audit(1750161048.950:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab458e929 code=0x7ffc0000 [ 748.518556][ T30] audit: type=1326 audit(1750161048.960:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4ab458e929 code=0x7ffc0000 [ 748.546831][ T30] audit: type=1326 audit(1750161048.980:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab458e929 code=0x7ffc0000 [ 748.570426][T10036] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 748.570455][T10036] usb 3-1: config 0 interface 0 has no altsetting 0 [ 748.601617][ T30] audit: type=1326 audit(1750161048.980:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab458e929 code=0x7ffc0000 [ 748.601860][T10036] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 748.625441][ T30] audit: type=1326 audit(1750161049.080:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4ab458e929 code=0x7ffc0000 [ 748.700348][ T30] audit: type=1326 audit(1750161049.080:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab458e929 code=0x7ffc0000 [ 748.750175][T10036] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 748.761726][T10036] usb 3-1: Product: syz [ 748.765917][T10036] usb 3-1: Manufacturer: syz [ 748.773030][T10036] usb 3-1: SerialNumber: syz [ 748.780574][T10036] usb 3-1: config 0 descriptor?? [ 748.790525][T10036] usb 3-1: selecting invalid altsetting 0 [ 748.920691][ T5950] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 749.185020][ T5941] udevd[5941]: setting mode of /dev/audio3 to 020660 failed: Read-only file system [ 749.185527][ T5816] udevd[5816]: setting mode of /dev/dsp3 to 020660 failed: Read-only file system [ 749.202176][T11068] udevd[11068]: setting mode of /dev/snd/pcmC3D0p to 020660 failed: Read-only file system [ 749.216599][T11066] udevd[11066]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 749.226429][ T6166] udevd[6166]: setting mode of /dev/snd/controlC3 to 020660 failed: Read-only file system [ 749.238514][ T5941] udevd[5941]: setting owner of /dev/audio3 to uid=0, gid=29 failed: Read-only file system [ 749.253235][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 749.279364][ T5950] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 749.298707][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.309660][ T5950] usb 1-1: Product: syz [ 749.316591][ T5950] usb 1-1: Manufacturer: syz [ 749.324658][ T5950] usb 1-1: SerialNumber: syz [ 749.541933][ T5950] r8152-cfgselector 1-1: Unknown version 0x0000 [ 749.548212][ T5950] r8152-cfgselector 1-1: config 0 descriptor?? [ 749.716296][T10036] libceph: connect (1)[c::]:6789 error -101 [ 749.725629][T10036] libceph: mon0 (1)[c::]:6789 connect error [ 749.740557][T10033] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 749.768296][ T5950] r8152-cfgselector 1-1: Unknown version 0x0000 [ 749.781658][ T5950] r8152-cfgselector 1-1: bad CDC descriptors [ 749.798333][ T5950] r8152-cfgselector 1-1: USB disconnect, device number 33 [ 749.965349][T10033] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.977619][T10033] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 749.989186][T10033] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 750.000325][T10033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.001704][T10036] libceph: connect (1)[c::]:6789 error -101 [ 750.023315][T14344] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 750.031078][T10036] libceph: mon0 (1)[c::]:6789 connect error [ 750.070287][T10033] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.168117][T14350] ceph: No mds server is up or the cluster is laggy [ 750.317660][T10033] usb 2-1: USB disconnect, device number 32 [ 750.915123][T14363] binder: BINDER_SET_CONTEXT_MGR already set [ 750.921680][T14363] binder: 14361:14363 ioctl 4018620d 200000000040 returned -16 [ 751.056082][T10033] kernel write not supported for file bpf-prog (pid: 10033 comm: kworker/1:10) [ 751.123713][T14367] netlink: 'syz.4.2534': attribute type 3 has an invalid length. [ 751.600268][T10033] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 751.659544][ T9110] usb 3-1: USB disconnect, device number 33 [ 751.706912][T14384] FAULT_INJECTION: forcing a failure. [ 751.706912][T14384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.744049][T14384] CPU: 0 UID: 0 PID: 14384 Comm: syz.0.2540 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 751.744075][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.744085][T14384] Call Trace: [ 751.744090][T14384] [ 751.744097][T14384] dump_stack_lvl+0x16c/0x1f0 [ 751.744127][T14384] should_fail_ex+0x512/0x640 [ 751.744153][T14384] _copy_from_user+0x2e/0xd0 [ 751.744177][T14384] move_addr_to_kernel+0x65/0x170 [ 751.744197][T14384] __sys_sendto+0x1be/0x520 [ 751.744219][T14384] ? __pfx___sys_sendto+0x10/0x10 [ 751.744262][T14384] ? ksys_write+0x1ac/0x250 [ 751.744283][T14384] ? __pfx_ksys_write+0x10/0x10 [ 751.744306][T14384] __x64_sys_sendto+0xe0/0x1c0 [ 751.744327][T14384] ? do_syscall_64+0x91/0x4c0 [ 751.744358][T14384] ? lockdep_hardirqs_on+0x7c/0x110 [ 751.744382][T14384] do_syscall_64+0xcd/0x4c0 [ 751.744410][T14384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.744428][T14384] RIP: 0033:0x7f0684b8e929 [ 751.744443][T14384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.744458][T14384] RSP: 002b:00007f0685975038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 751.744475][T14384] RAX: ffffffffffffffda RBX: 00007f0684db5fa0 RCX: 00007f0684b8e929 [ 751.744486][T14384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 751.744496][T14384] RBP: 00007f0685975090 R08: 0000200000000240 R09: 0000000000000014 [ 751.744507][T14384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.744517][T14384] R13: 0000000000000000 R14: 00007f0684db5fa0 R15: 00007ffd3f0ab838 [ 751.744541][T14384] [ 751.930163][T10033] usb 5-1: Using ep0 maxpacket: 8 [ 751.937235][T10033] usb 5-1: unable to get BOS descriptor or descriptor too short [ 751.945917][T10033] usb 5-1: config 255 has an invalid descriptor of length 195, skipping remainder of the config [ 751.970136][T10033] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 751.991795][T10033] usb 5-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=72.cc [ 752.004577][T10033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.024794][T10033] usb 5-1: Product: syz [ 752.028989][T10033] usb 5-1: Manufacturer: syz [ 752.060015][T10033] usb 5-1: SerialNumber: syz [ 752.434639][T14371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.448710][T14371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.573162][T10033] usb 5-1: USB disconnect, device number 26 [ 752.734315][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 752.767611][ T30] audit: type=1400 audit(1750161054.020:353): avc: denied { read write } for pid=14397 comm="syz.2.2546" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 753.016168][ T30] audit: type=1400 audit(1750161054.020:354): avc: denied { open } for pid=14397 comm="syz.2.2546" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 753.058378][ T30] audit: type=1400 audit(1750161054.080:355): avc: denied { name_bind } for pid=14397 comm="syz.2.2546" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 753.977046][ T30] audit: type=1400 audit(1750161055.330:356): avc: denied { read } for pid=14425 comm="syz.2.2552" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 754.077756][T14426] audit: audit_backlog=65 > audit_backlog_limit=64 [ 754.155175][T14426] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 754.245723][ T30] audit: type=1400 audit(1750161055.330:357): avc: denied { open } for pid=14425 comm="syz.2.2552" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 754.297941][T14426] audit: backlog limit exceeded [ 754.381157][ T30] audit: type=1326 audit(1750161055.360:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab458e929 code=0x7fc00000 [ 754.404914][ T30] audit: type=1326 audit(1750161055.360:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ab458e929 code=0x7fc00000 [ 754.443722][T14431] random: crng reseeded on system resumption [ 754.487396][T14433] FAULT_INJECTION: forcing a failure. [ 754.487396][T14433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.503684][T14433] CPU: 0 UID: 0 PID: 14433 Comm: syz.4.2554 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 754.503711][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.503722][T14433] Call Trace: [ 754.503728][T14433] [ 754.503735][T14433] dump_stack_lvl+0x16c/0x1f0 [ 754.503767][T14433] should_fail_ex+0x512/0x640 [ 754.503795][T14433] _copy_from_user+0x2e/0xd0 [ 754.503820][T14433] move_addr_to_kernel+0x65/0x170 [ 754.503842][T14433] __sys_sendto+0x1be/0x520 [ 754.503864][T14433] ? __pfx___sys_sendto+0x10/0x10 [ 754.503885][T14433] ? trie_lookup_elem+0x4b2/0x8e0 [ 754.503928][T14433] ? find_held_lock+0x2b/0x80 [ 754.503950][T14433] ? syscall_trace_enter+0x1cb/0x260 [ 754.503972][T14433] __x64_sys_sendto+0xe0/0x1c0 [ 754.503993][T14433] ? syscall_trace_enter+0xee/0x260 [ 754.504012][T14433] do_syscall_64+0xcd/0x4c0 [ 754.504039][T14433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.504057][T14433] RIP: 0033:0x7f8508d8e929 [ 754.504071][T14433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.504087][T14433] RSP: 002b:00007f8509c76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 754.504105][T14433] RAX: ffffffffffffffda RBX: 00007f8508fb5fa0 RCX: 00007f8508d8e929 [ 754.504116][T14433] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000003 [ 754.504126][T14433] RBP: 00007f8509c76090 R08: 000020000005ffe4 R09: 000000000000001c [ 754.504137][T14433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.504147][T14433] R13: 0000000000000000 R14: 00007f8508fb5fa0 R15: 00007ffda8d88f88 [ 754.504171][T14433] [ 754.717591][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 754.730776][T14431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2553'. [ 754.771163][T14437] FAULT_INJECTION: forcing a failure. [ 754.771163][T14437] name failslab, interval 1, probability 0, space 0, times 0 [ 754.830207][T14437] CPU: 0 UID: 0 PID: 14437 Comm: syz.3.2556 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 754.830236][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.830247][T14437] Call Trace: [ 754.830253][T14437] [ 754.830261][T14437] dump_stack_lvl+0x16c/0x1f0 [ 754.830304][T14437] should_fail_ex+0x512/0x640 [ 754.830327][T14437] ? fs_reclaim_acquire+0xae/0x150 [ 754.830348][T14437] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 754.830374][T14437] should_failslab+0xc2/0x120 [ 754.830400][T14437] __kmalloc_noprof+0xd2/0x510 [ 754.830429][T14437] tomoyo_realpath_from_path+0xc2/0x6e0 [ 754.830457][T14437] ? tomoyo_profile+0x47/0x60 [ 754.830486][T14437] tomoyo_path_number_perm+0x245/0x580 [ 754.830507][T14437] ? tomoyo_path_number_perm+0x237/0x580 [ 754.830530][T14437] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 754.830580][T14437] ? find_held_lock+0x2b/0x80 [ 754.830602][T14437] ? hook_file_ioctl_common+0x145/0x410 [ 754.830626][T14437] ? __fget_files+0x20e/0x3c0 [ 754.830656][T14437] security_file_ioctl+0x9b/0x240 [ 754.830682][T14437] __x64_sys_ioctl+0xb7/0x210 [ 754.830705][T14437] do_syscall_64+0xcd/0x4c0 [ 754.830734][T14437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.830752][T14437] RIP: 0033:0x7f4ab458e929 [ 754.830768][T14437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.830786][T14437] RSP: 002b:00007f4ab5412038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.830803][T14437] RAX: ffffffffffffffda RBX: 00007f4ab47b5fa0 RCX: 00007f4ab458e929 [ 754.830815][T14437] RDX: 0800000000000001 RSI: 0000000000009360 RDI: 0000000000000003 [ 754.830826][T14437] RBP: 00007f4ab5412090 R08: 0000000000000000 R09: 0000000000000000 [ 754.830836][T14437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.830846][T14437] R13: 0000000000000000 R14: 00007f4ab47b5fa0 R15: 00007ffe1d030608 [ 754.830871][T14437] [ 754.830879][T14437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 755.330302][T10033] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 755.526619][T10033] usb 1-1: New USB device found, idVendor=056a, idProduct=0037, bcdDevice= 0.00 [ 755.644529][T10033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.258135][T10033] usb 1-1: config 0 descriptor?? [ 756.412143][T14465] input: syz0 as /devices/virtual/input/input130 [ 756.424590][T10036] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 756.794001][T14471] No control pipe specified [ 756.837160][T10036] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 756.848412][T10036] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.867869][T10036] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 756.881335][T10036] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 756.885253][T10033] wacom 0003:056A:0037.000B: item fetching failed at offset 0/5 [ 756.904186][T14473] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2570'. [ 756.914356][T10036] usb 2-1: Product: syz [ 756.918547][T10036] usb 2-1: Manufacturer: syz [ 756.926172][T10033] wacom 0003:056A:0037.000B: parse failed [ 756.931016][T10036] usb 2-1: SerialNumber: syz [ 756.943274][T10033] wacom 0003:056A:0037.000B: probe with driver wacom failed with error -22 [ 756.945187][T14473] tmpfs: Unknown parameter 'quïtÁvÌï?a' [ 756.980928][T10036] usb 2-1: config 0 descriptor?? [ 757.066110][T10036] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 757.166600][ T5816] udevd[5816]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 757.172494][T11068] udevd[11068]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.349277][ T5816] udevd[5816]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: Read-only file system [ 757.572496][T10033] usb 1-1: USB disconnect, device number 34 [ 757.964875][T14503] netlink: 'syz.4.2575': attribute type 10 has an invalid length. [ 758.009076][T14503] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 758.781639][T14520] input: syz0 as /devices/virtual/input/input131 [ 759.011740][T14524] FAULT_INJECTION: forcing a failure. [ 759.011740][T14524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.064899][T14524] CPU: 1 UID: 0 PID: 14524 Comm: syz.4.2580 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 759.064919][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.064926][T14524] Call Trace: [ 759.064930][T14524] [ 759.064934][T14524] dump_stack_lvl+0x16c/0x1f0 [ 759.064954][T14524] should_fail_ex+0x512/0x640 [ 759.064972][T14524] _copy_from_user+0x2e/0xd0 [ 759.064988][T14524] copy_msghdr_from_user+0x98/0x160 [ 759.065006][T14524] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 759.065029][T14524] ___sys_sendmsg+0xfe/0x1d0 [ 759.065045][T14524] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.065060][T14524] ? __lock_acquire+0x622/0x1c90 [ 759.065094][T14524] __sys_sendmsg+0x16d/0x220 [ 759.065110][T14524] ? __pfx___sys_sendmsg+0x10/0x10 [ 759.065135][T14524] do_syscall_64+0xcd/0x4c0 [ 759.065153][T14524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.065164][T14524] RIP: 0033:0x7f8508d8e929 [ 759.065173][T14524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.065183][T14524] RSP: 002b:00007f8509c76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.065194][T14524] RAX: ffffffffffffffda RBX: 00007f8508fb5fa0 RCX: 00007f8508d8e929 [ 759.065201][T14524] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000004 [ 759.065207][T14524] RBP: 00007f8509c76090 R08: 0000000000000000 R09: 0000000000000000 [ 759.065213][T14524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.065219][T14524] R13: 0000000000000000 R14: 00007f8508fb5fa0 R15: 00007ffda8d88f88 [ 759.065233][T14524] [ 759.285227][T10033] usb 2-1: USB disconnect, device number 33 [ 759.397997][T14536] FAULT_INJECTION: forcing a failure. [ 759.397997][T14536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.429265][T14536] CPU: 1 UID: 0 PID: 14536 Comm: syz.4.2582 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 759.429292][T14536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.429303][T14536] Call Trace: [ 759.429309][T14536] [ 759.429315][T14536] dump_stack_lvl+0x16c/0x1f0 [ 759.429347][T14536] should_fail_ex+0x512/0x640 [ 759.429381][T14536] _copy_from_user+0x2e/0xd0 [ 759.429407][T14536] __sys_bpf+0x21d/0x4d80 [ 759.429435][T14536] ? __pfx___sys_bpf+0x10/0x10 [ 759.429460][T14536] ? ksys_write+0x190/0x250 [ 759.429487][T14536] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 759.429530][T14536] ? fput+0x70/0xf0 [ 759.429556][T14536] ? ksys_write+0x1ac/0x250 [ 759.429576][T14536] ? __pfx_ksys_write+0x10/0x10 [ 759.429603][T14536] __x64_sys_bpf+0x78/0xc0 [ 759.429626][T14536] ? lockdep_hardirqs_on+0x7c/0x110 [ 759.429650][T14536] do_syscall_64+0xcd/0x4c0 [ 759.429677][T14536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.429693][T14536] RIP: 0033:0x7f8508d8e929 [ 759.429707][T14536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.429722][T14536] RSP: 002b:00007f8509c76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 759.429740][T14536] RAX: ffffffffffffffda RBX: 00007f8508fb5fa0 RCX: 00007f8508d8e929 [ 759.429751][T14536] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 759.429761][T14536] RBP: 00007f8509c76090 R08: 0000000000000000 R09: 0000000000000000 [ 759.429770][T14536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.429780][T14536] R13: 0000000000000000 R14: 00007f8508fb5fa0 R15: 00007ffda8d88f88 [ 759.429803][T14536] [ 759.644446][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 759.644463][ T30] audit: type=1400 audit(1750161060.990:431): avc: denied { mounton } for pid=14541 comm="syz.2.2585" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 759.783775][T14549] netlink: 'syz.1.2586': attribute type 13 has an invalid length. [ 759.905812][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 759.981538][ T30] audit: type=1400 audit(1750161061.250:432): avc: denied { bind } for pid=14546 comm="syz.1.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 760.181386][T14542] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 760.190631][ T30] audit: type=1400 audit(1750161061.320:433): avc: denied { map } for pid=14546 comm="syz.1.2586" path="socket:[48805]" dev="sockfs" ino=48805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 760.224066][ T30] audit: type=1400 audit(1750161061.420:434): avc: denied { create } for pid=14550 comm="syz.0.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 760.286803][T14559] FAULT_INJECTION: forcing a failure. [ 760.286803][T14559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.311236][T14559] CPU: 0 UID: 0 PID: 14559 Comm: syz.4.2591 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 760.311266][T14559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.311277][T14559] Call Trace: [ 760.311283][T14559] [ 760.311290][T14559] dump_stack_lvl+0x16c/0x1f0 [ 760.311321][T14559] should_fail_ex+0x512/0x640 [ 760.311349][T14559] _copy_from_user+0x2e/0xd0 [ 760.311375][T14559] do_sock_getsockopt+0x5f4/0x800 [ 760.311396][T14559] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 760.311411][T14559] ? __fget_files+0x204/0x3c0 [ 760.311444][T14559] __sys_getsockopt+0x12f/0x260 [ 760.311475][T14559] __x64_sys_getsockopt+0xbd/0x160 [ 760.311498][T14559] ? do_syscall_64+0x91/0x4c0 [ 760.311524][T14559] ? lockdep_hardirqs_on+0x7c/0x110 [ 760.311554][T14559] do_syscall_64+0xcd/0x4c0 [ 760.311582][T14559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.311600][T14559] RIP: 0033:0x7f8508d8e929 [ 760.311615][T14559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.311632][T14559] RSP: 002b:00007f8509c76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 760.311650][T14559] RAX: ffffffffffffffda RBX: 00007f8508fb5fa0 RCX: 00007f8508d8e929 [ 760.311662][T14559] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 760.311672][T14559] RBP: 00007f8509c76090 R08: 0000200000695ffc R09: 0000000000000000 [ 760.311683][T14559] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.311693][T14559] R13: 0000000000000000 R14: 00007f8508fb5fa0 R15: 00007ffda8d88f88 [ 760.311718][T14559] [ 760.540246][ T9110] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 760.673982][ T30] audit: type=1400 audit(1750161062.030:435): avc: denied { read } for pid=14567 comm="syz.2.2593" dev="sockfs" ino=49417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 760.699909][ T30] audit: type=1400 audit(1750161062.050:436): avc: denied { append } for pid=14567 comm="syz.2.2593" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 760.743311][ T9110] usb 2-1: no configurations [ 760.748692][ T9110] usb 2-1: can't read configurations, error -22 [ 760.753726][T14572] libceph: resolve '4' (ret=-3): failed [ 760.967860][ T9110] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 761.079596][T14579] input: syz0 as /devices/virtual/input/input132 [ 761.352512][ T9110] usb 2-1: no configurations [ 761.357187][ T9110] usb 2-1: can't read configurations, error -22 [ 761.510620][ T9110] usb usb2-port1: attempt power cycle [ 761.513576][T14580] FAULT_INJECTION: forcing a failure. [ 761.513576][T14580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.562903][T14580] CPU: 0 UID: 0 PID: 14580 Comm: syz.2.2597 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 761.562929][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 761.562939][T14580] Call Trace: [ 761.562945][T14580] [ 761.562952][T14580] dump_stack_lvl+0x16c/0x1f0 [ 761.562982][T14580] should_fail_ex+0x512/0x640 [ 761.563009][T14580] _copy_from_iter+0x29f/0x16f0 [ 761.563035][T14580] ? __lock_acquire+0x622/0x1c90 [ 761.563062][T14580] ? __pfx__copy_from_iter+0x10/0x10 [ 761.563096][T14580] copy_page_from_iter+0xde/0x180 [ 761.563121][T14580] tun_build_skb.constprop.0+0x2e8/0x14f0 [ 761.563155][T14580] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 761.563197][T14580] ? __pfx__kstrtoull+0x10/0x10 [ 761.563221][T14580] tun_get_user+0x165f/0x3b80 [ 761.563258][T14580] ? __pfx_tun_get_user+0x10/0x10 [ 761.563281][T14580] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 761.563312][T14580] ? find_held_lock+0x2b/0x80 [ 761.563331][T14580] ? tun_get+0x191/0x370 [ 761.563358][T14580] tun_chr_write_iter+0xdc/0x210 [ 761.563384][T14580] vfs_write+0x6c4/0x1150 [ 761.563406][T14580] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 761.563432][T14580] ? __pfx_vfs_write+0x10/0x10 [ 761.563450][T14580] ? find_held_lock+0x2b/0x80 [ 761.563485][T14580] ksys_write+0x12a/0x250 [ 761.563511][T14580] ? __pfx_ksys_write+0x10/0x10 [ 761.563539][T14580] do_syscall_64+0xcd/0x4c0 [ 761.563564][T14580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.563580][T14580] RIP: 0033:0x7f075498d3df [ 761.563595][T14580] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 761.563611][T14580] RSP: 002b:00007f07527f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 761.563626][T14580] RAX: ffffffffffffffda RBX: 00007f0754bb5fa0 RCX: 00007f075498d3df [ 761.563637][T14580] RDX: 0000000000000036 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 761.563647][T14580] RBP: 00007f07527f6090 R08: 0000000000000000 R09: 0000000000000000 [ 761.563658][T14580] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 761.563668][T14580] R13: 0000000000000000 R14: 00007f0754bb5fa0 R15: 00007ffcc9ca8948 [ 761.563692][T14580] [ 761.937903][ T9110] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 762.056979][ T9110] usb 2-1: no configurations [ 762.061914][ T9110] usb 2-1: can't read configurations, error -22 [ 762.280542][ T9110] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 762.538787][ T9110] usb 2-1: no configurations [ 762.543954][ T9110] usb 2-1: can't read configurations, error -22 [ 762.605436][ T9110] usb usb2-port1: unable to enumerate USB device [ 763.068213][ T30] audit: type=1400 audit(1750161064.410:437): avc: denied { block_suspend } for pid=14610 comm="syz.3.2605" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 763.075894][T14611] FAULT_INJECTION: forcing a failure. [ 763.075894][T14611] name failslab, interval 1, probability 0, space 0, times 0 [ 763.129573][T14620] FAULT_INJECTION: forcing a failure. [ 763.129573][T14620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.149613][T14611] CPU: 0 UID: 0 PID: 14611 Comm: syz.0.2607 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 763.149641][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 763.149652][T14611] Call Trace: [ 763.149658][T14611] [ 763.149665][T14611] dump_stack_lvl+0x16c/0x1f0 [ 763.149697][T14611] should_fail_ex+0x512/0x640 [ 763.149719][T14611] ? fs_reclaim_acquire+0xae/0x150 [ 763.149739][T14611] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 763.149763][T14611] should_failslab+0xc2/0x120 [ 763.149787][T14611] __kmalloc_noprof+0xd2/0x510 [ 763.149815][T14611] tomoyo_realpath_from_path+0xc2/0x6e0 [ 763.149840][T14611] ? tomoyo_profile+0x47/0x60 [ 763.149868][T14611] tomoyo_path_number_perm+0x245/0x580 [ 763.149886][T14611] ? tomoyo_path_number_perm+0x237/0x580 [ 763.149909][T14611] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 763.149931][T14611] ? find_held_lock+0x2b/0x80 [ 763.149978][T14611] ? find_held_lock+0x2b/0x80 [ 763.149998][T14611] ? hook_file_ioctl_common+0x145/0x410 [ 763.150021][T14611] ? __fget_files+0x20e/0x3c0 [ 763.150049][T14611] security_file_ioctl+0x9b/0x240 [ 763.150074][T14611] __x64_sys_ioctl+0xb7/0x210 [ 763.150098][T14611] do_syscall_64+0xcd/0x4c0 [ 763.150123][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.150141][T14611] RIP: 0033:0x7f0684b8e929 [ 763.150156][T14611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.150173][T14611] RSP: 002b:00007f0685975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.150192][T14611] RAX: ffffffffffffffda RBX: 00007f0684db5fa0 RCX: 00007f0684b8e929 [ 763.150204][T14611] RDX: 0000000000000000 RSI: 00000000000089f1 RDI: 0000000000000004 [ 763.150214][T14611] RBP: 00007f0685975090 R08: 0000000000000000 R09: 0000000000000000 [ 763.150224][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.150234][T14611] R13: 0000000000000000 R14: 00007f0684db5fa0 R15: 00007ffd3f0ab838 [ 763.150259][T14611] [ 763.357823][ T30] audit: type=1400 audit(1750161064.420:438): avc: denied { read } for pid=14607 comm="syz.0.2607" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 763.386350][ T30] audit: type=1400 audit(1750161064.420:439): avc: denied { open } for pid=14607 comm="syz.0.2607" path="/542/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 763.386552][T14620] CPU: 0 UID: 0 PID: 14620 Comm: syz.3.2605 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 763.386573][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 763.386582][T14620] Call Trace: [ 763.386588][T14620] [ 763.386594][T14620] dump_stack_lvl+0x16c/0x1f0 [ 763.386622][T14620] should_fail_ex+0x512/0x640 [ 763.386646][T14620] _copy_from_user+0x2e/0xd0 [ 763.386668][T14620] move_addr_to_kernel+0x65/0x170 [ 763.386688][T14620] __sys_connect+0xb1/0x160 [ 763.386707][T14620] ? __pfx___sys_connect+0x10/0x10 [ 763.386734][T14620] ? __pfx_ksys_write+0x10/0x10 [ 763.386759][T14620] __x64_sys_connect+0x72/0xb0 [ 763.386777][T14620] ? lockdep_hardirqs_on+0x7c/0x110 [ 763.386799][T14620] do_syscall_64+0xcd/0x4c0 [ 763.386824][T14620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.386839][T14620] RIP: 0033:0x7f4ab458e929 [ 763.386851][T14620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.386866][T14620] RSP: 002b:00007f4ab53d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 763.386880][T14620] RAX: ffffffffffffffda RBX: 00007f4ab47b6160 RCX: 00007f4ab458e929 [ 763.386890][T14620] RDX: 000000000000006e RSI: 0000200000000140 RDI: 0000000000000004 [ 763.386900][T14620] RBP: 00007f4ab53d0090 R08: 0000000000000000 R09: 0000000000000000 [ 763.386908][T14620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.386917][T14620] R13: 0000000000000001 R14: 00007f4ab47b6160 R15: 00007ffe1d030608 [ 763.386939][T14620] [ 763.409287][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.986695][T14611] ERROR: Out of memory at tomoyo_realpath_from_path. [ 764.015502][T14611] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 89f1, magic 89 != 6b] [ 764.085923][ T30] audit: type=1400 audit(1750161065.370:440): avc: denied { ioctl } for pid=14607 comm="syz.0.2607" path="/542/file0/file0" dev="fuse" ino=0 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 764.110343][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.692701][T14641] input: syz0 as /devices/virtual/input/input133 [ 765.021706][T14647] FAULT_INJECTION: forcing a failure. [ 765.021706][T14647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.078628][T14647] CPU: 0 UID: 0 PID: 14647 Comm: syz.2.2617 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 765.078656][T14647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 765.078667][T14647] Call Trace: [ 765.078672][T14647] [ 765.078679][T14647] dump_stack_lvl+0x16c/0x1f0 [ 765.078710][T14647] should_fail_ex+0x512/0x640 [ 765.078736][T14647] _copy_from_user+0x2e/0xd0 [ 765.078764][T14647] __sys_bpf+0x21d/0x4d80 [ 765.078793][T14647] ? __pfx___sys_bpf+0x10/0x10 [ 765.078818][T14647] ? ksys_write+0x190/0x250 [ 765.078846][T14647] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 765.078889][T14647] ? fput+0x70/0xf0 [ 765.078914][T14647] ? ksys_write+0x1ac/0x250 [ 765.078936][T14647] ? __pfx_ksys_write+0x10/0x10 [ 765.078961][T14647] __x64_sys_bpf+0x78/0xc0 [ 765.078986][T14647] ? lockdep_hardirqs_on+0x7c/0x110 [ 765.079012][T14647] do_syscall_64+0xcd/0x4c0 [ 765.079040][T14647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.079058][T14647] RIP: 0033:0x7f075498e929 [ 765.079072][T14647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.079089][T14647] RSP: 002b:00007f07527f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 765.079106][T14647] RAX: ffffffffffffffda RBX: 00007f0754bb5fa0 RCX: 00007f075498e929 [ 765.079119][T14647] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 765.079129][T14647] RBP: 00007f07527f6090 R08: 0000000000000000 R09: 0000000000000000 [ 765.079140][T14647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.079150][T14647] R13: 0000000000000000 R14: 00007f0754bb5fa0 R15: 00007ffcc9ca8948 [ 765.079175][T14647] [ 769.452154][T14706] netlink: 'syz.2.2637': attribute type 27 has an invalid length. [ 769.963465][T14720] input: syz0 as /devices/virtual/input/input134 [ 771.232470][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2646'. [ 771.355434][T14741] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2650'. [ 771.366632][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'. [ 771.382172][ T9110] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 771.460479][T10033] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 771.475523][T14747] FAULT_INJECTION: forcing a failure. [ 771.475523][T14747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.491446][T14747] CPU: 0 UID: 0 PID: 14747 Comm: syz.3.2653 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 771.491473][T14747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 771.491484][T14747] Call Trace: [ 771.491490][T14747] [ 771.491497][T14747] dump_stack_lvl+0x16c/0x1f0 [ 771.491527][T14747] should_fail_ex+0x512/0x640 [ 771.491559][T14747] _copy_from_user+0x2e/0xd0 [ 771.491584][T14747] copy_msghdr_from_user+0x98/0x160 [ 771.491609][T14747] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 771.491638][T14747] ? __pfx__kstrtoull+0x10/0x10 [ 771.491661][T14747] ___sys_sendmsg+0xfe/0x1d0 [ 771.491687][T14747] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.491724][T14747] ? find_held_lock+0x2b/0x80 [ 771.491762][T14747] __sys_sendmmsg+0x200/0x420 [ 771.491790][T14747] ? __pfx___sys_sendmmsg+0x10/0x10 [ 771.491823][T14747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 771.491861][T14747] ? fput+0x70/0xf0 [ 771.491887][T14747] ? ksys_write+0x1ac/0x250 [ 771.491908][T14747] ? __pfx_ksys_write+0x10/0x10 [ 771.491938][T14747] __x64_sys_sendmmsg+0x9c/0x100 [ 771.491962][T14747] ? lockdep_hardirqs_on+0x7c/0x110 [ 771.491986][T14747] do_syscall_64+0xcd/0x4c0 [ 771.492015][T14747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.492033][T14747] RIP: 0033:0x7f4ab458e929 [ 771.492048][T14747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.492064][T14747] RSP: 002b:00007f4ab5412038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 771.492081][T14747] RAX: ffffffffffffffda RBX: 00007f4ab47b5fa0 RCX: 00007f4ab458e929 [ 771.492092][T14747] RDX: 0000000000000001 RSI: 0000200000004040 RDI: 0000000000000003 [ 771.492103][T14747] RBP: 00007f4ab5412090 R08: 0000000000000000 R09: 0000000000000000 [ 771.492113][T14747] R10: 0000000004040005 R11: 0000000000000246 R12: 0000000000000001 [ 771.492124][T14747] R13: 0000000000000000 R14: 00007f4ab47b5fa0 R15: 00007ffe1d030608 [ 771.492149][T14747] [ 771.720287][ T9110] usb 3-1: unable to get BOS descriptor or descriptor too short [ 771.731605][ T9110] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x1 is Bulk; changing to Interrupt [ 771.741727][ T9110] usb 3-1: config 1 interface 0 has no altsetting 0 [ 771.765973][ T9110] usb 3-1: string descriptor 0 read error: -22 [ 771.772505][ T9110] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 771.782711][T10033] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 771.793752][T10033] usb 1-1: config 0 interface 0 has no altsetting 0 [ 771.800423][ T9110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.821524][T10033] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 771.839023][T10033] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 771.847646][T14727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 771.872637][T10033] usb 1-1: Product: syz [ 771.878506][T10033] usb 1-1: Manufacturer: syz [ 771.888794][T10033] usb 1-1: SerialNumber: syz [ 772.102871][T10033] usb 1-1: config 0 descriptor?? [ 772.235544][ T30] audit: type=1400 audit(1750161073.590:441): avc: denied { read write } for pid=14726 comm="syz.2.2645" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 772.279197][T10033] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 772.327089][ T5816] udevd[5816]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 772.346231][ T30] audit: type=1400 audit(1750161073.590:442): avc: denied { open } for pid=14726 comm="syz.2.2645" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 772.354248][T11068] udevd[11068]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 772.370277][ T30] audit: type=1400 audit(1750161073.710:443): avc: denied { ioctl } for pid=14726 comm="syz.2.2645" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3b89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 772.420263][ T5816] udevd[5816]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: Read-only file system [ 772.727957][T14766] input: syz0 as /devices/virtual/input/input135 [ 773.182444][T14758] input: syz1 as /devices/virtual/input/input136 [ 773.305667][ T1095] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 773.654821][T10036] usb 3-1: USB disconnect, device number 34 [ 774.080261][T10036] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 774.140232][T10033] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 774.160328][ T9987] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 774.230685][T10036] usb 3-1: Using ep0 maxpacket: 8 [ 774.240507][T10036] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 774.254526][T10036] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 774.265233][T10036] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 774.277919][T10036] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.294117][T10036] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 774.303310][T10036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.311674][ T9987] usb 2-1: Using ep0 maxpacket: 8 [ 774.317760][ T9110] usb 1-1: USB disconnect, device number 35 [ 774.328826][ T9987] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.350126][T10033] usb 4-1: Using ep0 maxpacket: 8 [ 774.369596][ T9987] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 774.377284][T10033] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 774.401732][T10033] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 774.415885][T10033] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 774.420317][ T9987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 774.435417][T10033] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.456737][ T9987] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 774.466371][ T9987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.502883][ T9987] usb 2-1: config 0 descriptor?? [ 774.561614][T10036] usb 3-1: GET_CAPABILITIES returned 0 [ 774.567186][T10036] usbtmc 3-1:16.0: can't read capabilities [ 774.584141][T10033] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 774.830312][T10033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.833957][T10036] usb 3-1: USB disconnect, device number 35 [ 774.967900][T14795] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 774.974593][T14795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 774.984798][T14795] vhci_hcd vhci_hcd.0: Device attached [ 775.000643][ T9987] lenovo 0003:17EF:60EE.000C: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 775.072344][T10033] usb 4-1: GET_CAPABILITIES returned 0 [ 775.084767][T10033] usbtmc 4-1:16.0: can't read capabilities [ 775.242715][T14782] nvme_fabrics: missing parameter 'transport=%s' [ 775.252664][T14782] nvme_fabrics: missing parameter 'nqn=%s' [ 775.261695][ T30] audit: type=1326 audit(1750161076.620:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14781 comm="syz.1.2665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2df498e929 code=0x0 [ 775.276965][ T9110] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 775.317969][T10033] usb 4-1: USB disconnect, device number 30 [ 775.458104][T10036] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 776.050655][T10036] usb 5-1: Using ep0 maxpacket: 8 [ 776.062321][T10036] usb 5-1: config 0 has an invalid interface number: 97 but max is 2 [ 776.076292][T10036] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 776.089706][T10036] usb 5-1: config 0 has no interface number 0 [ 776.102373][T10036] usb 5-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 776.142164][T10036] usb 5-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 776.177437][T10036] usb 5-1: config 0 interface 97 has no altsetting 0 [ 776.195470][T10036] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 776.203447][T14814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2674'. [ 776.219035][T10036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.233000][T10036] usb 5-1: Product: syz [ 776.246575][T10036] usb 5-1: Manufacturer: syz [ 776.256014][T10036] usb 5-1: SerialNumber: syz [ 776.257552][T14814] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14814 comm=syz.0.2674 [ 776.262851][ T30] audit: type=1400 audit(1750161077.620:445): avc: denied { lock } for pid=14813 comm="syz.0.2674" path="socket:[49776]" dev="sockfs" ino=49776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 776.303425][T10036] usb 5-1: config 0 descriptor?? [ 776.585845][T14796] vhci_hcd: cannot find a urb of seqnum 6894179 max seqnum 1 [ 776.597032][ T1095] vhci_hcd: stop threads [ 776.601667][ T1095] vhci_hcd: release socket [ 776.607735][ T1095] vhci_hcd: disconnect device [ 776.621397][T14829] FAULT_INJECTION: forcing a failure. [ 776.621397][T14829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.634957][T14829] CPU: 0 UID: 0 PID: 14829 Comm: syz.3.2677 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 776.634985][T14829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.634995][T14829] Call Trace: [ 776.635001][T14829] [ 776.635008][T14829] dump_stack_lvl+0x16c/0x1f0 [ 776.635039][T14829] should_fail_ex+0x512/0x640 [ 776.635063][T14829] _copy_from_user+0x2e/0xd0 [ 776.635085][T14829] copy_msghdr_from_user+0x98/0x160 [ 776.635110][T14829] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 776.635140][T14829] ? __lock_acquire+0x622/0x1c90 [ 776.635171][T14829] ___sys_recvmsg+0xdb/0x1a0 [ 776.635205][T14829] ? __pfx____sys_recvmsg+0x10/0x10 [ 776.635233][T14829] ? find_held_lock+0x2b/0x80 [ 776.635268][T14829] do_recvmmsg+0x2fe/0x750 [ 776.635296][T14829] ? __pfx_do_recvmmsg+0x10/0x10 [ 776.635325][T14829] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 776.635360][T14829] ? __fget_files+0x20e/0x3c0 [ 776.635390][T14829] __x64_sys_recvmmsg+0x22a/0x280 [ 776.635417][T14829] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 776.635448][T14829] do_syscall_64+0xcd/0x4c0 [ 776.635477][T14829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.635494][T14829] RIP: 0033:0x7f4ab458e929 [ 776.635508][T14829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.635524][T14829] RSP: 002b:00007f4ab53d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 776.635541][T14829] RAX: ffffffffffffffda RBX: 00007f4ab47b6160 RCX: 00007f4ab458e929 [ 776.635552][T14829] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000004 [ 776.635562][T14829] RBP: 00007f4ab53d0090 R08: 0000000000000000 R09: 0000000000000000 [ 776.635572][T14829] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 776.635582][T14829] R13: 0000000000000001 R14: 00007f4ab47b6160 R15: 00007ffe1d030608 [ 776.635607][T14829] [ 776.832890][T10033] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 776.883702][T14833] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2681'. [ 776.895729][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'. [ 776.897665][T10036] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 776.912878][T14833] macsec1: entered allmulticast mode [ 776.912901][T14833] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 776.925663][T10036] usb 5-1: setting power ON [ 776.931738][T10036] dvb-usb: bulk message failed: -22 (2/0) [ 776.933222][T14833] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 776.964529][T10036] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 776.975355][T10036] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 776.984419][T10036] usb 5-1: media controller created [ 776.992519][T10033] usb 3-1: Using ep0 maxpacket: 32 [ 777.000412][T10033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.004181][T10036] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.014062][T10033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.032451][T10033] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 777.044958][T10036] usb 5-1: digital interface selection failed (-22) [ 777.051827][T10036] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 777.060412][T10033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.069585][T10036] usb 5-1: setting power OFF [ 777.072055][T10033] usb 3-1: config 0 descriptor?? [ 777.074723][T10036] dvb-usb: bulk message failed: -22 (2/0) [ 777.087395][T10036] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 777.090286][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 777.107713][ T5950] usb 2-1: USB disconnect, device number 38 [ 777.113950][T10036] (NULL device *): no alternate interface [ 777.207084][T10036] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 777.268757][T10036] usb 5-1: USB disconnect, device number 27 [ 777.320426][T14838] input: syz0 as /devices/virtual/input/input137 [ 777.432589][ T30] audit: type=1400 audit(1750161078.670:446): avc: denied { append } for pid=14820 comm="syz.2.2676" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 777.785420][T10033] usbhid 3-1:0.0: can't add hid device: -71 [ 777.799592][T10033] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 777.827338][T10033] usb 3-1: USB disconnect, device number 36 [ 778.241042][T10033] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 778.252961][ T30] audit: type=1400 audit(1750161079.610:447): avc: denied { create } for pid=14856 comm="syz.4.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 778.507554][T10033] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 778.528189][T10033] usb 3-1: config 0 interface 0 has no altsetting 0 [ 778.555472][T10033] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 778.575987][T10033] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 778.725361][T10033] usb 3-1: Product: syz [ 778.729701][T10033] usb 3-1: Manufacturer: syz [ 778.804114][T10033] usb 3-1: SerialNumber: syz [ 778.822456][T10033] usb 3-1: config 0 descriptor?? [ 778.877405][T10033] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 778.898573][ T30] audit: type=1400 audit(1750161080.250:448): avc: denied { mounton } for pid=14872 comm="syz.3.2693" path="/528/file0" dev="tmpfs" ino=2996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 778.898604][T14873] kAFS: No cell specified [ 778.966029][T11068] udevd[11068]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.984891][ T5941] udevd[5941]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 779.010832][ T5941] udevd[5941]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: Read-only file system [ 779.281396][T14880] ieee802154 phy0 wpan0: encryption failed: -22 [ 779.369228][T14882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.508046][T14882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.549612][T14882] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 779.630310][ T9987] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 779.780167][ T9987] usb 5-1: Using ep0 maxpacket: 8 [ 779.788130][ T9987] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 779.806330][ T9987] usb 5-1: config 0 interface 0 has no altsetting 0 [ 779.813386][ T30] audit: type=1400 audit(1750161081.170:449): avc: denied { mounton } for pid=14888 comm="syz.0.2696" path="/proc/1763/ns" dev="proc" ino=49887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 779.826356][ T5950] hid-generic 0005:16BF:5505.000D: unknown main item tag 0x0 [ 779.846627][ T9987] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 779.883174][ T5950] hid-generic 0005:16BF:5505.000D: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 779.904590][ T9987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.942739][ T9987] usb 5-1: Product: syz [ 779.963660][ T9987] usb 5-1: Manufacturer: syz [ 779.970229][T10033] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 779.975584][ T9987] usb 5-1: SerialNumber: syz [ 779.983905][T14893] fido_id[14893]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 780.003405][ T9987] usb 5-1: config 0 descriptor?? [ 780.021907][ T9987] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 780.224423][ T9987] snd_usb_toneport 5-1:0.0: set_interface failed [ 780.235557][ T9987] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 780.258083][ T9987] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 780.409729][T10033] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 780.419650][T10033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.431192][T10033] usb 4-1: config 0 descriptor?? [ 780.453233][ T9987] usb 5-1: USB disconnect, device number 28 [ 780.460598][T14897] input: syz1 as /devices/virtual/input/input138 [ 780.471515][ T9110] vhci_hcd: vhci_device speed not set [ 780.975012][T10033] usb 3-1: USB disconnect, device number 37 [ 782.487772][T14926] xt_TPROXY: Can be used only with -p tcp or -p udp [ 782.600624][ T5950] usb 4-1: USB disconnect, device number 31 [ 782.640184][T10033] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 782.800278][ T9110] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 782.810225][T10033] usb 5-1: Using ep0 maxpacket: 8 [ 782.868927][T10033] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 782.938745][T10033] usb 5-1: config 179 has no interface number 0 [ 783.047247][T10033] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 783.091456][ T9110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.217239][T10033] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 783.237572][ T9110] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 783.255242][T10033] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 783.267304][ T9110] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 783.275931][ T9110] usb 3-1: Product: syz [ 783.282911][T10033] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 783.294665][ T9110] usb 3-1: Manufacturer: syz [ 783.299333][ T9110] usb 3-1: SerialNumber: syz [ 783.308767][T10033] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 783.323078][ T9110] usb 3-1: config 0 descriptor?? [ 783.337635][ T9110] gspca_main: conex-2.14.0 probing 0572:0041 [ 783.350733][T10033] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 783.369159][T10033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.391274][T14923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 783.654949][ T9110] usb 3-1: USB disconnect, device number 38 [ 783.732116][T14923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.770916][T14923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.835324][T10033] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input139 [ 784.050158][ T9987] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 784.213410][T10033] usb 5-1: USB disconnect, device number 29 [ 784.219365][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 784.219415][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 784.265969][T10033] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 784.340841][ T9987] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.383831][ T9987] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 784.415000][ T9987] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 784.445905][ T9987] usb 1-1: Product: syz [ 784.463332][ T9987] usb 1-1: Manufacturer: syz [ 784.482615][ T9987] usb 1-1: SerialNumber: syz [ 784.499470][ T9987] usb 1-1: config 0 descriptor?? [ 784.519370][ T9987] gspca_main: conex-2.14.0 probing 0572:0041 [ 784.520297][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 785.602283][ T9987] usb 1-1: USB disconnect, device number 36 [ 785.655292][ T30] audit: type=1400 audit(1750161087.010:450): avc: denied { watch } for pid=14954 comm="syz.3.2713" path="/530" dev="tmpfs" ino=3003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 785.717476][ T30] audit: type=1400 audit(1750161087.070:451): avc: denied { mounton } for pid=14951 comm="syz.1.2717" path="/file0" dev="ramfs" ino=51133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 786.021751][T14969] netlink: 'syz.0.2721': attribute type 1 has an invalid length. [ 786.425077][ T30] audit: type=1400 audit(1750161087.770:452): avc: denied { read write } for pid=14968 comm="syz.0.2721" name="uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 786.492939][T14976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 786.502040][ T30] audit: type=1400 audit(1750161087.770:453): avc: denied { open } for pid=14968 comm="syz.0.2721" path="/dev/uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 786.531615][ T10] hid-generic 0000:FFFFFFFF:0000.000E: unknown main item tag 0x0 [ 786.571288][T14976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 786.589543][ T10] hid-generic 0000:FFFFFFFF:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 786.629729][T14976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 786.688796][T14982] input: syz0 as /devices/virtual/input/input141 [ 786.887004][T14976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 786.946675][T14976] bond2: (slave geneve2): making interface the new active one [ 786.968139][T14976] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 786.986220][T14986] fido_id[14986]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 787.620397][ T9110] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 787.972935][ T9110] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 787.986383][ T6533] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 787.999378][ T9110] usb 2-1: config 0 interface 0 has no altsetting 0 [ 788.019034][ T9110] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 788.046503][ T9110] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 788.065466][T15013] FAULT_INJECTION: forcing a failure. [ 788.065466][T15013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.102049][ T9110] usb 2-1: Product: syz [ 788.156481][ T9110] usb 2-1: Manufacturer: syz [ 788.162349][ T9110] usb 2-1: SerialNumber: syz [ 788.168140][T15013] CPU: 1 UID: 0 PID: 15013 Comm: syz.3.2735 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 788.168164][T15013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 788.168175][T15013] Call Trace: [ 788.168181][T15013] [ 788.168188][T15013] dump_stack_lvl+0x16c/0x1f0 [ 788.168219][T15013] should_fail_ex+0x512/0x640 [ 788.168246][T15013] _copy_from_user+0x2e/0xd0 [ 788.168271][T15013] copy_msghdr_from_user+0x98/0x160 [ 788.168298][T15013] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 788.168328][T15013] ? __pfx__kstrtoull+0x10/0x10 [ 788.168352][T15013] ___sys_sendmsg+0xfe/0x1d0 [ 788.168378][T15013] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.168419][T15013] ? find_held_lock+0x2b/0x80 [ 788.168455][T15013] __sys_sendmmsg+0x200/0x420 [ 788.168479][T15013] ? __pfx___sys_sendmmsg+0x10/0x10 [ 788.168500][T15013] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 788.168523][T15013] ? fput+0x70/0xf0 [ 788.168540][T15013] ? ksys_write+0x1ac/0x250 [ 788.168554][T15013] ? __pfx_ksys_write+0x10/0x10 [ 788.168569][T15013] __x64_sys_sendmmsg+0x9c/0x100 [ 788.168585][T15013] ? lockdep_hardirqs_on+0x7c/0x110 [ 788.168600][T15013] do_syscall_64+0xcd/0x4c0 [ 788.168618][T15013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.168629][T15013] RIP: 0033:0x7f4ab458e929 [ 788.168637][T15013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.168648][T15013] RSP: 002b:00007f4ab5412038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 788.168659][T15013] RAX: ffffffffffffffda RBX: 00007f4ab47b5fa0 RCX: 00007f4ab458e929 [ 788.168665][T15013] RDX: 0000000000000002 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 788.168671][T15013] RBP: 00007f4ab5412090 R08: 0000000000000000 R09: 0000000000000000 [ 788.168677][T15013] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 788.168683][T15013] R13: 0000000000000000 R14: 00007f4ab47b5fa0 R15: 00007ffe1d030608 [ 788.168697][T15013] [ 788.378579][ T9110] usb 2-1: config 0 descriptor?? [ 788.431025][ T9110] usb 2-1: selecting invalid altsetting 0 [ 788.455984][ T30] audit: type=1400 audit(1750161089.780:454): avc: denied { create } for pid=15018 comm="syz.4.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 788.488560][T11068] udevd[11068]: setting mode of /dev/snd/pcmC3D0p to 020660 failed: Read-only file system [ 788.498652][T11068] udevd[11068]: setting owner of /dev/snd/pcmC3D0p to uid=0, gid=29 failed: Read-only file system [ 788.535584][ T5816] udevd[5816]: setting mode of /dev/dsp3 to 020660 failed: Read-only file system [ 788.537256][ T6166] udevd[6166]: setting mode of /dev/snd/controlC3 to 020660 failed: Read-only file system [ 788.557758][ T6166] udevd[6166]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: Read-only file system [ 788.575515][T11066] udevd[11066]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 788.575786][ T5941] udevd[5941]: setting mode of /dev/audio3 to 020660 failed: Read-only file system [ 788.585214][T11066] udevd[11066]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: Read-only file system [ 788.596904][ T5816] udevd[5816]: setting owner of /dev/dsp3 to uid=0, gid=29 failed: Read-only file system [ 788.620152][ T30] audit: type=1400 audit(1750161089.800:455): avc: denied { bind } for pid=15018 comm="syz.4.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 788.639904][ T5941] udevd[5941]: setting owner of /dev/audio3 to uid=0, gid=29 failed: Read-only file system [ 788.716780][ T30] audit: type=1400 audit(1750161089.800:456): avc: denied { connect } for pid=15018 comm="syz.4.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 788.749259][ T30] audit: type=1400 audit(1750161089.840:457): avc: denied { read } for pid=15018 comm="syz.4.2738" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 788.775939][ T30] audit: type=1400 audit(1750161089.840:458): avc: denied { open } for pid=15018 comm="syz.4.2738" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 788.808573][ T30] audit: type=1400 audit(1750161089.860:459): avc: denied { ioctl } for pid=15018 comm="syz.4.2738" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 789.016192][ T9110] usb 2-1: USB disconnect, device number 39 [ 789.964120][T15047] binder: BINDER_SET_CONTEXT_MGR already set [ 789.970308][T15047] binder: 15043:15047 ioctl 4018620d 200000000040 returned -16 [ 790.375854][T15058] FAULT_INJECTION: forcing a failure. [ 790.375854][T15058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.412397][T15058] CPU: 1 UID: 0 PID: 15058 Comm: syz.0.2752 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 790.412415][T15058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 790.412422][T15058] Call Trace: [ 790.412426][T15058] [ 790.412431][T15058] dump_stack_lvl+0x16c/0x1f0 [ 790.412452][T15058] should_fail_ex+0x512/0x640 [ 790.412470][T15058] _copy_from_user+0x2e/0xd0 [ 790.412488][T15058] do_sock_getsockopt+0x5f4/0x800 [ 790.412501][T15058] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 790.412511][T15058] ? __fget_files+0x204/0x3c0 [ 790.412533][T15058] __sys_getsockopt+0x12f/0x260 [ 790.412552][T15058] __x64_sys_getsockopt+0xbd/0x160 [ 790.412566][T15058] ? do_syscall_64+0x91/0x4c0 [ 790.412586][T15058] ? lockdep_hardirqs_on+0x7c/0x110 [ 790.412602][T15058] do_syscall_64+0xcd/0x4c0 [ 790.412619][T15058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.412631][T15058] RIP: 0033:0x7f0684b8e929 [ 790.412639][T15058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.412650][T15058] RSP: 002b:00007f0685975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 790.412662][T15058] RAX: ffffffffffffffda RBX: 00007f0684db5fa0 RCX: 00007f0684b8e929 [ 790.412669][T15058] RDX: 00000000000000cf RSI: 0000000000000000 RDI: 0000000000000003 [ 790.412675][T15058] RBP: 00007f0685975090 R08: 0000200000000080 R09: 0000000000000000 [ 790.412681][T15058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.412687][T15058] R13: 0000000000000000 R14: 00007f0684db5fa0 R15: 00007ffd3f0ab838 [ 790.412701][T15058] [ 791.010432][ T5834] Bluetooth: hci4: unexpected event for opcode 0x0c58 [ 791.105555][T15072] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2757'. [ 791.220331][ T9110] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 791.707333][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 791.725565][ T9110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.757704][ T9110] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 791.774812][ T9110] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 791.783849][ T9110] usb 1-1: Product: syz [ 791.793629][ T9110] usb 1-1: Manufacturer: syz [ 791.798252][ T9110] usb 1-1: SerialNumber: syz [ 791.821947][ T9110] usb 1-1: config 0 descriptor?? [ 791.833571][ T9110] gspca_main: conex-2.14.0 probing 0572:0041 [ 792.440395][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 792.508159][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 792.583243][ T9110] usb 1-1: USB disconnect, device number 37 [ 793.040148][ T9987] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 793.089471][T15101] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2767'. [ 793.286165][ T9987] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 793.297090][ T9987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 793.305749][ T9987] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 793.315339][ T9987] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 793.323730][ T9987] usb 2-1: Product: syz [ 793.328010][ T9987] usb 2-1: Manufacturer: syz [ 793.332797][ T9987] usb 2-1: SerialNumber: syz [ 793.347896][ T9987] usb 2-1: config 0 descriptor?? [ 793.356999][ T9987] usb 2-1: selecting invalid altsetting 0 [ 793.930269][ T30] audit: type=1400 audit(1750161094.770:460): avc: denied { connect } for pid=15107 comm="syz.2.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 794.013451][T11068] udevd[11068]: setting mode of /dev/snd/pcmC3D0p to 020660 failed: Read-only file system [ 794.023257][ T5941] udevd[5941]: setting mode of /dev/audio3 to 020660 failed: Read-only file system [ 794.030668][T11066] udevd[11066]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 794.037171][ T5816] udevd[5816]: setting mode of /dev/dsp3 to 020660 failed: Read-only file system [ 794.072799][ T6166] udevd[6166]: setting mode of /dev/snd/controlC3 to 020660 failed: Read-only file system [ 794.085711][T11068] udevd[11068]: setting owner of /dev/snd/pcmC3D0p to uid=0, gid=29 failed: Read-only file system [ 794.097973][ T5941] udevd[5941]: setting owner of /dev/audio3 to uid=0, gid=29 failed: Read-only file system [ 794.175427][ T6166] udevd[6166]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: Read-only file system [ 794.243851][T11066] udevd[11066]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: Read-only file system [ 794.251397][ T5816] udevd[5816]: setting owner of /dev/dsp3 to uid=0, gid=29 failed: Read-only file system [ 794.315056][ T9110] usb 2-1: USB disconnect, device number 40 [ 795.092350][ T5834] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 795.113558][ T5834] Bluetooth: hci4: Injecting HCI hardware error event [ 795.122436][ T5834] Bluetooth: hci4: hardware error 0x00 [ 796.040279][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.369901][T15140] input: syz0 as /devices/virtual/input/input142 [ 796.504261][T15139] pim6reg: entered allmulticast mode [ 796.560200][T15141] pim6reg: left allmulticast mode [ 797.481946][ T5834] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 798.155818][T15168] input: syz0 as /devices/virtual/input/input143 [ 798.412445][ T30] audit: type=1400 audit(1750161099.760:461): avc: denied { setopt } for pid=15163 comm="syz.1.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 798.442495][T15167] ip6gretap0: entered promiscuous mode [ 798.453380][T15167] macsec1: entered promiscuous mode [ 798.459876][T15167] macsec1: entered allmulticast mode [ 798.656941][T15167] ip6gretap0: entered allmulticast mode [ 798.666339][T15167] ip6gretap0: left allmulticast mode [ 798.674579][T15167] ip6gretap0: left promiscuous mode [ 798.807030][ T9987] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 799.240264][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 799.810228][ T9987] usb 4-1: Using ep0 maxpacket: 8 [ 799.823199][ T9987] usb 4-1: config 0 interface 0 has no altsetting 0 [ 799.845333][ T9987] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 799.862022][ T9987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.612472][ T9987] usb 4-1: Product: syz [ 800.616686][ T9987] usb 4-1: Manufacturer: syz [ 800.621791][ T9987] usb 4-1: SerialNumber: syz [ 800.633493][ T9987] usb 4-1: config 0 descriptor?? [ 800.656817][ T9987] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 801.030794][ T9110] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 801.160258][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 801.295359][ T9110] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 801.335678][ T9987] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 801.345712][ T9987] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 801.362361][ T9110] usb 3-1: config 0 interface 0 has no altsetting 0 [ 801.373369][ T9110] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 801.384905][ T9110] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 801.393852][ T9110] usb 3-1: Product: syz [ 801.398129][ T9110] usb 3-1: Manufacturer: syz [ 801.405025][ T9110] usb 3-1: SerialNumber: syz [ 801.416685][ T9110] usb 3-1: config 0 descriptor?? [ 801.431268][ T9110] usb 3-1: selecting invalid altsetting 0 [ 801.499640][ T6840] udevd[6840]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 801.509992][ T5941] udevd[5941]: setting mode of /dev/dsp3 to 020660 failed: Read-only file system [ 801.519852][ T5941] udevd[5941]: setting owner of /dev/dsp3 to uid=0, gid=29 failed: Read-only file system [ 801.525213][ T5816] udevd[5816]: setting mode of /dev/snd/pcmC3D0p to 020660 failed: Read-only file system [ 801.530357][ T6840] udevd[6840]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: Read-only file system [ 801.744528][ T5816] udevd[5816]: setting owner of /dev/snd/pcmC3D0p to uid=0, gid=29 failed: Read-only file system [ 802.072735][T11066] udevd[11066]: setting mode of /dev/snd/controlC3 to 020660 failed: Read-only file system [ 802.096236][ T6166] udevd[6166]: setting mode of /dev/audio3 to 020660 failed: Read-only file system [ 802.106856][ T9987] usb 4-1: USB disconnect, device number 32 [ 802.115610][ T6166] udevd[6166]: setting owner of /dev/audio3 to uid=0, gid=29 failed: Read-only file system [ 802.197427][T11066] udevd[11066]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: Read-only file system [ 802.300346][ T10] usb 3-1: USB disconnect, device number 39 [ 803.137931][ T30] audit: type=1400 audit(1750161104.490:462): avc: denied { bind } for pid=15214 comm="syz.2.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 803.193014][ T30] audit: type=1400 audit(1750161104.490:463): avc: denied { listen } for pid=15214 comm="syz.2.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 803.250226][ T30] audit: type=1400 audit(1750161104.490:464): avc: denied { accept } for pid=15214 comm="syz.2.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 803.492292][ T9987] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 804.595733][ T9987] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 805.000246][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 805.535789][ T9987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.549248][ T9987] usb 3-1: Product: syz [ 805.554193][ T9987] usb 3-1: Manufacturer: syz [ 805.558883][ T9987] usb 3-1: SerialNumber: syz [ 805.846092][ T9987] usb 3-1: config 0 descriptor?? [ 806.112218][ T9987] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 040 [ 806.531023][ T30] audit: type=1400 audit(1750161107.400:465): avc: denied { map } for pid=15232 comm="syz.1.2809" path="socket:[52141]" dev="sockfs" ino=52141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 806.867721][ T30] audit: type=1400 audit(1750161107.410:466): avc: denied { accept } for pid=15232 comm="syz.1.2809" path="socket:[52141]" dev="sockfs" ino=52141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 806.948219][ T9987] (null): failure setting delay to 10us [ 806.958605][ T9987] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 808.254195][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.261843][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.276986][ T9987] usb 3-1: USB disconnect, device number 40 [ 808.540355][ T9110] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 809.072734][ T9110] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 809.081590][ T9110] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 809.091272][ T9110] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 809.100470][ T9110] usb 4-1: config 1 has no interface number 0 [ 809.106587][ T9110] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 809.118291][ T9110] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 809.279147][ T9110] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 809.312513][ T9110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.570898][ T9110] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 809.628485][T15281] libceph: resolve '4' (ret=-3): failed [ 809.845702][ T30] audit: type=1400 audit(1750161111.200:467): avc: denied { execute } for pid=15278 comm="syz.1.2822" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=53316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 810.089156][ T9110] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 810.183180][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 810.355812][ T9110] usb 4-1: USB disconnect, device number 33 [ 810.364252][ T9110] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 812.040275][T10033] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 812.222084][T10033] usb 2-1: New USB device found, idVendor=056a, idProduct=0037, bcdDevice= 0.00 [ 812.271311][T10033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.332529][T10033] usb 2-1: config 0 descriptor?? [ 812.650287][T15329] input: syz1 as /devices/virtual/input/input146 [ 812.752196][T15334] libceph: resolve '4' (ret=-3): failed [ 812.761557][T10033] wacom 0003:056A:0037.000F: item fetching failed at offset 0/5 [ 812.770242][ T9987] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 812.794876][T10033] wacom 0003:056A:0037.000F: parse failed [ 812.877242][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2837'. [ 813.095393][T10033] wacom 0003:056A:0037.000F: probe with driver wacom failed with error -22 [ 813.240399][ T9987] usb 3-1: Using ep0 maxpacket: 16 [ 813.247308][ T9987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.260181][ T9987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.272325][ T9987] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 813.287312][T10033] usb 2-1: USB disconnect, device number 41 [ 813.758226][ T9987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.801790][ T9987] usb 3-1: config 0 descriptor?? [ 814.138753][T15342] binder: BINDER_SET_CONTEXT_MGR already set [ 814.144930][T15342] binder: 15340:15342 ioctl 4018620d 200000000040 returned -16 [ 814.297825][ T9987] saitek 0003:06A3:0CCB.0010: unknown main item tag 0x0 [ 814.360629][ T9987] saitek 0003:06A3:0CCB.0010: hidraw0: USB HID v0.00 Device [HID 06a3:0ccb] on usb-dummy_hcd.2-1/input0 [ 814.541161][ T9987] usb 3-1: USB disconnect, device number 41 [ 815.191967][T15347] fido_id[15347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 816.024638][ T9987] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 816.187022][T15382] sctp: [Deprecated]: syz.1.2850 (pid 15382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 816.187022][T15382] Use struct sctp_sack_info instead [ 816.222073][ T9987] usb 1-1: New USB device found, idVendor=056a, idProduct=0037, bcdDevice= 0.00 [ 816.990116][ T9987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.011227][ T9987] usb 1-1: config 0 descriptor?? [ 817.168752][ T9110] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 818.065258][ T9987] wacom 0003:056A:0037.0011: item fetching failed at offset 0/5 [ 818.085141][ T9110] usb 3-1: Using ep0 maxpacket: 8 [ 818.090756][ T9987] wacom 0003:056A:0037.0011: parse failed [ 818.091758][ T9110] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 818.112653][ T9110] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 818.125190][ T9110] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 818.137055][ T9110] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.137145][ T9987] wacom 0003:056A:0037.0011: probe with driver wacom failed with error -22 [ 818.161755][ T9110] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 818.220023][ T9110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.407284][ T5950] usb 1-1: USB disconnect, device number 38 [ 818.440419][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 818.505387][ T9110] usb 3-1: GET_CAPABILITIES returned 0 [ 818.511296][ T9110] usbtmc 3-1:16.0: can't read capabilities [ 819.043608][ T30] audit: type=1400 audit(1750161120.400:468): avc: denied { append } for pid=15387 comm="syz.2.2854" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 819.121780][ T5950] usb 3-1: USB disconnect, device number 42 [ 820.526256][ T30] audit: type=1400 audit(1750161121.880:469): avc: denied { audit_write } for pid=15450 comm="syz.1.2879" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 820.620191][ T9987] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 820.635908][ T30] audit: type=1400 audit(1750161121.990:470): avc: denied { read } for pid=15450 comm="syz.1.2879" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 820.704191][T15454] block device autoloading is deprecated and will be removed. [ 821.019395][ T30] audit: type=1400 audit(1750161121.990:471): avc: denied { open } for pid=15450 comm="syz.1.2879" path="/584/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 821.084128][ T30] audit: type=1400 audit(1750161122.160:472): avc: denied { ioctl } for pid=15450 comm="syz.1.2879" path="/584/file0/file0" dev="fuse" ino=64 ioctlcmd=0x929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 821.180210][ T9987] usb 4-1: Using ep0 maxpacket: 8 [ 821.212752][T14109] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 821.231826][ T9987] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 821.250162][ T9987] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 821.260618][ T9987] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 821.270792][ T9987] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 821.284154][T14109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 821.292181][ T9987] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 821.302417][ T9987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.322902][T14109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 821.335718][T14109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 821.346124][T14109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 821.362311][ T30] audit: type=1400 audit(1750161122.720:473): avc: denied { mounton } for pid=15465 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 821.750184][ T9987] usb 4-1: GET_CAPABILITIES returned 0 [ 821.755725][ T9987] usbtmc 4-1:16.0: can't read capabilities [ 821.858086][ T9927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 822.171715][ T9927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 822.261999][ T9927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 822.274073][ T9110] usb 4-1: USB disconnect, device number 34 [ 822.663840][ T9927] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 822.950328][T15465] chnl_net:caif_netlink_parms(): no params data found [ 823.401707][ T5834] Bluetooth: hci5: command tx timeout [ 823.560241][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 823.634035][ T9927] bridge_slave_1: left allmulticast mode [ 823.771509][ T9927] bridge_slave_1: left promiscuous mode [ 823.779931][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.961055][ T9927] bridge_slave_0: left allmulticast mode [ 823.977046][ T9927] bridge_slave_0: left promiscuous mode [ 823.987107][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.535595][ T9927] bond2 (unregistering): (slave geneve2): Releasing active interface [ 824.888629][ T9927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.902234][ T9927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.914094][ T9927] bond0 (unregistering): Released all slaves [ 825.480317][ T5834] Bluetooth: hci5: command tx timeout [ 825.592418][ T9927] bond1 (unregistering): Released all slaves [ 825.611071][ T9927] bond2 (unregistering): Released all slaves [ 825.836849][T15465] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.859869][T15465] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.874599][T15465] bridge_slave_0: entered allmulticast mode [ 825.885398][T15465] bridge_slave_0: entered promiscuous mode [ 825.898875][T15465] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.944219][T15465] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.952987][T15465] bridge_slave_1: entered allmulticast mode [ 825.960678][T15465] bridge_slave_1: entered promiscuous mode [ 826.819065][T15540] FAULT_INJECTION: forcing a failure. [ 826.819065][T15540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.837839][ T30] audit: type=1400 audit(1750161128.160:474): avc: denied { ioctl } for pid=15539 comm="syz.4.2904" path="socket:[55054]" dev="sockfs" ino=55054 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 826.851873][T15540] CPU: 1 UID: 0 PID: 15540 Comm: syz.4.2904 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 826.851899][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 826.851908][T15540] Call Trace: [ 826.851913][T15540] [ 826.851919][T15540] dump_stack_lvl+0x16c/0x1f0 [ 826.851947][T15540] should_fail_ex+0x512/0x640 [ 826.851971][T15540] _copy_from_user+0x2e/0xd0 [ 826.851993][T15540] move_addr_to_kernel+0x65/0x170 [ 826.852014][T15540] __sys_bind+0x11b/0x260 [ 826.852032][T15540] ? __pfx___sys_bind+0x10/0x10 [ 826.852048][T15540] ? __fget_files+0x20e/0x3c0 [ 826.852077][T15540] ? __pfx_ksys_write+0x10/0x10 [ 826.852102][T15540] __x64_sys_bind+0x72/0xb0 [ 826.852119][T15540] ? lockdep_hardirqs_on+0x7c/0x110 [ 826.852141][T15540] do_syscall_64+0xcd/0x4c0 [ 826.852166][T15540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.852181][T15540] RIP: 0033:0x7f8508d8e929 [ 826.852194][T15540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.852210][T15540] RSP: 002b:00007f8509c76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 826.852230][T15540] RAX: ffffffffffffffda RBX: 00007f8508fb5fa0 RCX: 00007f8508d8e929 [ 826.852240][T15540] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000003 [ 826.852249][T15540] RBP: 00007f8509c76090 R08: 0000000000000000 R09: 0000000000000000 [ 826.852259][T15540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.852267][T15540] R13: 0000000000000000 R14: 00007f8508fb5fa0 R15: 00007ffda8d88f88 [ 826.852289][T15540] [ 827.400201][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 827.560135][ T5834] Bluetooth: hci5: command tx timeout [ 827.910287][ T30] audit: type=1400 audit(1750161128.160:475): avc: denied { bind } for pid=15539 comm="syz.4.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 828.948298][T15465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.087022][T15465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.575204][T15465] team0: Port device team_slave_0 added [ 829.660238][ T5834] Bluetooth: hci5: command tx timeout [ 829.724514][ T9927] hsr_slave_0: left promiscuous mode [ 829.914107][ T9927] hsr_slave_1: left promiscuous mode [ 830.000464][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.011422][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.078563][T15577] binder_alloc: 15575: binder_alloc_buf, no vma [ 830.086953][ T30] audit: type=1400 audit(1750161131.430:476): avc: denied { call } for pid=15575 comm="syz.4.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 830.764165][ T9927] team0 (unregistering): Port device team_slave_1 removed [ 830.816553][ T9927] team0 (unregistering): Port device team_slave_0 removed [ 831.065870][T15609] binder: BINDER_SET_CONTEXT_MGR already set [ 831.072172][T15609] binder: 15607:15609 ioctl 4018620d 200000000040 returned -16 [ 831.396036][ T30] audit: type=1400 audit(1750161132.750:477): avc: denied { getopt } for pid=15612 comm="syz.2.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 831.425781][ T30] audit: type=1400 audit(1750161132.780:478): avc: denied { setopt } for pid=15612 comm="syz.2.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 831.660024][T15465] team0: Port device team_slave_1 added [ 831.946374][T15465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.746933][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.773382][T15465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.785853][T15465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.793038][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.820176][T15465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.185388][T15465] hsr_slave_0: entered promiscuous mode [ 833.222335][T15465] hsr_slave_1: entered promiscuous mode [ 833.228472][T15465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.317496][T15465] Cannot create hsr debugfs directory [ 834.065870][ T30] audit: type=1400 audit(1750161135.400:479): avc: denied { read } for pid=15656 comm="syz.1.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 834.166776][ T30] audit: type=1400 audit(1750161135.520:480): avc: denied { map } for pid=15656 comm="syz.1.2933" path="socket:[55199]" dev="sockfs" ino=55199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 834.433605][T15667] nvme_fabrics: missing parameter 'transport=%s' [ 834.490388][T15667] nvme_fabrics: missing parameter 'nqn=%s' [ 834.662173][T15672] libceph: resolve '4' (ret=-3): failed [ 835.128571][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 835.195830][T15677] bridge_slave_0: left allmulticast mode [ 835.201584][T15677] bridge_slave_0: left promiscuous mode [ 835.207359][T15677] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.217221][T15677] bridge_slave_1: left allmulticast mode [ 835.224155][T15677] bridge_slave_1: left promiscuous mode [ 835.230045][T15677] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.245081][T15677] bond0: (slave bond_slave_0): Releasing backup interface [ 835.273590][T15677] bond0: (slave bond_slave_1): Releasing backup interface [ 835.296449][T15677] team0: Port device team_slave_0 removed [ 835.322577][T15677] team0: Port device team_slave_1 removed [ 835.328739][T15677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.402364][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2937'. [ 835.412319][T15677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.431113][T15677] bond0: (slave wlan1): Releasing backup interface [ 835.464278][T15683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2940'. [ 835.607816][T15678] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 835.632111][T15678] team0: Device ipvlan2 is already an upper device of the team interface [ 835.780473][T15680] team0: Mode changed to "loadbalance" [ 835.884845][T14109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 835.897304][T14109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 835.906520][T14109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 835.915203][T14109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.924139][T14109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 836.499776][T15688] batadv_slave_1: entered promiscuous mode [ 836.561251][T15465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 836.586877][T15688] batadv_slave_1: left promiscuous mode [ 836.677782][T15465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 836.714431][T15465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 836.802729][T15465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 837.512106][ T9927] bridge_slave_1: left allmulticast mode [ 837.538296][ T9927] bridge_slave_1: left promiscuous mode [ 837.554211][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.583602][ T9927] bridge_slave_0: left allmulticast mode [ 837.589281][ T9927] bridge_slave_0: left promiscuous mode [ 837.623839][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.966433][ T5834] Bluetooth: hci0: command tx timeout [ 838.627311][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 838.638164][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 838.650351][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 838.661154][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 838.672882][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 838.735708][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2950'. [ 838.757653][ T9927] bond1 (unregistering): (slave gretap1): Releasing active interface [ 839.252951][ T9927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.275813][ T9927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.291052][ T9927] bond0 (unregistering): Released all slaves [ 839.404409][ T9927] bond1 (unregistering): Released all slaves [ 839.495007][ T9927] bond2 (unregistering): Released all slaves [ 839.664796][T15776] input: syz0 as /devices/virtual/input/input147 [ 840.055635][T14109] Bluetooth: hci0: command tx timeout [ 840.590465][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 840.757568][T15700] chnl_net:caif_netlink_parms(): no params data found [ 840.764934][T14109] Bluetooth: hci1: command tx timeout [ 840.824211][ T9927] hsr_slave_0: left promiscuous mode [ 840.832861][ T9927] hsr_slave_1: left promiscuous mode [ 840.838545][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.849905][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.462933][ T9927] team0 (unregistering): Port device team_slave_1 removed [ 841.499402][ T9927] team0 (unregistering): Port device team_slave_0 removed [ 841.895401][T15812] syz_tun: entered allmulticast mode [ 841.929433][T15814] pimreg: entered allmulticast mode [ 841.948073][T15809] syz_tun: left allmulticast mode [ 842.023786][T15750] chnl_net:caif_netlink_parms(): no params data found [ 842.095405][T15465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.126968][T14109] Bluetooth: hci0: command tx timeout [ 842.299600][T15700] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.309859][T15700] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.317294][T15700] bridge_slave_0: entered allmulticast mode [ 842.344644][T15700] bridge_slave_0: entered promiscuous mode [ 842.391274][T15465] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.401177][T15700] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.409221][T15700] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.422185][T15700] bridge_slave_1: entered allmulticast mode [ 842.429866][T15700] bridge_slave_1: entered promiscuous mode [ 842.522903][T15700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.567088][T15700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.592885][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.600116][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.628135][T15750] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.644031][T15750] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.666981][T15750] bridge_slave_0: entered allmulticast mode [ 842.681797][T15750] bridge_slave_0: entered promiscuous mode [ 842.700399][T15750] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.707526][T15750] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.725418][T15750] bridge_slave_1: entered allmulticast mode [ 842.735284][T15750] bridge_slave_1: entered promiscuous mode [ 842.769051][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.776250][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.793103][T15840] pim6reg: entered allmulticast mode [ 842.838474][T15847] pim6reg: left allmulticast mode [ 842.850178][T14109] Bluetooth: hci1: command tx timeout [ 842.906552][T15750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.924239][T15750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.952326][T15700] team0: Port device team_slave_0 added [ 843.063124][T15750] team0: Port device team_slave_0 added [ 843.083910][T15700] team0: Port device team_slave_1 added [ 843.117488][T15465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 843.131530][T15465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 843.150867][T15750] team0: Port device team_slave_1 added [ 843.286624][T15700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.304852][T15700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.345190][T15700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.418594][T15700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.436475][T15700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.468105][T15700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.518463][T15750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.525998][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.650975][T15750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.874387][T15750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.919924][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.978924][T15750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.218440][T14109] Bluetooth: hci0: command tx timeout [ 844.450049][T15700] hsr_slave_0: entered promiscuous mode [ 844.487231][T15700] hsr_slave_1: entered promiscuous mode [ 844.520278][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 844.545491][T15465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.571968][T15750] hsr_slave_0: entered promiscuous mode [ 844.584024][T15750] hsr_slave_1: entered promiscuous mode [ 844.591286][T15750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.598961][T15750] Cannot create hsr debugfs directory [ 844.920529][T15891] binder: BINDER_SET_CONTEXT_MGR already set [ 844.920662][T14109] Bluetooth: hci1: command tx timeout [ 844.933543][T15891] binder: 15889:15891 ioctl 4018620d 200000000040 returned -16 [ 845.289640][ T30] audit: type=1400 audit(1750161146.630:481): avc: denied { ioctl } for pid=15893 comm="syz.2.2968" path="socket:[56277]" dev="sockfs" ino=56277 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 845.316292][T15895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.327777][ T9927] bridge_slave_1: left allmulticast mode [ 845.333877][ T9927] bridge_slave_1: left promiscuous mode [ 845.342856][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.364224][ T9927] bridge_slave_0: left allmulticast mode [ 845.369902][ T9927] bridge_slave_0: left promiscuous mode [ 845.380201][ T30] audit: type=1400 audit(1750161146.640:482): avc: denied { create } for pid=15893 comm="syz.2.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 845.393632][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.416080][ T30] audit: type=1400 audit(1750161146.640:483): avc: denied { write } for pid=15893 comm="syz.2.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 845.647453][ T9927] bond2 (unregistering): (slave gretap1): Releasing active interface [ 845.852629][ T9927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.862847][ T9927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.887808][ T9927] bond0 (unregistering): Released all slaves [ 846.008363][ T9927] bond1 (unregistering): Released all slaves [ 846.120475][ T9927] bond2 (unregistering): Released all slaves [ 846.259732][ T9927] tipc: Left network mode [ 846.267866][T15465] veth0_vlan: entered promiscuous mode [ 846.300206][ T5950] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 846.325122][T15465] veth1_vlan: entered promiscuous mode [ 846.424345][T15700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 846.439819][T15700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 846.463381][T15700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 846.470308][ T5950] usb 3-1: Invalid ep0 maxpacket: 16 [ 846.531241][T15700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 846.611222][ T5950] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 846.659347][ T9927] hsr_slave_0: left promiscuous mode [ 846.682133][ T9927] hsr_slave_1: left promiscuous mode [ 846.723919][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.776975][ T5950] usb 3-1: Invalid ep0 maxpacket: 16 [ 846.796380][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.821967][ T5950] usb usb3-port1: attempt power cycle [ 847.039874][T14109] Bluetooth: hci1: command tx timeout [ 847.152431][ T30] audit: type=1326 audit(1750161148.420:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.4.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8508d8e929 code=0x7fc00000 [ 847.260526][ T5950] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 847.316645][ T5950] usb 3-1: Invalid ep0 maxpacket: 16 [ 847.328047][ T30] audit: type=1326 audit(1750161148.420:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.4.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8508d8e929 code=0x7fc00000 [ 847.509110][ T30] audit: type=1326 audit(1750161148.420:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.4.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8508d8e929 code=0x7fc00000 [ 847.539239][ T5950] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 847.654981][ T30] audit: type=1326 audit(1750161148.430:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.4.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8508d8e929 code=0x7fc00000 [ 847.658891][ T5950] usb 3-1: Invalid ep0 maxpacket: 16 [ 847.713436][ T30] audit: type=1326 audit(1750161148.430:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.4.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8508d8e929 code=0x7fc00000 [ 847.724354][ T5950] usb usb3-port1: unable to enumerate USB device [ 847.737798][ T30] audit: type=1326 audit(1750161148.430:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.4.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8508d8e929 code=0x7fc00000 [ 847.780173][ T30] audit: type=1326 audit(1750161148.430:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.4.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8508d8e929 code=0x7fc00000 [ 848.141014][T15949] binder: BINDER_SET_CONTEXT_MGR already set [ 848.148678][T15949] binder: 15947:15949 ioctl 4018620d 200000000040 returned -16 [ 848.532566][ T9927] team0 (unregistering): Port device team_slave_1 removed [ 848.810808][ T9927] team0 (unregistering): Port device team_slave_0 removed [ 849.871099][T15465] veth0_macvtap: entered promiscuous mode [ 849.917848][T15750] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 849.939300][T15465] veth1_macvtap: entered promiscuous mode [ 849.948396][T15750] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 849.968821][T15750] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 849.999459][T15750] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 850.025993][T15465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.087041][T15465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.133767][T15465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.142899][T15465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.152699][T15465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.161999][T15465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.269315][T15700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.374522][T15700] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.446378][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.460871][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.526210][T15750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.556529][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.563709][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.628767][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.641585][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.648756][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.678568][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.699572][T15750] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.877403][T15996] binder: BINDER_SET_CONTEXT_MGR already set [ 850.883833][T15996] binder: 15994:15996 ioctl 4018620d 200000000040 returned -16 [ 851.100239][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.107368][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.167432][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.174635][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.371533][T16006] binder: 16004:16006 ioctl c0306201 2000000003c0 returned -14 [ 851.468269][T16008] Cannot find add_set index 0 as target [ 851.516383][T16008] netlink: 'syz.0.2986': attribute type 11 has an invalid length. [ 851.761785][T16014] libceph: resolve '4' (ret=-3): failed [ 851.790192][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 851.813565][T15700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.060560][ T10] usb 1-1: device descriptor read/64, error -71 [ 852.128663][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2987'. [ 852.441997][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 852.591265][ T10] usb 1-1: device descriptor read/64, error -71 [ 852.614924][T15750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.711698][T16034] input: syz0 as /devices/virtual/input/input148 [ 852.900952][ T10] usb usb1-port1: attempt power cycle [ 853.000460][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 853.176649][ T30] kauditd_printk_skb: 576 callbacks suppressed [ 853.176692][ T30] audit: type=1400 audit(1750161154.530:1067): avc: denied { setopt } for pid=16038 comm="syz.2.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 853.390237][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 853.497675][ T10] usb 1-1: device descriptor read/8, error -71 [ 853.574535][T15700] veth0_vlan: entered promiscuous mode [ 853.608231][T15700] veth1_vlan: entered promiscuous mode [ 853.830173][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 853.837174][T15700] veth0_macvtap: entered promiscuous mode [ 853.878398][T15700] veth1_macvtap: entered promiscuous mode [ 853.905681][ T10] usb 1-1: device descriptor read/8, error -71 [ 853.917983][T16057] binder: BINDER_SET_CONTEXT_MGR already set [ 853.924277][T16057] binder: 16049:16057 ioctl 4018620d 200000000040 returned -16 [ 854.069185][T15700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.090484][ T10] usb usb1-port1: unable to enumerate USB device [ 854.152452][T15700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.186440][T15700] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.217052][T15700] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.239338][T15700] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.255936][T15700] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.624676][T15750] veth0_vlan: entered promiscuous mode [ 854.648827][T15750] veth1_vlan: entered promiscuous mode [ 855.537454][T15750] veth0_macvtap: entered promiscuous mode [ 855.853972][ T6533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.877014][T15750] veth1_macvtap: entered promiscuous mode [ 855.880674][ T6533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.965113][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.977275][T15750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.994904][T16080] libceph: resolve '4' (ret=-3): failed [ 855.996033][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.014791][T15750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.045939][T15750] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.190235][T15750] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.209687][T15750] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.283481][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2999'. [ 856.415985][T15750] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.260307][ T9927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.280003][ T9927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.309058][T16102] FAULT_INJECTION: forcing a failure. [ 857.309058][T16102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.373698][T16102] CPU: 0 UID: 0 PID: 16102 Comm: syz.0.3003 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 857.373729][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 857.373739][T16102] Call Trace: [ 857.373746][T16102] [ 857.373753][T16102] dump_stack_lvl+0x16c/0x1f0 [ 857.373786][T16102] should_fail_ex+0x512/0x640 [ 857.373813][T16102] _copy_from_user+0x2e/0xd0 [ 857.373847][T16102] copy_msghdr_from_user+0x98/0x160 [ 857.373875][T16102] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 857.373913][T16102] ___sys_sendmsg+0xfe/0x1d0 [ 857.373940][T16102] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.373963][T16102] ? __lock_acquire+0x622/0x1c90 [ 857.374023][T16102] __sys_sendmsg+0x16d/0x220 [ 857.374049][T16102] ? __pfx___sys_sendmsg+0x10/0x10 [ 857.374090][T16102] do_syscall_64+0xcd/0x4c0 [ 857.374118][T16102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.374136][T16102] RIP: 0033:0x7fb20ab8e929 [ 857.374151][T16102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.374167][T16102] RSP: 002b:00007fb20b927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.374185][T16102] RAX: ffffffffffffffda RBX: 00007fb20adb5fa0 RCX: 00007fb20ab8e929 [ 857.374197][T16102] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000003 [ 857.374208][T16102] RBP: 00007fb20b927090 R08: 0000000000000000 R09: 0000000000000000 [ 857.374219][T16102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.374229][T16102] R13: 0000000000000000 R14: 00007fb20adb5fa0 R15: 00007ffcead5fcc8 [ 857.374253][T16102] [ 857.549293][T15955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.557308][T15955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.629095][ T30] audit: type=1400 audit(1750161159.980:1068): avc: denied { create } for pid=16108 comm="syz.2.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 859.406234][ T30] audit: type=1400 audit(1750161159.980:1069): avc: denied { connect } for pid=16108 comm="syz.2.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 860.243632][T16133] input: syz0 as /devices/virtual/input/input149 [ 860.729592][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3016'. [ 860.925675][T16141] nvme_fabrics: missing parameter 'transport=%s' [ 860.943512][T16141] nvme_fabrics: missing parameter 'nqn=%s' [ 861.032804][ T9987] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 861.492700][ T9987] usb 1-1: Using ep0 maxpacket: 16 [ 861.515014][ T9987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.568980][ T9987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.619989][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 861.631421][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 861.639710][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 861.647905][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 861.656768][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 861.678632][ T9987] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 861.698475][T16160] binder: BINDER_SET_CONTEXT_MGR already set [ 861.704516][T16160] binder: 16158:16160 ioctl 4018620d 200000000040 returned -16 [ 861.751455][ T9987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.840362][ T9107] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 861.874239][T16172] binder: BINDER_SET_CONTEXT_MGR already set [ 861.880444][T16172] binder: 16170:16172 ioctl 4018620d 200000000040 returned -16 [ 861.974689][ T9987] usb 1-1: config 0 descriptor?? [ 862.068856][ T9107] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 862.164363][ T9107] usb 6-1: config 0 interface 0 has no altsetting 0 [ 862.179373][ T9107] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 862.200561][ T9107] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 862.218963][ T9107] usb 6-1: Product: syz [ 862.224047][ T9107] usb 6-1: Manufacturer: syz [ 862.228900][ T9107] usb 6-1: SerialNumber: syz [ 862.260688][ T9107] usb 6-1: config 0 descriptor?? [ 862.288606][ T9107] usb 6-1: selecting invalid altsetting 0 [ 862.356880][T15704] udevd[15704]: setting mode of /dev/snd/pcmC3D0p to 020660 failed: Read-only file system [ 862.359147][T15703] udevd[15703]: setting mode of /dev/audio3 to 020660 failed: Read-only file system [ 862.443425][T15616] udevd[15616]: setting mode of /dev/dsp3 to 020660 failed: Read-only file system [ 862.495742][T15704] udevd[15704]: setting owner of /dev/snd/pcmC3D0p to uid=0, gid=29 failed: Read-only file system [ 862.547776][T15616] udevd[15616]: setting owner of /dev/dsp3 to uid=0, gid=29 failed: Read-only file system [ 862.765494][ T9987] appleir 0003:05AC:8241.0012: item fetching failed at offset 1/5 [ 862.928887][T15560] udevd[15560]: setting mode of /dev/snd/controlC3 to 020660 failed: Read-only file system [ 862.980034][T16151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.986939][T16180] udevd[16180]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 863.023353][T16151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.133606][T15560] udevd[15560]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: Read-only file system [ 863.194561][ T9987] appleir 0003:05AC:8241.0012: parse failed [ 863.200900][T15703] udevd[15703]: setting owner of /dev/audio3 to uid=0, gid=29 failed: Read-only file system [ 863.211195][ T9987] appleir 0003:05AC:8241.0012: probe with driver appleir failed with error -22 [ 863.236371][T16180] udevd[16180]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: Read-only file system [ 863.447794][ T30] audit: type=1326 audit(1750161164.780:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16184 comm="syz.6.3023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff765d8e929 code=0x0 [ 863.720203][ T5834] Bluetooth: hci3: command tx timeout [ 864.535425][T10036] usb 1-1: USB disconnect, device number 43 [ 864.710303][ T9107] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 864.847137][ T9927] bond0 (unregistering): Released all slaves [ 864.857800][T16219] nvme_fabrics: missing parameter 'transport=%s' [ 864.866629][ T9107] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 864.871096][T16219] nvme_fabrics: missing parameter 'nqn=%s' [ 864.879351][ T9107] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 864.898969][T16167] chnl_net:caif_netlink_parms(): no params data found [ 864.909337][ T9107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 864.960508][ T9107] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 865.019078][ T9107] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 865.047247][ T9107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.059736][ T9107] usb 7-1: Product: syz [ 865.067873][ T9107] usb 7-1: Manufacturer: syz [ 865.079817][T16225] netlink: 'syz.2.3030': attribute type 26 has an invalid length. [ 865.091302][ T9107] usb 7-1: SerialNumber: syz [ 865.110771][ T9107] usb 7-1: config 0 descriptor?? [ 865.117822][T16215] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 865.180622][T16225] wireguard0: entered promiscuous mode [ 865.189347][T16225] wireguard0: entered allmulticast mode [ 865.245694][ T9107] rc_core: IR keymap rc-imon-rsc not found [ 865.269009][ T9107] Registered IR keymap rc-empty [ 865.299031][ T9107] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 865.339223][T16167] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.356006][T16167] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.366835][ T9107] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input150 [ 865.386442][T16167] bridge_slave_0: entered allmulticast mode [ 865.398882][T16167] bridge_slave_0: entered promiscuous mode [ 865.413231][ T9107] usb 7-1: USB disconnect, device number 2 [ 865.456583][ T9927] hsr_slave_0: left promiscuous mode [ 865.479590][ T9927] hsr_slave_1: left promiscuous mode [ 865.592328][T10036] usb 6-1: USB disconnect, device number 2 [ 865.802170][ T5834] Bluetooth: hci3: command tx timeout [ 866.787819][T16167] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.795500][T16167] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.802870][T16167] bridge_slave_1: entered allmulticast mode [ 866.811510][T16167] bridge_slave_1: entered promiscuous mode [ 867.368082][T16167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.406768][T16167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.518016][T16167] team0: Port device team_slave_0 added [ 867.552440][T16167] team0: Port device team_slave_1 added [ 867.566472][ T9987] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 867.625751][T16167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.637085][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.666016][T16167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.684717][ T30] audit: type=1400 audit(1750161169.040:1071): avc: denied { getopt } for pid=16289 comm="syz.0.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 874.620548][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.626891][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.638745][ T5834] Bluetooth: hci3: command tx timeout [ 874.675431][ T9987] usb 6-1: Using ep0 maxpacket: 16 [ 874.699804][ T9987] usb 6-1: device descriptor read/all, error -71 [ 979.620025][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 979.626991][ C0] rcu: 1-...!: (2 ticks this GP) idle=d834/1/0x4000000000000000 softirq=77898/77898 fqs=0 [ 979.637762][ C0] rcu: (detected by 0, t=10505 jiffies, g=70033, q=1676 ncpus=2) [ 979.645567][ C0] Sending NMI from CPU 0 to CPUs 1: [ 979.645593][ C1] NMI backtrace for cpu 1 [ 979.645604][ C1] CPU: 1 UID: 0 PID: 15704 Comm: udevd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 979.645622][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 979.645630][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 979.645652][ C1] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 979.645666][ C1] RSP: 0018:ffffc90000a08d80 EFLAGS: 00000046 [ 979.645679][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 00000000ef9d33e4 [ 979.645687][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 979.645696][ C1] RBP: ffff888033ab8800 R08: 0ac0d5affe09d4ff R09: 0000000000000001 [ 979.645704][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 000000cbc2078080 [ 979.645713][ C1] R13: 000000cbc2078080 R14: 0000000000000002 R15: ffff888033abb410 [ 979.645722][ C1] FS: 00007f06835e1880(0000) GS:ffff888124853000(0000) knlGS:0000000000000000 [ 979.645736][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 979.645745][ C1] CR2: 000055555c6c75c8 CR3: 000000001b9f9000 CR4: 00000000003526f0 [ 979.645753][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 979.645761][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 979.645770][ C1] Call Trace: [ 979.645775][ C1] [ 979.645780][ C1] advance_sched+0x6a9/0xc80 [ 979.645797][ C1] ? advance_sched+0x688/0xc80 [ 979.645819][ C1] ? __pfx_advance_sched+0x10/0x10 [ 979.645834][ C1] __hrtimer_run_queues+0x202/0xad0 [ 979.645852][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 979.645866][ C1] ? read_tsc+0x9/0x20 [ 979.645883][ C1] hrtimer_interrupt+0x397/0x8e0 [ 979.645903][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 979.645924][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 979.645944][ C1] [ 979.645948][ C1] [ 979.645953][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 979.645968][ C1] RIP: 0010:__rcu_read_lock+0x26/0xf0 [ 979.645984][ C1] Code: 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 53 65 48 8b 1d 20 89 2b 12 48 8d bb 44 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a6 [ 979.645996][ C1] RSP: 0018:ffffc90003f0f960 EFLAGS: 00000a07 [ 979.646007][ C1] RAX: dffffc0000000000 RBX: ffff88807eda8000 RCX: ffffc90003f0f93c [ 979.646016][ C1] RDX: 1ffff1100fdb5088 RSI: ffffffff821829cd RDI: ffff88807eda8444 [ 979.646024][ C1] RBP: ffffc90003f0fa30 R08: 0000000000000001 R09: 0000000000000000 [ 979.646032][ C1] R10: 0000000000000000 R11: 000000000000a297 R12: ffffffff81a77fd0 [ 979.646040][ C1] R13: ffffc90003f0f9e8 R14: 0000000000000000 R15: ffff88807eda8000 [ 979.646050][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 979.646070][ C1] ? kmem_cache_free+0x16d/0x4d0 [ 979.646088][ C1] unwind_next_frame+0xae/0x20a0 [ 979.646108][ C1] ? kmem_cache_free+0x16d/0x4d0 [ 979.646125][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 979.646142][ C1] arch_stack_walk+0x94/0x100 [ 979.646157][ C1] ? kmem_cache_free+0x16d/0x4d0 [ 979.646174][ C1] stack_trace_save+0x8e/0xc0 [ 979.646191][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 979.646210][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 979.646230][ C1] kasan_save_stack+0x33/0x60 [ 979.646246][ C1] ? kasan_save_stack+0x33/0x60 [ 979.646261][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 979.646274][ C1] ? __call_rcu_common.constprop.0+0x9a/0x9f0 [ 979.646288][ C1] ? kmem_cache_free+0x16d/0x4d0 [ 979.646318][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 979.646333][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 979.646346][ C1] __call_rcu_common.constprop.0+0x9a/0x9f0 [ 979.646362][ C1] kmem_cache_free+0x16d/0x4d0 [ 979.646377][ C1] ? __fput+0x68d/0xb70 [ 979.646402][ C1] __fput+0x68d/0xb70 [ 979.646423][ C1] fput_close_sync+0x118/0x260 [ 979.646436][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 979.646448][ C1] ? dnotify_flush+0x79/0x4c0 [ 979.646470][ C1] __x64_sys_close+0x8b/0x120 [ 979.646484][ C1] do_syscall_64+0xcd/0x4c0 [ 979.646504][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.646517][ C1] RIP: 0033:0x7f0682ea7407 [ 979.646529][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 979.646541][ C1] RSP: 002b:00007ffdf332ff40 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 979.646553][ C1] RAX: ffffffffffffffda RBX: 00007f06835e1880 RCX: 00007f0682ea7407 [ 979.646562][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 979.646570][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 979.646578][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdf332ffa0 [ 979.646587][ C1] R13: 0000000000000001 R14: 0000564cc9e866d7 R15: 00007ffdf3332240 [ 979.646600][ C1] [ 979.647586][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g70033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 980.148740][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=52069 [ 980.156624][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g70033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 980.167985][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 980.177943][ C0] rcu: RCU grace-period kthread stack dump: [ 980.183817][ C0] task:rcu_preempt state:I stack:28264 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 980.195732][ C0] Call Trace: [ 980.199004][ C0] [ 980.201931][ C0] __schedule+0x116a/0x5de0 [ 980.206449][ C0] ? __lock_acquire+0x622/0x1c90 [ 980.211414][ C0] ? __pfx___schedule+0x10/0x10 [ 980.216270][ C0] ? find_held_lock+0x2b/0x80 [ 980.220959][ C0] ? schedule+0x2d7/0x3a0 [ 980.225299][ C0] schedule+0xe7/0x3a0 [ 980.229365][ C0] schedule_timeout+0x123/0x290 [ 980.234214][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 980.239583][ C0] ? __pfx_process_timeout+0x10/0x10 [ 980.244870][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 980.250673][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 980.256140][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 980.260921][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 980.266207][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 980.271406][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 980.276352][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 980.281231][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 980.287084][ C0] rcu_gp_kthread+0x270/0x380 [ 980.291791][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 980.296995][ C0] ? rcu_is_watching+0x12/0xc0 [ 980.301756][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 980.306956][ C0] ? __kthread_parkme+0x19e/0x250 [ 980.311982][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 980.317181][ C0] kthread+0x3c2/0x780 [ 980.321249][ C0] ? __pfx_kthread+0x10/0x10 [ 980.325846][ C0] ? rcu_is_watching+0x12/0xc0 [ 980.330622][ C0] ? __pfx_kthread+0x10/0x10 [ 980.335217][ C0] ret_from_fork+0x5d4/0x6f0 [ 980.339815][ C0] ? __pfx_kthread+0x10/0x10 [ 980.344423][ C0] ret_from_fork_asm+0x1a/0x30 [ 980.349220][ C0]