last executing test programs: 5m16.876923091s ago: executing program 0 (id=1220): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x608000, 0x54) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100)) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000140)={0x0, 0x3, 0x16, "def623561ff1a0d14dcb4e808524bb3fc7fbfea04b7ce8f0be0c7a047c6055173485b04586e225688505e464893b01918da01a076616f761567b3e1a", 0x13, "8541aaa4632ff20b72884acfd26462b355bfad67751e0bd2a3c34bcc660caa92e699d8eeff5787d11ca2ae9412cd95abebd7d0356005029510b6ec26", 0x30}) r2 = syz_usb_connect$uac1(0x1, 0xd9, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x14, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x18}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x4, 0x10, 0xd, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x4, 0x1, [0x9], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0xf7, 0x1002}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xfc, 0x2, 0x0, 0x7f, "534cc91c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x0, "b3", "630fff"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x64, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xb, 0x3, 0xd, 0xb, "b39fa0", "3ae5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x50, 0x3, 0x7, 0x1, {0x7, 0x25, 0x1, 0x83, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x2, 0x3, "4ff4e0"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x3, 0x40, 0x10, "e4d4be5e4a8b26b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xf7, 0x0, {0x7, 0x25, 0x1, 0x80, 0x40, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x81, 0x1, 0x2, 0x10, 0x1}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0xa, [{0x69, &(0x7f0000000380)=@string={0x69, 0x3, "89bdb65d06912096bcc4e08d031c8b83542bf50e6fec3286bb3df0249c2f18af2ab8725081e3acee2a1056c772b72817730e7ab712abd4dea56459912bf8ef0dba78b6e45bc94814c4b5bbd2eb462c9043c966bc9537bc0d461bbc329bbcd4ac6aaaa81d691c6a"}}, {0xf, &(0x7f0000000400)=@string={0xf, 0x3, "20ef2fc29aebad4fd21bb86d62"}}, {0x54, &(0x7f0000000440)=@string={0x54, 0x3, "9301cb8424299dc6e4dce029b103a17d7f095f59d8450282f0daf00914405151b05e928a1be9aacb349e52d2dc0eb59bcf8ba87dbe6f4518985d931aff994413d561fe93cfdc8400811e6998e00d3d343c27"}}, {0x0, 0x0}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40f}}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x240a}}, {0x2, &(0x7f00000005c0)=@string={0x2}}, {0x8f, &(0x7f00000006c0)=@string={0x8f, 0x3, "49161c47e2bb823356835437dd44046f97c119c8ba2a5ad3c95d3642cebadaa3b0d77c6037be639bcb4c9fdc744f29a11af67822e4b5ee5ae7a1d8c1ff99c56b5907ec531a37dcc1de1dfdedd640574c4d2ea7d135423325d94a838e703e7cad112e0cf185dff589b7cc219441c262ff0244ef3301d60c7fb4d36d3b355fe09137472704cd56673c021ea04517"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x0, 0x10, 0x9b, {0x9b, 0x23, "3ca9ff05c4a892e15dbc087d35f52855f6fe82c90f52a36154c15a8b0c979040f4a82811477f7dd38d1502e9e356ffc2a5eee0a89f29414b0405e084a626994c10310408b9a3e88facb5d52007f3cca633caf46ac9c470a4213d8f1288fab2c8f440c4820ffbf8270b6d85d4d4035e97371c49721ab2f3b9c43f9a241b0e95d559d5c34d7b0c1bb20a9b7251661b2b85f10d98e7328fd6b5ff"}}, &(0x7f0000000940)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "39c09268a1f05a890abcb217eafe125a246eb392c867e943593ec35537386568c514530fb1582db59fae39c28c8d3057ca4768d75c6d0c1bd3afaeb95177067e5f9a8bf240c8294988ec33cfd88aca9d4325641f13cd9016e4fdbc8c8c447b65af2998381149536117d402e32a822e0323c5e3d03beb6ebb23b0cdcfe5138aa5d80be1bb36b756cbb1e376"}}, &(0x7f0000000a00)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "ab9786603cc2050a7453f3fcd40842b2"}, @generic={0x4, 0x10, 0x1, "a3"}, @ssp_cap={0xc, 0x10, 0xa, 0xf3, 0x0, 0x400, 0x0, 0x8}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf4, 0x1, 0x6, 0x5, "7ab7d2b8", "4ab40acc"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x0, 0x6, 0x1, 0x3, 0xfff3, 0x200}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000b00)={0x20, 0x11, 0x78, "bf88d48ded5e11d48dd82d0ccc19710af153e52e00899e08a1f24fc87df95ff74c48b47d64bfc9f4adf588b774847cb06d4275614c2630e165d7c70ad5eda6454a3f5545e7f7ca8c9af6a3c344e627e3d27fdaa1bcf9bc4d83b881c6da38ec72f37edf5b98084bb37ad606214d877b1feddb030dd5d0eed9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x400, 0x1}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000cc0)={0x40, 0x9, 0x1}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "aeb9"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x7e}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "77cd"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x24}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x84}}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000001080)={{r1}, 0xa, &(0x7f0000001000)=[0x1, 0x200, 0x2f601fd, 0x3ff, 0x3, 0x6, 0x5, 0x9, 0x5, 0x4], 0x3a, 0xa}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001100)={{0x1, 0x1, 0x18, r1, {0x0, 0x4247}}, './file0\x00'}) connect$pppoe(r3, &(0x7f0000001140)={0x18, 0x0, {0x3, @broadcast, 'bond_slave_1\x00'}}, 0x1e) mincore(&(0x7f0000ff7000/0x9000)=nil, 0x9000, &(0x7f0000001180)=""/81) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000001200)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2000, 0x4}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001240)='/proc/asound/card3/oss_mixer\x00', 0x2008c1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000001280)={0x18, 0x0, {0x0, @remote, 'bond0\x00'}}) r4 = syz_usb_connect$cdc_ncm(0x4, 0x7d, &(0x7f00000012c0)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x8, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4e7559bd"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x8000, 0x101, 0x3c}, {0x6, 0x24, 0x1a, 0x6, 0xc}, [@acm={0x4, 0x24, 0x2, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xa9, 0x28, 0xfa}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x8f, 0x4a}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0xe, 0xf6}}}}}}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x11, 0x7, 0x9, 0x9, 0x40, 0x3a}, 0x2c, &(0x7f0000001380)={0x5, 0xf, 0x2c, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x6, 0xf000, 0x3, [0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "5e0b3713b98a0663ce3091382042f850"}]}, 0x4, [{0x8f, &(0x7f00000013c0)=@string={0x8f, 0x3, "fafef9542a750282d76cfa11b4ba3db78893f8ecf69b56df860d0d7345166c62d6a18ef10663c164f8766044db4c881a3b229f69d8ae86a8d2bbf1f29c77151bf06a9edbc43dc0471d47aed342ffc5b3456973230fe4097a6b56307e4d8ba38d8f91724e0ba71c9bada712c5303e31e4b66eec4da4e4cbc57217070b4ca5c4af4d0a0601408ade1994d39b4560"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0xc0c}}, {0x8a, &(0x7f00000014c0)=@string={0x8a, 0x3, "5627a0bfd17376597ba8c79477a8637af53c866bedce27da2d636ee1b7b07283e6c22cbe8564cdea25e976e9b688f8fc5a25b6ca06d5f3f85da046d2828c4492338fb5f32ed7a3b453b207660d7600a22897b0ce89f4e259c645a50c22bf223f860904dac231a4baf4c59fe13cfd2f161d1b8f404362aa65e276c99b8e54b00ab435934950636cf3"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x3046}}]}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001640), 0x100800, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000001700)={0x4, 0x98, 0x8001, r3, 0x0, &(0x7f00000016c0)={0x980929, 0x200, '\x00', @string=&(0x7f0000001680)=0x40}}) r6 = syz_open_dev$audion(&(0x7f0000001740), 0xfffffffffffffffc, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000017c0)={0x0, 0x800, 0x80, r5, 0x0, &(0x7f0000001780)={0x990afd, 0x1, '\x00', @value64=0x10001}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000001880)={0x9c0000, 0x50, 0x2, r6, 0x0, &(0x7f0000001840)={0x9d0903, 0x7, '\x00', @p_u16=&(0x7f0000001800)=0x1}}) getpeername$packet(r5, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) sendmsg$nl_route(r1, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)=@ipv6_newaddr={0x20, 0x14, 0x20, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x18, 0xfd, r8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x80) syz_usb_control_io(r4, &(0x7f0000001bc0)={0x2c, &(0x7f0000001a40)={0x20, 0x5, 0x66, {0x66, 0x5, "e620992456fd43a5f40de31d8f5e736df666b15340c182cbf761235003655fed724fb610daea2f627b831f82e61f9cb70141c21cd5e3db59e7485ef2d70aaf8ab3b23a9ed1c65ab2f8951975108bbda98c7d4a779b71b645bcff79f4f2b606e3abefc439"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000001b00)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x9, 0xf00, 0x7, [0x0, 0x180, 0xc0, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0xe, 0x9, 0x9, 0x1}]}}, &(0x7f0000001b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x0, 0x81, "03eeb11d", "17a340f1"}}, &(0x7f0000001b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x6, 0x1f, 0x0, 0x6aec, 0x4}}}, &(0x7f0000002000)={0x84, &(0x7f0000001c00)={0x0, 0x17, 0x22, "04fd213ec54a841647863bed6ee9e03bd071fb228420eb4d800704cf32cce3a4a184"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001c80)={0x0, 0x8, 0x1}, &(0x7f0000001cc0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001d00)={0x20, 0x0, 0x4, {0x100, 0x41}}, &(0x7f0000001d40)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001d80)={0x40, 0x9, 0x1}, &(0x7f0000001dc0)={0x40, 0xb, 0x2, "e476"}, &(0x7f0000001e00)={0x40, 0xf, 0x2, 0x7e04}, &(0x7f0000001e40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001e80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001ec0)={0x40, 0x19, 0x2, "518a"}, &(0x7f0000001f00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001f40)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001f80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001fc0)={0x40, 0x21, 0x1, 0xe}}) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000020c0)=0x10800) syz_usb_connect$cdc_ecm(0x3, 0x76, &(0x7f0000002100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xef, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x8, 0x30, 0xfa, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "ba295172"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffeff, 0x5, 0x0, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x7, 0x1, 0x0, 0x76ea, 0xe}, @obex={0x5, 0x24, 0x15, 0x676}, @mbim_extended={0x8, 0x24, 0x1c, 0xc, 0xb7, 0xdf}, @country_functional={0xc, 0x24, 0x7, 0xc0, 0xff, [0x99, 0x87a4, 0x8]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x9a, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x80, 0x1}}}}}]}}]}}, &(0x7f0000002400)={0xa, &(0x7f0000002180)={0xa, 0x6, 0x201, 0x40, 0x0, 0x5e, 0x40}, 0x5, &(0x7f00000021c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x418}}, {0xc6, &(0x7f00000022c0)=@string={0xc6, 0x3, "40dbc9df4269f9544cfee4db51f6cf2ade79ab8ecb138b5810670128d17693c469d97359e066e8622064756c5c73cf9d4f176db7a84f2515db4246d10776a5eebff439ffc5f2dfac9055a0ac0576cb23fb59dbc4f635566bd61669257c4ebd02548d64a660cd7874007e224fcc2402a110e1ff80a1397f51cda861b5a6daf89d384261bf5160f277171827ccbf8907ab068b5b119a5915e0c471286f43620400dbe7760d6036829e05e9e8a1c792a08d14d78b80bd47834e2832ba84ac101e3177a38d68"}}, {0x40, &(0x7f00000023c0)=@string={0x40, 0x3, "1313bae01ae5c283f66dfa8d00e8d58e6aba40f9c9d57f04efce45b8b31060c033fc66ec7421e92d682cb94323898834d4073e7d76dfd02b6892b2752edc"}}]}) pivot_root(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='./file0\x00') ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) socket(0x3, 0x80000, 0x44) 5m13.259229492s ago: executing program 0 (id=1227): keyctl$set_reqkey_keyring(0xe, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200008000000010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x30, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r0, r0) epoll_pwait(r2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x5, &(0x7f0000000300)={[0x8001]}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4040) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x3, 0x7}, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$KVM_CAP_HYPERV_VP_INDEX(r5, 0x4068aea3, &(0x7f0000000040)) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f00000000c0)={0xfffff000, 0x2, 0xffffa57e}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, 0x0) 5m9.777531884s ago: executing program 0 (id=1235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)=';R', 0x2, 0x20004810, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendto$inet(r0, &(0x7f00000002c0)="49b2c157e6f0a48161a433266d3d03ea7a59e1fbf3efe6035a63ec84047c31a837331f", 0x23, 0x6000c000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (fail_nth: 5) 5m9.5523192s ago: executing program 0 (id=1237): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x608000, 0x54) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100)) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000140)={0x0, 0x3, 0x16, "def623561ff1a0d14dcb4e808524bb3fc7fbfea04b7ce8f0be0c7a047c6055173485b04586e225688505e464893b01918da01a076616f761567b3e1a", 0x13, "8541aaa4632ff20b72884acfd26462b355bfad67751e0bd2a3c34bcc660caa92e699d8eeff5787d11ca2ae9412cd95abebd7d0356005029510b6ec26", 0x30}) r2 = syz_usb_connect$uac1(0x1, 0xd9, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x14, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x18}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x4, 0x10, 0xd, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x4, 0x1, [0x9], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0xf7, 0x1002}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xfc, 0x2, 0x0, 0x7f, "534cc91c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x0, "b3", "630fff"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x64, 0x1001}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xb, 0x3, 0xd, 0xb, "b39fa0", "3ae5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x50, 0x3, 0x7, 0x1, {0x7, 0x25, 0x1, 0x83, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x2, 0x3, "4ff4e0"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x3, 0x40, 0x10, "e4d4be5e4a8b26b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xf7, 0x0, {0x7, 0x25, 0x1, 0x80, 0x40, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x81, 0x1, 0x2, 0x10, 0x1}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0xa, [{0x69, &(0x7f0000000380)=@string={0x69, 0x3, "89bdb65d06912096bcc4e08d031c8b83542bf50e6fec3286bb3df0249c2f18af2ab8725081e3acee2a1056c772b72817730e7ab712abd4dea56459912bf8ef0dba78b6e45bc94814c4b5bbd2eb462c9043c966bc9537bc0d461bbc329bbcd4ac6aaaa81d691c6a"}}, {0xf, &(0x7f0000000400)=@string={0xf, 0x3, "20ef2fc29aebad4fd21bb86d62"}}, {0x54, &(0x7f0000000440)=@string={0x54, 0x3, "9301cb8424299dc6e4dce029b103a17d7f095f59d8450282f0daf00914405151b05e928a1be9aacb349e52d2dc0eb59bcf8ba87dbe6f4518985d931aff994413d561fe93cfdc8400811e6998e00d3d343c27"}}, {0x0, 0x0}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40f}}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x240a}}, {0x2, &(0x7f00000005c0)=@string={0x2}}, {0x8f, &(0x7f00000006c0)=@string={0x8f, 0x3, "49161c47e2bb823356835437dd44046f97c119c8ba2a5ad3c95d3642cebadaa3b0d77c6037be639bcb4c9fdc744f29a11af67822e4b5ee5ae7a1d8c1ff99c56b5907ec531a37dcc1de1dfdedd640574c4d2ea7d135423325d94a838e703e7cad112e0cf185dff589b7cc219441c262ff0244ef3301d60c7fb4d36d3b355fe09137472704cd56673c021ea04517"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x0, 0x10, 0x9b, {0x9b, 0x23, "3ca9ff05c4a892e15dbc087d35f52855f6fe82c90f52a36154c15a8b0c979040f4a82811477f7dd38d1502e9e356ffc2a5eee0a89f29414b0405e084a626994c10310408b9a3e88facb5d52007f3cca633caf46ac9c470a4213d8f1288fab2c8f440c4820ffbf8270b6d85d4d4035e97371c49721ab2f3b9c43f9a241b0e95d559d5c34d7b0c1bb20a9b7251661b2b85f10d98e7328fd6b5ff"}}, &(0x7f0000000940)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "39c09268a1f05a890abcb217eafe125a246eb392c867e943593ec35537386568c514530fb1582db59fae39c28c8d3057ca4768d75c6d0c1bd3afaeb95177067e5f9a8bf240c8294988ec33cfd88aca9d4325641f13cd9016e4fdbc8c8c447b65af2998381149536117d402e32a822e0323c5e3d03beb6ebb23b0cdcfe5138aa5d80be1bb36b756cbb1e376"}}, &(0x7f0000000a00)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "ab9786603cc2050a7453f3fcd40842b2"}, @generic={0x4, 0x10, 0x1, "a3"}, @ssp_cap={0xc, 0x10, 0xa, 0xf3, 0x0, 0x400, 0x0, 0x8}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf4, 0x1, 0x6, 0x5, "7ab7d2b8", "4ab40acc"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x0, 0x6, 0x1, 0x3, 0xfff3, 0x200}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000b00)={0x20, 0x11, 0x78, "bf88d48ded5e11d48dd82d0ccc19710af153e52e00899e08a1f24fc87df95ff74c48b47d64bfc9f4adf588b774847cb06d4275614c2630e165d7c70ad5eda6454a3f5545e7f7ca8c9af6a3c344e627e3d27fdaa1bcf9bc4d83b881c6da38ec72f37edf5b98084bb37ad606214d877b1feddb030dd5d0eed9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x400, 0x1}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000cc0)={0x40, 0x9, 0x1}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "aeb9"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x7e}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "77cd"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x24}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x84}}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000001080)={{r1}, 0xa, &(0x7f0000001000)=[0x1, 0x200, 0x2f601fd, 0x3ff, 0x3, 0x6, 0x5, 0x9, 0x5, 0x4], 0x3a, 0xa}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001100)={{0x1, 0x1, 0x18, r1, {0x0, 0x4247}}, './file0\x00'}) connect$pppoe(r3, &(0x7f0000001140)={0x18, 0x0, {0x3, @broadcast, 'bond_slave_1\x00'}}, 0x1e) mincore(&(0x7f0000ff7000/0x9000)=nil, 0x9000, &(0x7f0000001180)=""/81) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000001200)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2000, 0x4}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001240)='/proc/asound/card3/oss_mixer\x00', 0x2008c1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000001280)={0x18, 0x0, {0x0, @remote, 'bond0\x00'}}) r4 = syz_usb_connect$cdc_ncm(0x4, 0x7d, &(0x7f00000012c0)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x8, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4e7559bd"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x8000, 0x101, 0x3c}, {0x6, 0x24, 0x1a, 0x6, 0xc}, [@acm={0x4, 0x24, 0x2, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xa9, 0x28, 0xfa}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x8f, 0x4a}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0xe, 0xf6}}}}}}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x11, 0x7, 0x9, 0x9, 0x40, 0x3a}, 0x2c, &(0x7f0000001380)={0x5, 0xf, 0x2c, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x6, 0xf000, 0x3, [0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "5e0b3713b98a0663ce3091382042f850"}]}, 0x4, [{0x8f, &(0x7f00000013c0)=@string={0x8f, 0x3, "fafef9542a750282d76cfa11b4ba3db78893f8ecf69b56df860d0d7345166c62d6a18ef10663c164f8766044db4c881a3b229f69d8ae86a8d2bbf1f29c77151bf06a9edbc43dc0471d47aed342ffc5b3456973230fe4097a6b56307e4d8ba38d8f91724e0ba71c9bada712c5303e31e4b66eec4da4e4cbc57217070b4ca5c4af4d0a0601408ade1994d39b4560"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0xc0c}}, {0x8a, &(0x7f00000014c0)=@string={0x8a, 0x3, "5627a0bfd17376597ba8c79477a8637af53c866bedce27da2d636ee1b7b07283e6c22cbe8564cdea25e976e9b688f8fc5a25b6ca06d5f3f85da046d2828c4492338fb5f32ed7a3b453b207660d7600a22897b0ce89f4e259c645a50c22bf223f860904dac231a4baf4c59fe13cfd2f161d1b8f404362aa65e276c99b8e54b00ab435934950636cf3"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x3046}}]}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001640), 0x100800, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000001700)={0x4, 0x98, 0x8001, r3, 0x0, &(0x7f00000016c0)={0x980929, 0x200, '\x00', @string=&(0x7f0000001680)=0x40}}) r6 = syz_open_dev$audion(&(0x7f0000001740), 0xfffffffffffffffc, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000017c0)={0x0, 0x800, 0x80, r5, 0x0, &(0x7f0000001780)={0x990afd, 0x1, '\x00', @value64=0x10001}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000001880)={0x9c0000, 0x50, 0x2, r6, 0x0, &(0x7f0000001840)={0x9d0903, 0x7, '\x00', @p_u16=&(0x7f0000001800)=0x1}}) getpeername$packet(r5, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) sendmsg$nl_route(r1, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)=@ipv6_newaddr={0x20, 0x14, 0x20, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x18, 0xfd, r8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x80) syz_usb_control_io(r4, &(0x7f0000001bc0)={0x2c, &(0x7f0000001a40)={0x20, 0x5, 0x66, {0x66, 0x5, "e620992456fd43a5f40de31d8f5e736df666b15340c182cbf761235003655fed724fb610daea2f627b831f82e61f9cb70141c21cd5e3db59e7485ef2d70aaf8ab3b23a9ed1c65ab2f8951975108bbda98c7d4a779b71b645bcff79f4f2b606e3abefc439"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000001b00)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x9, 0xf00, 0x7, [0x0, 0x180, 0xc0, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0xe, 0x9, 0x9, 0x1}]}}, &(0x7f0000001b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x0, 0x81, "03eeb11d", "17a340f1"}}, &(0x7f0000001b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x6, 0x1f, 0x0, 0x6aec, 0x4}}}, &(0x7f0000002000)={0x84, &(0x7f0000001c00)={0x0, 0x17, 0x22, "04fd213ec54a841647863bed6ee9e03bd071fb228420eb4d800704cf32cce3a4a184"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000001c80)={0x0, 0x8, 0x1}, &(0x7f0000001cc0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001d00)={0x20, 0x0, 0x4, {0x100, 0x41}}, &(0x7f0000001d40)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001d80)={0x40, 0x9, 0x1}, &(0x7f0000001dc0)={0x40, 0xb, 0x2, "e476"}, &(0x7f0000001e00)={0x40, 0xf, 0x2, 0x7e04}, &(0x7f0000001e40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001e80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001ec0)={0x40, 0x19, 0x2, "518a"}, &(0x7f0000001f00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001f40)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001f80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001fc0)={0x40, 0x21, 0x1, 0xe}}) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000020c0)=0x10800) syz_usb_connect$cdc_ecm(0x3, 0x76, &(0x7f0000002100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xef, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x8, 0x30, 0xfa, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "ba295172"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffeff, 0x5, 0x0, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x7, 0x1, 0x0, 0x76ea, 0xe}, @obex={0x5, 0x24, 0x15, 0x676}, @mbim_extended={0x8, 0x24, 0x1c, 0xc, 0xb7, 0xdf}, @country_functional={0xc, 0x24, 0x7, 0xc0, 0xff, [0x99, 0x87a4, 0x8]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x9a, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x80, 0x1}}}}}]}}]}}, &(0x7f0000002400)={0xa, &(0x7f0000002180)={0xa, 0x6, 0x201, 0x40, 0x0, 0x5e, 0x40}, 0x5, &(0x7f00000021c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x418}}, {0xc6, &(0x7f00000022c0)=@string={0xc6, 0x3, "40dbc9df4269f9544cfee4db51f6cf2ade79ab8ecb138b5810670128d17693c469d97359e066e8622064756c5c73cf9d4f176db7a84f2515db4246d10776a5eebff439ffc5f2dfac9055a0ac0576cb23fb59dbc4f635566bd61669257c4ebd02548d64a660cd7874007e224fcc2402a110e1ff80a1397f51cda861b5a6daf89d384261bf5160f277171827ccbf8907ab068b5b119a5915e0c471286f43620400dbe7760d6036829e05e9e8a1c792a08d14d78b80bd47834e2832ba84ac101e3177a38d68"}}, {0x40, &(0x7f00000023c0)=@string={0x40, 0x3, "1313bae01ae5c283f66dfa8d00e8d58e6aba40f9c9d57f04efce45b8b31060c033fc66ec7421e92d682cb94323898834d4073e7d76dfd02b6892b2752edc"}}]}) pivot_root(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='./file0\x00') ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) socket(0x3, 0x80000, 0x44) 5m6.100728876s ago: executing program 0 (id=1245): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000003ffffffffffffe8000000040000430000195cdfc19558098f7e29ccf8e7c90ce594b929c90c438aa7402798751413e7df1eb03f4b4aeb8811dfdfc53836055bbadc4575ec5559fc41dbcd", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES64, @ANYRESDEC, @ANYRES64=0x0, @ANYRES8=0x0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000bc0)={0x7d, "9984a69e26edfdb7000300000000000000ff03ba91f6a27a0603c6de995ae34b81fb4dec3d44ad144088e68b88dbaea386f1283b716c35f680777326309719e45e5b36835640fdd1dd6c7876adcaa1a9beb8d03de6dfcfdaecb9d67597e890bc9dd646e82aa45e00"}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/66, 0x42}, {0x0}], 0x2, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, 0x0, 0x0, 0xe7b, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x2, 0x20000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5c08cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891f648bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) 5m4.159578703s ago: executing program 0 (id=1251): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='gid_map\x00') (async) r1 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYRES16=r0], 0x68}}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) read$FUSE(r7, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000180)={0x20071026, r8}, &(0x7f0000000200)={0x80, 0xd63d, 0x9, 0x0, 0x8001, 0x8}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0x0) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000000c0)={[0xfffffffffffffffb, 0x0, 0x7, 0x0, 0x1, 0x7f, 0x2, 0x0, 0x80000001, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x8000000000000000, 0x1, 0x4], 0xf000, 0x8340}) (async) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$inet(0x2, 0x1, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32) io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x5}) 4m48.443601809s ago: executing program 32 (id=1251): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='gid_map\x00') (async) r1 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYRES16=r0], 0x68}}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) read$FUSE(r7, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000180)={0x20071026, r8}, &(0x7f0000000200)={0x80, 0xd63d, 0x9, 0x0, 0x8001, 0x8}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0x0) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000000c0)={[0xfffffffffffffffb, 0x0, 0x7, 0x0, 0x1, 0x7f, 0x2, 0x0, 0x80000001, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x8000000000000000, 0x1, 0x4], 0xf000, 0x8340}) (async) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$inet(0x2, 0x1, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32) io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x5}) 12.282951219s ago: executing program 2 (id=2101): mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005a9f1c32aed6d5e27558da18d650c7462928f943484e11f66d7defd844585592dab0659fdca0798e7a2417577042999862c90fe8ed92ce6311f18daf9f305504e89bed9e69537bb61986942ac8f56be6b73df58c49a88a085fb589b924f6f871dc392f5e296c9aa0bbdd8d763c70b62ad5e277b8b0b608142f9da5ba0338f28ecb0475f7484ed88bb0fe2264dffd12214cc3d5fa0218137a489af03b6be0a24b8751a02d516a75e406a170faf4b76f350bf8bf1d1a725c45"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000500", @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r7, 0x9, 0x0) r8 = syz_clone(0x2000200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r8) move_pages(r8, 0x0, &(0x7f00000003c0), &(0x7f0000000500)=[0x1], &(0x7f0000000400)=[0x0], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r7) io_uring_setup(0x6b22, &(0x7f0000000bc0)={0x0, 0x0, 0x20, 0x3, 0x30e}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x75f0a139e2f9524, 0x0) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r10 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r10, 0xffff) fcntl$addseals(r10, 0x409, 0x7) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RAUTH(r11, 0x0, 0x0) r12 = ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x8000}) fcntl$dupfd(r12, 0x406, r12) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 11.784343602s ago: executing program 2 (id=2102): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (fail_nth: 1) 10.814656567s ago: executing program 2 (id=2105): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000280), 0x3, 0x389001) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x4bc0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7e) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x40000001) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000340)=""/2, 0x20, 0x2, 0x1, 0x47}, 0x28) 10.116045138s ago: executing program 4 (id=2107): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20008c0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}], [], 0x6b}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x24008800) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) socket$kcm(0x2d, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 8.625741682s ago: executing program 4 (id=2111): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0xe, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7c, r3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xc0, 0x8f, 0xfc, 0x8, 0x1fe1, 0x5456, 0xf74b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x48, 0x58, 0xc, [{{0x9, 0x4, 0x14, 0x80, 0x0, 0xea, 0x19, 0x89, 0x2f}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x85, &(0x7f00000001c0)=@string={0x85, 0x3, "fec9de570df729270b4651671404be7208b225d994f7d479efd4725cdaf6bf19d043780bbcf56db995961ca51c6c4f9209e44c560be675be4a951e24d972be381c596ed873efe10783b796bd48841363f584c4747ad0af7caa73db58d79cbcdccc01b723f42ca9b49047f6908c27d799baace502af49fd1290d694feb55135303e5158"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44f}}, {0x9d, &(0x7f0000000540)=@string={0x9d, 0x3, "114ac188d50d228ae54ba1f182a9e6d0ab966f885e1797fcf7348a76ce3a38a8d1f61ce4bcd27c9de7ad6fee113995ec1cc52c2f5027682a57c7e40b79ba9fd9caa82ea03d2855d356c50c970356fe187e51ba1e3cf217b74642110257ab14e6a677a4caefccf3f6a1ea4ff715a3b05dfe6bad1503cc95e48ed790164969fa56386b775d787d735ef66ad9b7129d489f7bc8c8e2a95a3f21073531"}}, {0x43, &(0x7f00000002c0)=@string={0x43, 0x3, "edbb8afbce9428899056f3acba730641125d550944204b388ef5a71368dee9cd82baf98d476aef74f8a1792d29c32323c06a29ad1afe99a7880d29775b313039e9"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x424}}, {0x70, &(0x7f00000003c0)=@string={0x70, 0x3, "8d2a0f722d459e52bafdc640b8b22909d54c6db1b6c797a46e5303be408c257e20ec7d8d0185ef145eb9a8976c609496bca77f413e0b45ba20e7a47d3041ac4a32b226e714a5df3e82e2e8c43f464a0acf2a7c830011996e605fbc664489c2d523021463ccf8a0e974674a4d435e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x804}}]}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000200)) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0xef, 0x60, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4d328c9c"}, {0x5, 0x24, 0x0, 0x7e}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0x865a, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x40, 0xb, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x8, 0xff, 0x16, 0x40, 0x4}, 0x133, &(0x7f0000000680)={0x5, 0xf, 0x133, 0x4, [@generic={0x1d, 0x10, 0x2, "322c0dfde5c233c13c6394578155ec7d84efa459243724855206"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "88a82115a1d96e2c69289d382de7291b"}, @generic={0xf6, 0x10, 0x1, "49572f1833527b63c1b5c3868e9462a0d3fec5bd4bb671f097513897dd7f54e616acd5445feaf8123318afcc9c360e14b3bc3bcf3b41a1a3517ae2f160d880819d522412f7ded9fb0109b22b95bb495f24d37b66c3eb0216b8b362bebebed5e81f4bde964d47ca53f5f0ab7f3c51cd53917230e8d4f0b4314da0f7a490763e1b3df4eb55bfea4576686e1ef1e08b891d58bcff24c1360f5a07c47f3195a2f0fc46c4ca9221afde498c631fecfc8bb923db11947cbf54c064b698e5bf16a21b1e377bae4f866892e57fe97f444469fb1e13c310ee2e80a73dc73cdc292c1747e136f83c79ef64df250532ef952a46716cc6870d"}]}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x458}}]}) 7.094699243s ago: executing program 2 (id=2116): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002044104d7a00000001000109022400010000000009040009010300020009210500000122050009058103ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x502, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x29, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000010000af"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x210202, 0x0) 6.951297437s ago: executing program 3 (id=2118): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) (async) recvmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000440)=""/136, 0x88}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/162, 0xa2}, {&(0x7f0000000980)=""/8, 0x8}], 0x7, &(0x7f00000008c0)=""/97, 0x61}, 0x8}, {{&(0x7f00000009c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000800)}, {&(0x7f0000000a80)=""/22, 0x16}, {&(0x7f0000000ac0)=""/69, 0x45}, {&(0x7f0000000b40)=""/112, 0x70}], 0x4, &(0x7f0000000c00)=""/52, 0x34}, 0x7fff}], 0x2, 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000cc0)={'#! ', './file0', [{0x20, '!{9/-'}, {0x20, '.}'}, {0x20, '&]\\\\['}, {0x20, 'eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb'}]}, 0x39d) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r6, r7, 0x0) 6.612087591s ago: executing program 3 (id=2119): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505"], 0x24}, 0x1, 0x0, 0x0, 0x2404c804}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$loop(0x0, 0x7fffffffffffffff, 0x20000) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f1a000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000020c0)='smaps\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) sendmsg$IPVS_CMD_ZERO(r4, 0x0, 0x8000) 6.536216502s ago: executing program 4 (id=2120): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x1e, &(0x7f0000000440)={@multicast, @empty, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "33f2537c431012ee"}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6(0xa, 0x4, 0x64c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x26, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x76, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$rxrpc(r0, &(0x7f0000000040)="15999684295f88f5a7f47a80e1718ab0686f4a02067f273cce533200fe15b259bf2e3c4b95d47253fea215c863ca95e3efe65506a145c474151273567f", 0x3d, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x20) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) syz_open_dev$sndmidi(0x0, 0x200000000000002, 0x141102) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000600)={0x7, {{0x2, 0x0, @private=0xa010100}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, 0x0) 6.087608786s ago: executing program 4 (id=2121): keyctl$set_reqkey_keyring(0xe, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200008000000010902120001000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x30, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r0, r0) epoll_pwait(r3, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x5, &(0x7f0000000300)={[0x8001]}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4040) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x3, 0x7}, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$KVM_CAP_HYPERV_VP_INDEX(r6, 0x4068aea3, &(0x7f0000000040)) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f00000000c0)={0xfffff000, 0x2, 0xffffa57e}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, 0x0) 6.033658677s ago: executing program 5 (id=2122): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x80000000, 0x103001) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e00090000000000000800000300000004"], 0x34}}, 0x84) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x141a02, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 5.75247664s ago: executing program 3 (id=2123): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xc, 0x1, &(0x7f00000000c0)="16", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5c000000}) 4.982034511s ago: executing program 5 (id=2124): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc5, &(0x7f0000000bc0)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)=ANY=[@ANYBLOB="0200681deb088bd4d865393824"], 0xe, 0xfffffffffffffffe) r4 = add_key(&(0x7f00000002c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, r5, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x280000, 0x10e, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(&(0x7f0000000b40), &(0x7f0000000b80), 0x8, &(0x7f000010f000/0x4000)=nil, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802eff"], 0x20}], 0x1}, 0x300) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 4.884132049s ago: executing program 1 (id=2125): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103001) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x47e, 0xc0010, 0x9, 0x1, 0x3ff, 0x7fe, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x2, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff6, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x7, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x9, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) 4.730302817s ago: executing program 1 (id=2126): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4100, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000200)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd=r0, 0xb1, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000380)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r5) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x11, 0x10, 0x0, &(0x7f0000002f00)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20000800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 4.093118678s ago: executing program 3 (id=2127): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000280), 0x3, 0x389001) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x4bc0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7e) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x40000001) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/2, 0x1a, 0x2, 0x1, 0x47}, 0x28) 4.005943083s ago: executing program 5 (id=2128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000140)=0x300) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005140)=ANY=[@ANYBLOB="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"], 0x4d68}}, 0x0) close(r0) 3.465856157s ago: executing program 5 (id=2129): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004c80)={'wlan1\x00', 0x0}) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000040)={@rand_addr=0x64010102, @multicast1}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000008540)={0x0, 0x0, &(0x7f0000008500)={&(0x7f0000008480)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) eventfd(0x40) 3.421395675s ago: executing program 1 (id=2130): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioprio_set$pid(0xc9f412cb305ec79c, 0x0, 0x2007) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000005101f9da9be0439f372d520400b3c6c96737568e0558072eb1fc881300e32568eee8782e8dcf727bb48aab9211037f84a233c2358bb4525de74df6f5306575a9042e0db3cd74cdd0fc526eca89e315ce2f477b3a8c0d64ebed1ab0218aaeb3cea78c99", @ANYRES16=r2, @ANYBLOB="af7c2dbd7000fcdbdf254c0000000f00a9007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x24004084}, 0x800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x0, 0xc4, 0x40}) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x8, 0xe, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x700, 0x7, 0x7, 0x1}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="3504000041000511d25a35400c00020001ffe7203715", 0x16}, {&(0x7f0000000600)="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", 0x3bf}, {&(0x7f0000000040)="9d493c13b6b02affcc19cb904ec2bd74085b0bd225277e5a44d681809b6d764ecab211ef0c90ba361a4378457b19705b18406f35071130b4e06c4a3b1a6e9a9d7cf1453aeb21e4c30a85207027af69f536ec61a4a59614b3f59314c649223b79", 0x60}], 0x3}, 0x10049014) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0100000004000000020000000c00000001000000de6a5f57dae14ec159c721cc2ea55f66f2feff04f63ae7499d7e3194f641d5e3ba15855507c5ead6281e4f87dbe9fe9fff1eaaa5389e7ceda52055a6dc45db8fa3bb8b6822cc6498ecdfda3c68610f69d0b6a35f2fc06a6b7de7778508386c7fa4ef0aaa788cc75ef3d889587e0b8023fae8d44ccc39962e271d2d90c47c2798d258a615920827f7d9eed02cfacada368d3b538123eb04af5c3ab5c9c8fc41bbaf3ebc07d97feea2817564e9ad4e6ff3070e6551e6ab855a86a4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r5) 3.412602747s ago: executing program 2 (id=2131): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x80000000, 0x103001) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0009000000000000080000030000000400"], 0x34}}, 0x84) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x141a02, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3.339772645s ago: executing program 5 (id=2132): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa00) 3.178097894s ago: executing program 4 (id=2133): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_POLL(r0, 0x640f) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0x400e2df, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) io_setup(0x8, &(0x7f0000000540)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaaaa080045190014006400000111909e1d2d8a115c7864010102e0"], 0x32) syz_usbip_server_init(0x3) statx(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0, 0x28e3d70485aa2b31, &(0x7f0000000880)) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x400, &(0x7f0000000980)=ANY=[@ANYBLOB='huge=within_size,mode=00000000000000000000011,nr_blocks=06,gid=', @ANYRESHEX, @ANYBLOB=',obj_type=/dev/snd/midiC#D#\x00,smackfsdef=/dev/snd/pcmC#D#c\x00,fsuuid=fd4a8e0a-db7a-S552-6bbd-4c2648d8,dont_appraise,fsmagic=0x0000000000000003,fsmagic=0x0000000000000008,smac']) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYBLOB="0e"]) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.67139029s ago: executing program 2 (id=2134): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x11, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @private0, 0x20005}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x7, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0x7fffffffffffffff, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00000000000000", 0x8) r8 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r8, 0x414, 0x0) recvmmsg(r7, &(0x7f00000045c0)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f0000004800)=""/117, 0x75}], 0x1, &(0x7f0000000540)=""/76, 0x4c}, 0xfe}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/63, 0x3f}, {0x0}, {&(0x7f0000000cc0)=""/235, 0xeb}, {&(0x7f0000000dc0)=""/35, 0x23}, {&(0x7f0000003dc0)=""/59, 0x3b}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/123, 0x7b}], 0x7, &(0x7f0000001f40)=""/156, 0x9c}, 0x1}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002000)=""/218, 0xda}], 0x1, &(0x7f0000002140)=""/226, 0xe2}, 0x81}, {{&(0x7f0000002240)=@tipc=@id, 0x80, &(0x7f0000002700)=[{&(0x7f00000022c0)=""/152, 0x98}, {&(0x7f0000002380)=""/239, 0xef}, {&(0x7f0000002480)=""/230, 0xe6}, {&(0x7f0000002580)=""/94, 0x5e}, {&(0x7f0000002600)=""/198, 0xc6}], 0x5}, 0x6}, {{&(0x7f0000002800)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000003a00)=""/125, 0x7d}, 0x6}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003a80)=""/162, 0xa2}], 0x1, &(0x7f0000003b80)=""/45, 0x2d}, 0x5}, {{&(0x7f0000003bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003c40)=""/115, 0x73}, {&(0x7f0000003cc0)=""/78, 0x4e}, {&(0x7f0000003d40)=""/36, 0x24}], 0x3, &(0x7f0000003dc0)}, 0x3}, {{&(0x7f0000003e00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004440)=[{&(0x7f0000003e80)=""/55, 0x37}, {&(0x7f0000003ec0)=""/249, 0xf9}, {&(0x7f0000004980)=""/194, 0xc2}, {&(0x7f0000004080)=""/27, 0x1b}, {0x0}, {&(0x7f0000004140)=""/161, 0xa1}, {&(0x7f0000004200)=""/211, 0xd3}, {&(0x7f0000004300)=""/138, 0x8a}, {&(0x7f00000043c0)=""/99, 0x63}], 0x9, &(0x7f0000004500)=""/140, 0x8c}, 0x8}], 0x8, 0x0, 0x0) 2.439614598s ago: executing program 1 (id=2135): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x39, 0x0, 0x0, 0x8, &(0x7f0000001540)) syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1002}], 0x1, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB], 0xd) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.52438418s ago: executing program 1 (id=2136): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x39, 0x0, 0x0, 0x8, &(0x7f0000001540)) syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1002}], 0x1, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="0404"], 0xd) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 797.460555ms ago: executing program 5 (id=2137): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100000f434ffff000000060000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001000128008000100687372000400028008000400e1ff0000"], 0x38}}, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x51}, 0x8840) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff00000028001a00ffffffff00000000000000000001020000000000000000000000000a0006090b6bff60a8a2461b4cab06b57b67bd39caa1075d1a70c4ccc5120e03f944f2212959ec3a04442a4a4ac118d9ed162b2b6906eeeb3fe028e39b2d0f7fb455002ef8b235460417efc9e71d7b512a5bd3647354c3faa795f3d7ee848f"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x222000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 796.004278ms ago: executing program 4 (id=2138): shmat(0x0, &(0x7f0000f63000/0x2000)=nil, 0x7000) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) acct(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x4, 0xfffffffd, 0x10001, 0x0, 0xfffffffffffffffa, 0x5, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x5}) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x162}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x2004810) connect$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 620.895579ms ago: executing program 1 (id=2139): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x3, 0x10000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x0, 0x8000}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x5400, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x4, 0xf}, 0x100, './file0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c80)=@newqdisc={0x30, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xc, 0xe}, {0x8, 0xa}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$can_bcm(r2, &(0x7f0000000180), 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x10000}, 0x10) write(r4, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000000000800040001000000", 0x24) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ppoll(&(0x7f00000005c0)=[{r3, 0x2743}], 0x1, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x2, {{0xa, 0x1, 0x4, @empty}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x4e20, 0x7fffffff, @mcast1, 0x4000}}, {{0xa, 0x4e24, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x33}}}}, 0x108) syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_emit_ethernet(0x86, &(0x7f0000000300)={@random="6bcf0c9a566f", @multicast, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x7, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0xe8fe2, 0x0, 0x1}], @generic="412a40b8a62cc5b00d14f28ae8a38dfff86ed4151042c437a7d6cc571eaacba56899b1de0382cdc0b0de52e113646a536b4f7e2691f052c30da910638b8733cdbfd806a9a22acd30b5923cfabd34da81ae5d5a0580e90e29a2fa365d68e4963516b3fcb2a28e8744e35430c0"}}}}, &(0x7f00000001c0)={0x1, 0x2, [0x6a0, 0xd6c, 0x264, 0x520]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 166.610744ms ago: executing program 3 (id=2140): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0x6000, 0x5000}) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x47) process_madvise(0xffffffffffffffff, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0b00915286e3"], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0x47, 0x0) 0s ago: executing program 3 (id=2141): creat(&(0x7f00000001c0)='./file0\x00', 0x78) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x3, 0x8695c3813aa3cd9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002400)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x18, 0x0, 0x3, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', 0x0, r2) (fail_nth: 7) close(r0) kernel console output (not intermixed with test programs): endpoint zero, skipping [ 637.249532][ T5950] usb 4-1: USB disconnect, device number 42 [ 637.258211][T12152] usb 2-1: config 5 interface 149 altsetting 13 has a duplicate endpoint with address 0xD, skipping [ 637.274563][T10850] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 637.282346][T12152] usb 2-1: config 5 interface 149 altsetting 13 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 637.294250][T12152] usb 2-1: config 5 interface 149 altsetting 13 has a duplicate endpoint with address 0x85, skipping [ 637.305556][T12152] usb 2-1: config 5 interface 149 altsetting 13 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 637.317518][T12152] usb 2-1: config 5 interface 149 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 637.330380][T12152] usb 2-1: config 5 interface 149 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 637.341242][T12152] usb 2-1: config 5 interface 149 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 637.352522][T12152] usb 2-1: config 5 interface 149 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 637.363383][T12152] usb 2-1: config 5 interface 149 altsetting 13 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 637.376803][T12152] usb 2-1: config 5 interface 50 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 637.473910][T12152] usb 2-1: config 5 interface 53 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 637.484702][T12152] usb 2-1: config 5 interface 53 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 637.495440][T12152] usb 2-1: config 5 interface 149 has no altsetting 0 [ 637.600493][T12152] usb 2-1: config 5 interface 50 has no altsetting 0 [ 637.652324][T12152] usb 2-1: config 5 interface 53 has no altsetting 0 [ 637.661360][T12152] usb 2-1: New USB device found, idVendor=07d1, idProduct=7e11, bcdDevice=95.65 [ 637.670437][T12152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.678592][T12152] usb 2-1: Product: syz [ 637.683595][T12152] usb 2-1: Manufacturer: syz [ 637.688287][T12152] usb 2-1: SerialNumber: syz [ 638.511255][T12549] ipvlan2: entered promiscuous mode [ 638.623987][T12152] usb 2-1: can't set config #5, error -71 [ 638.635771][T12152] usb 2-1: USB disconnect, device number 44 [ 638.688539][T12545] dummy0 speed is unknown, defaulting to 1000 [ 638.753698][T12545] lo speed is unknown, defaulting to 1000 [ 639.062207][ T10] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 639.141319][ T5915] vhci_hcd: vhci_device speed not set [ 639.302482][ T10] usb 3-1: No LPM exit latency info found, disabling LPM. [ 639.329167][ T10] usb 3-1: config 1 has an invalid interface number: 6 but max is 2 [ 639.354918][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 639.399141][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 639.415096][ T10] usb 3-1: config 1 has no interface number 1 [ 639.426796][ T10] usb 3-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 639.451249][ T10] usb 3-1: config 1 interface 6 has no altsetting 0 [ 639.542494][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 639.570338][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.587475][ T10] usb 3-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 639.609011][ T10] usb 3-1: Manufacturer: 숯侭ᯒ涸 [ 639.999287][T12575] FAULT_INJECTION: forcing a failure. [ 639.999287][T12575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.176956][T12575] CPU: 0 UID: 0 PID: 12575 Comm: syz.1.1728 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 640.176986][T12575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.176997][T12575] Call Trace: [ 640.177003][T12575] [ 640.177010][T12575] dump_stack_lvl+0x16c/0x1f0 [ 640.177044][T12575] should_fail_ex+0x512/0x640 [ 640.177079][T12575] _copy_from_user+0x2e/0xd0 [ 640.177099][T12575] get_user_ifreq+0xf1/0x250 [ 640.177120][T12575] sock_do_ioctl+0x16b/0x280 [ 640.177141][T12575] ? __pfx_sock_do_ioctl+0x10/0x10 [ 640.177168][T12575] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 640.177187][T12575] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 640.177207][T12575] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 640.177229][T12575] sock_ioctl+0x227/0x6b0 [ 640.177251][T12575] ? __pfx_sock_ioctl+0x10/0x10 [ 640.177271][T12575] ? hook_file_ioctl_common+0x145/0x410 [ 640.177299][T12575] ? selinux_file_ioctl+0x180/0x270 [ 640.177315][T12575] ? selinux_file_ioctl+0xb4/0x270 [ 640.177333][T12575] ? __pfx_sock_ioctl+0x10/0x10 [ 640.177356][T12575] __x64_sys_ioctl+0x18e/0x210 [ 640.177382][T12575] do_syscall_64+0xcd/0x4c0 [ 640.177402][T12575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.177420][T12575] RIP: 0033:0x7f392538e9a9 [ 640.177435][T12575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.177452][T12575] RSP: 002b:00007f3926277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.177470][T12575] RAX: ffffffffffffffda RBX: 00007f39255b5fa0 RCX: 00007f392538e9a9 [ 640.177482][T12575] RDX: 00002000000000c0 RSI: 0000000000008924 RDI: 0000000000000003 [ 640.177492][T12575] RBP: 00007f3926277090 R08: 0000000000000000 R09: 0000000000000000 [ 640.177503][T12575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.177513][T12575] R13: 0000000000000000 R14: 00007f39255b5fa0 R15: 00007ffeea23a838 [ 640.177537][T12575] [ 640.281965][T12556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.437535][T12556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.470246][ T30] audit: type=1400 audit(1753267705.947:741): avc: denied { write } for pid=12568 comm="syz.5.1726" lport=42548 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 640.835080][ T10] usb 3-1: 0:2 : does not exist [ 640.845040][ T30] audit: type=1400 audit(1753267705.957:742): avc: denied { setopt } for pid=12568 comm="syz.5.1726" lport=42548 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 640.960582][ T10] usb 3-1: USB disconnect, device number 23 [ 642.183761][ T30] audit: type=1400 audit(1753267708.257:743): avc: denied { bind } for pid=12584 comm="syz.4.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 642.542017][ T30] audit: type=1400 audit(1753267708.547:744): avc: denied { read } for pid=12584 comm="syz.4.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 643.619615][T12608] ipvlan3: entered promiscuous mode [ 643.629999][T12605] ipvlan4: entered promiscuous mode [ 643.655892][ T30] audit: type=1400 audit(1753267709.727:745): avc: denied { map } for pid=12590 comm="syz.3.1733" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 643.767451][ T30] audit: type=1326 audit(1753267709.757:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7763d8e9a9 code=0x7fc00000 [ 643.957575][ T30] audit: type=1326 audit(1753267710.027:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7763d8e9a9 code=0x7fc00000 [ 644.184672][T12622] netlink: 'syz.5.1740': attribute type 4 has an invalid length. [ 644.196193][T12622] netlink: 'syz.5.1740': attribute type 4 has an invalid length. [ 644.207942][ T30] audit: type=1400 audit(1753267710.277:748): avc: denied { read } for pid=12617 comm="syz.5.1740" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 644.706343][ T30] audit: type=1400 audit(1753267710.277:749): avc: denied { open } for pid=12617 comm="syz.5.1740" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 645.007873][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 645.017035][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 645.324136][ T5904] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 646.052363][ T5904] usb 2-1: No LPM exit latency info found, disabling LPM. [ 646.118321][ T5904] usb 2-1: config 1 has an invalid interface number: 6 but max is 2 [ 646.173030][ T5904] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 646.750732][T12642] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1745'. [ 646.762295][T12642] netlink: zone id is out of range [ 646.767690][T12642] netlink: zone id is out of range [ 646.772988][T12642] netlink: get zone limit has 8 unknown bytes [ 647.040393][ T5904] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 647.050064][ T5904] usb 2-1: config 1 has no interface number 1 [ 647.056661][ T5904] usb 2-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 647.069772][ T5904] usb 2-1: config 1 interface 6 has no altsetting 0 [ 647.104095][ T5904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 647.123034][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.131125][ T5904] usb 2-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 647.149014][ T5904] usb 2-1: Manufacturer: 숯侭ᯒ涸 [ 647.222382][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 647.270562][ T30] audit: type=1400 audit(1753267713.337:750): avc: denied { read } for pid=12640 comm="syz.4.1746" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 647.423392][T12651] random: crng reseeded on system resumption [ 647.699297][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 647.809360][T12633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.809545][T12633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.090743][ T5904] usb 2-1: 0:2 : does not exist [ 648.130088][ T5904] usb 2-1: USB disconnect, device number 45 [ 648.623739][T12664] ipvlan3: entered promiscuous mode [ 648.934030][T11166] udevd[11166]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.270741][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 649.301058][T10850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 649.429864][T12661] tty tty1: ldisc open failed (-12), clearing slot 0 [ 649.490124][T12676] netlink: zone id is out of range [ 649.497601][ T30] audit: type=1400 audit(1753267715.557:751): avc: denied { read } for pid=12675 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 649.570063][T12676] netlink: zone id is out of range [ 649.585536][T12676] netlink: zone id is out of range [ 649.615134][T12676] netlink: del zone limit has 4 unknown bytes [ 649.638302][T10850] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 649.861051][ T973] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 649.874028][T12685] random: crng reseeded on system resumption [ 650.426104][ T5904] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 650.500972][ T973] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 650.586077][ T973] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 650.611184][ T5904] usb 2-1: device descriptor read/64, error -71 [ 650.646422][ T973] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 650.666771][ T973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 650.768912][ T973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 650.852050][ T5904] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 650.876306][ T973] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 650.885815][ T973] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 650.910254][ T973] usb 3-1: Product: syz [ 650.925434][ T973] usb 3-1: Manufacturer: syz [ 650.960655][ T973] cdc_wdm 3-1:1.0: skipping garbage [ 650.970677][ T973] cdc_wdm 3-1:1.0: skipping garbage [ 651.001673][ T973] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 651.016421][ T973] cdc_wdm 3-1:1.0: Unknown control protocol [ 651.151285][ T5904] usb 2-1: device descriptor read/64, error -71 [ 651.304471][ T5904] usb usb2-port1: attempt power cycle [ 651.386256][ T973] usb 3-1: USB disconnect, device number 24 [ 651.720273][ T5904] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 652.281034][ T5904] usb 2-1: device descriptor read/8, error -71 [ 652.419251][T12705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1763'. [ 652.428484][T12705] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 652.662198][ T5904] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 652.782374][ T5904] usb 2-1: device descriptor read/8, error -71 [ 652.991325][ T5904] usb usb2-port1: unable to enumerate USB device [ 653.270134][ T7069] Bluetooth: hci5: Frame reassembly failed (-84) [ 654.788743][T12723] FAULT_INJECTION: forcing a failure. [ 654.788743][T12723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.801961][T12723] CPU: 1 UID: 0 PID: 12723 Comm: syz.5.1767 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 654.801986][T12723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.801997][T12723] Call Trace: [ 654.802003][T12723] [ 654.802009][T12723] dump_stack_lvl+0x16c/0x1f0 [ 654.802043][T12723] should_fail_ex+0x512/0x640 [ 654.802074][T12723] _copy_from_user+0x2e/0xd0 [ 654.802093][T12723] do_sock_getsockopt+0x3ca/0x440 [ 654.802116][T12723] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 654.802135][T12723] ? __fget_files+0x204/0x3c0 [ 654.802156][T12723] ? irqentry_exit_to_user_mode+0x270/0x270 [ 654.802180][T12723] __sys_getsockopt+0x12f/0x260 [ 654.802212][T12723] __x64_sys_getsockopt+0xbd/0x160 [ 654.802237][T12723] ? do_syscall_64+0x91/0x4c0 [ 654.802253][T12723] ? lockdep_hardirqs_on+0x7c/0x110 [ 654.802279][T12723] do_syscall_64+0xcd/0x4c0 [ 654.802297][T12723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.802316][T12723] RIP: 0033:0x7fd05178e9a9 [ 654.802331][T12723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.802348][T12723] RSP: 002b:00007fd052518038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 654.802366][T12723] RAX: ffffffffffffffda RBX: 00007fd0519b6160 RCX: 00007fd05178e9a9 [ 654.802377][T12723] RDX: 0000000000000024 RSI: 0000000000000006 RDI: 0000000000000008 [ 654.802388][T12723] RBP: 00007fd052518090 R08: 0000200000002000 R09: 0000000000000000 [ 654.802398][T12723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.802408][T12723] R13: 0000000000000000 R14: 00007fd0519b6160 R15: 00007ffea16573e8 [ 654.802432][T12723] [ 654.977575][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.161006][T10850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 655.168879][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 656.554553][T12736] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.1771'. [ 659.760919][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 659.960039][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.222028][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.274806][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 660.306149][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.418328][ T24] usb 4-1: config 0 descriptor?? [ 660.889736][ T24] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 660.918261][ T24] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 661.005683][T12774] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1781'. [ 661.081892][ T24] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 661.191239][T12774] bond_slave_0: entered promiscuous mode [ 661.197177][T12774] bond_slave_1: entered promiscuous mode [ 661.285838][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.295758][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.584305][T12783] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.1782'. [ 662.032922][T12787] autofs: Unknown parameter '/' [ 662.122236][ T24] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 662.144181][ T24] usb 4-1: USB disconnect, device number 43 [ 662.371028][ T5908] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 662.502697][T12794] random: crng reseeded on system resumption [ 662.550999][ T5908] usb 2-1: device descriptor read/64, error -71 [ 663.001122][ T5908] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 663.290893][ T5908] usb 2-1: device descriptor read/64, error -71 [ 663.401261][ T5908] usb usb2-port1: attempt power cycle [ 663.803622][ T5908] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 663.870189][ T5908] usb 2-1: device descriptor read/8, error -71 [ 664.410970][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 664.420917][ T5908] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 664.455568][ T5908] usb 2-1: device descriptor read/8, error -71 [ 664.570965][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 664.576287][ T5908] usb usb2-port1: unable to enumerate USB device [ 664.582685][T12152] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 664.674989][ T24] usb 3-1: config 5 has an invalid interface number: 52 but max is 1 [ 664.818086][ T24] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 664.828820][ T24] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 664.839787][T12831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1796'. [ 664.848871][ T24] usb 3-1: config 5 has no interface number 0 [ 664.895834][T12152] usb 4-1: Using ep0 maxpacket: 32 [ 665.226962][ T24] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 665.246301][T12152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.268444][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.279435][T12152] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 665.288802][ T24] usb 3-1: Product: syz [ 665.294321][ T24] usb 3-1: Manufacturer: syz [ 665.299031][T12152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.315406][ T24] usb 3-1: SerialNumber: syz [ 665.341461][T12152] usb 4-1: config 0 descriptor?? [ 665.567129][ T24] cytherm 3-1:5.52: Cypress thermometer device now attached [ 665.594738][ T24] usb 3-1: USB disconnect, device number 25 [ 665.617863][ T24] cytherm 3-1:5.52: Cypress thermometer now disconnected [ 665.790257][T12152] logitech 0003:046D:C294.0006: unknown main item tag 0x0 [ 665.810624][T12152] logitech 0003:046D:C294.0006: hidraw0: USB HID vb4.34 Device [HID 046d:c294] on usb-dummy_hcd.3-1/input0 [ 665.823176][T12152] logitech 0003:046D:C294.0006: no inputs found [ 666.093403][T12839] random: crng reseeded on system resumption [ 666.479850][ T10] usb 4-1: USB disconnect, device number 44 [ 666.948252][ T5904] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 667.311484][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 667.319110][ T5904] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 667.392291][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.441186][ T5904] usb 3-1: config 0 has no interface number 0 [ 667.447336][ T5904] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 667.472442][ T5904] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 667.482364][ T5904] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.498272][ T5904] usb 3-1: config 0 interface 41 has no altsetting 0 [ 667.519510][ T5904] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 667.539161][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.553890][ T5904] usb 3-1: Product: syz [ 667.558112][ T5904] usb 3-1: Manufacturer: syz [ 667.567343][ T5904] usb 3-1: SerialNumber: syz [ 667.589204][ T5904] usb 3-1: config 0 descriptor?? [ 667.679667][T12152] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 667.710140][ T5904] dm9601 3-1:0.41: probe with driver dm9601 failed with error -22 [ 667.725887][ T5904] sr9700 3-1:0.41: probe with driver sr9700 failed with error -22 [ 668.130910][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 668.185947][ T24] usb 3-1: USB disconnect, device number 26 [ 668.242505][T12152] usb 4-1: Using ep0 maxpacket: 16 [ 668.261380][T12152] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 668.270686][T12152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.611712][T12865] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 668.660367][ T30] audit: type=1400 audit(1753267734.607:752): avc: denied { execute_no_trans } for pid=12862 comm="syz.5.1805" path=2F6D656D66643A5B0BDB58AE5B1AA9202864656C6574656429 dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 668.687100][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.926463][T12152] usb 4-1: config 0 descriptor?? [ 668.938203][T12152] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 668.948523][ T30] audit: type=1400 audit(1753267734.637:753): avc: denied { create } for pid=12862 comm="syz.5.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 668.968775][ T30] audit: type=1400 audit(1753267734.647:754): avc: denied { bind } for pid=12862 comm="syz.5.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 668.988853][ T30] audit: type=1400 audit(1753267734.647:755): avc: denied { name_bind } for pid=12862 comm="syz.5.1805" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 669.014524][ T30] audit: type=1400 audit(1753267734.647:756): avc: denied { node_bind } for pid=12862 comm="syz.5.1805" saddr=172.30.0.6 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 669.040458][ T30] audit: type=1400 audit(1753267734.657:757): avc: denied { setopt } for pid=12862 comm="syz.5.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 669.063428][ T30] audit: type=1400 audit(1753267734.657:758): avc: denied { write } for pid=12862 comm="syz.5.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 669.064245][T12152] usb 4-1: Detected FT4232H [ 669.104007][T12867] 9pnet_fd: Insufficient options for proto=fd [ 669.292866][T12870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.303853][T12870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.650042][T12152] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 670.050958][T12152] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 670.203582][T12152] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 670.295002][T12881] ipvlan5: entered promiscuous mode [ 670.677056][T12152] usb 4-1: USB disconnect, device number 45 [ 670.723362][T12152] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 670.772085][T12152] ftdi_sio 4-1:0.0: device disconnected [ 671.247751][T12152] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 671.418848][ T30] audit: type=1400 audit(1753267737.487:759): avc: denied { getopt } for pid=12893 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 671.446293][T12152] usb 5-1: Using ep0 maxpacket: 16 [ 671.468479][T12152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.536861][ T30] audit: type=1400 audit(1753267737.607:760): avc: denied { map } for pid=12886 comm="syz.2.1810" path="socket:[33894]" dev="sockfs" ino=33894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 671.560256][T12152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.887882][T12894] syz.1.1813: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 672.128742][T12152] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 672.144939][T12894] CPU: 1 UID: 0 PID: 12894 Comm: syz.1.1813 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 672.144958][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 672.144965][T12894] Call Trace: [ 672.144970][T12894] [ 672.144975][T12894] dump_stack_lvl+0x16c/0x1f0 [ 672.144996][T12894] warn_alloc+0x248/0x3a0 [ 672.145014][T12894] ? __pfx_warn_alloc+0x10/0x10 [ 672.145035][T12894] ? xskq_create+0xfb/0x1d0 [ 672.145051][T12894] ? __vmalloc_node_noprof+0xad/0xf0 [ 672.145067][T12894] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 672.145085][T12894] ? xskq_create+0xfb/0x1d0 [ 672.145103][T12894] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 672.145122][T12894] ? xskq_create+0xfb/0x1d0 [ 672.145137][T12894] vmalloc_user_noprof+0x9e/0xe0 [ 672.145151][T12894] ? xskq_create+0xfb/0x1d0 [ 672.145165][T12894] xskq_create+0xfb/0x1d0 [ 672.145182][T12894] xsk_setsockopt+0x684/0x840 [ 672.145196][T12894] ? __pfx_xsk_setsockopt+0x10/0x10 [ 672.145210][T12894] ? find_held_lock+0x2b/0x80 [ 672.145227][T12894] ? selinux_socket_setsockopt+0x6a/0x80 [ 672.145243][T12894] ? __pfx_xsk_setsockopt+0x10/0x10 [ 672.145258][T12894] do_sock_setsockopt+0xf3/0x1d0 [ 672.145273][T12894] __sys_setsockopt+0x1a0/0x230 [ 672.145292][T12894] __x64_sys_setsockopt+0xbd/0x160 [ 672.145307][T12894] ? do_syscall_64+0x91/0x4c0 [ 672.145317][T12894] ? lockdep_hardirqs_on+0x7c/0x110 [ 672.145334][T12894] do_syscall_64+0xcd/0x4c0 [ 672.145345][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.145356][T12894] RIP: 0033:0x7f392538e9a9 [ 672.145366][T12894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.145377][T12894] RSP: 002b:00007f3926277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 672.145388][T12894] RAX: ffffffffffffffda RBX: 00007f39255b5fa0 RCX: 00007f392538e9a9 [ 672.145395][T12894] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 672.145401][T12894] RBP: 00007f3925410d69 R08: 0000000000000004 R09: 0000000000000000 [ 672.145407][T12894] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 672.145413][T12894] R13: 0000000000000000 R14: 00007f39255b5fa0 R15: 00007ffeea23a838 [ 672.145427][T12894] [ 672.145431][T12894] Mem-Info: [ 672.944626][T12152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.059180][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1815'. [ 673.068350][T12917] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 673.251992][T12152] usb 5-1: config 0 descriptor?? [ 673.297558][T12894] active_anon:9381 inactive_anon:0 isolated_anon:0 [ 673.297558][T12894] active_file:14026 inactive_file:40808 isolated_file:0 [ 673.297558][T12894] unevictable:768 dirty:408 writeback:0 [ 673.297558][T12894] slab_reclaimable:11735 slab_unreclaimable:100985 [ 673.297558][T12894] mapped:31786 shmem:1392 pagetables:1417 [ 673.297558][T12894] sec_pagetables:0 bounce:0 [ 673.297558][T12894] kernel_misc_reclaimable:0 [ 673.297558][T12894] free:1299347 free_pcp:17347 free_cma:0 [ 673.434669][T12894] Node 0 active_anon:37224kB inactive_anon:0kB active_file:56104kB inactive_file:163032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127044kB dirty:1632kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12236kB pagetables:5328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 673.477802][T12927] netlink: 'syz.3.1820': attribute type 4 has an invalid length. [ 673.510205][T12929] FAULT_INJECTION: forcing a failure. [ 673.510205][T12929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.528857][T12929] CPU: 0 UID: 0 PID: 12929 Comm: syz.5.1821 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 673.528883][T12929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 673.528894][T12929] Call Trace: [ 673.528899][T12929] [ 673.528906][T12929] dump_stack_lvl+0x16c/0x1f0 [ 673.528937][T12929] should_fail_ex+0x512/0x640 [ 673.528967][T12929] _copy_to_user+0x32/0xd0 [ 673.528988][T12929] simple_read_from_buffer+0xcb/0x170 [ 673.528993][T12927] netlink: 'syz.3.1820': attribute type 4 has an invalid length. [ 673.529015][T12929] proc_fail_nth_read+0x197/0x270 [ 673.529039][T12929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 673.529067][T12929] ? rw_verify_area+0xcf/0x680 [ 673.529087][T12929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 673.529109][T12929] vfs_read+0x1e1/0xc60 [ 673.529134][T12929] ? __pfx___mutex_lock+0x10/0x10 [ 673.529150][T12929] ? __pfx_vfs_read+0x10/0x10 [ 673.529178][T12929] ? __fget_files+0x20e/0x3c0 [ 673.529198][T12929] ksys_read+0x12a/0x250 [ 673.529219][T12929] ? __pfx_ksys_read+0x10/0x10 [ 673.529248][T12929] do_syscall_64+0xcd/0x4c0 [ 673.529264][T12929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.529280][T12929] RIP: 0033:0x7fd05178d3bc [ 673.529293][T12929] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 673.529308][T12929] RSP: 002b:00007fd05255a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 673.529323][T12929] RAX: ffffffffffffffda RBX: 00007fd0519b5fa0 RCX: 00007fd05178d3bc [ 673.529333][T12929] RDX: 000000000000000f RSI: 00007fd05255a0a0 RDI: 0000000000000004 [ 673.529342][T12929] RBP: 00007fd05255a090 R08: 0000000000000000 R09: 0000000000000000 [ 673.529351][T12929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.529360][T12929] R13: 0000000000000000 R14: 00007fd0519b5fa0 R15: 00007ffea16573e8 [ 673.529381][T12929] [ 673.744498][T12894] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 673.787307][T12894] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.800684][T12934] FAULT_INJECTION: forcing a failure. [ 673.800684][T12934] name failslab, interval 1, probability 0, space 0, times 0 [ 673.836552][T12934] CPU: 0 UID: 0 PID: 12934 Comm: syz.5.1822 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 673.836586][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 673.836596][T12934] Call Trace: [ 673.836601][T12934] [ 673.836608][T12934] dump_stack_lvl+0x16c/0x1f0 [ 673.836640][T12934] should_fail_ex+0x512/0x640 [ 673.836670][T12934] should_failslab+0xc2/0x120 [ 673.836688][T12934] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 673.836712][T12934] ? skb_clone+0x190/0x3f0 [ 673.836733][T12934] skb_clone+0x190/0x3f0 [ 673.836749][T12934] netlink_deliver_tap+0xabd/0xd30 [ 673.836772][T12934] netlink_unicast+0x62f/0x850 [ 673.836793][T12934] ? __pfx_netlink_unicast+0x10/0x10 [ 673.836819][T12934] netlink_sendmsg+0x8d1/0xdd0 [ 673.836842][T12934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.836871][T12934] ____sys_sendmsg+0xa95/0xc70 [ 673.836891][T12934] ? copy_msghdr_from_user+0x10a/0x160 [ 673.836916][T12934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.836947][T12934] ___sys_sendmsg+0x134/0x1d0 [ 673.836974][T12934] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.836997][T12934] ? __lock_acquire+0x622/0x1c90 [ 673.837043][T12934] __sys_sendmsg+0x16d/0x220 [ 673.837058][T12934] ? __pfx___sys_sendmsg+0x10/0x10 [ 673.837090][T12934] do_syscall_64+0xcd/0x4c0 [ 673.837108][T12934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.837124][T12934] RIP: 0033:0x7fd05178e9a9 [ 673.837138][T12934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.837153][T12934] RSP: 002b:00007fd05255a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.837170][T12934] RAX: ffffffffffffffda RBX: 00007fd0519b5fa0 RCX: 00007fd05178e9a9 [ 673.837180][T12934] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 673.837190][T12934] RBP: 00007fd05255a090 R08: 0000000000000000 R09: 0000000000000000 [ 673.837199][T12934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.837209][T12934] R13: 0000000000000000 R14: 00007fd0519b5fa0 R15: 00007ffea16573e8 [ 673.837231][T12934] [ 674.048519][T12883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.057404][T12883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.274334][ T7069] Bluetooth: hci5: Frame reassembly failed (-84) [ 674.276756][ T30] audit: type=1400 audit(1753267740.347:761): avc: denied { block_suspend } for pid=12937 comm="syz.5.1824" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 674.322011][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322074][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322093][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322131][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322151][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322170][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322189][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322207][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322225][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322262][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322281][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322300][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322318][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322336][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.322354][ T5915] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 674.328191][T12894] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 674.328269][T12894] Node 0 DMA32 free:1278364kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48768kB inactive_anon:0kB active_file:56104kB inactive_file:161720kB unevictable:1536kB writepending:1648kB present:3129332kB managed:2540184kB mlocked:0kB bounce:0kB free_pcp:42664kB local_pcp:31404kB free_cma:0kB [ 674.328315][T12894] lowmem_reserve[]: 0 0 1 1 1 [ 674.328343][T12894] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 674.328401][T12894] lowmem_reserve[]: 0 0 0 0 0 [ 674.328432][T12894] Node 1 Normal free:3902156kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16740kB local_pcp:6624kB free_cma:0kB [ 674.328475][T12894] lowmem_reserve[]: 0 0 0 0 0 [ 674.328504][T12894] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 674.328610][T12894] Node 0 DMA32: 3*4kB (UME) 1*8kB (M) 598*16kB (UM) 676*32kB (UM) 364*64kB (UME) 89*128kB (UME) 56*256kB (UME) 30*512kB (UM) 21*1024kB (UME) 13*2048kB (UME) 277*4096kB (M) = 1278324kB [ 674.328715][T12894] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 674.328778][T12894] Node 1 Normal: 175*4kB (U) 40*8kB (UME) 33*16kB (UME) 106*32kB (UME) 40*64kB (UME) 7*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 948*4096kB (UM) = 3902156kB [ 674.328886][T12894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 674.328895][T12894] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 674.328904][T12894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 674.328912][T12894] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 674.328921][T12894] 59074 total pagecache pages [ 674.328925][T12894] 0 pages in swap cache [ 674.328929][T12894] Free swap = 124996kB [ 674.328933][T12894] Total swap = 124996kB [ 674.328937][T12894] 2097051 pages RAM [ 674.329019][T12894] 0 pages HighMem/MovableOnly [ 674.329026][T12894] 430027 pages reserved [ 674.329032][T12894] 0 pages cma reserved [ 674.482398][ T5915] hid-generic 00A0:0006:0003.0007: hidraw0: HID v0.05 Device [syz1] on syz0 [ 674.571067][ T24] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 674.800545][T12949] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 674.800575][T12949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 674.800609][T12949] vhci_hcd vhci_hcd.0: Device attached [ 674.805427][ T24] usb 4-1: config 0 has no interfaces? [ 674.805463][ T24] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 674.805485][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.814583][ T24] usb 4-1: config 0 descriptor?? [ 675.003383][ T1052] Bluetooth: hci6: Frame reassembly failed (-84) [ 675.003431][ T1052] Bluetooth: hci6: Frame reassembly failed (-84) [ 675.003460][ T1052] Bluetooth: hci6: Frame reassembly failed (-84) [ 675.003503][ T1052] Bluetooth: hci6: Frame reassembly failed (-84) [ 675.003554][ T1052] Bluetooth: hci6: Frame reassembly failed (-84) [ 675.040920][ T5904] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 675.052898][ T24] usb 4-1: USB disconnect, device number 46 [ 675.248814][T12152] usbhid 5-1:0.0: can't add hid device: -71 [ 675.248873][T12152] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 675.306924][T12152] usb 5-1: USB disconnect, device number 33 [ 675.461153][T12951] vhci_hcd: connection reset by peer [ 675.504573][ T78] vhci_hcd: stop threads [ 675.504667][ T78] vhci_hcd: release socket [ 675.504852][ T78] vhci_hcd: disconnect device [ 675.872755][ T30] audit: type=1400 audit(1753267741.947:762): avc: denied { checkpoint_restore } for pid=12963 comm="syz.4.1830" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 675.972194][T12962] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 676.160199][T12968] siw: device registration error -23 [ 676.480881][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 676.552330][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.593256][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.638939][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.699913][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.990919][T10850] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 676.994956][ T5837] Bluetooth: hci6: command 0x1003 tx timeout [ 677.251728][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.374648][ T30] audit: type=1400 audit(1753267743.447:763): avc: denied { ioctl } for pid=12972 comm="syz.1.1832" path="mnt:[4026532798]" dev="nsfs" ino=4026532798 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 677.399378][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.490927][ T5915] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 679.102356][ T5915] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 679.125905][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.291374][ T5915] usb 4-1: config 0 descriptor?? [ 679.300931][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 679.535583][ T5915] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 679.543211][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 679.550240][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 679.561934][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.574181][ T24] usb 3-1: config 0 descriptor?? [ 679.599634][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 679.621722][ T24] usb 3-1: Detected FT4232H [ 679.770481][ T5915] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 679.779594][ T5915] [drm] Initialized udl on minor 2 [ 679.908522][T13006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.922028][T13006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.160606][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 680.182681][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 680.191827][ T5904] vhci_hcd: vhci_device speed not set [ 680.219176][ T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 680.269045][ T24] usb 3-1: USB disconnect, device number 27 [ 680.312964][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 680.345262][ T30] audit: type=1400 audit(1753267746.417:764): avc: denied { read } for pid=12986 comm="syz.3.1838" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 680.365800][ T24] ftdi_sio 3-1:0.0: device disconnected [ 680.369126][T13008] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 680.380483][T13008] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 680.388746][T13008] vhci_hcd vhci_hcd.0: Device attached [ 680.417379][T12987] netlink: 'syz.3.1838': attribute type 12 has an invalid length. [ 680.455614][T12987] netlink: 'syz.3.1838': attribute type 29 has an invalid length. [ 680.466587][T12987] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1838'. [ 680.476142][ T30] audit: type=1400 audit(1753267746.417:765): avc: denied { open } for pid=12986 comm="syz.3.1838" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 680.490866][T12987] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1838'. [ 680.512928][ T30] audit: type=1400 audit(1753267746.467:766): avc: denied { ioctl } for pid=12986 comm="syz.3.1838" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 680.660974][ T5915] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 680.677752][ T5915] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 680.783432][T13014] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1844'. [ 681.040856][ T5908] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 681.126963][T13009] vhci_hcd: connection closed [ 681.128999][ T7069] vhci_hcd: stop threads [ 681.136325][T12152] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 681.167880][ T7069] vhci_hcd: release socket [ 681.176049][ T7069] vhci_hcd: disconnect device [ 681.181293][ T5915] usb 4-1: USB disconnect, device number 47 [ 681.181431][ T5900] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 681.205853][ T5900] usb 43-1: enqueue for inactive port 0 [ 681.227879][T12152] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 681.291998][ T5900] vhci_hcd: vhci_device speed not set [ 681.305040][ T5908] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 681.325943][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.338802][ T5908] usb 2-1: Product: syz [ 681.352385][ T5908] usb 2-1: Manufacturer: syz [ 681.400855][ T5908] usb 2-1: SerialNumber: syz [ 681.410538][ T5908] usb 2-1: config 0 descriptor?? [ 681.427881][ T5908] gspca_main: spca501-2.14.0 probing 0000:0000 [ 681.951544][ T5908] gspca_spca501: reg write: error -110 [ 682.037383][ T5908] spca501 2-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 682.978385][ T5908] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 683.012060][ T5908] usb 2-1: Found UVC 0.00 device syz (0000:0000) [ 683.028726][ T5908] usb 2-1: No valid video chain found. [ 683.090391][T13040] veth0_to_bond: entered allmulticast mode [ 683.097917][ T5915] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 683.278986][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.305441][ T5915] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 683.315426][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.401158][ T5908] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 683.502756][ T5900] usb 2-1: USB disconnect, device number 54 [ 683.572708][ T5915] usb 5-1: config 0 descriptor?? [ 683.722641][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 683.844260][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1855'. [ 683.854685][T13049] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 684.095419][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.105946][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 684.117597][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 684.127253][ T5908] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 684.137018][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.154029][ T5908] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 684.867046][ T5908] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 684.875381][ T5908] usb 3-1: Manufacturer: syz [ 684.882797][ T5908] usb 3-1: config 0 descriptor?? [ 685.325984][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.363154][T13042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.398447][T13042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.232873][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 687.250073][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 687.271065][ T5915] usb 5-1: USB disconnect, device number 34 [ 688.383110][ T5908] rc_core: IR keymap rc-hauppauge not found [ 688.391260][ T5908] Registered IR keymap rc-empty [ 688.396468][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 688.424294][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 688.466876][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 688.552490][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 688.773855][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 688.820934][ T5915] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 688.840895][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 688.879219][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 688.921705][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 688.950973][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 688.971698][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 689.001422][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 689.031355][ T5915] usb 4-1: No LPM exit latency info found, disabling LPM. [ 689.041686][ T5915] usb 4-1: config 1 has an invalid interface number: 6 but max is 2 [ 689.049903][ T5915] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 689.195913][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 689.204425][ T5915] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 689.214141][ T5915] usb 4-1: config 1 has no interface number 1 [ 689.220210][ T5915] usb 4-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 689.233876][ T5915] usb 4-1: config 1 interface 6 has no altsetting 0 [ 689.251197][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 689.278647][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 689.302510][ T5908] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 689.336028][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.733181][ T5908] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 689.763522][ T5908] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 689.772527][ T5915] usb 4-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 689.773865][ T30] audit: type=1400 audit(1753267755.847:767): avc: denied { listen } for pid=13107 comm="syz.4.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 689.793587][ T5908] usb 3-1: USB disconnect, device number 28 [ 689.815846][ T5915] usb 4-1: Manufacturer: 숯侭ᯒ涸 [ 690.126151][T13113] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1869'. [ 690.231701][ T5904] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 690.298915][T13089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.314547][T13089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.338224][ T5915] usb 4-1: 0:2 : does not exist [ 690.368297][ T5915] usb 4-1: USB disconnect, device number 48 [ 690.391479][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 690.403467][ T5904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 690.582961][ T5904] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 690.740380][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 690.813162][ T5904] usb 5-1: Product: syz [ 690.817370][ T5904] usb 5-1: Manufacturer: syz [ 690.831430][ T5904] usb 5-1: SerialNumber: syz [ 690.846111][ T5904] usb 5-1: config 0 descriptor?? [ 690.865615][T13109] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 691.783762][T13108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.951349][T13108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.199088][ T5904] usb 5-1: USB disconnect, device number 35 [ 693.284299][T13147] 9pnet_fd: Insufficient options for proto=fd [ 693.335195][T13149] input: syz1 as /devices/virtual/input/input9 [ 693.342301][ T30] audit: type=1800 audit(1753267759.387:768): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1877" name="/" dev="9p" ino=144678138029342722 res=0 errno=0 [ 694.483916][T13168] 9pnet_fd: Insufficient options for proto=fd [ 697.579189][ T30] audit: type=1400 audit(1753267763.647:769): avc: denied { map } for pid=13201 comm="syz.2.1892" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 697.811692][T13211] input: syz1 as /devices/virtual/input/input10 [ 698.261582][ T5904] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 698.444667][ T5904] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 698.454775][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.692155][ T5904] usb 3-1: config 0 descriptor?? [ 698.759514][T13221] FAULT_INJECTION: forcing a failure. [ 698.759514][T13221] name failslab, interval 1, probability 0, space 0, times 0 [ 698.774321][T13221] CPU: 0 UID: 0 PID: 13221 Comm: syz.3.1897 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 698.774346][T13221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.774356][T13221] Call Trace: [ 698.774362][T13221] [ 698.774369][T13221] dump_stack_lvl+0x16c/0x1f0 [ 698.774401][T13221] should_fail_ex+0x512/0x640 [ 698.774430][T13221] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 698.774454][T13221] should_failslab+0xc2/0x120 [ 698.774468][T13221] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 698.774490][T13221] ? __alloc_skb+0x2b2/0x380 [ 698.774515][T13221] __alloc_skb+0x2b2/0x380 [ 698.774536][T13221] ? __pfx___alloc_skb+0x10/0x10 [ 698.774559][T13221] ? tcp_chrono_stop+0x95/0x420 [ 698.774586][T13221] tcp_stream_alloc_skb+0x34/0x570 [ 698.774609][T13221] tcp_connect+0xe21/0x4e10 [ 698.774641][T13221] ? __pfx_tcp_connect+0x10/0x10 [ 698.774661][T13221] ? get_random_u16+0x58a/0x7e0 [ 698.774680][T13221] ? tcp_fastopen_cookie_check+0x2fa/0x310 [ 698.774703][T13221] ? xfrm_lookup_route+0x6a/0x200 [ 698.774721][T13221] tcp_v4_connect+0x153b/0x1bd0 [ 698.774748][T13221] ? __pfx_tcp_v4_connect+0x10/0x10 [ 698.774773][T13221] __inet_stream_connect+0x917/0xf60 [ 698.774799][T13221] ? __pfx___inet_stream_connect+0x10/0x10 [ 698.774830][T13221] tcp_sendmsg_fastopen+0x3ed/0x750 [ 698.774854][T13221] tcp_sendmsg_locked+0x18db/0x4220 [ 698.774881][T13221] ? __lock_acquire+0xb8a/0x1c90 [ 698.774901][T13221] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 698.774922][T13221] ? do_raw_spin_lock+0x12c/0x2b0 [ 698.774939][T13221] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 698.774960][T13221] ? __local_bh_enable_ip+0xa4/0x120 [ 698.774981][T13221] tcp_sendmsg+0x2e/0x50 [ 698.774999][T13221] ? __pfx_tcp_sendmsg+0x10/0x10 [ 698.775018][T13221] inet_sendmsg+0xb9/0x140 [ 698.775039][T13221] smc_sendmsg+0x221/0x520 [ 698.775058][T13221] __sys_sendto+0x4a0/0x520 [ 698.775079][T13221] ? __pfx___sys_sendto+0x10/0x10 [ 698.775117][T13221] ? ksys_write+0x1ac/0x250 [ 698.775138][T13221] ? __pfx_ksys_write+0x10/0x10 [ 698.775161][T13221] __x64_sys_sendto+0xe0/0x1c0 [ 698.775181][T13221] ? do_syscall_64+0x91/0x4c0 [ 698.775194][T13221] ? lockdep_hardirqs_on+0x7c/0x110 [ 698.775216][T13221] do_syscall_64+0xcd/0x4c0 [ 698.775230][T13221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.775245][T13221] RIP: 0033:0x7f7763d8e9a9 [ 698.775257][T13221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.775271][T13221] RSP: 002b:00007f7764c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 698.775286][T13221] RAX: ffffffffffffffda RBX: 00007f7763fb6080 RCX: 00007f7763d8e9a9 [ 698.775295][T13221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 698.775304][T13221] RBP: 00007f7764c3e090 R08: 0000200000e68000 R09: 0000000000000010 [ 698.775313][T13221] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 698.775322][T13221] R13: 0000000000000000 R14: 00007f7763fb6080 R15: 00007ffe4040b278 [ 698.775341][T13221] [ 699.075487][ C0] vkms_vblank_simulate: vblank timer overrun [ 699.287924][ T5904] pwc: Creative Labs Webcam 5 detected. [ 699.431525][ T30] audit: type=1400 audit(1753267765.507:770): avc: denied { write } for pid=13208 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 699.459794][T13228] bridge1: entered promiscuous mode [ 699.575831][T13232] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1899'. [ 699.587459][T13232] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 699.659691][T13230] nfs: Bad value for 'source' [ 699.703620][ T5908] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 699.995437][ T5908] usb 6-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 700.029330][ T5908] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 700.122643][ T5904] pwc: send_video_command error -71 [ 700.127932][ T5904] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 700.136097][ T5904] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 700.153596][ T5904] usb 3-1: USB disconnect, device number 29 [ 700.159642][ T5908] usb 6-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 700.301008][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.330340][ T5908] usb 6-1: config 0 descriptor?? [ 701.687323][T10117] usb 6-1: USB disconnect, device number 6 [ 702.046160][T13257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1907'. [ 702.334434][ T30] audit: type=1400 audit(1753267768.397:771): avc: denied { create } for pid=13252 comm="syz.5.1905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 702.391657][ T30] audit: type=1400 audit(1753267768.397:772): avc: denied { mount } for pid=13252 comm="syz.5.1905" name="/" dev="rpc_pipefs" ino=34686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 702.439488][ T30] audit: type=1400 audit(1753267768.397:773): avc: denied { mounton } for pid=13252 comm="syz.5.1905" path="/122/file0" dev="rpc_pipefs" ino=34686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 703.576723][ T30] audit: type=1400 audit(1753267769.647:774): avc: denied { unmount } for pid=10716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 705.043763][T13288] ipvlan2: entered promiscuous mode [ 705.457188][T13291] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 705.932641][T13297] input: syz1 as /devices/virtual/input/input11 [ 706.097382][ T30] audit: type=1400 audit(1753267772.167:775): avc: denied { write } for pid=13302 comm="syz.2.1918" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 706.138082][T13301] input: syz1 as /devices/virtual/input/input12 [ 706.531543][T10117] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 706.681730][ T5904] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 706.841942][T10117] usb 5-1: Using ep0 maxpacket: 16 [ 706.861971][T10117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.896527][T10117] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 706.918636][T10117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.940038][T10117] usb 5-1: config 0 descriptor?? [ 706.991812][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 707.000742][ T5904] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 707.024041][ T5904] usb 3-1: config 0 has no interface number 0 [ 707.030585][ T5904] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 707.041786][ T5904] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 707.055021][ T5904] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 707.071138][ T5904] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 707.379771][ T5904] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 707.389685][ T5904] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 707.402391][ T5904] usb 3-1: Product: syz [ 707.406664][ T5904] usb 3-1: Manufacturer: syz [ 707.412509][ T5904] usb 3-1: SerialNumber: syz [ 707.561778][ T30] audit: type=1400 audit(1753267773.627:776): avc: denied { bind } for pid=13315 comm="syz.5.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 708.230618][ T5904] usb 3-1: config 0 descriptor?? [ 708.280491][T10117] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 708.306172][T13305] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 708.332797][ T30] audit: type=1400 audit(1753267773.637:777): avc: denied { accept } for pid=13315 comm="syz.5.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 708.502048][T13324] mkiss: ax0: crc mode is auto. [ 708.516471][T13324] 9pnet_fd: Insufficient options for proto=fd [ 708.863117][ T5904] usb 3-1: USB disconnect, device number 30 [ 709.591302][ T5904] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 709.763512][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 709.825376][ T5904] usb 6-1: config 0 has an invalid interface number: 78 but max is 0 [ 709.834053][ T5904] usb 6-1: config 0 has no interface number 0 [ 709.858759][ T5904] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 709.889114][T13338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1928'. [ 709.899908][T13338] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 709.973321][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.991893][ T5904] usb 6-1: Product: syz [ 710.015667][ T5904] usb 6-1: Manufacturer: syz [ 710.020354][ T5904] usb 6-1: SerialNumber: syz [ 710.061967][ T5904] usb 6-1: config 0 descriptor?? [ 710.128354][ T5908] usb 5-1: USB disconnect, device number 36 [ 710.358812][ T30] audit: type=1400 audit(1753267776.357:778): avc: denied { setopt } for pid=13330 comm="syz.5.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 710.528214][ T5904] usbhid 6-1:0.78: couldn't find an input interrupt endpoint [ 710.602932][ T5904] usb 6-1: USB disconnect, device number 7 [ 711.848835][T13362] FAULT_INJECTION: forcing a failure. [ 711.848835][T13362] name failslab, interval 1, probability 0, space 0, times 0 [ 711.862920][T13362] CPU: 1 UID: 0 PID: 13362 Comm: syz.2.1934 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 711.862936][T13362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 711.862942][T13362] Call Trace: [ 711.862946][T13362] [ 711.862950][T13362] dump_stack_lvl+0x16c/0x1f0 [ 711.862972][T13362] should_fail_ex+0x512/0x640 [ 711.862989][T13362] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 711.863008][T13362] should_failslab+0xc2/0x120 [ 711.863019][T13362] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 711.863035][T13362] ? inode_set_ctime_current+0x2a1/0x8f0 [ 711.863048][T13362] ? __d_alloc+0x31/0xaa0 [ 711.863061][T13362] __d_alloc+0x31/0xaa0 [ 711.863073][T13362] d_alloc_pseudo+0x1c/0xc0 [ 711.863087][T13362] alloc_file_pseudo+0xcf/0x230 [ 711.863101][T13362] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 711.863114][T13362] ? hugetlbfs_get_inode+0x31f/0x730 [ 711.863132][T13362] hugetlb_file_setup+0x4cd/0x620 [ 711.863148][T13362] ksys_mmap_pgoff+0x189/0x5c0 [ 711.863163][T13362] __x64_sys_mmap+0x125/0x190 [ 711.863181][T13362] do_syscall_64+0xcd/0x4c0 [ 711.863192][T13362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.863203][T13362] RIP: 0033:0x7f7f2978e9a9 [ 711.863213][T13362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.863223][T13362] RSP: 002b:00007f7f2a5e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 711.863234][T13362] RAX: ffffffffffffffda RBX: 00007f7f299b5fa0 RCX: 00007f7f2978e9a9 [ 711.863241][T13362] RDX: 0000000000000002 RSI: 0000000000400000 RDI: 0000200000000000 [ 711.863247][T13362] RBP: 00007f7f2a5e0090 R08: ffffffffffffffff R09: 0000000000200000 [ 711.863253][T13362] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 711.863259][T13362] R13: 0000000000000000 R14: 00007f7f299b5fa0 R15: 00007fffad5add78 [ 711.863272][T13362] [ 711.869180][ T30] audit: type=1804 audit(1753267777.917:779): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1934" name="/newroot/376/file1" dev="fuse" ino=1 res=1 errno=0 [ 712.110803][ T30] audit: type=1800 audit(1753267777.917:780): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1934" name="/" dev="fuse" ino=1 res=0 errno=0 [ 712.439072][ T30] audit: type=1800 audit(1753267777.917:781): pid=13362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1934" name="/" dev="fuse" ino=1 res=0 errno=0 [ 713.051002][ T24] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 713.243368][ T24] usb 3-1: No LPM exit latency info found, disabling LPM. [ 713.254830][ T24] usb 3-1: config 1 has an invalid interface number: 6 but max is 2 [ 713.266010][ T24] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 713.269548][T13378] input: syz1 as /devices/virtual/input/input13 [ 713.277728][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 713.304677][ T24] usb 3-1: config 1 has no interface number 1 [ 713.314030][ T24] usb 3-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 713.338800][ T24] usb 3-1: config 1 interface 6 has no altsetting 0 [ 713.355319][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.364903][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.373183][ T24] usb 3-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 713.412454][ T24] usb 3-1: Manufacturer: 숯侭ᯒ涸 [ 713.914735][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.935711][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.053403][ T24] usb 3-1: 0:2 : does not exist [ 714.145969][ T24] usb 3-1: USB disconnect, device number 31 [ 714.151383][ T5904] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 714.341107][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 714.350910][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 714.371359][ T5904] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 714.385709][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.487452][ T5904] usb 2-1: config 0 descriptor?? [ 714.613195][T10850] Bluetooth: hci4: connection err: -111 [ 714.875627][ T5904] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 715.542452][ T5189] bcm5974 2-1:0.0: could not read from device [ 715.578030][ T5904] bcm5974 2-1:0.0: could not read from device [ 715.699176][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1944'. [ 715.710115][T13402] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 715.801041][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 715.921702][ T5189] bcm5974 2-1:0.0: could not read from device [ 715.951490][ T5904] input: failed to attach handler mousedev to device input14, error: -5 [ 716.025162][ T5189] bcm5974 2-1:0.0: could not read from device [ 716.057703][ T5904] usb 2-1: USB disconnect, device number 55 [ 716.314041][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 716.345772][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 716.366274][ T5189] bcm5974 2-1:0.0: could not read from device [ 716.844641][ T30] audit: type=1400 audit(1753267782.857:782): avc: denied { map } for pid=13391 comm="syz.2.1942" path="/proc/1369/net/fib_trie" dev="proc" ino=4026533129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 716.861965][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 716.914556][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 716.970072][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 717.009815][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.444115][ T10] usb 5-1: config 0 descriptor?? [ 717.449678][T13399] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 717.781082][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 717.952015][ T24] usb 4-1: device descriptor read/64, error -71 [ 718.004430][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 718.023553][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 718.035918][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 718.049451][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 718.057645][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 718.129519][ T10] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 718.222395][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 718.531028][ T24] usb 4-1: device descriptor read/64, error -71 [ 718.651273][ T24] usb usb4-port1: attempt power cycle [ 719.038823][T13399] fuse: Bad value for 'fd' [ 719.119642][T13121] usb 5-1: USB disconnect, device number 37 [ 719.218619][T13442] input: syz1 as /devices/virtual/input/input16 [ 719.362750][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 719.451956][ T24] usb 4-1: device descriptor read/8, error -71 [ 719.982134][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 720.016444][ T24] usb 4-1: device descriptor read/8, error -71 [ 720.029049][T13454] input: syz1 as /devices/virtual/input/input17 [ 720.147297][T13452] netlink: 'syz.1.1958': attribute type 10 has an invalid length. [ 720.170968][ T24] usb usb4-port1: unable to enumerate USB device [ 720.793484][T13469] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer. [ 720.862158][T13472] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1964'. [ 720.891417][T13121] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 720.896631][T13472] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1964'. [ 721.081894][T13121] usb 5-1: Using ep0 maxpacket: 32 [ 721.161010][ T5915] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 721.174721][T13483] trusted_key: encrypted_key: insufficient parameters specified [ 721.289493][T13121] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 721.328792][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 721.354805][ T5915] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 721.450956][ T5915] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 721.495807][T13121] usb 5-1: config 0 has no interface number 0 [ 721.539284][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.545973][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1967'. [ 721.557849][T13486] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 721.714966][ T5915] usb 3-1: Product: syz [ 721.717349][T13121] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 721.719144][ T5915] usb 3-1: Manufacturer: syz [ 721.736670][T13121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.843649][T13121] usb 5-1: Product: syz [ 721.851174][T13121] usb 5-1: Manufacturer: syz [ 721.863804][T13121] usb 5-1: SerialNumber: syz [ 721.888349][T13121] usb 5-1: config 0 descriptor?? [ 721.919248][ T5915] usb 3-1: SerialNumber: syz [ 721.932447][ T5915] usb 3-1: config 0 descriptor?? [ 721.950351][ T5915] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 721.967536][T13121] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 721.982640][ T5915] usb 3-1: setting power ON [ 721.987850][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 721.998123][ T30] audit: type=1400 audit(1753267788.067:783): avc: denied { search } for pid=5499 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.023310][T13493] sp0: Synchronizing with TNC [ 722.028410][ T30] audit: type=1400 audit(1753267788.067:784): avc: denied { search } for pid=5499 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.058060][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 722.069960][ T30] audit: type=1400 audit(1753267788.067:785): avc: denied { search } for pid=5499 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.070422][ T5915] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 722.103723][ T30] audit: type=1400 audit(1753267788.067:786): avc: denied { read } for pid=5499 comm="dhcpcd" name="n116" dev="tmpfs" ino=10261 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.142470][ T5915] usb 3-1: media controller created [ 722.163824][ T30] audit: type=1400 audit(1753267788.067:787): avc: denied { open } for pid=5499 comm="dhcpcd" path="/run/udev/data/n116" dev="tmpfs" ino=10261 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.212848][T13121] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 722.239907][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 722.290700][T13497] dvb-usb: bulk message failed: -22 (3/0) [ 722.295162][T13121] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 722.297781][T13497] dvb-usb: bulk message failed: -22 (3/0) [ 722.345096][ T30] audit: type=1400 audit(1753267788.067:788): avc: denied { getattr } for pid=5499 comm="dhcpcd" path="/run/udev/data/n116" dev="tmpfs" ino=10261 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 722.429808][ T30] audit: type=1400 audit(1753267788.267:789): avc: denied { ioctl } for pid=13465 comm="syz.4.1962" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 722.566904][T13502] FAULT_INJECTION: forcing a failure. [ 722.566904][T13502] name failslab, interval 1, probability 0, space 0, times 0 [ 722.579647][T13502] CPU: 1 UID: 0 PID: 13502 Comm: syz.1.1969 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 722.579671][T13502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 722.579682][T13502] Call Trace: [ 722.579690][T13502] [ 722.579697][T13502] dump_stack_lvl+0x16c/0x1f0 [ 722.579730][T13502] should_fail_ex+0x512/0x640 [ 722.579757][T13502] ? fs_reclaim_acquire+0xae/0x150 [ 722.579780][T13502] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 722.579798][T13502] should_failslab+0xc2/0x120 [ 722.579816][T13502] __kmalloc_noprof+0xd2/0x510 [ 722.579847][T13502] tomoyo_realpath_from_path+0xc2/0x6e0 [ 722.579873][T13502] tomoyo_check_open_permission+0x2ab/0x3c0 [ 722.579899][T13502] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 722.579950][T13502] ? preempt_schedule_thunk+0x16/0x30 [ 722.579980][T13502] tomoyo_file_open+0x6b/0x90 [ 722.580001][T13502] security_file_open+0x84/0x1e0 [ 722.580021][T13502] do_dentry_open+0x596/0x1c10 [ 722.580055][T13502] vfs_open+0x82/0x3f0 [ 722.580077][T13502] path_openat+0x1de4/0x2cb0 [ 722.580113][T13502] ? __pfx_path_openat+0x10/0x10 [ 722.580140][T13502] ? __lock_acquire+0xb8a/0x1c90 [ 722.580161][T13502] do_filp_open+0x20b/0x470 [ 722.580188][T13502] ? __pfx_do_filp_open+0x10/0x10 [ 722.580233][T13502] ? alloc_fd+0x471/0x7d0 [ 722.580266][T13502] do_sys_openat2+0x11b/0x1d0 [ 722.580286][T13502] ? __pfx_do_sys_openat2+0x10/0x10 [ 722.580316][T13502] __x64_sys_openat+0x174/0x210 [ 722.580337][T13502] ? __pfx___x64_sys_openat+0x10/0x10 [ 722.580362][T13502] ? ksys_write+0x1ac/0x250 [ 722.580394][T13502] do_syscall_64+0xcd/0x4c0 [ 722.580415][T13502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.580432][T13502] RIP: 0033:0x7f392538e9a9 [ 722.580448][T13502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.580465][T13502] RSP: 002b:00007f3926235038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 722.580482][T13502] RAX: ffffffffffffffda RBX: 00007f39255b6160 RCX: 00007f392538e9a9 [ 722.580493][T13502] RDX: 000000000008417f RSI: 0000200000000140 RDI: ffffffffffffff9c [ 722.580504][T13502] RBP: 00007f3926235090 R08: 0000000000000000 R09: 0000000000000000 [ 722.580514][T13502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.580523][T13502] R13: 0000000000000000 R14: 00007f39255b6160 R15: 00007ffeea23a838 [ 722.580547][T13502] [ 722.580569][T13502] ERROR: Out of memory at tomoyo_realpath_from_path. [ 722.855358][ T5915] usb 3-1: selecting invalid altsetting 6 [ 722.877208][ T5915] usb 3-1: digital interface selection failed (-22) [ 722.904271][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 722.904629][T12152] usb 5-1: USB disconnect, device number 38 [ 722.988133][T12152] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 722.989979][ T30] audit: type=1400 audit(1753267788.277:790): avc: denied { read } for pid=13473 comm="syz.2.1965" dev="nsfs" ino=4026533103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 723.009830][ T5915] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 723.164506][ T30] audit: type=1400 audit(1753267788.277:791): avc: denied { open } for pid=13473 comm="syz.2.1965" path="net:[4026533103]" dev="nsfs" ino=4026533103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 723.234368][T12152] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 723.246323][ T5915] usb 3-1: setting power OFF [ 723.256251][T12152] quatech2 5-1:0.51: device disconnected [ 723.263712][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 723.270130][ T5915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 723.308007][ T30] audit: type=1400 audit(1753267788.277:792): avc: denied { create } for pid=13473 comm="syz.2.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 723.421441][ T5904] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 723.454764][ T5915] (NULL device *): no alternate interface [ 723.473959][ T5915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 723.497700][ T5915] usb 3-1: USB disconnect, device number 32 [ 723.557083][T13508] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 723.590051][T13508] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 723.961438][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 723.985208][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.025319][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 724.042072][ T5904] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 724.074694][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.102540][ T5904] usb 6-1: Product: syz [ 724.110098][ T5904] usb 6-1: Manufacturer: syz [ 724.120462][ T5904] usb 6-1: SerialNumber: syz [ 724.268408][ T5904] usb 6-1: config 0 descriptor?? [ 724.279624][ T5904] hub 6-1:0.0: bad descriptor, ignoring hub [ 724.289242][ T5904] hub 6-1:0.0: probe with driver hub failed with error -5 [ 724.309276][ T5904] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 725.250112][T13495] [U] [ 725.261004][T11120] usb 6-1: Failed to submit usb control message: -71 [ 725.267944][T11120] usb 6-1: unable to send the bmi data to the device: -71 [ 725.292114][ T5904] usb 6-1: USB disconnect, device number 8 [ 725.325963][T11120] usb 6-1: unable to get target info from device [ 725.334809][T11120] usb 6-1: could not get target info (-71) [ 725.340651][T11120] usb 6-1: could not probe fw (-71) [ 726.601613][T13537] dummy0 speed is unknown, defaulting to 1000 [ 726.615768][T13537] lo speed is unknown, defaulting to 1000 [ 727.134345][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 727.134360][ T30] audit: type=1400 audit(1753267793.207:847): avc: denied { read } for pid=13542 comm="syz.4.1981" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 727.555674][ T30] audit: type=1400 audit(1753267793.207:848): avc: denied { open } for pid=13542 comm="syz.4.1981" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 727.591384][ T5904] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 727.637602][ T30] audit: type=1400 audit(1753267793.237:849): avc: denied { ioctl } for pid=13542 comm="syz.4.1981" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 727.740231][T13557] vxcan1: tx address claim with different name [ 727.777940][ T30] audit: type=1400 audit(1753267793.237:850): avc: denied { set_context_mgr } for pid=13542 comm="syz.4.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 727.901284][ T30] audit: type=1400 audit(1753267793.347:851): avc: denied { allowed } for pid=13549 comm="syz.5.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 727.925336][ T5904] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 727.954472][ T5904] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 727.981736][ T5904] usb 5-1: config 220 has no interface number 2 [ 727.988528][ T30] audit: type=1400 audit(1753267793.347:852): avc: denied { create } for pid=13549 comm="syz.5.1984" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 728.011211][ T5904] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 728.075871][ T5904] usb 5-1: config 220 interface 0 has no altsetting 0 [ 728.089500][ T30] audit: type=1400 audit(1753267793.347:853): avc: denied { map } for pid=13549 comm="syz.5.1984" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 728.114583][ T5904] usb 5-1: config 220 interface 76 has no altsetting 0 [ 728.122136][ T5904] usb 5-1: config 220 interface 1 has no altsetting 0 [ 728.137436][ T5904] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 728.140855][ T30] audit: type=1400 audit(1753267793.347:854): avc: denied { read write } for pid=13549 comm="syz.5.1984" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 728.180620][ T30] audit: type=1400 audit(1753267793.807:855): avc: denied { create } for pid=13553 comm="syz.1.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 728.373338][ T1052] Bluetooth: hci5: Frame reassembly failed (-84) [ 728.390070][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.390117][ T5904] usb 5-1: Product: syz [ 728.390131][ T5904] usb 5-1: Manufacturer: syz [ 728.390170][ T5904] usb 5-1: SerialNumber: syz [ 728.395959][ T30] audit: type=1400 audit(1753267793.807:856): avc: denied { ioctl } for pid=13553 comm="syz.1.1985" path="socket:[35458]" dev="sockfs" ino=35458 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 728.677712][ T5904] usb 5-1: selecting invalid altsetting 0 [ 728.677942][ T5904] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 728.677959][ T5904] usb 5-1: No valid video chain found. [ 728.683190][ T5904] usb 5-1: selecting invalid altsetting 0 [ 728.683205][ T5904] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 728.684786][ T5904] usb 5-1: USB disconnect, device number 39 [ 728.786423][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.525098][T13576] input: syz1 as /devices/virtual/input/input18 [ 729.732423][T13579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1990'. [ 729.732461][T13579] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 730.434985][T10850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 730.736834][T13573] tty tty1: ldisc open failed (-12), clearing slot 0 [ 731.946690][T13591] FAULT_INJECTION: forcing a failure. [ 731.946690][T13591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.992215][T13591] CPU: 0 UID: 0 PID: 13591 Comm: syz.4.1993 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 731.992242][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 731.992252][T13591] Call Trace: [ 731.992258][T13591] [ 731.992265][T13591] dump_stack_lvl+0x16c/0x1f0 [ 731.992297][T13591] should_fail_ex+0x512/0x640 [ 731.992327][T13591] _copy_from_user+0x2e/0xd0 [ 731.992345][T13591] generic_map_update_batch+0x3e9/0x610 [ 731.992377][T13591] ? __pfx_generic_map_update_batch+0x10/0x10 [ 731.992404][T13591] ? __pfx_generic_map_update_batch+0x10/0x10 [ 731.992429][T13591] bpf_map_do_batch+0x5b4/0x680 [ 731.992451][T13591] __sys_bpf+0x189f/0x4ea0 [ 731.992478][T13591] ? __pfx___sys_bpf+0x10/0x10 [ 731.992502][T13591] ? ksys_write+0x190/0x250 [ 731.992538][T13591] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 731.992568][T13591] ? fput+0x70/0xf0 [ 731.992585][T13591] ? ksys_write+0x1ac/0x250 [ 731.992603][T13591] ? __pfx_ksys_write+0x10/0x10 [ 731.992622][T13591] __x64_sys_bpf+0x78/0xc0 [ 731.992644][T13591] ? lockdep_hardirqs_on+0x7c/0x110 [ 731.992670][T13591] do_syscall_64+0xcd/0x4c0 [ 731.992688][T13591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.992706][T13591] RIP: 0033:0x7fa1aad8e9a9 [ 731.992721][T13591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.992739][T13591] RSP: 002b:00007fa1abc5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 731.992757][T13591] RAX: ffffffffffffffda RBX: 00007fa1aafb6080 RCX: 00007fa1aad8e9a9 [ 731.992768][T13591] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 731.992779][T13591] RBP: 00007fa1abc5d090 R08: 0000000000000000 R09: 0000000000000000 [ 731.992789][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.992799][T13591] R13: 0000000000000000 R14: 00007fa1aafb6080 R15: 00007fffea7ae088 [ 731.992821][T13591] [ 732.231160][T13602] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 732.497425][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 732.497443][ T30] audit: type=1400 audit(1753267798.417:885): avc: denied { read } for pid=13607 comm="syz.1.2000" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 732.560766][T12152] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 733.124966][ T30] audit: type=1400 audit(1753267798.417:886): avc: denied { open } for pid=13607 comm="syz.1.2000" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 733.319391][ T30] audit: type=1400 audit(1753267798.547:887): avc: denied { create } for pid=13603 comm="syz.3.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 733.322819][T13613] FAULT_INJECTION: forcing a failure. [ 733.322819][T13613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.353524][T13613] CPU: 0 UID: 0 PID: 13613 Comm: syz.2.1999 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 733.353548][T13613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 733.353559][T13613] Call Trace: [ 733.353564][T13613] [ 733.353571][T13613] dump_stack_lvl+0x16c/0x1f0 [ 733.353602][T13613] should_fail_ex+0x512/0x640 [ 733.353633][T13613] _copy_from_user+0x2e/0xd0 [ 733.353650][T13613] copy_arg_from_user+0x53/0xa0 [ 733.353667][T13613] ? __pfx_copy_arg_from_user+0x10/0x10 [ 733.353683][T13613] media_device_ioctl+0x1cf/0x490 [ 733.353702][T13613] ? __pfx_media_device_ioctl+0x10/0x10 [ 733.353747][T13613] ? __pfx_media_device_ioctl+0x10/0x10 [ 733.353764][T13613] media_ioctl+0xf1/0x150 [ 733.353780][T13613] ? __pfx_media_ioctl+0x10/0x10 [ 733.353798][T13613] __x64_sys_ioctl+0x18e/0x210 [ 733.353823][T13613] do_syscall_64+0xcd/0x4c0 [ 733.353842][T13613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.353859][T13613] RIP: 0033:0x7f7f2978e9a9 [ 733.353874][T13613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.353890][T13613] RSP: 002b:00007f7f2a5e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.353907][T13613] RAX: ffffffffffffffda RBX: 00007f7f299b5fa0 RCX: 00007f7f2978e9a9 [ 733.353918][T13613] RDX: 0000200000000100 RSI: 00000000c0287c02 RDI: 0000000000000004 [ 733.353929][T13613] RBP: 00007f7f2a5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 733.353939][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.353950][T13613] R13: 0000000000000000 R14: 00007f7f299b5fa0 R15: 00007fffad5add78 [ 733.353973][T13613] [ 733.527813][ T30] audit: type=1400 audit(1753267798.547:888): avc: denied { setopt } for pid=13603 comm="syz.3.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 733.547985][ T30] audit: type=1400 audit(1753267799.397:889): avc: denied { create } for pid=13606 comm="syz.2.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 733.569393][ T30] audit: type=1400 audit(1753267799.397:890): avc: denied { listen } for pid=13606 comm="syz.2.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 733.590989][ T30] audit: type=1400 audit(1753267799.627:891): avc: denied { ioctl } for pid=13614 comm="syz.3.2001" path="socket:[36590]" dev="sockfs" ino=36590 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 733.662482][T12152] usb 6-1: Using ep0 maxpacket: 16 [ 734.247685][T13622] random: crng reseeded on system resumption [ 734.291661][ T30] audit: type=1400 audit(1753267800.317:892): avc: denied { append } for pid=13614 comm="syz.3.2001" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 734.324019][ T30] audit: type=1400 audit(1753267800.317:893): avc: denied { open } for pid=13614 comm="syz.3.2001" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 734.624918][ T30] audit: type=1400 audit(1753267800.437:894): avc: denied { getopt } for pid=13614 comm="syz.3.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 734.629074][T12152] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 734.945017][T12152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.956476][T12152] usb 6-1: config 0 descriptor?? [ 734.969239][T12152] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 735.627143][T12152] usb 6-1: Detected FT4232H [ 735.708707][T13600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.718668][T13600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.733921][T12152] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 735.745422][T12152] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 735.748742][T13637] input: syz1 as /devices/virtual/input/input19 [ 735.891620][T12152] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 735.914072][T12152] usb 6-1: USB disconnect, device number 9 [ 736.136852][T13645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2008'. [ 736.300621][ T1052] Bluetooth: hci5: Frame reassembly failed (-84) [ 736.432901][T12152] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 736.438395][T12152] ftdi_sio 6-1:0.0: device disconnected [ 736.445359][T13645] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 736.763836][T13655] tmpfs: Unknown parameter '!EGڲ' [ 736.774246][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2012'. [ 737.505586][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 737.505597][ T30] audit: type=1400 audit(1753267803.577:909): avc: denied { getattr } for pid=13666 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.203461][ T30] audit: type=1400 audit(1753267804.277:910): avc: denied { create } for pid=13667 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 738.351340][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 738.372437][T10850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 738.397297][ T30] audit: type=1400 audit(1753267804.297:911): avc: denied { connect } for pid=13667 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 738.450330][ T30] audit: type=1400 audit(1753267804.307:912): avc: denied { write } for pid=13663 comm="syz.5.2014" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 738.531245][ T30] audit: type=1400 audit(1753267804.317:913): avc: denied { write } for pid=13667 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 738.640000][ T30] audit: type=1400 audit(1753267804.317:914): avc: denied { create } for pid=13667 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 739.126045][T13690] openvswitch: netlink: IP tunnel dst address not specified [ 739.404560][ T30] audit: type=1400 audit(1753267804.317:915): avc: denied { ioctl } for pid=13667 comm="syz.2.2015" path="socket:[35763]" dev="sockfs" ino=35763 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 739.475656][T13694] Bluetooth: MGMT ver 1.23 [ 739.520138][ T30] audit: type=1400 audit(1753267804.397:916): avc: denied { write } for pid=13667 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 739.777740][T13694] geneve2: entered promiscuous mode [ 739.791260][T13694] geneve2: entered allmulticast mode [ 739.791402][ T30] audit: type=1400 audit(1753267804.567:917): avc: denied { create } for pid=13675 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 740.290493][ T30] audit: type=1400 audit(1753267804.567:918): avc: denied { ioctl } for pid=13675 comm="syz.3.2016" path="socket:[35770]" dev="sockfs" ino=35770 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 741.112686][T10850] Bluetooth: hci0: connection err: -111 [ 742.385414][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'. [ 742.708092][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 742.708108][ T30] audit: type=1400 audit(1753267808.777:943): avc: denied { write } for pid=13735 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 742.745973][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2030'. [ 742.755478][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2030'. [ 742.764472][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2030'. [ 742.805351][T13739] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 742.838735][ T30] audit: type=1400 audit(1753267808.777:944): avc: denied { nlmsg_write } for pid=13735 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 743.185702][ T30] audit: type=1400 audit(1753267809.027:945): avc: denied { create } for pid=13741 comm="syz.5.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 743.269627][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2030'. [ 743.278982][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2030'. [ 743.288092][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2030'. [ 743.480980][ T30] audit: type=1400 audit(1753267809.547:946): avc: denied { create } for pid=13752 comm="syz.4.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 743.573656][ T30] audit: type=1400 audit(1753267809.557:947): avc: denied { bind } for pid=13752 comm="syz.4.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 744.314341][ T30] audit: type=1400 audit(1753267809.557:948): avc: denied { write } for pid=13752 comm="syz.4.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 744.542691][ T30] audit: type=1400 audit(1753267809.567:949): avc: denied { remount } for pid=13752 comm="syz.4.2033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 744.891529][T13783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2038'. [ 744.953718][T13783] 9pnet_fd: Insufficient options for proto=fd [ 744.969399][ T30] audit: type=1400 audit(1753267809.657:950): avc: denied { read } for pid=13758 comm="syz.5.2035" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 745.078985][ T30] audit: type=1400 audit(1753267809.657:951): avc: denied { open } for pid=13758 comm="syz.5.2035" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 745.288748][ T30] audit: type=1400 audit(1753267809.827:952): avc: denied { map } for pid=13758 comm="syz.5.2035" path="socket:[36906]" dev="sockfs" ino=36906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 746.735928][T13817] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 746.755731][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.308410][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 749.308425][ T30] audit: type=1400 audit(1753267815.377:964): avc: denied { setopt } for pid=13859 comm="syz.3.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 749.358646][ T30] audit: type=1400 audit(1753267815.377:965): avc: denied { write } for pid=13859 comm="syz.3.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 749.754223][ T30] audit: type=1400 audit(1753267815.817:966): avc: denied { connect } for pid=13864 comm="syz.3.2058" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 750.266078][T13876] random: crng reseeded on system resumption [ 750.267438][T13874] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2060'. [ 750.334186][T13874] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2060'. [ 750.506676][ T30] audit: type=1400 audit(1753267815.967:967): avc: denied { setopt } for pid=13864 comm="syz.3.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 750.680422][ T30] audit: type=1400 audit(1753267816.567:968): avc: denied { create } for pid=13872 comm="syz.2.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 750.722317][T13881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2057'. [ 750.783154][ T30] audit: type=1400 audit(1753267816.797:969): avc: denied { write } for pid=13872 comm="syz.2.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 750.954841][ T30] audit: type=1400 audit(1753267816.887:970): avc: denied { read } for pid=13872 comm="syz.2.2057" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 751.174365][T13894] 9pnet_fd: Insufficient options for proto=fd [ 751.253206][ T30] audit: type=1400 audit(1753267816.887:971): avc: denied { open } for pid=13872 comm="syz.2.2057" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 751.257535][T13898] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 751.287148][T13898] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2065'. [ 752.144674][ T30] audit: type=1400 audit(1753267816.887:972): avc: denied { read write } for pid=13872 comm="syz.2.2057" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 752.202233][ T30] audit: type=1400 audit(1753267816.887:973): avc: denied { open } for pid=13872 comm="syz.2.2057" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 752.775223][T12152] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 754.250664][T13941] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2076'. [ 754.749460][T13957] 9pnet_fd: Insufficient options for proto=fd [ 754.786209][T13959] netlink: 'syz.4.2080': attribute type 1 has an invalid length. [ 755.226614][T13959] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2080'. [ 757.102015][T13984] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2086'. [ 757.486645][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 757.486673][ T30] audit: type=1400 audit(1753267823.557:976): avc: denied { bind } for pid=13987 comm="syz.5.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 757.584831][ T30] audit: type=1400 audit(1753267823.557:977): avc: denied { name_bind } for pid=13987 comm="syz.5.2087" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 757.701485][T13121] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 757.732039][ T30] audit: type=1400 audit(1753267823.557:978): avc: denied { node_bind } for pid=13987 comm="syz.5.2087" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 757.881230][T13121] usb 3-1: Using ep0 maxpacket: 16 [ 757.888648][T13121] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.908015][ T30] audit: type=1400 audit(1753267823.977:979): avc: denied { execute } for pid=13997 comm="syz.5.2090" name="file1" dev="tmpfs" ino=898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 758.006950][T13121] usb 3-1: config 0 has no interfaces? [ 758.049722][T13121] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 758.073424][T13121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.131472][T13121] usb 3-1: config 0 descriptor?? [ 758.846960][T14011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.864233][T14011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.113462][T14017] random: crng reseeded on system resumption [ 759.419723][T12152] usb 3-1: USB disconnect, device number 33 [ 760.421314][ T30] audit: type=1400 audit(1753267826.497:980): avc: denied { setopt } for pid=14028 comm="syz.3.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 760.581201][ T30] audit: type=1400 audit(1753267826.517:981): avc: denied { bind } for pid=14028 comm="syz.3.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 760.901434][T13121] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 761.178680][T14041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2100'. [ 761.189434][T14041] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 761.496471][T13121] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.523576][T13121] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 761.566023][T13121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.619123][T13121] usb 4-1: config 0 descriptor?? [ 761.642902][T13121] pwc: Askey VC010 type 2 USB webcam detected. [ 761.791115][ T30] audit: type=1400 audit(1753267827.867:982): avc: denied { write } for pid=14032 comm="syz.5.2098" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 761.857993][ T30] audit: type=1400 audit(1753267827.907:983): avc: denied { create } for pid=14032 comm="syz.5.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.950969][ T30] audit: type=1400 audit(1753267827.907:984): avc: denied { bind } for pid=14032 comm="syz.5.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 762.086047][T13121] pwc: recv_control_msg error -32 req 02 val 2b00 [ 762.099936][T13121] pwc: recv_control_msg error -32 req 02 val 2700 [ 762.116402][ T30] audit: type=1400 audit(1753267827.957:985): avc: denied { listen } for pid=14032 comm="syz.5.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 762.125738][T14048] block nbd2: shutting down sockets [ 762.151202][T13121] pwc: recv_control_msg error -32 req 02 val 2c00 [ 762.317936][T14054] FAULT_INJECTION: forcing a failure. [ 762.317936][T14054] name failslab, interval 1, probability 0, space 0, times 0 [ 762.332094][T14054] CPU: 0 UID: 0 PID: 14054 Comm: syz.2.2102 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 762.332117][T14054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 762.332127][T14054] Call Trace: [ 762.332135][T14054] [ 762.332141][T14054] dump_stack_lvl+0x16c/0x1f0 [ 762.332173][T14054] should_fail_ex+0x512/0x640 [ 762.332199][T14054] ? __might_sleep+0x48/0x170 [ 762.332223][T14054] should_failslab+0xc2/0x120 [ 762.332241][T14054] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 762.332265][T14054] ? __alloc_skb+0x2b2/0x380 [ 762.332291][T14054] __alloc_skb+0x2b2/0x380 [ 762.332315][T14054] ? __pfx___alloc_skb+0x10/0x10 [ 762.332341][T14054] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 762.332364][T14054] netlink_alloc_large_skb+0x69/0x130 [ 762.332391][T14054] netlink_sendmsg+0x6a1/0xdd0 [ 762.332414][T14054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.332438][T14054] ? bpf_lsm_socket_sendmsg+0x4/0x10 [ 762.332458][T14054] sock_write_iter+0x4ff/0x5b0 [ 762.332480][T14054] ? __pfx_sock_write_iter+0x10/0x10 [ 762.332499][T14054] ? rcu_is_watching+0x12/0xc0 [ 762.332531][T14054] ? __pfx_sock_write_iter+0x10/0x10 [ 762.332556][T14054] vfs_write+0x6c4/0x1150 [ 762.332583][T14054] ? __pfx_sock_write_iter+0x10/0x10 [ 762.332606][T14054] ? __pfx_vfs_write+0x10/0x10 [ 762.332629][T14054] ? find_held_lock+0x2b/0x80 [ 762.332664][T14054] ksys_write+0x1f8/0x250 [ 762.332687][T14054] ? __pfx_ksys_write+0x10/0x10 [ 762.332712][T14054] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 762.332735][T14054] do_syscall_64+0xcd/0x4c0 [ 762.332753][T14054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.332770][T14054] RIP: 0033:0x7f7f2978e9a9 [ 762.332784][T14054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.332799][T14054] RSP: 002b:00007f7f2a5bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 762.332815][T14054] RAX: ffffffffffffffda RBX: 00007f7f299b6080 RCX: 00007f7f2978e9a9 [ 762.332826][T14054] RDX: 0000000000000014 RSI: 0000200000000080 RDI: 0000000000000004 [ 762.332836][T14054] RBP: 00007f7f2a5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 762.332845][T14054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.332854][T14054] R13: 0000000000000000 R14: 00007f7f299b6080 R15: 00007fffad5add78 [ 762.332875][T14054] [ 762.684240][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 762.684284][ T30] audit: type=1400 audit(1753267828.647:990): avc: denied { ioctl } for pid=14028 comm="syz.3.2097" path="socket:[37329]" dev="sockfs" ino=37329 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 762.902272][ T30] audit: type=1400 audit(1753267828.657:991): avc: denied { write } for pid=14028 comm="syz.3.2097" path="socket:[37329]" dev="sockfs" ino=37329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 763.445180][ T30] audit: type=1400 audit(1753267829.327:992): avc: denied { remount } for pid=14050 comm="syz.4.2103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 763.699874][ T30] audit: type=1400 audit(1753267829.767:993): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 763.816054][ T1052] Bluetooth: hci5: Frame reassembly failed (-84) [ 763.895861][T13121] pwc: recv_control_msg error -71 req 04 val 1300 [ 763.896231][T13121] pwc: recv_control_msg error -71 req 04 val 1400 [ 763.896564][T13121] pwc: recv_control_msg error -71 req 02 val 2000 [ 763.896988][T13121] pwc: recv_control_msg error -71 req 02 val 2100 [ 763.897302][T13121] pwc: recv_control_msg error -71 req 04 val 1500 [ 763.897612][T13121] pwc: recv_control_msg error -71 req 02 val 2500 [ 763.897914][T13121] pwc: recv_control_msg error -71 req 02 val 2400 [ 763.898241][T13121] pwc: recv_control_msg error -71 req 02 val 2600 [ 763.898552][T13121] pwc: recv_control_msg error -71 req 02 val 2900 [ 763.898919][T13121] pwc: recv_control_msg error -71 req 02 val 2800 [ 763.899390][T13121] pwc: recv_control_msg error -71 req 04 val 1100 [ 763.899731][T13121] pwc: recv_control_msg error -71 req 04 val 1200 [ 764.370552][T13121] pwc: Registered as video103. [ 764.458027][T13121] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 764.489391][T13121] usb 4-1: USB disconnect, device number 53 [ 764.510626][T14077] ipvlan4: entered promiscuous mode [ 764.515666][ T30] audit: type=1400 audit(1753267830.577:994): avc: denied { create } for pid=14071 comm="syz.4.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 764.515711][ T30] audit: type=1400 audit(1753267830.577:995): avc: denied { ioctl } for pid=14071 comm="syz.4.2107" path="socket:[37402]" dev="sockfs" ino=37402 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 765.258040][ T30] audit: type=1400 audit(1753267831.327:996): avc: denied { connect } for pid=14082 comm="syz.1.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 765.339722][ T30] audit: type=1400 audit(1753267831.407:997): avc: denied { ioctl } for pid=14084 comm="syz.4.2111" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 765.361591][ T30] audit: type=1400 audit(1753267831.417:998): avc: denied { getopt } for pid=14084 comm="syz.4.2111" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 765.586039][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.711023][T12152] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 765.791403][T10850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 765.795608][T14095] FAULT_INJECTION: forcing a failure. [ 765.795608][T14095] name failslab, interval 1, probability 0, space 0, times 0 [ 765.908923][T12152] usb 5-1: unable to get BOS descriptor or descriptor too short [ 765.919300][T14095] CPU: 1 UID: 0 PID: 14095 Comm: syz.3.2113 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 765.919327][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 765.919338][T14095] Call Trace: [ 765.919344][T14095] [ 765.919351][T14095] dump_stack_lvl+0x16c/0x1f0 [ 765.919384][T14095] should_fail_ex+0x512/0x640 [ 765.919411][T14095] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 765.919440][T14095] should_failslab+0xc2/0x120 [ 765.919458][T14095] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 765.919483][T14095] ? fput+0x70/0xf0 [ 765.919501][T14095] ? getname_flags.part.0+0x4c/0x550 [ 765.919526][T14095] getname_flags.part.0+0x4c/0x550 [ 765.919551][T14095] __x64_sys_rmdir+0xb0/0x110 [ 765.919569][T14095] do_syscall_64+0xcd/0x4c0 [ 765.919588][T14095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.919606][T14095] RIP: 0033:0x7f7763d8e9a9 [ 765.919620][T14095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.919637][T14095] RSP: 002b:00007f7764c3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 765.919655][T14095] RAX: ffffffffffffffda RBX: 00007f7763fb6080 RCX: 00007f7763d8e9a9 [ 765.919667][T14095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 765.919677][T14095] RBP: 00007f7764c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 765.919687][T14095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.919697][T14095] R13: 0000000000000000 R14: 00007f7763fb6080 R15: 00007ffe4040b278 [ 765.919720][T14095] [ 766.076407][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.101997][T12152] usb 5-1: not running at top speed; connect to a high speed hub [ 766.119131][T12152] usb 5-1: config 4 has an invalid interface number: 20 but max is 0 [ 766.127393][T12152] usb 5-1: config 4 has no interface number 0 [ 766.134066][T12152] usb 5-1: config 4 interface 20 has no altsetting 0 [ 766.149236][T12152] usb 5-1: New USB device found, idVendor=1fe1, idProduct=5456, bcdDevice=f7.4b [ 766.159716][T12152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.169544][T12152] usb 5-1: Product: я [ 766.173643][T12152] usb 5-1: Manufacturer: ࠾ [ 766.178223][T12152] usb 5-1: SerialNumber: 䨑裁෕訢䯥ꦂ탦隫衯᝞ﲗ㓷皊㫎꠸튼鵼귧㤑씜⼬❐⩨읗௤멹꣊ꀮ⠽퍕앖霌嘃᣾兾Ẻ뜗䉆ȑꭗ瞦쪤쳯ꌕ嶰毾ᖭ찃힎ᚐ楉固欸嵷絸平櫶럙鴒齈졻媩ℿ㔇 [ 766.223808][ T5915] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 766.391233][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 766.408357][ T5915] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 766.439608][ T5915] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 766.452561][T14085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.500211][T14101] netlink: 'syz.3.2115': attribute type 1 has an invalid length. [ 766.509346][T14101] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2115'. [ 766.554812][T14085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.766386][T12152] dvb-usb: found a 'GOTVIEW Satellite HD' in warm state. [ 766.776147][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 766.787047][T12152] dw2102: su3000_power_ctrl: 1, initialized 0 [ 766.795385][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 766.810890][T12152] dvb-usb: bulk message failed: -22 (2/0) [ 766.829192][T12152] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 766.847912][ T5915] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.913868][T12152] dvb-usb: GOTVIEW Satellite HD error while loading driver (-19) [ 766.921714][ T5915] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 766.948566][T12152] usb 5-1: USB disconnect, device number 41 [ 766.954895][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.960557][ T30] audit: type=1400 audit(1753267833.027:999): avc: denied { read } for pid=14105 comm="syz.5.2117" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 767.111514][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 767.209170][ T5915] usb 2-1: usb_control_msg returned -32 [ 767.215172][ T5915] usbtmc 2-1:16.0: can't read capabilities [ 767.250532][T14114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2119'. [ 767.262025][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 767.269200][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.281932][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 767.293043][ T10] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 767.308331][ T10] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 767.333792][ T10] usb 3-1: Product: syz [ 767.349253][ T10] usb 3-1: config 0 descriptor?? [ 767.686897][T14118] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 767.923362][T14124] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2122'. [ 767.932628][T14124] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 768.082099][ T10] waterforce 0003:1044:7A4D.000A: unknown main item tag 0x0 [ 768.115109][T12152] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 768.115634][ T10] waterforce 0003:1044:7A4D.000A: unknown main item tag 0x0 [ 768.115658][ T10] waterforce 0003:1044:7A4D.000A: unknown main item tag 0x0 [ 768.115678][ T10] waterforce 0003:1044:7A4D.000A: unknown main item tag 0x0 [ 768.115699][ T10] waterforce 0003:1044:7A4D.000A: unknown main item tag 0x0 [ 768.144497][T13121] usb 2-1: USB disconnect, device number 56 [ 768.163832][ T10] waterforce 0003:1044:7A4D.000A: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.2-1/input0 [ 768.271383][T12152] usb 5-1: Using ep0 maxpacket: 16 [ 768.274320][T12152] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.274343][T12152] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.274372][T12152] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 768.274395][T12152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.276817][T12152] usb 5-1: config 0 descriptor?? [ 768.281853][ T10] waterforce 0003:1044:7A4D.000A: fw version request failed with -38 [ 768.349023][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 768.349058][ T30] audit: type=1400 audit(1753267834.417:1001): avc: denied { connect } for pid=14127 comm="syz.3.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 768.403315][ T30] audit: type=1400 audit(1753267834.477:1002): avc: denied { ioctl } for pid=14127 comm="syz.3.2123" path="socket:[37547]" dev="sockfs" ino=37547 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 768.817878][T14132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.831405][T14132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.735193][ T5915] usb 5-1: USB disconnect, device number 42 [ 770.176549][T14146] netlink: 316 bytes leftover after parsing attributes in process `syz.5.2128'. [ 770.191667][T14146] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2128'. [ 770.434959][ T10] usb 3-1: USB disconnect, device number 34 [ 770.742057][T14160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2131'. [ 770.751691][T14160] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 771.065686][T14163] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 771.072209][T14163] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 771.079876][T14163] vhci_hcd vhci_hcd.0: Device attached [ 771.163313][ T78] Bluetooth: hci5: Frame reassembly failed (-84) [ 771.335219][ T5915] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 772.043193][T14164] vhci_hcd: connection reset by peer [ 772.143060][ T78] vhci_hcd: stop threads [ 772.147546][ T78] vhci_hcd: release socket [ 772.223915][ T78] vhci_hcd: disconnect device [ 772.647570][ T5837] Bluetooth: hci0: connection err: -111 [ 773.160972][T10850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 773.739139][ T30] audit: type=1400 audit(1753267839.807:1003): avc: denied { mount } for pid=14196 comm="syz.3.2140" name="/" dev="ramfs" ino=38834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 773.819880][ T30] audit: type=1400 audit(1753267839.847:1004): avc: denied { nlmsg_read } for pid=14187 comm="syz.5.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 773.876642][T14192] netlink: 'syz.1.2139': attribute type 1 has an invalid length. [ 773.888190][T14192] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2139'. [ 773.926972][T14202] FAULT_INJECTION: forcing a failure. [ 773.926972][T14202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.927651][T14202] [ 773.927656][T14202] ====================================================== [ 773.927660][T14202] WARNING: possible circular locking dependency detected [ 773.927665][T14202] 6.16.0-rc7-syzkaller #0 Not tainted [ 773.927671][T14202] ------------------------------------------------------ [ 773.927674][T14202] syz.3.2141/14202 is trying to acquire lock: [ 773.927680][T14202] ffffffff8e4d2380 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 773.927710][T14202] [ 773.927710][T14202] but task is already holding lock: [ 773.927712][T14202] ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 773.927738][T14202] [ 773.927738][T14202] which lock already depends on the new lock. [ 773.927738][T14202] [ 773.927741][T14202] [ 773.927741][T14202] the existing dependency chain (in reverse order) is: [ 773.927745][T14202] [ 773.927745][T14202] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 773.927757][T14202] _raw_spin_lock_nested+0x31/0x40 [ 773.927773][T14202] raw_spin_rq_lock_nested+0x29/0x130 [ 773.927786][T14202] task_rq_lock+0xcf/0x490 [ 773.927799][T14202] cgroup_move_task+0x81/0x2a0 [ 773.927813][T14202] css_set_move_task+0x288/0x5f0 [ 773.927824][T14202] cgroup_post_fork+0x201/0x9e0 [ 773.927836][T14202] copy_process+0x5c82/0x7650 [ 773.927854][T14202] kernel_clone+0xfc/0x960 [ 773.927867][T14202] user_mode_thread+0xc7/0x110 [ 773.927880][T14202] rest_init+0x23/0x2b0 [ 773.927891][T14202] start_kernel+0x3ee/0x4d0 [ 773.927908][T14202] x86_64_start_reservations+0x18/0x30 [ 773.927925][T14202] x86_64_start_kernel+0x130/0x190 [ 773.927941][T14202] common_startup_64+0x13e/0x148 [ 773.927952][T14202] [ 773.927952][T14202] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 773.927965][T14202] _raw_spin_lock_irqsave+0x3a/0x60 [ 773.927979][T14202] try_to_wake_up+0xb2/0x1680 [ 773.927991][T14202] __wake_up_common+0x135/0x1f0 [ 773.928001][T14202] __wake_up+0x31/0x60 [ 773.928014][T14202] tty_port_default_wakeup+0x2a/0x40 [ 773.928026][T14202] serial8250_tx_chars+0x68e/0x860 [ 773.928039][T14202] serial8250_handle_irq+0x761/0xcb0 [ 773.928056][T14202] serial8250_default_handle_irq+0x9a/0x210 [ 773.928073][T14202] serial8250_interrupt+0x103/0x210 [ 773.928089][T14202] __handle_irq_event_percpu+0x229/0x7d0 [ 773.928103][T14202] handle_irq_event+0xab/0x1e0 [ 773.928115][T14202] handle_edge_irq+0x28e/0xab0 [ 773.928125][T14202] __common_interrupt+0xe2/0x250 [ 773.928138][T14202] common_interrupt+0xba/0xe0 [ 773.928150][T14202] asm_common_interrupt+0x26/0x40 [ 773.928159][T14202] pv_native_safe_halt+0xf/0x20 [ 773.928174][T14202] default_idle+0x13/0x20 [ 773.928183][T14202] default_idle_call+0x6d/0xb0 [ 773.928194][T14202] do_idle+0x391/0x510 [ 773.928205][T14202] cpu_startup_entry+0x4f/0x60 [ 773.928218][T14202] start_secondary+0x21d/0x2b0 [ 773.928232][T14202] common_startup_64+0x13e/0x148 [ 773.928240][T14202] [ 773.928240][T14202] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 773.928254][T14202] _raw_spin_lock_irqsave+0x3a/0x60 [ 773.928267][T14202] __wake_up+0x1c/0x60 [ 773.928285][T14202] tty_port_default_wakeup+0x2a/0x40 [ 773.928301][T14202] serial8250_tx_chars+0x68e/0x860 [ 773.928312][T14202] serial8250_handle_irq+0x761/0xcb0 [ 773.928323][T14202] serial8250_default_handle_irq+0x9a/0x210 [ 773.928335][T14202] serial8250_interrupt+0x103/0x210 [ 773.928352][T14202] __handle_irq_event_percpu+0x229/0x7d0 [ 773.928365][T14202] handle_irq_event+0xab/0x1e0 [ 773.928376][T14202] handle_edge_irq+0x28e/0xab0 [ 773.928386][T14202] __common_interrupt+0xe2/0x250 [ 773.928398][T14202] common_interrupt+0xba/0xe0 [ 773.928410][T14202] asm_common_interrupt+0x26/0x40 [ 773.928419][T14202] pv_native_safe_halt+0xf/0x20 [ 773.928433][T14202] default_idle+0x13/0x20 [ 773.928442][T14202] default_idle_call+0x6d/0xb0 [ 773.928453][T14202] do_idle+0x391/0x510 [ 773.928464][T14202] cpu_startup_entry+0x4f/0x60 [ 773.928476][T14202] start_secondary+0x21d/0x2b0 [ 773.928488][T14202] common_startup_64+0x13e/0x148 [ 773.928497][T14202] [ 773.928497][T14202] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 773.928510][T14202] _raw_spin_lock_irqsave+0x3a/0x60 [ 773.928524][T14202] serial8250_console_write+0x181/0x1890 [ 773.928536][T14202] console_flush_all+0x801/0xc60 [ 773.928548][T14202] console_unlock+0xd8/0x210 [ 773.928559][T14202] vprintk_emit+0x418/0x6d0 [ 773.928570][T14202] _printk+0xc7/0x100 [ 773.928578][T14202] register_console+0xc2d/0x11b0 [ 773.928590][T14202] univ8250_console_init+0x5f/0x90 [ 773.928607][T14202] console_init+0x14f/0x680 [ 773.928616][T14202] start_kernel+0x29f/0x4d0 [ 773.928630][T14202] x86_64_start_reservations+0x18/0x30 [ 773.928646][T14202] x86_64_start_kernel+0x130/0x190 [ 773.928662][T14202] common_startup_64+0x13e/0x148 [ 773.928671][T14202] [ 773.928671][T14202] -> #0 (console_owner){-.-.}-{0:0}: [ 773.928683][T14202] __lock_acquire+0x126f/0x1c90 [ 773.928691][T14202] lock_acquire+0x179/0x350 [ 773.928699][T14202] console_lock_spinning_enable+0xb0/0xd0 [ 773.928711][T14202] console_flush_all+0x7aa/0xc60 [ 773.928722][T14202] console_unlock+0xd8/0x210 [ 773.928733][T14202] vprintk_emit+0x418/0x6d0 [ 773.928745][T14202] _printk+0xc7/0x100 [ 773.928753][T14202] should_fail_ex+0x4e7/0x640 [ 773.928768][T14202] strncpy_from_user+0x3b/0x2e0 [ 773.928782][T14202] strncpy_from_user_nofault+0x7f/0x180 [ 773.928792][T14202] bpf_bprintf_prepare+0xede/0x14b0 [ 773.928807][T14202] bpf_trace_printk+0xda/0x190 [ 773.928823][T14202] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 773.928831][T14202] bpf_trace_run2+0x230/0x590 [ 773.928840][T14202] __bpf_trace_contention_begin+0xc9/0x110 [ 773.928849][T14202] trace_contention_begin.constprop.0+0xde/0x160 [ 773.928861][T14202] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 773.928877][T14202] do_raw_spin_lock+0x20e/0x2b0 [ 773.928887][T14202] raw_spin_rq_lock_nested+0x7e/0x130 [ 773.928900][T14202] __schedule+0x301/0x5dd0 [ 773.928913][T14202] preempt_schedule_irq+0x51/0x90 [ 773.928928][T14202] irqentry_exit+0x36/0x90 [ 773.928936][T14202] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 773.928946][T14202] tomoyo_check_acl+0x2c6/0x410 [ 773.928958][T14202] tomoyo_path_number_perm+0x34b/0x580 [ 773.928972][T14202] tomoyo_path_chown+0x14b/0x1b0 [ 773.928983][T14202] security_path_chown+0x12a/0x2e0 [ 773.928998][T14202] chown_common+0x3d3/0x680 [ 773.929008][T14202] do_fchownat+0x1a7/0x200 [ 773.929017][T14202] __x64_sys_chown+0x7b/0xc0 [ 773.929027][T14202] do_syscall_64+0xcd/0x4c0 [ 773.929035][T14202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.929045][T14202] [ 773.929045][T14202] other info that might help us debug this: [ 773.929045][T14202] [ 773.929048][T14202] Chain exists of: [ 773.929048][T14202] console_owner --> &p->pi_lock --> &rq->__lock [ 773.929048][T14202] [ 773.929062][T14202] Possible unsafe locking scenario: [ 773.929062][T14202] [ 773.929064][T14202] CPU0 CPU1 [ 773.929067][T14202] ---- ---- [ 773.929069][T14202] lock(&rq->__lock); [ 773.929075][T14202] lock(&p->pi_lock); [ 773.929081][T14202] lock(&rq->__lock); [ 773.929088][T14202] lock(console_owner); [ 773.929095][T14202] [ 773.929095][T14202] *** DEADLOCK *** [ 773.929095][T14202] [ 773.929097][T14202] 7 locks held by syz.3.2141/14202: [ 773.929103][T14202] #0: ffff8880660e0428 (sb_writers#13){.+.+}-{0:0}, at: do_fchownat+0x117/0x200 [ 773.929128][T14202] #1: ffff88805b03c048 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: chown_common+0x335/0x680 [ 773.929154][T14202] #2: ffffffff8f05aa50 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x237/0x580 [ 773.929181][T14202] #3: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 773.929206][T14202] #4: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1b6/0x590 [ 773.929228][T14202] #5: ffffffff8e5b27c0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 773.929249][T14202] #6: ffffffff8e5b2830 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 773.929273][T14202] [ 773.929273][T14202] stack backtrace: [ 773.929278][T14202] CPU: 1 UID: 0 PID: 14202 Comm: syz.3.2141 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 773.929291][T14202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.929297][T14202] Call Trace: [ 773.929301][T14202] [ 773.929304][T14202] dump_stack_lvl+0x116/0x1f0 [ 773.929322][T14202] print_circular_bug+0x275/0x350 [ 773.929338][T14202] check_noncircular+0x14c/0x170 [ 773.929359][T14202] __lock_acquire+0x126f/0x1c90 [ 773.929370][T14202] lock_acquire+0x179/0x350 [ 773.929379][T14202] ? console_lock_spinning_enable+0x9f/0xd0 [ 773.929392][T14202] ? console_lock_spinning_enable+0x88/0xd0 [ 773.929405][T14202] console_lock_spinning_enable+0xb0/0xd0 [ 773.929417][T14202] ? console_lock_spinning_enable+0x9f/0xd0 [ 773.929430][T14202] console_flush_all+0x7aa/0xc60 [ 773.929443][T14202] ? __pfx_console_flush_all+0x10/0x10 [ 773.929458][T14202] ? is_printk_cpu_sync_owner+0x32/0x40 [ 773.929472][T14202] console_unlock+0xd8/0x210 [ 773.929484][T14202] ? __pfx_console_unlock+0x10/0x10 [ 773.929496][T14202] ? do_raw_spin_unlock+0xf0/0x230 [ 773.929508][T14202] ? _printk+0xc7/0x100 [ 773.929517][T14202] ? __down_trylock_console_sem+0xb0/0x140 [ 773.929528][T14202] vprintk_emit+0x418/0x6d0 [ 773.929540][T14202] ? __pfx_vprintk_emit+0x10/0x10 [ 773.929555][T14202] _printk+0xc7/0x100 [ 773.929563][T14202] ? __pfx__printk+0x10/0x10 [ 773.929573][T14202] ? __pfx____ratelimit+0x10/0x10 [ 773.929590][T14202] should_fail_ex+0x4e7/0x640 [ 773.929606][T14202] strncpy_from_user+0x3b/0x2e0 [ 773.929621][T14202] strncpy_from_user_nofault+0x7f/0x180 [ 773.929631][T14202] bpf_bprintf_prepare+0xede/0x14b0 [ 773.929648][T14202] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 773.929664][T14202] ? psi_task_switch+0x201/0x8e0 [ 773.929679][T14202] ? bpf_trace_run2+0x3db/0x590 [ 773.929689][T14202] bpf_trace_printk+0xda/0x190 [ 773.929704][T14202] ? __pfx_bpf_trace_printk+0x10/0x10 [ 773.929721][T14202] ? bpf_trace_run2+0x3db/0x590 [ 773.929733][T14202] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 773.929741][T14202] bpf_trace_run2+0x230/0x590 [ 773.929751][T14202] ? __pfx_bpf_trace_run2+0x10/0x10 [ 773.929763][T14202] __bpf_trace_contention_begin+0xc9/0x110 [ 773.929773][T14202] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 773.929784][T14202] ? __lock_acquire+0xb8a/0x1c90 [ 773.929794][T14202] trace_contention_begin.constprop.0+0xde/0x160 [ 773.929806][T14202] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 773.929824][T14202] ? __lock_acquire+0xb8a/0x1c90 [ 773.929832][T14202] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 773.929850][T14202] ? psi_task_switch+0x201/0x8e0 [ 773.929865][T14202] do_raw_spin_lock+0x20e/0x2b0 [ 773.929876][T14202] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 773.929888][T14202] ? rcu_qs+0x2b/0xe0 [ 773.929900][T14202] ? rcu_note_context_switch+0x192/0x1e00 [ 773.929914][T14202] raw_spin_rq_lock_nested+0x7e/0x130 [ 773.929927][T14202] ? preempt_schedule_irq+0x51/0x90 [ 773.929942][T14202] ? preempt_schedule_irq+0x51/0x90 [ 773.929957][T14202] __schedule+0x301/0x5dd0 [ 773.929970][T14202] ? do_fchownat+0x1a7/0x200 [ 773.929980][T14202] ? __x64_sys_chown+0x7b/0xc0 [ 773.929990][T14202] ? do_syscall_64+0xcd/0x4c0 [ 773.930002][T14202] ? __pfx___schedule+0x10/0x10 [ 773.930018][T14202] ? mark_held_locks+0x49/0x80 [ 773.930034][T14202] preempt_schedule_irq+0x51/0x90 [ 773.930049][T14202] irqentry_exit+0x36/0x90 [ 773.930057][T14202] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 773.930068][T14202] RIP: 0010:tomoyo_check_acl+0x2c6/0x410 [ 773.930081][T14202] Code: b7 5c 24 16 bf 00 01 00 00 89 de e8 b4 07 23 fd 66 81 fb 00 01 74 72 e8 98 0c 23 fd 48 8b 44 24 18 0f b7 5c 24 16 4c 8d 68 30 85 0c 23 fd 48 89 d8 be 08 00 00 00 41 89 de 48 c1 e8 06 49 8d [ 773.930093][T14202] RSP: 0018:ffffc9001647f960 EFLAGS: 00000283 [ 773.930101][T14202] RAX: 0000000000000000 RBX: 0000000000000015 RCX: ffffffff8498dc3c [ 773.930107][T14202] RDX: ffff88802fcc0000 RSI: 0000000000000100 RDI: 0000000000000003 [ 773.930114][T14202] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000100 [ 773.930120][T14202] R10: 0000000000000015 R11: 0000000000000001 R12: ffffc9001647fa20 [ 773.930126][T14202] R13: ffff8880364a7c30 R14: 0000000000000014 R15: 0000000000000000 [ 773.930134][T14202] ? tomoyo_check_acl+0x31c/0x410 [ 773.930148][T14202] ? __pfx_tomoyo_check_path_number_acl+0x10/0x10 [ 773.930164][T14202] tomoyo_path_number_perm+0x34b/0x580 [ 773.930179][T14202] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 773.930200][T14202] ? from_kgid+0x8f/0xd0 [ 773.930212][T14202] ? __pfx_from_kgid+0x10/0x10 [ 773.930224][T14202] tomoyo_path_chown+0x14b/0x1b0 [ 773.930236][T14202] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 773.930248][T14202] ? from_vfsuid+0xea/0x140 [ 773.930260][T14202] ? __pfx_from_vfsuid+0x10/0x10 [ 773.930275][T14202] security_path_chown+0x12a/0x2e0 [ 773.930291][T14202] chown_common+0x3d3/0x680 [ 773.930302][T14202] ? __pfx_chown_common+0x10/0x10 [ 773.930313][T14202] ? find_held_lock+0x2b/0x80 [ 773.930327][T14202] ? mnt_get_write_access+0x20c/0x300 [ 773.930344][T14202] do_fchownat+0x1a7/0x200 [ 773.930354][T14202] ? __pfx_do_fchownat+0x10/0x10 [ 773.930364][T14202] ? ksys_write+0x1ac/0x250 [ 773.930379][T14202] ? __pfx_ksys_write+0x10/0x10 [ 773.930395][T14202] __x64_sys_chown+0x7b/0xc0 [ 773.930405][T14202] ? lockdep_hardirqs_on+0x7c/0x110 [ 773.930420][T14202] do_syscall_64+0xcd/0x4c0 [ 773.930430][T14202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.930440][T14202] RIP: 0033:0x7f7763d8e9a9 [ 773.930448][T14202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.930458][T14202] RSP: 002b:00007f7764c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 773.930467][T14202] RAX: ffffffffffffffda RBX: 00007f7763fb6080 RCX: 00007f7763d8e9a9 [ 773.930473][T14202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 773.930480][T14202] RBP: 00007f7764c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 773.930485][T14202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.930491][T14202] R13: 0000000000000001 R14: 00007f7763fb6080 R15: 00007ffe4040b278 [ 773.930500][T14202] [ 775.342707][T14202] CPU: 1 UID: 0 PID: 14202 Comm: syz.3.2141 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 775.342728][T14202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 775.342738][T14202] Call Trace: [ 775.342744][T14202] [ 775.342750][T14202] dump_stack_lvl+0x116/0x1f0 [ 775.342777][T14202] should_fail_ex+0x512/0x640 [ 775.342800][T14202] strncpy_from_user+0x3b/0x2e0 [ 775.342821][T14202] strncpy_from_user_nofault+0x7f/0x180 [ 775.342836][T14202] bpf_bprintf_prepare+0xede/0x14b0 [ 775.342861][T14202] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 775.342882][T14202] ? psi_task_switch+0x201/0x8e0 [ 775.342902][T14202] ? bpf_trace_run2+0x3db/0x590 [ 775.342916][T14202] bpf_trace_printk+0xda/0x190 [ 775.342937][T14202] ? __pfx_bpf_trace_printk+0x10/0x10 [ 775.342959][T14202] ? bpf_trace_run2+0x3db/0x590 [ 775.342975][T14202] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 775.342987][T14202] bpf_trace_run2+0x230/0x590 [ 775.343000][T14202] ? __pfx_bpf_trace_run2+0x10/0x10 [ 775.343017][T14202] __bpf_trace_contention_begin+0xc9/0x110 [ 775.343030][T14202] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 775.343045][T14202] ? __lock_acquire+0xb8a/0x1c90 [ 775.343058][T14202] trace_contention_begin.constprop.0+0xde/0x160 [ 775.343075][T14202] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 775.343100][T14202] ? __lock_acquire+0xb8a/0x1c90 [ 775.343111][T14202] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 775.343134][T14202] ? psi_task_switch+0x201/0x8e0 [ 775.343154][T14202] do_raw_spin_lock+0x20e/0x2b0 [ 775.343169][T14202] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 775.343184][T14202] ? rcu_qs+0x2b/0xe0 [ 775.343200][T14202] ? rcu_note_context_switch+0x192/0x1e00 [ 775.343218][T14202] raw_spin_rq_lock_nested+0x7e/0x130 [ 775.343236][T14202] ? preempt_schedule_irq+0x51/0x90 [ 775.343256][T14202] ? preempt_schedule_irq+0x51/0x90 [ 775.343276][T14202] __schedule+0x301/0x5dd0 [ 775.343294][T14202] ? do_fchownat+0x1a7/0x200 [ 775.343308][T14202] ? __x64_sys_chown+0x7b/0xc0 [ 775.343325][T14202] ? do_syscall_64+0xcd/0x4c0 [ 775.343342][T14202] ? __pfx___schedule+0x10/0x10 [ 775.343364][T14202] ? mark_held_locks+0x49/0x80 [ 775.343385][T14202] preempt_schedule_irq+0x51/0x90 [ 775.343406][T14202] irqentry_exit+0x36/0x90 [ 775.343418][T14202] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 775.343432][T14202] RIP: 0010:tomoyo_check_acl+0x2c6/0x410 [ 775.343452][T14202] Code: b7 5c 24 16 bf 00 01 00 00 89 de e8 b4 07 23 fd 66 81 fb 00 01 74 72 e8 98 0c 23 fd 48 8b 44 24 18 0f b7 5c 24 16 4c 8d 68 30 85 0c 23 fd 48 89 d8 be 08 00 00 00 41 89 de 48 c1 e8 06 49 8d [ 775.343465][T14202] RSP: 0018:ffffc9001647f960 EFLAGS: 00000283 [ 775.343477][T14202] RAX: 0000000000000000 RBX: 0000000000000015 RCX: ffffffff8498dc3c [ 775.343486][T14202] RDX: ffff88802fcc0000 RSI: 0000000000000100 RDI: 0000000000000003 [ 775.343495][T14202] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000100 [ 775.343504][T14202] R10: 0000000000000015 R11: 0000000000000001 R12: ffffc9001647fa20 [ 775.343513][T14202] R13: ffff8880364a7c30 R14: 0000000000000014 R15: 0000000000000000 [ 775.343524][T14202] ? tomoyo_check_acl+0x31c/0x410 [ 775.343543][T14202] ? __pfx_tomoyo_check_path_number_acl+0x10/0x10 [ 775.343564][T14202] tomoyo_path_number_perm+0x34b/0x580 [ 775.343585][T14202] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 775.343614][T14202] ? from_kgid+0x8f/0xd0 [ 775.343630][T14202] ? __pfx_from_kgid+0x10/0x10 [ 775.343647][T14202] tomoyo_path_chown+0x14b/0x1b0 [ 775.343663][T14202] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 775.343679][T14202] ? from_vfsuid+0xea/0x140 [ 775.343696][T14202] ? __pfx_from_vfsuid+0x10/0x10 [ 775.343713][T14202] security_path_chown+0x12a/0x2e0 [ 775.343735][T14202] chown_common+0x3d3/0x680 [ 775.343750][T14202] ? __pfx_chown_common+0x10/0x10 [ 775.343764][T14202] ? find_held_lock+0x2b/0x80 [ 775.343783][T14202] ? mnt_get_write_access+0x20c/0x300 [ 775.343801][T14202] do_fchownat+0x1a7/0x200 [ 775.343815][T14202] ? __pfx_do_fchownat+0x10/0x10 [ 775.343832][T14202] ? ksys_write+0x1ac/0x250 [ 775.343852][T14202] ? __pfx_ksys_write+0x10/0x10 [ 775.343873][T14202] __x64_sys_chown+0x7b/0xc0 [ 775.343887][T14202] ? lockdep_hardirqs_on+0x7c/0x110 [ 775.343908][T14202] do_syscall_64+0xcd/0x4c0 [ 775.343921][T14202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.343935][T14202] RIP: 0033:0x7f7763d8e9a9 [ 775.343946][T14202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.343960][T14202] RSP: 002b:00007f7764c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 775.343973][T14202] RAX: ffffffffffffffda RBX: 00007f7763fb6080 RCX: 00007f7763d8e9a9 [ 775.343982][T14202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 775.343990][T14202] RBP: 00007f7764c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 775.343999][T14202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.344007][T14202] R13: 0000000000000001 R14: 00007f7763fb6080 R15: 00007ffe4040b278 [ 775.344020][T14202] [ 775.344123][ C1] vkms_vblank_simulate: vblank timer overrun [ 775.830884][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.431151][ T5915] vhci_hcd: vhci_device speed not set