last executing test programs: 6m45.175749083s ago: executing program 1 (id=51): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 6m44.171942872s ago: executing program 1 (id=56): syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100), &(0x7f00000000c0)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x20fb, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x3d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = getpid() bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) eventfd2(0x5, 0x1) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x8002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r8, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 6m43.372229514s ago: executing program 1 (id=59): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000204004d1504"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000300)=0x10, 0x80000) connect$llc(r4, &(0x7f0000000380)={0x1a, 0x110, 0x6, 0x5, 0x6, 0xdb}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd98) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) io_uring_enter(r9, 0x45aa, 0x355d, 0x18, &(0x7f0000000000)={[0xffffffffffff0000]}, 0x8) 6m36.495020175s ago: executing program 1 (id=80): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read$msr(r3, &(0x7f00000000c0)=""/218, 0xda) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000380)={'dummy0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0xc1}, 0x40) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000, 0x0, 0x2000002}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x21, 0xa5, &(0x7f0000000000)="5fa05d48e963945ffc6ee6c4d1ddf8cf397b7d21122d485f57b78b025efd6bc7f2", &(0x7f00000000c0)=""/165, 0x8, 0x0, 0xe6, 0xa9, &(0x7f0000000180)="b5fbcd5799d3cf56dbeae671a87bae811d7f69cd63436f5d40bdbe44a7c2477d1a81134229a6540ad899b7ce27c4f10ed2fcf8be8031f8f04549a8dede75f7d86b6944761f0c11e9c73297e2b35d60f599878cd0ac06f4503a4c6b6d79932ddcda2235a54e6b42e02682050e4823aac0d1508f780c7c72956789c4fdfc88647036027e5e766780c526f3badbd4b54106ee3c88126c440203fe014ddfe6cd840504b0f67668fface63cdafddc72777538dd1390480d247a46366c37b9bf5e63d7723c8d193a427843b0fe247f76b4178207a3ed3d4cd134cdf69727537e9aa834d9288f97efd8", &(0x7f00000002c0)="6727dc58f430fbc7b406bec7202cf1f0d417021cf796278e35377659d333b3f2603416cdc72ea5291e0df97b96f0834b87879cd31b651ef8b9604656f44b1497379af8db0925be7b6f751589645880ceb9c56776294248ed69b2977e1cb54168264622c563d08bccc9b44ec508ced373720817d8100d2e9e8098617d80909484688b095aee569825e1bfc40e88d3e733f97c3aa34d0f992cebb913c6c081c4530681a183ae78fb6019", 0x2, 0x0, 0xfffd}, 0x50) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m20.114080507s ago: executing program 32 (id=80): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read$msr(r3, &(0x7f00000000c0)=""/218, 0xda) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000380)={'dummy0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0xc1}, 0x40) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000, 0x0, 0x2000002}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x21, 0xa5, &(0x7f0000000000)="5fa05d48e963945ffc6ee6c4d1ddf8cf397b7d21122d485f57b78b025efd6bc7f2", &(0x7f00000000c0)=""/165, 0x8, 0x0, 0xe6, 0xa9, &(0x7f0000000180)="b5fbcd5799d3cf56dbeae671a87bae811d7f69cd63436f5d40bdbe44a7c2477d1a81134229a6540ad899b7ce27c4f10ed2fcf8be8031f8f04549a8dede75f7d86b6944761f0c11e9c73297e2b35d60f599878cd0ac06f4503a4c6b6d79932ddcda2235a54e6b42e02682050e4823aac0d1508f780c7c72956789c4fdfc88647036027e5e766780c526f3badbd4b54106ee3c88126c440203fe014ddfe6cd840504b0f67668fface63cdafddc72777538dd1390480d247a46366c37b9bf5e63d7723c8d193a427843b0fe247f76b4178207a3ed3d4cd134cdf69727537e9aa834d9288f97efd8", &(0x7f00000002c0)="6727dc58f430fbc7b406bec7202cf1f0d417021cf796278e35377659d333b3f2603416cdc72ea5291e0df97b96f0834b87879cd31b651ef8b9604656f44b1497379af8db0925be7b6f751589645880ceb9c56776294248ed69b2977e1cb54168264622c563d08bccc9b44ec508ced373720817d8100d2e9e8098617d80909484688b095aee569825e1bfc40e88d3e733f97c3aa34d0f992cebb913c6c081c4530681a183ae78fb6019", 0x2, 0x0, 0xfffd}, 0x50) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5m41.847687613s ago: executing program 3 (id=302): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$inet(0x2, 0xa, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x10000, 0x2, 0x15, 0x7, 0x0, 0x7}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7fff}]}}]}, 0x154}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5m41.615459145s ago: executing program 3 (id=303): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x8, &(0x7f00000001c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000600)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xf4000000, 0x0, &(0x7f0000000640), 0x0, 0x10, 0x9, @void, @value}, 0x94) 5m41.520266035s ago: executing program 3 (id=305): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5m40.283526124s ago: executing program 3 (id=313): sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) write$ppp(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sockstat\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000500000008000b000400000008000c00ac0a00000800090002"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r7, 0x4040c, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xac24, 0x10000, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r8, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r9, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 5m40.097125937s ago: executing program 3 (id=314): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x802) 5m39.853778506s ago: executing program 3 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') llistxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000)=0xfffffffffffffc01, 0x8) 5m39.245350233s ago: executing program 33 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') llistxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000)=0xfffffffffffffc01, 0x8) 12.436907589s ago: executing program 4 (id=1670): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a00003010068000904000000010100000a2401e70000020102132406010406010005000100090008000900010c2402020101020ba5867f030624050304c707240805030003090401000001020000090401010101020000090501092000ff080a072501027f08000904020000010200000904020101010208000e2402010703bd02881429c9a30607240100000300090582093e000005"], 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000004c0)={0x2ef12db7, 0x7}) 9.010320238s ago: executing program 4 (id=1688): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001480), 0x800, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000001500)={0xa, 0x2, {0x55, 0xef39, 0x4, {0x0, 0x7}, {0x9, 0xd02}, @rumble={0x5, 0x6}}, {0x55, 0x800, 0x8, {0xfffd, 0xb}, {0x5, 0x2}, @const={0x3, {0x7, 0x8, 0xb959, 0x21}}}}) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) 8.742310885s ago: executing program 4 (id=1692): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x4000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.288833638s ago: executing program 5 (id=1702): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120101024bbf07000000000000000000000000082888b0b1a2c648606451540000"], 0x0) 5.283938824s ago: executing program 4 (id=1704): iopl(0x3) r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socket$inet6(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x300000000000000, 0x0, 0x0) 4.876833961s ago: executing program 6 (id=1705): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@rose, @default, @bcast, @null, @default, @rose, @null, @null]}, &(0x7f0000000080)=0x48, 0x80000) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) recvmsg$can_raw(r1, &(0x7f0000000500)={&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000240)=""/113, 0x71}, {&(0x7f00000002c0)=""/205, 0xcd}, {&(0x7f00000003c0)=""/125, 0x7d}], 0x4, &(0x7f0000000480)=""/95, 0x5f}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x6100, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, 0x0, 0x1, 0x2184a725ec24a35a, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x101}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xa}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xd}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c840) recvmsg(r0, &(0x7f0000000b80)={&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/136, 0x88}, {&(0x7f0000000980)=""/204, 0xcc}, {&(0x7f0000000a80)=""/59, 0x3b}], 0x4, &(0x7f0000000b00)=""/77, 0x4d}, 0x1) r3 = getpgrp(0xffffffffffffffff) syz_pidfd_open(r3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), r1) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000c80)=""/240) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000f40)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x34}}, 0x8800) fallocate(r4, 0x20, 0x0, 0x196c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000001040)=0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000001080), 0xffffffffffffffff) mkdirat(r4, &(0x7f00000010c0)='./file0\x00', 0xa4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x2000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000001180)=0x1, 0x4) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044004}, 0x40) 4.201496738s ago: executing program 2 (id=1707): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r2 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xad7ec36ef21981eb, 0x0, &(0x7f00000000c0)={0x80000001, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0xde}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000080)={0x28, 0x2, r6, r6, 0x7, 0x4, 0xf9e}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x6, &(0x7f00000002c0)=[{0x30, 0x0, 0xd8}, {0xe, 0x66, 0x3, 0x5}, {0x3, 0x6, 0x84, 0x6}, {0x4, 0x8, 0x1, 0x6}, {0x5, 0x6a, 0x7c, 0x4}, {0x2a4c, 0x2, 0x3}]}) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file1\x00', &(0x7f0000000280), 0x0, 0x24, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="00010000000000", @ANYRESHEX=r0, @ANYBLOB=',defcontext=sysadm_u,permit_directio,\x00']) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0) 4.129074005s ago: executing program 6 (id=1708): socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@loopback={0xffa4}, 0x800, 0x1}, 0x20) 4.128403512s ago: executing program 0 (id=1709): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000001540)) (fail_nth: 3) 4.079058295s ago: executing program 5 (id=1710): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0xb4, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xa0, 0x1, [@m_tunnel_key={0x6c, 0x17, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}]}]}, 0xb4}}, 0x0) 4.078219476s ago: executing program 4 (id=1711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7, 0x0, 0x51a, 0x0, {{0x1a, 0x4, 0x1, 0x12, 0x68, 0x67, 0x0, 0xa, 0x2d, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x7f, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0x79, 0x1, 0x7, [{@local, 0x400}, {@multicast2, 0x9c83}, {@broadcast, 0x8001}, {@local, 0x7}, {@loopback, 0x6}, {@loopback, 0x8}, {@local, 0x5}]}, @cipso={0x86, 0x9, 0x1, [{0x6, 0x3, 'X'}]}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=@ipv6_deladdrlabel={0x48, 0x49, 0x200, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x8, 0x0, r2, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000080) r3 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_generic(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x6ac, 0x28, 0x200, 0x70bd27, 0x25dfdbfc, {0x8}, [@typed={0x8, 0x3e, 0x0, 0x0, @pid=r8}, @nested={0x16b, 0x102, 0x0, 0x1, [@generic="63a2e89311ff9c760d0fe0ab7b9ac6bce6927eb4155999d99b0d5b9d62c8cbd66cea3da923eca131cad34376a28332917cb1292bc74d1fbdc85ec3a3c784cdbd6a2bd97a982232da87105a2415de063ab686fe52ffca1513ec8f8d524d6b04b5fae063afa16034c04ece22617b8981d0c354c2657a26c2b4a307aa28dec4455cbaa611c77e2f30dd8b68ab077ed2efc9acfab17f5484416b882a40fc5877356faa2f8022", @nested={0x4, 0xb0}, @generic="7cf93c532ba9f2544d53f1748307ef230862bc73683a22f54969330ca88e2a7bfd1c673e7de491292b43025dd7476a516c57e3986fa3a1dd7f7c6a5a6310bcb9296d7e640c8bc236fcb5892464b7b49d992881eb256983218888564f2abaa904618abdeed2c9a167e0f67a69b36b539cc15b5f37c2d5b5c7970e56b9bed99291f7c8a0e91f3bfc03b5d668c94c64724148c55bbcaf58d19709e0a4a71119173b3d8d831ca373c3d70725979d8a5e0e126f2f49ac713169", @nested={0x4, 0x89}, @nested={0x4, 0x1}]}, @nested={0xec, 0x10d, 0x0, 0x1, [@typed={0xe5, 0x6a, 0x0, 0x0, @binary="04a445098c38fd3990f3385754392125351d30bba1e94b7c6c14a8fce558e2f543ef529c2eacb6af701bc025d844b844389aa9b771979079a49ebf3c9523ed7e7ab113bfdbdf54b2a5ee55dd2095f63509d612b1cca9969d9e145d09db597d882bdbcfae47b5bfef7be4fc92ff98d12f40194faa6fed46e38237362f23874690bcb8e6638ddbde48874b4c0f1cde6a5ba25e934329efce479674f71beceb864b59e1b429189d61b49572a568de6d623164a66095b4ad895b0edb7424ff75fb6e8d0d480bb301ab4d3d29f929b2546f52a1eb53831cddc327c8c922477f8d068b00"}]}, @generic="bf1050b4eaa331a5f2937e38bba63d477592b47fd0894a10f4a5508d2c28efe2f0c11637d19bbf0bdefc908a8afc04a60725e7e28b6f913ad32a9b0498eddda1d4f7ca08ba5e7fc5c016f1f11130d532d0642d826d97097df7645e835e0ea9d57c4aa5402b6b516a7abfba8c5fa937e659dd0860914ead3e46bce04dcbb01870523ea01fb8226c4bf79851ff31b92cce0fa58454e62421b59c569992f6a9a0f59f705118d1b0c4c961748d09d9faafc5c830a1450aae5d0035dbae7b5c252a2fe49abcc96a02b5b4", @generic="d2c6ce32fa7e312b146a17ba880b174a5146b2ddfa01dea720fe84c4dc3803b4b763350a2bfbc3cb1a3466cd0a9fbfd7b99f1f87008cf8fd472415e1bab065e369cf89bd60e8fa0c536ac00bfaf25706c0808102f9f7cd644b88b12df2210dbd8ccbb9ac0b866384ed3ef6325d953d0ba2f9ba46b018388e101ab22475276e41948ec07a221d446accb52dbe9692cea6cfe039e79f898b91ee48afce44a3ab16ee4f0e24e3da58f72b212f0f977306f8b7c6ef9c703eae162986c66cddf9e7a62bc938c4c06d38968315fc12bfe8254507aea2d4ecf4e8ea3d991fbfca6d0eed290c9b475f", @nested={0xc7, 0xe2, 0x0, 0x1, [@generic="7fe904a3e9c5977b148470b102844418fa3a8839bff4395196de84628c7aa5c141b22f8c7ecafc44ab3009327a059035c8e9132a2465eeb0ba3cab3fc6de93ffea81563b18a23575d7c4604ec8afa60035937e1b78e384927df696e3c903441e65fb63c9c6686f84ce666b90a604901c8f5d761df6425fba15be76fdd50e68d908e3a53439b8f440dfe285e1b21bcfcac28468f897c6949b1aa4b1c6004702b1058839336df9556fe6d2b129100762761e815c313d0b627892bfc2ea", @typed={0x4, 0xcf}, @generic="9182b4"]}, @nested={0xe1, 0xd6, 0x0, 0x1, [@nested={0x4, 0xac}, @generic="573883d4a450216b57d4a29cb72ecb924c38b571c4aa", @generic="aae8b5db9743cab38af36642e1ac4957e52853ca2c914f4ff4306b8dc6d9dfad5bbee1d51db38bab5eee10c2d511d2b0216561cd5fcb0dfc39d5be89837b3c379e75839e1fcdcfb88dafb04a87dc5eace3d3d7f93cfc430bcb2b647719d7414e8647323a5bc99bc913515f7a94f4dbd2863e567283daf84b42f9895e54c51641e37ff2f779b28c719ee434de69ff53ec5a0dea8145b86bbaee51c21060f5deeaa97dd45416aa69168b6f66713440c063157ae1c5082fd187e47817792a9589", @nested={0x4, 0x13e}]}, @generic="cec0f83fd02c9fa68b3dfb7baedc2436ab55bd8d28ae492a7bfe93c9f7dd2304f67da02a53a17ca9f79020235d30e210b306a2e73f6245bae25b5c984c1da20297efba8029e28ffb90a32764a4f1f8d5d01d51064db1d2bd1887b8f1d8c65d5df4a96d7dc9fa62bb3a4e33db05aabf4e6cd0e130cedc4df519988135f0be18bad383004c0cdb73ae8b3777b454334d74d9c0684388fbc0405c0606b49e370d1193e465cc94c7d56e5d0ac680ebf95ef11f7db74888ed896b2d142c0cb482bab3c7fb202a32bd58458c5c1f3a6ff70b35c9c41e6e394af45e6cef82d0de89"]}, 0x6ac}, 0x1, 0x0, 0x0, 0x4000}, 0x800) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x21, 0x2, 0x2, "5c0000fe0040028a9ee9c380f20000000010000000000000000000000000ac00", 0x3247504d}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(r5, 0x407, 0x4) r10 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 3.833545583s ago: executing program 0 (id=1712): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xfffffe00, 0xff, 0x7, 0x50424752, [0x8, 0x4], [0x3, 0x8001], 0x1}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) copy_file_range(r1, &(0x7f0000000000)=0x6, r1, &(0x7f0000000140)=0x8, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f000001b280)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x400c015}, 0x40040) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x9, 0x0, 0x0) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x9, &(0x7f0000000100)=0x4010, 0x4) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x6, 0x8000, 0x0, r8, r9, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r11, r6) close_range(r5, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) 3.831345911s ago: executing program 5 (id=1713): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1}) truncate(&(0x7f0000000040)='./file1\x00', 0x0) recvmsg$can_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1, &(0x7f0000000080)=""/68, 0x44}, 0x103) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f00000009c0)="ba14", 0x2}, {&(0x7f0000000ac0)="cfaa", 0x2}], 0x2}, 0x20000811) 2.688884885s ago: executing program 2 (id=1714): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x4000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.688476544s ago: executing program 6 (id=1715): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000180)={{}, 0x9}) 2.661913075s ago: executing program 5 (id=1716): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7b, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0, 0xca2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_setup(0x25f3, &(0x7f0000001200)={0x0, 0x1239, 0x2, 0x0, 0x257}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = io_uring_setup(0x13b5, &(0x7f0000000140)={0x0, 0x5606, 0x40, 0xdfffffff, 0x2fa}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0x14, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, 0x0, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000001180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002", 0x19, 0x4010, &(0x7f0000000140)={0x11, 0xf4, r6, 0x1, 0x0, 0x6, @local}, 0x14) (fail_nth: 1) 2.656118127s ago: executing program 6 (id=1717): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) (async) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0xfd, 0x9}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xe, 0x8, 0x4, 0x20, 0x7}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0x65, &(0x7f0000000100)=@string={0x65, 0x3, "2110378622a11777c5d1db00fed84eeadd20c9376d9a50a350eba07de7a736e7c58db44f71b59e95ca9deb4c6682d09b1493285e6ca47a9161a59fc34bd82c37036530f05571fcc13c5647f2552d56f57bd88daafe0f39b664268b91d80a10eefbe3d4"}}, {0xe3, &(0x7f0000000180)=@string={0xe3, 0x3, "58dce61a0ac11a0f5b3fca08f0f9791b3a5cba37aa4c40f3e80bff00d77501524b5e8e4bb3840d8bb29720391ed10047e5ca3f43d507674be35ba274f53b468fb7ad743a37912d26dea4425088f88d965eedd54da9e146f26642caff9d391f21089d0144f2bd5f32af906503a5d92d786e74561d6693392b1d2dcfd2cf2c9e3481f227826ae7cb8cd52ed3b00f58a069b03502403dd68fc8f67c79d8c544eff92de96952f52debfc3d88722bcfd87cf4e5bcef555e5551d186b564ee2117a1255d30dd770c0fd2ceeed5135f1432883e7a29219efa85bf6ff16209d2f82b8a615e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1219}}, {0x14, &(0x7f0000000300)=@string={0x14, 0x3, "57f14d2638464ba7b86843dd54e2a9374046"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41f}}, {0x3c, &(0x7f00000003c0)=@string={0x3c, 0x3, "28789cb543f3ba79df722a59d47f723963e24abd30d2462762e43a906ce58ec7520ef4af456d77c19b58287c1171cdfa2638a94278fde35f3716"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x426}}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) (async) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x2}, 0x4e, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffd, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.608763385s ago: executing program 0 (id=1718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e1e, 0x3, 'sed\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000001080)={{0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x6, 0x8, 0x2d}, {@remote, 0x4e22, 0x2000, 0x7f, 0x9, 0x5}}, 0x44) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x4c, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) lstat(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b00)=@getpolicy={0x1a0, 0x15, 0x2, 0x70bd29, 0x25dfdbfd, {{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x3, 0x4e21, 0x800, 0xa, 0x0, 0xc0, 0x32, r6, r7}, 0x6e6bbe, 0x2}, [@algo_aead={0xdf, 0x12, {{'rfc4106(ccm(seed))\x00'}, 0x498, 0x200, "5f783d722bb1d9e52c397aadbf2aa322ad5706c7793478f1af14bda2dd36dab4b62e9dcdd9b54ac85046a4acf8a14805d39d99cd939a4c1feb4e8ac78a7c43e6beb64b20872ae1bdbf349838892e0c4e686ce18b1e291607e867a4890e0055d7c2a6315278f769695663af25de6309f29f8f0b2edd60e3b3242a5bf3dc5fa1c8dbcb33c96e69524aa9f2a2ede8e9c5c59aa62e"}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2c, 0x8000}}, @sec_ctx={0x51, 0x8, {0x4d, 0x8, 0x1, 0x8, 0x45, "efb4e86b9079d98c5751b413c89234505506e416ce44ff9b3eda91b770bc4e3101786b62a42be464b37b194fd597b80ad9b03708e8dd8373495f35d6c526e5653dae868518"}}, @lastused={0xc, 0xf, 0x1}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40000}, 0x4005) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000f3dbdf25280000000a0001007770616e3000000005002e000500000005002b0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0x34, r11, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x4004) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000129bd7000ffdbdf253000000005003400d60000000a0001007770616e3000000008000200", @ANYRES32=r10, @ANYBLOB="3a3ed8fbdcec90a5c105287a2ab235aa239bcfd2522af17468bcce2dbcdea73325247e4b415895055323e8cf2ff930ac707ed25941e1965b7833ccdd1527b3707bad3fdc7567da07eb33"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0xfb03796ef75665e5) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="010026bd7000fddbdf25010000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000048}, 0x48004) r13 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x301500, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r13, 0xc0182101, &(0x7f00000000c0)={r14, 0x0, 0x5}) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r8) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x48240348}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r15, 0x2b6c8c4f41768624, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}}, 0xc1) 2.53847305s ago: executing program 5 (id=1719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x1000, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000280)={0x2, 0x0, 0x27, &(0x7f0000000100)={0x8000000000000001, 0xb66c}}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000240), 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0xbb5, 0x4}]}) 2.492930446s ago: executing program 4 (id=1720): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x400, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5d, 0x35, 0xb9, 0x40, 0x582, 0x8d, 0x7aac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0x9e, 0xc8}}]}}]}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@s={0x5, @generic=0xe, 0x1f}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0xde}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000001c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@remote, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000a9e030d8aec2c592e000030000009078006800d2"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) 2.417008268s ago: executing program 5 (id=1721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000300)) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) write(r4, &(0x7f0000000240)="bc6bf7ec543db690b74c815824254c900df801fda8baf0aed44df58e39d96e3989e5aa249f9bf3d518726f37aa6df3b3255712d8588060eda6e248aea241dd5e4e428474c7bade1186e00049f5dcc155d1ddb925e761b44de0f1db6fbe99e96ea396a02366aecea936a71be51071ed707c2f8f1b44c57fe97c4726f637919fbef4f5c25741e8e710ab24e6ba54c4e5415f51447e2db18df19e", 0x99) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f00000000c0)=0x1c, 0x800) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff}, 0x1c) socket$kcm(0x10, 0x400000002, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x0, 0x1a, "0f565053facfc9659336111f4517f275598a7a77d30165c2f115"}, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) 2.410781352s ago: executing program 0 (id=1722): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000002c0)=0xb000) (async) openat(r1, &(0x7f0000000000)='./file0\x00', 0x80000, 0x4) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200800, &(0x7f00000003c0)=ANY=[]) 2.300900503s ago: executing program 0 (id=1723): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="66b97208000066b8d04a000066ba000000000f30da4300bad004edb8dd008ed0650f0199009867362ea5752f2e0f73d3990f0f0ea866970f20e06635040000000f22e0", 0x43}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, &(0x7f0000000200)) read$msr(r4, &(0x7f0000000040)=""/57, 0x39) keyctl$dh_compute(0x17, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180)={0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_l2cap(r7, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000000)=0x5, &(0x7f0000000080)=0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 1.604111731s ago: executing program 2 (id=1724): syz_emit_ethernet(0x89, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60cb653e00533afffe800000000000000000000000000001ff0200000000000000000000000000018600907800000200000000000000000005087db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49bcb89f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x810) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 1.401121835s ago: executing program 2 (id=1725): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffc}}, 0x50) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/132, 0x84}, {&(0x7f00000000c0)=""/196, 0xc4}, {&(0x7f00000001c0)=""/248, 0xf8}], 0x3, 0x3, 0x3, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='pagemap\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x10}, 0x0, 0x0, 0x0, 0x0}) 972.614952ms ago: executing program 6 (id=1726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008c}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet(0x2, 0x3, 0x5) (async) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000005c0)=[{{&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000480)=""/114, 0x72}], 0x3, &(0x7f0000000580)=""/43, 0x2b}, 0x3}], 0x1, 0x22, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) (async) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) ppoll(&(0x7f00000000c0)=[{r7, 0x9021}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) 843.191591ms ago: executing program 6 (id=1727): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) socket(0x2, 0x5, 0x78768385) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000005000000000000000800000085200000030000009500000000000000852000000300000018540000070000000000000000000000ffffffff18000018470000080000000000000000000000182600"/96, @ANYRES32, @ANYBLOB="000000007effffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x89, &(0x7f0000000280)=""/137, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x10, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x3, 0x7, 0x6}, {0x2, 0x3, 0xa, 0x4}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup, 0xa, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb862, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x16, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0x7, 0x9, 0x7, 0xfffffffffffffff8, 0x4}, @map_idx={0x18, 0xa}, @map_fd={0x18, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0xeb85, 0xef, &(0x7f00000008c0)=""/239, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0xc, 0x7, 0x7}, 0x10, 0xd256, 0xffffffffffffffff, 0x5, &(0x7f0000000a40)=[0x1, 0x1], &(0x7f0000000a80)=[{0x4, 0x2, 0x10, 0xa}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xb, 0xc}, {0x5, 0x5, 0xd, 0xa}, {0x4, 0x5, 0xe}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="33000000100084406ffc1d00", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r4], 0x20) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008", @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 592.885831ms ago: executing program 0 (id=1728): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x9}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x5b, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa2f5bdd602e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a04004d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000003c0)=""/130, 0x82}], 0x2}, 0xa1}], 0x1, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001ac0)="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", 0x138}, {&(0x7f0000000340)="db848c401421ee6e3593ae8a205730c148d9da7ffc4b1981482a6c014e3a4fd70e64898fd3bd8b803d314f07daaa964420d7e1d75a287a4d9a09c19cdca107a9086c8cf2b19c3b4d01774bdd89648dcf114f31c126ec0f04fed328f6ae1b9810e24f15b66c998237c81348d16418ad13847e7ab34f8b93bfe9", 0x79}, {&(0x7f0000000480)="39abf2b5b6468403b8715a1357ee05fe380416e57066bcd62063252e2904ca0fffc60cbd0020ae7fce9492c82c399008ea8f4e735bc43cb32cc535d59c4d0a3d4c2399d521e1287ef25616c488d6f25b5fa53329224586335000ecfdae3112dea76977d3b34ad96349a8c0ef36f4ffa869caec3c00", 0x75}, {&(0x7f0000000500)="890ebe6d2e8fa6ac44aad9a12756dcd96dbd8288b7a9f9f7e63ff2ad91721186b7dbbb1eb538b7fd1b6f31e8c6c48cc258c23634ac813a25d8eb9946ec82ea87abc9bc8dba1375de71ba6b2aa79286e58c9e9d69cdc99960d8ef32af395676672e098d7d0687eef8937268becf53e678a47cbd887b9bf16d9ee9de0ab81721786c13231145e4ae2d730789c66db22ec2d09449537d446ba2b47920b7", 0x9c}, {&(0x7f00000002c0)="b73cf8", 0x3}, {&(0x7f0000000680)="683c1c72a01c862e7295db55593cd11f3775ae129191d94405f80ba1bb39e33cc04518389048b77df145f39378d8c62b4942015c3c0661da769a6aaf3250d26cfa726df199016c1f16b83a07521d7c8d48875c393ce432544df6f2026244d7ccf36f954f7cefb81aab4721d9f76c3f258f5b61d0a7f702a09826600393518fdd75026c0785d44992f3c70568befedd66be3c2db6dcd5dc2c68ee9f6c0636d9174dc25a95105863dda3116c20977722d56d04b1e5046f85ab9e4a0a1177231f0ea6efb9447e680d33c6978b881c78c210b4110e4fc333b197aad302c3bd", 0xdd}, {&(0x7f0000000780)="e89d3fa8edc0ed6e42a6f535f794604395eb88d7094caa9d4e8a89eb4ae2e45d3fe04843bb232923825db55378451c332946c681006f2dd56034bbc864533ba5482d23caaba2742959bc65a423f301f68591aa30e6a4cc36f8a4957f2738c29bb5be7cad4ef2bda75e7952db0a45a8c171f9aa71087e71d3dbedd89e2c8146815758862346fae45203ccc486942a71105dfc59259eef4a7c575e74e70ecc098d2fcca884697c19e4c91618b61958da66cfd0", 0xb2}, {&(0x7f0000000840)="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", 0x735}], 0x8}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 45.349504ms ago: executing program 2 (id=1729): ioperm(0x8, 0x8001, 0x54c) rt_sigqueueinfo(0x0, 0x2, 0x0) 0s ago: executing program 2 (id=1730): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRES64=r1, @ANYRES16=r1], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000121401"], 0x28}}, 0x8804) sendmmsg$unix(r5, &(0x7f0000001100)=[{{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000005c0)="fc4cb56c47dbc0ef78d9833795167c091813118ed097105f7a976f4c32ee8b0868c02f70f3815fda4ca7c786c99a26fb47d757379f867ab255c7f384ec81d0eccd6e12614a806c30efd20cac65a4bb6b4f77759073a170b28015", 0x5a}, {&(0x7f0000000640)="82d3456678e291c8f78d5ae79e34c322e768b16228d0388ec49737e78e643f8281084b1098139845c86018f63f143417499f921291d15f2da2b7eb6a21ff95d9e43066475bb69daf2594f82558ddee44a447328fc2c703800ac3c0eb19df04cafd8dd9e0f99644d3a6313d661d1ec80286d97c8194c85a0c9be1cab1905b3fac0a86e516552fc9037225953b1da56d1cd25ef86f1168fef7682a8a268fafd1b8e49a76091d95e23bb2b9dcd5ed7bed6ea7ca385b2d932f579db4124665924e5ba11813adb3807225cb56b479792ff1709e90dfe5abc7ae908b2f23bd1e093ec57d35b1", 0xe3}, {&(0x7f00000003c0)="9f07114e765ed1e72d8b50096a5fabc2362b4d05e2f1ff905876516b1d7318e90d", 0x21}, {&(0x7f0000000740)="5fcafa91df9cacfbb9ac38b7f8f81bfcd155d594768cd6080006ccd50b116ae319da728f8713b8b68e4db0c2ce97c4b6b42ff8887608b76c8755e810517e248213f466ecabb1169e8736fc42", 0x4c}], 0x4, &(0x7f0000000800)=[@rights={{0x34, 0x1, 0x1, [r4, r4, r5, r2, r0, r5, r6, r6, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r5, r0, 0xffffffffffffffff, 0xffffffffffffffff, r6, r6, r4, 0xffffffffffffffff, r4, r4]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r2]}}, @rights={{0x34, 0x1, 0x1, [r5, r0, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x160, 0x20000000}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlockall(0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000050000000100010009c8fcac7b20390763889972dd5423c90300000001000000bd4bc9ebc76108c862abef187a7c2d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) writev(r7, &(0x7f0000000280)=[{&(0x7f00000001c0)="d9dc1f82a38b0023d336358501a02abaff7eed5316024861d49f22e8c3d57f801ef7e05c09fccbab1b3dba57d0b4e6ebe16b038666892b457c55", 0x3a}, {&(0x7f00000004c0)="8086b7f891a058cbae674ff3b9471464b46d6e4222ca038ebbef8bad95ae2630d6b4485127e813732867ab2b91d8db275132a2c2fe88203791011fbd17e0fdbc9d819b9e1aba47ff30431be933e135d8830cc346d433f7c7b20bfd7cec84477a7983299b54614ac9", 0x68}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r8, 0x25, &(0x7f00000000c0)) r9 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r9, 0xb) shmat(r9, &(0x7f0000ffd000/0x1000)=nil, 0x7000) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) kernel console output (not intermixed with test programs): ] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 307.181388][ T9628] overlayfs: failed to clone upperpath [ 307.213538][ T9628] vlan2: entered allmulticast mode [ 307.464258][ T47] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 307.538512][ T9644] hub 9-0:1.0: USB hub found [ 307.543377][ T9644] hub 9-0:1.0: 1 port detected [ 307.676681][ T9647] ptrace attach of "./syz-executor exec"[6433] was attempted by "./syz-executor exec"[9647] [ 307.755331][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.975'. [ 307.848326][ T9652] veth0_vlan: entered allmulticast mode [ 307.912552][ T9652] veth0_vlan: left promiscuous mode [ 307.921398][ T9652] veth0_vlan: entered promiscuous mode [ 308.985326][ T5819] Bluetooth: hci2: command 0x1003 tx timeout [ 309.034001][ T5831] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 309.813718][ T47] usb 3-1: USB disconnect, device number 32 [ 310.319276][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 310.328735][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 310.337826][ T9680] FAULT_INJECTION: forcing a failure. [ 310.337826][ T9680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.350890][ T9680] CPU: 0 UID: 0 PID: 9680 Comm: syz.0.983 Not tainted 6.14.0-syzkaller #0 [ 310.350902][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.350909][ T9680] Call Trace: [ 310.350912][ T9680] [ 310.350916][ T9680] dump_stack_lvl+0x16c/0x1f0 [ 310.350935][ T9680] should_fail_ex+0x50a/0x650 [ 310.350953][ T9680] _copy_to_user+0x32/0xd0 [ 310.350965][ T9680] simple_read_from_buffer+0xd0/0x160 [ 310.350982][ T9680] proc_fail_nth_read+0x198/0x270 [ 310.350998][ T9680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.351013][ T9680] ? rw_verify_area+0xcf/0x680 [ 310.351027][ T9680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.351041][ T9680] vfs_read+0x1df/0xbf0 [ 310.351057][ T9680] ? __fget_files+0x1fc/0x3a0 [ 310.351067][ T9680] ? __pfx___mutex_lock+0x10/0x10 [ 310.351082][ T9680] ? __pfx_vfs_read+0x10/0x10 [ 310.351101][ T9680] ? __fget_files+0x206/0x3a0 [ 310.351115][ T9680] ksys_read+0x12b/0x250 [ 310.351134][ T9680] ? __pfx_ksys_read+0x10/0x10 [ 310.351154][ T9680] do_syscall_64+0xcd/0x250 [ 310.351169][ T9680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.351184][ T9680] RIP: 0033:0x7f0bbb78bb7c [ 310.351192][ T9680] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.351202][ T9680] RSP: 002b:00007f0bbc611030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.351212][ T9680] RAX: ffffffffffffffda RBX: 00007f0bbb9a6080 RCX: 00007f0bbb78bb7c [ 310.351219][ T9680] RDX: 000000000000000f RSI: 00007f0bbc6110a0 RDI: 0000000000000009 [ 310.351225][ T9680] RBP: 00007f0bbc611090 R08: 0000000000000000 R09: 0000000000000000 [ 310.351230][ T9680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.351236][ T9680] R13: 0000000000000000 R14: 00007f0bbb9a6080 R15: 00007ffc3cb00068 [ 310.351249][ T9680] [ 310.554059][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 310.554072][ T30] audit: type=1400 audit(1742864984.139:824): avc: denied { write } for pid=9675 comm="syz.0.983" name="usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 311.340410][ T30] audit: type=1400 audit(1742864985.159:825): avc: denied { write } for pid=9693 comm="syz.6.987" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 311.383684][ T30] audit: type=1400 audit(1742864985.199:826): avc: denied { create } for pid=9698 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 311.589545][ T30] audit: type=1804 audit(1742864985.199:827): pid=9700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.989" name="/newroot/213/file0" dev="tmpfs" ino=1192 res=1 errno=0 [ 311.723949][ T30] audit: type=1400 audit(1742864985.209:828): avc: denied { getopt } for pid=9698 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 311.723986][ T30] audit: type=1400 audit(1742864985.209:829): avc: denied { shutdown } for pid=9698 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 311.724013][ T30] audit: type=1804 audit(1742864985.219:830): pid=9700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.989" name="/newroot/213/file0" dev="tmpfs" ino=1192 res=1 errno=0 [ 313.269158][ T9728] netlink: 40 bytes leftover after parsing attributes in process `syz.6.997'. [ 313.399034][ T9735] netlink: 'syz.6.997': attribute type 1 has an invalid length. [ 313.503201][ T30] audit: type=1400 audit(1742864987.319:831): avc: denied { map } for pid=9738 comm="syz.4.1000" path="/dev/v4l-subdev3" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 313.850666][ T9748] overlayfs: missing 'lowerdir' [ 314.275952][ T30] audit: type=1400 audit(1742864988.099:832): avc: denied { write } for pid=9749 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 314.465231][ T30] audit: type=1400 audit(1742864988.289:833): avc: denied { append } for pid=9756 comm="syz.2.1006" name="nbd2" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.814997][ T9759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.845261][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.872405][ T9781] FAULT_INJECTION: forcing a failure. [ 316.872405][ T9781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.886461][ T9781] CPU: 1 UID: 0 PID: 9781 Comm: syz.6.1013 Not tainted 6.14.0-syzkaller #0 [ 316.886481][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.886491][ T9781] Call Trace: [ 316.886497][ T9781] [ 316.886503][ T9781] dump_stack_lvl+0x16c/0x1f0 [ 316.886531][ T9781] should_fail_ex+0x50a/0x650 [ 316.886557][ T9781] ? __pfx___might_resched+0x10/0x10 [ 316.886586][ T9781] should_fail_alloc_page+0xe7/0x130 [ 316.886607][ T9781] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 316.886636][ T9781] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 316.886656][ T9781] ? unwind_get_return_address+0x59/0xa0 [ 316.886681][ T9781] ? arch_stack_walk+0xa7/0x100 [ 316.886703][ T9781] ? hlock_class+0x4e/0x130 [ 316.886722][ T9781] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 316.886751][ T9781] ? __pfx___lock_acquire+0x10/0x10 [ 316.886773][ T9781] ? kasan_save_stack+0x42/0x60 [ 316.886788][ T9781] ? kasan_save_stack+0x33/0x60 [ 316.886802][ T9781] ? kasan_save_track+0x14/0x30 [ 316.886816][ T9781] ? __kasan_slab_alloc+0x89/0x90 [ 316.886832][ T9781] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 316.886849][ T9781] ? alloc_vmap_area+0x636/0x2a60 [ 316.886869][ T9781] ? __get_vm_area_node+0x19e/0x2f0 [ 316.886891][ T9781] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 316.886919][ T9781] ? policy_nodemask+0xea/0x4e0 [ 316.886940][ T9781] alloc_pages_mpol+0x1fc/0x540 [ 316.886960][ T9781] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 316.886977][ T9781] ? __page_table_check_ptes_set+0x16b/0x3e0 [ 316.886996][ T9781] ? do_raw_spin_lock+0x12d/0x2c0 [ 316.887012][ T9781] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 316.887032][ T9781] alloc_pages_noprof+0x131/0x390 [ 316.887050][ T9781] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 316.887074][ T9781] get_free_pages_noprof+0xc/0x40 [ 316.887094][ T9781] kasan_populate_vmalloc_pte+0x2d/0x160 [ 316.887120][ T9781] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 316.887146][ T9781] __apply_to_page_range+0x5fd/0xd30 [ 316.887174][ T9781] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 316.887204][ T9781] ? __pfx___apply_to_page_range+0x10/0x10 [ 316.887230][ T9781] ? insert_vmap_area+0x2ef/0x4d0 [ 316.887256][ T9781] alloc_vmap_area+0x93e/0x2a60 [ 316.887289][ T9781] ? __pfx_alloc_vmap_area+0x10/0x10 [ 316.887326][ T9781] __get_vm_area_node+0x19e/0x2f0 [ 316.887355][ T9781] vmap+0x15a/0x350 [ 316.887376][ T9781] ? xdp_umem_create+0xdee/0x1270 [ 316.887394][ T9781] ? __pfx_vmap+0x10/0x10 [ 316.887414][ T9781] ? __kvmalloc_node_noprof+0x6f/0x1a0 [ 316.887443][ T9781] xdp_umem_create+0xdee/0x1270 [ 316.887468][ T9781] xsk_setsockopt+0x7fc/0xa10 [ 316.887484][ T9781] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.887508][ T9781] ? selinux_socket_setsockopt+0x6a/0x80 [ 316.887532][ T9781] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.887549][ T9781] do_sock_setsockopt+0x222/0x480 [ 316.887567][ T9781] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 316.887586][ T9781] ? lock_acquire+0x2f/0xb0 [ 316.887621][ T9781] __sys_setsockopt+0x1a0/0x230 [ 316.887650][ T9781] __x64_sys_setsockopt+0xbd/0x160 [ 316.887672][ T9781] ? do_syscall_64+0x91/0x250 [ 316.887695][ T9781] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.887717][ T9781] do_syscall_64+0xcd/0x250 [ 316.887741][ T9781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.887763][ T9781] RIP: 0033:0x7f06add8d169 [ 316.887776][ T9781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.887791][ T9781] RSP: 002b:00007f06aec06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.887806][ T9781] RAX: ffffffffffffffda RBX: 00007f06adfa5fa0 RCX: 00007f06add8d169 [ 316.887816][ T9781] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000007 [ 316.887826][ T9781] RBP: 00007f06aec06090 R08: 000000000000001c R09: 0000000000000000 [ 316.887835][ T9781] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 316.887845][ T9781] R13: 0000000000000000 R14: 00007f06adfa5fa0 R15: 00007ffc5f206968 [ 316.887869][ T9781] [ 317.273792][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.317223][ T9786] dvmrp1: entered allmulticast mode [ 318.621957][ T9811] FAULT_INJECTION: forcing a failure. [ 318.621957][ T9811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.721147][ T9811] CPU: 0 UID: 0 PID: 9811 Comm: syz.6.1020 Not tainted 6.14.0-syzkaller #0 [ 318.721171][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.721182][ T9811] Call Trace: [ 318.721187][ T9811] [ 318.721194][ T9811] dump_stack_lvl+0x16c/0x1f0 [ 318.721224][ T9811] should_fail_ex+0x50a/0x650 [ 318.721256][ T9811] _copy_to_user+0x32/0xd0 [ 318.721277][ T9811] simple_read_from_buffer+0xd0/0x160 [ 318.721305][ T9811] proc_fail_nth_read+0x198/0x270 [ 318.721331][ T9811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.721363][ T9811] ? rw_verify_area+0xcf/0x680 [ 318.721387][ T9811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.721411][ T9811] vfs_read+0x1df/0xbf0 [ 318.721439][ T9811] ? mark_held_locks+0x9f/0xe0 [ 318.721463][ T9811] ? __pfx_vfs_read+0x10/0x10 [ 318.721488][ T9811] ? irqentry_exit+0x3b/0x90 [ 318.721510][ T9811] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.721548][ T9811] ksys_read+0x12b/0x250 [ 318.721572][ T9811] ? __pfx_ksys_read+0x10/0x10 [ 318.721605][ T9811] do_syscall_64+0xcd/0x250 [ 318.721631][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.721654][ T9811] RIP: 0033:0x7f06add8bb7c [ 318.721672][ T9811] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 318.721688][ T9811] RSP: 002b:00007f06aec06030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.721705][ T9811] RAX: ffffffffffffffda RBX: 00007f06adfa5fa0 RCX: 00007f06add8bb7c [ 318.721716][ T9811] RDX: 000000000000000f RSI: 00007f06aec060a0 RDI: 0000000000000004 [ 318.721727][ T9811] RBP: 00007f06aec06090 R08: 0000000000000000 R09: 0000000000000000 [ 318.721736][ T9811] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 318.721746][ T9811] R13: 0000000000000000 R14: 00007f06adfa5fa0 R15: 00007ffc5f206968 [ 318.721770][ T9811] [ 318.915665][ T9812] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1022'. [ 319.333428][ T9825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.248930][ T30] audit: type=1326 audit(1742864994.069:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.5.1027" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27f178d169 code=0x0 [ 320.741990][ T9844] FAULT_INJECTION: forcing a failure. [ 320.741990][ T9844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.783932][ T9844] CPU: 0 UID: 0 PID: 9844 Comm: syz.6.1032 Not tainted 6.14.0-syzkaller #0 [ 320.783954][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.783963][ T9844] Call Trace: [ 320.783968][ T9844] [ 320.783974][ T9844] dump_stack_lvl+0x16c/0x1f0 [ 320.784002][ T9844] should_fail_ex+0x50a/0x650 [ 320.784032][ T9844] _copy_from_user+0x2e/0xd0 [ 320.784051][ T9844] do_sock_getsockopt+0x5f6/0x800 [ 320.784068][ T9844] ? trace_lock_acquire+0x80/0x1f0 [ 320.784090][ T9844] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 320.784107][ T9844] ? lock_acquire+0x2f/0xb0 [ 320.784127][ T9844] ? __fget_files+0x40/0x3a0 [ 320.784147][ T9844] ? __fget_files+0x206/0x3a0 [ 320.784168][ T9844] __sys_getsockopt+0x12f/0x260 [ 320.784197][ T9844] __x64_sys_getsockopt+0xbd/0x160 [ 320.784220][ T9844] ? do_syscall_64+0x91/0x250 [ 320.784244][ T9844] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.784266][ T9844] do_syscall_64+0xcd/0x250 [ 320.784290][ T9844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.784314][ T9844] RIP: 0033:0x7f06add8d169 [ 320.784328][ T9844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.784344][ T9844] RSP: 002b:00007f06aec06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 320.784361][ T9844] RAX: ffffffffffffffda RBX: 00007f06adfa5fa0 RCX: 00007f06add8d169 [ 320.784378][ T9844] RDX: 0000000000000045 RSI: 0000000000000029 RDI: 0000000000000003 [ 320.784388][ T9844] RBP: 00007f06aec06090 R08: 0000200000000080 R09: 0000000000000000 [ 320.784398][ T9844] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 320.784409][ T9844] R13: 0000000000000000 R14: 00007f06adfa5fa0 R15: 00007ffc5f206968 [ 320.784431][ T9844] [ 323.194583][ T9874] netlink: 'syz.2.1040': attribute type 7 has an invalid length. [ 323.245025][ T9874] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1040'. [ 323.504931][ T9874] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 323.782448][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1042'. [ 323.797986][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1042'. [ 323.963939][ T9888] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 324.074465][ T30] audit: type=1326 audit(1742864997.849:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.2.1044" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8b0b8d169 code=0x0 [ 325.182588][ T9901] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 325.219656][ T2943] Bluetooth: hci2: Frame reassembly failed (-84) [ 325.710041][ T30] audit: type=1400 audit(1742864999.529:836): avc: denied { mount } for pid=9915 comm="syz.5.1052" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 325.794035][ T30] audit: type=1400 audit(1742864999.559:837): avc: denied { remount } for pid=9915 comm="syz.5.1052" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 325.882190][ T9920] netlink: 'syz.4.1055': attribute type 33 has an invalid length. [ 325.893922][ T5867] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 325.914732][ T9920] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1055'. [ 326.069690][ T30] audit: type=1326 audit(1742864999.889:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.4.1055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc938d169 code=0x0 [ 326.153901][ T5867] usb 7-1: Using ep0 maxpacket: 8 [ 326.160986][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short [ 326.171622][ T5867] usb 7-1: config 2 has an invalid interface number: 224 but max is 0 [ 326.189539][ T5867] usb 7-1: config 2 has no interface number 0 [ 326.202381][ T5867] usb 7-1: config 2 interface 224 altsetting 128 endpoint 0xF has invalid wMaxPacketSize 0 [ 326.212540][ T5867] usb 7-1: config 2 interface 224 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 326.224242][ T5867] usb 7-1: config 2 interface 224 has no altsetting 0 [ 326.232689][ T5867] usb 7-1: New USB device found, idVendor=54cf, idProduct=dbbc, bcdDevice=ab.d8 [ 326.244208][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.252207][ T5867] usb 7-1: Product: syz [ 326.267339][ T5867] usb 7-1: Manufacturer: syz [ 326.271958][ T5867] usb 7-1: SerialNumber: syz [ 326.565259][ T5867] usb-storage 7-1:2.224: USB Mass Storage device detected [ 326.607026][ T9933] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 326.623992][ T9933] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 326.647112][ T5867] usb 7-1: USB disconnect, device number 13 [ 326.680964][ T9933] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.698777][ T9933] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 326.742028][ T9933] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 326.748291][ T9933] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 326.762803][ T30] audit: type=1400 audit(1742865000.579:839): avc: denied { ioctl } for pid=9913 comm="syz.0.1053" path="socket:[26521]" dev="sockfs" ino=26521 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.763709][ T9914] team0: entered allmulticast mode [ 326.788121][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.810477][ T9933] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 326.816730][ T9933] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 326.831027][ T9914] team_slave_0: entered allmulticast mode [ 326.837208][ T9914] team_slave_1: entered allmulticast mode [ 326.844100][ T9933] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.850040][ T9933] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 327.228287][ T5819] Bluetooth: hci2: command 0x1003 tx timeout [ 327.234064][ T5831] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 327.698590][ T9953] tipc: Can't bind to reserved service type 0 [ 327.832806][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1065'. [ 327.844340][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.852000][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.141646][ T30] audit: type=1400 audit(1742865001.949:840): avc: denied { map } for pid=9957 comm="syz.6.1066" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 328.410210][ T9963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1067'. [ 328.615186][ T30] audit: type=1400 audit(1742865002.439:841): avc: denied { write } for pid=9970 comm="syz.2.1070" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 328.638261][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.074470][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 329.254933][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 329.277378][ T9978] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.285550][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 329.302460][ T9] usb 7-1: config 179 has no interface number 0 [ 329.323904][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 329.335183][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 329.346454][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 329.358049][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 329.369584][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 329.392919][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 329.402159][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.412308][ T9966] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 329.788172][ T2146] usb 7-1: USB disconnect, device number 14 [ 329.788247][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 329.803067][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 330.307795][ T9989] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 330.315783][ T54] Bluetooth: hci2: Frame reassembly failed (-84) [ 330.822401][T10000] overlayfs: failed to resolve './file1': -2 [ 330.899857][T10006] overlay: Unknown parameter 'subj_type' [ 331.390671][ T30] audit: type=1400 audit(1742865005.209:842): avc: denied { read } for pid=10011 comm="syz.5.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.410450][ T5867] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 331.426969][T10010] xt_cgroup: xt_cgroup: no path or classid specified [ 331.564932][ T5867] usb 3-1: too many configurations: 81, using maximum allowed: 8 [ 331.577506][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 331.591846][ T5867] usb 3-1: can't read configurations, error -61 [ 331.687248][T10020] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 331.732802][T10020] ptrace attach of ""[10021] was attempted by "./syz-executor exec"[10020] [ 331.807548][ T5867] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 332.114037][ T5867] usb 3-1: too many configurations: 81, using maximum allowed: 8 [ 332.144829][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 332.185560][ T5867] usb 3-1: can't read configurations, error -61 [ 332.200266][ T5867] usb usb3-port1: attempt power cycle [ 332.345766][ T5819] Bluetooth: hci2: command 0x1003 tx timeout [ 332.351939][ T5831] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 332.573992][ T5867] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 332.954695][ T5867] usb 3-1: too many configurations: 81, using maximum allowed: 8 [ 332.989637][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 333.009933][ T5867] usb 3-1: can't read configurations, error -61 [ 333.384022][ T5867] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 333.404802][ T5867] usb 3-1: too many configurations: 81, using maximum allowed: 8 [ 333.414082][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 333.421659][ T5867] usb 3-1: can't read configurations, error -61 [ 333.509308][ T5867] usb usb3-port1: unable to enumerate USB device [ 334.554660][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1093'. [ 335.281385][ T30] audit: type=1400 audit(1742865009.099:843): avc: denied { getopt } for pid=10071 comm="syz.5.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 337.299431][T10043] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 337.309801][T10043] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 338.482530][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 338.673910][T10106] tap0: tun_chr_ioctl cmd 1074025672 [ 338.679836][T10106] tap0: ignored: set checksum disabled [ 338.784877][T10110] trusted_key: encrypted_key: insufficient parameters specified [ 339.119490][T10119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.500617][T10131] fuse: Bad value for 'user_id' [ 339.508151][T10131] fuse: Bad value for 'user_id' [ 340.667228][ T30] audit: type=1400 audit(1742865014.489:844): avc: denied { listen } for pid=10145 comm="syz.2.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 340.733264][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1120'. [ 341.654872][ T30] audit: type=1400 audit(1742865015.479:845): avc: denied { execute } for pid=10161 comm="syz.0.1124" path="/dev/snd/pcmC0D0p" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 341.680366][ T30] audit: type=1326 audit(1742865015.479:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 341.711502][ T30] audit: type=1326 audit(1742865015.479:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 341.739617][ T30] audit: type=1326 audit(1742865015.479:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 341.768023][ T30] audit: type=1326 audit(1742865015.479:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 341.795242][ T30] audit: type=1326 audit(1742865015.479:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 341.850283][ T30] audit: type=1326 audit(1742865015.479:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 341.884117][ T5867] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 341.894393][ T30] audit: type=1326 audit(1742865015.479:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 341.918253][ T5818] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 341.926731][ T30] audit: type=1326 audit(1742865015.479:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 341.988984][T10171] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1127'. [ 342.034182][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 342.049526][ T5867] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 342.069204][ T5867] usb 7-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 342.088098][ T5867] usb 7-1: Product: syz [ 342.092294][ T5867] usb 7-1: Manufacturer: syz [ 342.097452][ T5867] usb 7-1: SerialNumber: syz [ 342.103559][ T5867] usb 7-1: config 0 descriptor?? [ 342.115641][ T5867] usb 7-1: selecting invalid altsetting 1 [ 342.139394][ T5867] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 342.226181][T10173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1129'. [ 342.321906][ T5818] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 342.330248][ T5818] usb 3-1: config 0 has no interface number 0 [ 342.340367][ T5818] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 342.366283][ T5818] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 44, changing to 9 [ 343.378286][ T5818] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 343.405522][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.414392][ T5818] usb 3-1: Product: syz [ 343.419023][ T5818] usb 3-1: Manufacturer: syz [ 343.423738][ T5818] usb 3-1: SerialNumber: syz [ 343.435416][ T5818] usb 3-1: config 0 descriptor?? [ 343.442052][T10156] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 343.459679][ T5818] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 343.480928][ T5818] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 344.264488][ T5818] usb 3-1: USB disconnect, device number 37 [ 344.284414][ T5818] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 344.312030][ T5818] cyberjack 3-1:0.69: device disconnected [ 345.501380][T10221] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1138'. [ 345.627618][T10227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.636787][T10227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.207278][ T1201] usb 7-1: USB disconnect, device number 15 [ 346.250990][T10236] 9pnet_fd: Insufficient options for proto=fd [ 347.931519][T10254] fuse: Bad value for 'fd' [ 348.401983][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 348.402015][ T30] audit: type=1400 audit(1742865022.219:860): avc: denied { write } for pid=10260 comm="syz.5.1151" laddr=172.20.20.170 lport=39884 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 349.190469][T10276] overlayfs: failed to clone upperpath [ 349.693955][ T5867] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 349.844163][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 349.850800][ T5867] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 349.859357][ T5867] usb 3-1: config 0 has no interface number 0 [ 349.866163][ T5867] usb 3-1: config 0 interface 184 has no altsetting 0 [ 349.875414][ T5867] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 349.885789][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.896495][ T5867] usb 3-1: Product: syz [ 349.900715][ T5867] usb 3-1: Manufacturer: syz [ 349.906879][ T5867] usb 3-1: SerialNumber: syz [ 349.912383][ T5867] usb 3-1: config 0 descriptor?? [ 349.919518][ T5867] smsc75xx v1.0.0 [ 350.054223][ T1201] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 350.152430][ T5867] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 350.168932][ T5867] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 350.181344][ T5867] usb 3-1: USB disconnect, device number 38 [ 350.187949][ T1201] usb 1-1: device descriptor read/64, error -71 [ 350.433941][ T1201] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 350.573905][ T1201] usb 1-1: device descriptor read/64, error -71 [ 350.701465][ T1201] usb usb1-port1: attempt power cycle [ 350.877026][ T30] audit: type=1400 audit(1742865024.679:861): avc: denied { watch watch_reads } for pid=10297 comm="syz.5.1162" path="/229" dev="tmpfs" ino=1248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 351.334697][ T30] audit: type=1400 audit(1742865024.999:862): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=39952 daddr=10.128.1.33 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 351.423934][ T1201] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 351.506206][ T1201] usb 1-1: device descriptor read/8, error -71 [ 352.352682][ T1201] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 352.604327][ T1201] usb 1-1: device descriptor read/8, error -71 [ 352.621581][ T30] audit: type=1400 audit(1742865479.254:863): avc: denied { bind } for pid=10311 comm="syz.4.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 352.720715][ T1201] usb usb1-port1: unable to enumerate USB device [ 352.762935][T10328] FAULT_INJECTION: forcing a failure. [ 352.762935][T10328] name failslab, interval 1, probability 0, space 0, times 0 [ 352.773320][ T30] audit: type=1400 audit(1742865479.594:864): avc: denied { read } for pid=10324 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.795237][T10328] CPU: 1 UID: 0 PID: 10328 Comm: syz.4.1171 Not tainted 6.14.0-syzkaller #0 [ 352.795261][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.795270][T10328] Call Trace: [ 352.795274][T10328] [ 352.795280][T10328] dump_stack_lvl+0x16c/0x1f0 [ 352.795307][T10328] should_fail_ex+0x50a/0x650 [ 352.795331][T10328] ? fs_reclaim_acquire+0xae/0x150 [ 352.795357][T10328] ? tomoyo_encode2+0x100/0x3e0 [ 352.795378][T10328] should_failslab+0xc2/0x120 [ 352.795396][T10328] __kmalloc_noprof+0xcb/0x510 [ 352.795411][T10328] ? d_absolute_path+0x137/0x1b0 [ 352.795429][T10328] ? rcu_is_watching+0x12/0xc0 [ 352.795447][T10328] tomoyo_encode2+0x100/0x3e0 [ 352.795470][T10328] tomoyo_encode+0x29/0x50 [ 352.795490][T10328] tomoyo_realpath_from_path+0x19d/0x720 [ 352.795517][T10328] tomoyo_path_number_perm+0x248/0x590 [ 352.795534][T10328] ? tomoyo_path_number_perm+0x235/0x590 [ 352.795554][T10328] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 352.795592][T10328] ? __pfx_lock_release+0x10/0x10 [ 352.795612][T10328] ? trace_lock_acquire+0x14e/0x1f0 [ 352.795630][T10328] ? lock_acquire+0x2f/0xb0 [ 352.795648][T10328] ? __fget_files+0x40/0x3a0 [ 352.795665][T10328] ? __fget_files+0x206/0x3a0 [ 352.795682][T10328] security_file_ioctl+0x9b/0x240 [ 352.795705][T10328] __x64_sys_ioctl+0xb7/0x200 [ 352.795726][T10328] do_syscall_64+0xcd/0x250 [ 352.795749][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.795768][T10328] RIP: 0033:0x7fbbc938d169 [ 352.795780][T10328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.795794][T10328] RSP: 002b:00007fbbca237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.795808][T10328] RAX: ffffffffffffffda RBX: 00007fbbc95a5fa0 RCX: 00007fbbc938d169 [ 352.795817][T10328] RDX: 0000200000000540 RSI: 000000004054561e RDI: 0000000000000003 [ 352.795826][T10328] RBP: 00007fbbca237090 R08: 0000000000000000 R09: 0000000000000000 [ 352.795835][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.795844][T10328] R13: 0000000000000000 R14: 00007fbbc95a5fa0 R15: 00007ffc3d31b758 [ 352.795864][T10328] [ 352.795904][T10328] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.145942][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 354.501364][ T30] audit: type=1400 audit(1742865481.324:865): avc: denied { read } for pid=10345 comm="syz.4.1176" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.523795][ T1201] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 354.599561][ T30] audit: type=1400 audit(1742865481.424:866): avc: denied { ioctl } for pid=10347 comm="syz.0.1177" path="socket:[28312]" dev="sockfs" ino=28312 ioctlcmd=0x89fd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 354.702683][ T30] audit: type=1400 audit(1742865481.524:867): avc: denied { read } for pid=10347 comm="syz.0.1177" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 354.734595][ T30] audit: type=1400 audit(1742865481.524:868): avc: denied { open } for pid=10347 comm="syz.0.1177" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 354.766021][ T1201] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 354.768187][T10351] netlink: 'syz.4.1178': attribute type 39 has an invalid length. [ 354.777482][ T1201] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 354.805770][ T1201] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 354.831419][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.847042][T10358] overlayfs: failed to clone upperpath [ 355.127142][ T1201] usb 3-1: string descriptor 0 read error: -71 [ 355.135028][ T1201] hub 3-1:32.0: USB hub found [ 355.240538][ T1201] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 355.366904][ T1201] usb 3-1: USB disconnect, device number 39 [ 355.959427][T10391] FAULT_INJECTION: forcing a failure. [ 355.959427][T10391] name failslab, interval 1, probability 0, space 0, times 0 [ 355.972178][T10391] CPU: 0 UID: 0 PID: 10391 Comm: syz.6.1188 Not tainted 6.14.0-syzkaller #0 [ 355.972198][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.972205][T10391] Call Trace: [ 355.972208][T10391] [ 355.972212][T10391] dump_stack_lvl+0x16c/0x1f0 [ 355.972230][T10391] should_fail_ex+0x50a/0x650 [ 355.972248][T10391] ? fs_reclaim_acquire+0xae/0x150 [ 355.972265][T10391] should_failslab+0xc2/0x120 [ 355.972278][T10391] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 355.972291][T10391] ? p9_client_create+0x4e8/0x1200 [ 355.972306][T10391] kstrdup+0x53/0x100 [ 355.972321][T10391] p9_client_create+0x4e8/0x1200 [ 355.972337][T10391] ? __pfx_p9_client_create+0x10/0x10 [ 355.972352][T10391] ? rcu_is_watching+0x12/0xc0 [ 355.972363][T10391] ? trace_kmalloc+0x2d/0xd0 [ 355.972379][T10391] ? __raw_spin_lock_init+0x3a/0x110 [ 355.972391][T10391] v9fs_session_init+0x1f8/0x1a80 [ 355.972411][T10391] ? __pfx_v9fs_session_init+0x10/0x10 [ 355.972432][T10391] v9fs_mount+0xc6/0xa30 [ 355.972448][T10391] ? __pfx_v9fs_mount+0x10/0x10 [ 355.972465][T10391] ? cap_capable+0xb3/0x250 [ 355.972478][T10391] ? __pfx_v9fs_mount+0x10/0x10 [ 355.972493][T10391] legacy_get_tree+0x109/0x220 [ 355.972505][T10391] vfs_get_tree+0x8b/0x340 [ 355.972519][T10391] path_mount+0x14e6/0x1f10 [ 355.972532][T10391] ? kmem_cache_free+0x2e2/0x4d0 [ 355.972541][T10391] ? __pfx_path_mount+0x10/0x10 [ 355.972554][T10391] ? putname+0x13c/0x180 [ 355.972567][T10391] __x64_sys_mount+0x28f/0x310 [ 355.972579][T10391] ? __pfx___x64_sys_mount+0x10/0x10 [ 355.972594][T10391] do_syscall_64+0xcd/0x250 [ 355.972610][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.972624][T10391] RIP: 0033:0x7f06add8d169 [ 355.972634][T10391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.972644][T10391] RSP: 002b:00007f06aec06038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.972654][T10391] RAX: ffffffffffffffda RBX: 00007f06adfa5fa0 RCX: 00007f06add8d169 [ 355.972661][T10391] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 355.972667][T10391] RBP: 00007f06aec06090 R08: 0000200000000300 R09: 0000000000000000 [ 355.972673][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.972678][T10391] R13: 0000000000000000 R14: 00007f06adfa5fa0 R15: 00007ffc5f206968 [ 355.972690][T10391] [ 357.534052][ T30] audit: type=1400 audit(1742865483.864:869): avc: denied { ioctl } for pid=10398 comm="syz.2.1190" path="socket:[28401]" dev="sockfs" ino=28401 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 359.101159][T10443] block nbd0: shutting down sockets [ 359.143979][ T1201] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 359.397068][ T1201] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 359.412324][ T1201] usb 3-1: config 0 has no interface number 1 [ 359.422706][ T1201] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 359.438486][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.988107][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1205'. [ 360.010544][ T1201] usb 3-1: config 0 descriptor?? [ 360.025426][ T1201] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.032593][ T1201] usb 3-1: MIDIStreaming interface descriptor not found [ 360.053569][ T1201] gspca_main: spca561-2.14.0 probing abcd:cdee [ 360.474044][ T1201] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 360.554138][ T1201] usb 3-1: USB disconnect, device number 40 [ 361.628686][T10477] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 361.637888][T10477] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 361.743915][ T1201] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 362.025142][ T1201] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 362.051548][ T1201] usb 1-1: config 0 has no interface number 1 [ 362.058781][ T1201] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 362.072796][ T1201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.117609][ T1201] usb 1-1: config 0 descriptor?? [ 362.328240][ T1201] qcserial 1-1:0.2: Qualcomm USB modem converter detected [ 362.943074][T10490] netlink: 'syz.0.1213': attribute type 4 has an invalid length. [ 362.954054][T10490] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1213'. [ 362.994406][ T30] audit: type=1400 audit(1742865489.824:870): avc: denied { bind } for pid=10506 comm="syz.4.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 363.082328][T10513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1223'. [ 363.273186][ T1201] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 363.643943][ T1201] usb 7-1: Using ep0 maxpacket: 16 [ 363.662586][ T1201] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 363.674269][ T1201] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024 [ 363.685778][ T1201] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.698879][ T1201] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 363.708256][ T1201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.718127][ T1201] usb 7-1: config 0 descriptor?? [ 363.731114][ T1201] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input16 [ 363.942139][ T1201] usb 7-1: USB disconnect, device number 16 [ 364.008527][T10526] geneve2: entered promiscuous mode [ 364.198862][ T30] audit: type=1400 audit(1742865491.024:871): avc: denied { ioctl } for pid=10529 comm="syz.2.1230" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 364.312142][ T1201] usb 1-1: USB disconnect, device number 24 [ 364.324623][ T1201] qcserial 1-1:0.2: device disconnected [ 364.391935][T10532] trusted_key: encrypted_key: insufficient parameters specified [ 365.797545][T10555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1238'. [ 365.831487][ T30] audit: type=1400 audit(1742865492.654:872): avc: denied { module_load } for pid=10554 comm="syz.2.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 366.876864][ T30] audit: type=1400 audit(1742865493.704:873): avc: denied { getopt } for pid=10565 comm="syz.2.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 367.008025][T10574] hub 6-0:1.0: USB hub found [ 367.027976][T10576] 9pnet_fd: Insufficient options for proto=fd [ 367.035753][T10574] hub 6-0:1.0: 1 port detected [ 367.065220][ T30] audit: type=1400 audit(1742865493.894:874): avc: denied { ioctl } for pid=10573 comm="syz.0.1243" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 367.261953][T10585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1248'. [ 367.398464][ T30] audit: type=1400 audit(1742865494.224:875): avc: denied { write } for pid=10582 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 367.865558][ T30] audit: type=1400 audit(1742865494.464:876): avc: denied { connect } for pid=10582 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 368.443899][ T1201] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 368.516155][T10606] could not allocate digest TFM handle hmac(sha256-ce) [ 368.524738][ T5957] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 368.593952][ T1201] usb 1-1: Using ep0 maxpacket: 16 [ 368.606582][ T1201] usb 1-1: config 0 has an invalid interface number: 231 but max is 1 [ 368.623363][ T1201] usb 1-1: config 0 has no interface number 1 [ 368.637806][ T1201] usb 1-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 368.669775][ T1201] usb 1-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 368.685638][ T1201] usb 1-1: config 0 interface 231 has no altsetting 0 [ 368.686641][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 368.694383][ T1201] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 368.707459][ T1201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.716501][ T1201] usb 1-1: Product: syz [ 368.719620][ T5957] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 368.720719][ T1201] usb 1-1: Manufacturer: syz [ 368.735192][ T1201] usb 1-1: SerialNumber: syz [ 368.741787][ T1201] usb 1-1: config 0 descriptor?? [ 368.753592][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.782250][ T5957] usb 3-1: config 0 descriptor?? [ 368.790550][ T5957] gspca_main: sunplus-2.14.0 probing 041e:400b [ 368.798231][ T30] audit: type=1400 audit(1742865495.624:877): avc: denied { append } for pid=10618 comm="syz.6.1255" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 368.823438][ T30] audit: type=1400 audit(1742865495.624:878): avc: denied { setattr } for pid=10618 comm="syz.6.1255" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 369.487136][T10625] syz.2.1253 (10625): drop_caches: 2 [ 369.494588][T10625] syz.2.1253 (10625): drop_caches: 2 [ 369.501462][ T5957] gspca_sunplus: reg_w_riv err -110 [ 369.531041][ T5957] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 369.555878][ T5957] usb 3-1: USB disconnect, device number 41 [ 369.828465][T10635] netlink: 'syz.6.1260': attribute type 4 has an invalid length. [ 371.041180][T10650] fuse: Bad value for 'fd' [ 371.319585][T10653] libceph: resolve '0.' (ret=-3): failed [ 371.544942][ T1201] usb 1-1: Could not set interface, error -71 [ 371.579327][ T1201] usb 1-1: USB disconnect, device number 25 [ 372.055146][ T5818] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 372.216503][ T5818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 372.226668][ T5818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 372.238923][ T5818] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 372.248402][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.257273][ T5818] usb 1-1: Product: syz [ 372.261583][ T5818] usb 1-1: Manufacturer: syz [ 372.266674][ T5818] usb 1-1: SerialNumber: syz [ 372.272490][ T5818] usb 1-1: config 0 descriptor?? [ 372.278144][T10661] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 372.285685][T10661] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 372.293737][ T5818] option 1-1:0.0: GSM modem (1-port) converter detected [ 372.301921][ T5818] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 373.672436][T10686] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 373.676812][ T30] audit: type=1400 audit(1742865500.504:879): avc: denied { create } for pid=10685 comm="syz.4.1275" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 373.862684][ T30] audit: type=1400 audit(1742865500.604:880): avc: denied { associate } for pid=10685 comm="syz.4.1275" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 373.957397][ T30] audit: type=1400 audit(1742865500.664:881): avc: denied { mounton } for pid=10685 comm="syz.4.1275" path="/238/bus" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 374.100166][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1277'. [ 374.107059][ T30] audit: type=1400 audit(1742865500.664:882): avc: denied { write } for pid=10685 comm="syz.4.1275" name="bus" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 374.202141][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1277'. [ 374.333895][ T30] audit: type=1400 audit(1742865500.664:883): avc: denied { add_name } for pid=10685 comm="syz.4.1275" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 374.334179][ T30] audit: type=1400 audit(1742865500.674:884): avc: denied { setattr } for pid=10685 comm="syz.4.1275" name="work" dev="tmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 374.433685][ T30] audit: type=1400 audit(1742865500.674:885): avc: denied { write open } for pid=10685 comm="syz.4.1275" path=2F202864656C6574656429 dev="tmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 374.700618][ T30] audit: type=1400 audit(1742865500.674:886): avc: denied { create } for pid=10685 comm="syz.4.1275" name="#2d" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 374.814360][ T1201] usb 1-1: USB disconnect, device number 26 [ 374.934040][ T30] audit: type=1400 audit(1742865500.674:887): avc: denied { remove_name } for pid=10685 comm="syz.4.1275" name="#2d" dev="tmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 374.934441][ T30] audit: type=1400 audit(1742865500.674:888): avc: denied { rename } for pid=10685 comm="syz.4.1275" name="#2d" dev="tmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 375.030349][ T30] audit: type=1400 audit(1742865500.674:889): avc: denied { unlink } for pid=10685 comm="syz.4.1275" name="#2d" dev="tmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 375.046900][ T1201] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 375.235380][ T1201] option 1-1:0.0: device disconnected [ 375.732880][T10723] pim6reg1: entered promiscuous mode [ 375.754495][T10723] pim6reg1: entered allmulticast mode [ 376.000318][T10731] tipc: Started in network mode [ 376.005465][T10731] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 376.015069][T10731] tipc: Enabled bearer , priority 10 [ 376.270520][T10736] pim6reg: entered allmulticast mode [ 377.126222][ T1201] tipc: Node number set to 43690 [ 377.645802][T10761] tipc: Started in network mode [ 377.651291][T10761] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 377.661022][T10761] tipc: Enabled bearer , priority 10 [ 377.844533][ T1201] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 378.639221][ T1201] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.715509][ T1201] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 378.745657][ T1201] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.776167][ T5867] tipc: Node number set to 43690 [ 378.793168][ T1201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.833908][ T1201] usb 1-1: Product: syz [ 378.838186][ T1201] usb 1-1: Manufacturer: syz [ 378.853517][ T1201] usb 1-1: SerialNumber: syz [ 378.887222][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 378.887258][ T30] audit: type=1400 audit(1742865505.714:900): avc: denied { mounton } for pid=10780 comm="syz.5.1306" path="/268/file0" dev="tmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 379.071371][T10762] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 379.162286][T10779] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1305'. [ 379.171524][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1305'. [ 379.182311][ T30] audit: type=1400 audit(1742865506.004:901): avc: denied { setopt } for pid=10777 comm="syz.6.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 379.327939][T10788] SELinux: Context system_u:object_r:getty_log_t:s0 is not valid (left unmapped). [ 379.340759][ T30] audit: type=1400 audit(1742865506.164:902): avc: denied { relabelto } for pid=10787 comm="syz.6.1307" name="cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:getty_log_t:s0" [ 379.368470][ T30] audit: type=1400 audit(1742865506.164:903): avc: denied { associate } for pid=10787 comm="syz.6.1307" name="cgroup.procs" dev="cgroup" ino=410 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:getty_log_t:s0" [ 379.425367][T10790] cgroup: Need name or subsystem set [ 379.682725][T10762] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 379.734059][ T5818] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 380.245965][ T1201] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 380.252581][ T1201] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 380.293557][ T1201] cdc_ncm 1-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 380.496881][T10806] xt_socket: unknown flags 0xc [ 380.580813][ T5818] usb 7-1: device descriptor read/64, error -71 [ 380.977021][ T5818] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 381.956763][ T1201] usb 1-1: USB disconnect, device number 27 [ 381.963036][ T1201] cdc_ncm 1-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 382.092841][ T5818] usb 7-1: device descriptor read/64, error -71 [ 382.288936][ T5818] usb usb7-port1: attempt power cycle [ 382.553303][T10822] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.560505][T10822] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.741910][T10822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.752906][T10822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.828024][T10822] veth0_vlan: left allmulticast mode [ 383.910891][T10822] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.926553][T10822] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.939605][T10822] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.996245][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 384.886015][T10822] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.960069][T10860] netlink: 8368 bytes leftover after parsing attributes in process `syz.5.1326'. [ 384.969413][T10860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.996441][T10835] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 385.044395][T10835] team0: Device ipvlan2 is already an upper device of the team interface [ 385.434836][T10864] xt_connbytes: Forcing CT accounting to be enabled [ 385.441524][T10864] Cannot find add_set index 0 as target [ 385.536475][T10856] veth0_vlan: left promiscuous mode [ 385.541730][T10856] veth0_vlan: entered allmulticast mode [ 385.547704][T10856] veth0_vlan: entered promiscuous mode [ 385.963847][ T30] audit: type=1400 audit(1742865512.584:904): avc: denied { mount } for pid=10867 comm="syz.5.1330" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 386.476748][T10890] libceph: resolve '. [ 386.476748][T10890] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 386.476748][T10890] ' (ret=-3): failed [ 386.716527][ T30] audit: type=1326 audit(1742865513.544:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 386.741260][ T30] audit: type=1326 audit(1742865513.544:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 386.746062][T10898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.775878][ T30] audit: type=1326 audit(1742865513.564:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 386.800910][ T30] audit: type=1326 audit(1742865513.564:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 386.824327][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.831550][ T30] audit: type=1326 audit(1742865513.564:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 386.857940][ T30] audit: type=1326 audit(1742865513.564:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 386.859264][T10898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.891452][ T30] audit: type=1326 audit(1742865513.564:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 386.919046][ T30] audit: type=1326 audit(1742865513.564:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 386.942450][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.948970][ T30] audit: type=1326 audit(1742865513.564:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f0bbb78d169 code=0x7ffc0000 [ 386.971905][T10898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.972256][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.724805][ T5957] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 387.896175][ T5957] usb 7-1: device descriptor read/64, error -71 [ 388.133971][ T5957] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 388.808005][ T5957] usb 7-1: device descriptor read/64, error -71 [ 388.925952][ T5957] usb usb7-port1: attempt power cycle [ 388.981557][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 389.463951][ T5957] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 389.533387][ T5957] usb 7-1: device descriptor read/8, error -71 [ 389.797938][ T5957] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 389.824708][ T5957] usb 7-1: device descriptor read/8, error -71 [ 389.934103][ T5957] usb usb7-port1: unable to enumerate USB device [ 390.023943][ T2146] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 390.173992][ T2146] usb 1-1: Using ep0 maxpacket: 8 [ 390.215450][ T2146] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 390.228449][ T2146] usb 1-1: config 0 has no interface number 0 [ 390.235023][ T2146] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.253642][ T2146] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 390.263008][ T2146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.276747][ T2146] usb 1-1: config 0 descriptor?? [ 390.286056][ T2146] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 390.359218][T10946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.594662][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1360'. [ 391.752365][T10980] IPVS: Error connecting to the multicast addr [ 391.851483][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 391.851497][ T30] audit: type=1400 audit(1742865518.674:1042): avc: denied { ioctl } for pid=10977 comm="syz.6.1361" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 392.610273][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1364'. [ 392.784291][ T5818] usb 1-1: USB disconnect, device number 28 [ 393.579997][ T30] audit: type=1400 audit(1742865520.404:1043): avc: denied { rename } for pid=11007 comm="syz.6.1371" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 393.775178][T11017] trusted_key: encrypted_key: insufficient parameters specified [ 394.402604][ T2146] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 394.574092][ T2146] usb 1-1: config 0 has no interfaces? [ 394.595911][ T2146] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 394.633065][ T2146] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 394.642092][ T2146] usb 1-1: Product: syz [ 394.650580][ T2146] usb 1-1: Manufacturer: syz [ 394.666757][ T2146] usb 1-1: config 0 descriptor?? [ 394.819834][ T30] audit: type=1326 audit(1742865521.644:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.6.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06add8d169 code=0x7ffc0000 [ 394.992641][ T30] audit: type=1326 audit(1742865521.644:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.6.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06add8d169 code=0x7ffc0000 [ 395.349748][ T30] audit: type=1326 audit(1742865521.644:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.6.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f06add8d169 code=0x7ffc0000 [ 395.374897][T11047] __vm_enough_memory: pid: 11047, comm: syz.0.1374, bytes: 21200279552000 not enough memory for the allocation [ 395.406826][ T30] audit: type=1326 audit(1742865521.644:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.6.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06add8d169 code=0x7ffc0000 [ 395.436004][ T30] audit: type=1326 audit(1742865521.644:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.6.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06add8d169 code=0x7ffc0000 [ 395.464370][ T30] audit: type=1326 audit(1742865521.684:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.6.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06add8d169 code=0x7ffc0000 [ 395.488345][ T30] audit: type=1326 audit(1742865521.684:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.6.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06add8d169 code=0x7ffc0000 [ 395.512791][ T30] audit: type=1326 audit(1742865521.684:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.6.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06add8d169 code=0x7ffc0000 [ 395.738643][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 395.828201][T11054] veth0_vlan: entered allmulticast mode [ 395.890038][T11054] veth0_vlan: left promiscuous mode [ 395.898985][T11054] veth0_vlan: entered promiscuous mode [ 396.552936][T11060] 9pnet_fd: Insufficient options for proto=fd [ 396.592366][T11065] netlink: zone id is out of range [ 396.720421][T11065] netlink: set zone limit has 4 unknown bytes [ 396.763994][ T5818] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 396.880206][T11072] input: syz0 as /devices/virtual/input/input17 [ 396.919268][ T5818] usb 3-1: config 148 has an invalid interface number: 225 but max is 2 [ 396.942303][ T5818] usb 3-1: config 148 has an invalid interface number: 78 but max is 2 [ 396.958328][ T5957] usb 1-1: USB disconnect, device number 29 [ 396.964404][ T2146] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 396.972804][ T5818] usb 3-1: config 148 has an invalid interface number: 4 but max is 2 [ 396.995168][ T5818] usb 3-1: config 148 has no interface number 0 [ 397.001518][ T5818] usb 3-1: config 148 has no interface number 1 [ 397.018217][ T5818] usb 3-1: config 148 has no interface number 2 [ 397.033930][ T5818] usb 3-1: config 148 interface 225 altsetting 1 endpoint 0x8F has an invalid bInterval 43, changing to 7 [ 397.059866][ T5818] usb 3-1: config 148 interface 225 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 397.096815][ T5818] usb 3-1: config 148 interface 225 altsetting 1 endpoint 0x4 has an invalid bInterval 124, changing to 7 [ 397.131716][ T5818] usb 3-1: config 148 interface 78 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 397.142588][ T2146] usb 7-1: Using ep0 maxpacket: 32 [ 397.163596][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 397.181604][ T2146] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 397.205053][ T2146] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.221248][ T5818] usb 3-1: config 148 interface 4 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 397.242048][ T2146] usb 7-1: config 0 descriptor?? [ 397.248721][ T5818] usb 3-1: config 148 interface 4 altsetting 7 endpoint 0x2 has invalid maxpacket 96, setting to 64 [ 397.264147][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 397.276559][ T2146] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 397.290298][ T5818] usb 3-1: config 148 interface 4 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 397.301884][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 397.319076][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has a duplicate endpoint with address 0x89, skipping [ 397.356000][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 397.402556][ T5818] usb 3-1: config 148 interface 4 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 397.439044][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 397.451364][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 397.468075][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 397.480104][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 397.491692][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 397.502639][ T2146] gspca_nw80x: reg_w err -71 [ 397.505672][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 397.505685][ T30] audit: type=1400 audit(1742865524.334:1086): avc: denied { nlmsg_read } for pid=11090 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.508967][ T2146] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 397.542376][ T5818] usb 3-1: config 148 interface 4 altsetting 7 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 397.558585][ T2146] usb 7-1: USB disconnect, device number 24 [ 397.564797][ T5818] usb 3-1: config 148 interface 225 has no altsetting 0 [ 397.572424][ T5818] usb 3-1: config 148 interface 4 has no altsetting 0 [ 397.581400][ T5818] usb 3-1: New USB device found, idVendor=07b8, idProduct=8189, bcdDevice=61.f1 [ 397.590666][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.598822][ T5818] usb 3-1: Product: ࠉ [ 397.603093][ T5818] usb 3-1: Manufacturer: ခ [ 397.607812][ T5818] usb 3-1: SerialNumber: 蜧钐雁῝汩䵂풩╼㤐뷼歓嫞룼᪶ꝗ鞳霱ⶸꩴᦅ늻䍚쀌㑄넄澽籬豨摔늋⽟薖ꋰ龢হ圂㽘烠㭉⵶ᩕ茻⋱륯쓮貪ℽ䞬ﮣٿᩊ沩鄀⵰巇喏늢嗧쒬귅憟謆绁鑭嘈岊蝋͈į￴㓿₡﨏鍥뭹혉∤怺溳摷微싁砐﷬ꮧ隱ઝ퓡咮铚늅뇌庯Ὣ뤈㷸렆㍨鎟퓌멇ള২뫜 [ 397.883522][T11095] wireguard0: entered promiscuous mode [ 397.893403][T11095] wireguard0: entered allmulticast mode [ 398.025365][ T30] audit: type=1400 audit(1742865524.824:1087): avc: denied { connect } for pid=11097 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 398.045044][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.510739][ T5818] usb 3-1: USB disconnect, device number 42 [ 398.550176][ T30] audit: type=1400 audit(1742865525.374:1088): avc: denied { connect } for pid=11105 comm="syz.5.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 398.693394][T11114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1400'. [ 398.794124][ T2146] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 399.022905][ T30] audit: type=1400 audit(1742865525.794:1089): avc: denied { map } for pid=11106 comm="syz.2.1397" path="socket:[32600]" dev="sockfs" ino=32600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 399.046673][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.058071][ T30] audit: type=1400 audit(1742865525.794:1090): avc: denied { accept } for pid=11106 comm="syz.2.1397" path="socket:[32600]" dev="sockfs" ino=32600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 399.082049][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.147437][ T5818] Process accounting resumed [ 399.195401][ T2146] usb 7-1: Using ep0 maxpacket: 32 [ 399.207017][ T2146] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 399.299180][ T2146] usb 7-1: config 0 has no interface number 0 [ 399.370508][ T2146] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.451216][ T2146] usb 7-1: config 0 interface 85 has no altsetting 0 [ 399.501049][ T2146] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 399.514455][ T2146] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.531599][ T2146] usb 7-1: Product: syz [ 399.540170][ T2146] usb 7-1: Manufacturer: syz [ 399.549884][ T2146] usb 7-1: SerialNumber: syz [ 399.560410][ T2146] usb 7-1: config 0 descriptor?? [ 399.927643][ T2146] appletouch 7-1:0.85: Failed to read mode from device. [ 400.136687][ T2146] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 402.587505][ T30] audit: type=1400 audit(1742865528.714:1091): avc: denied { name_bind } for pid=11154 comm="syz.5.1410" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 403.036401][ T2146] usb 7-1: USB disconnect, device number 25 [ 403.239908][T11167] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 403.252420][ T3498] Bluetooth: hci2: Frame reassembly failed (-84) [ 403.273329][ T3498] Bluetooth: hci2: Frame reassembly failed (-84) [ 404.979394][T11192] 8021q: VLANs not supported on gre0 [ 405.304097][ T5819] Bluetooth: hci2: command 0x1003 tx timeout [ 405.304191][ T5831] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 405.568476][ T30] audit: type=1400 audit(1742865532.394:1092): avc: denied { setopt } for pid=11203 comm="syz.6.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 405.823906][T11210] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1427'. [ 406.323931][ T30] audit: type=1400 audit(1742865532.734:1093): avc: denied { ioctl } for pid=11207 comm="syz.2.1427" path="socket:[33823]" dev="sockfs" ino=33823 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 406.671230][T11225] FAULT_INJECTION: forcing a failure. [ 406.671230][T11225] name failslab, interval 1, probability 0, space 0, times 0 [ 406.683956][T11225] CPU: 0 UID: 0 PID: 11225 Comm: syz.4.1431 Not tainted 6.14.0-syzkaller #0 [ 406.683975][T11225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.683985][T11225] Call Trace: [ 406.683991][T11225] [ 406.683997][T11225] dump_stack_lvl+0x16c/0x1f0 [ 406.684027][T11225] should_fail_ex+0x50a/0x650 [ 406.684057][T11225] should_failslab+0xc2/0x120 [ 406.684078][T11225] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 406.684097][T11225] ? dst_alloc+0x99/0x1a0 [ 406.684123][T11225] dst_alloc+0x99/0x1a0 [ 406.684146][T11225] rt_dst_alloc+0x35/0x3a0 [ 406.684172][T11225] ip_route_input_rcu.part.0+0x5dc/0xdf0 [ 406.684195][T11225] ? __pfx_ip_route_input_rcu.part.0+0x10/0x10 [ 406.684215][T11225] ? lock_acquire+0x2f/0xb0 [ 406.684237][T11225] ? ip_route_input_noref+0xb6/0x2e0 [ 406.684259][T11225] ip_route_input_noref+0x1c3/0x2e0 [ 406.684278][T11225] ? __pfx_ip_route_input_noref+0x10/0x10 [ 406.684302][T11225] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 406.684321][T11225] ? sock_wfree+0x11c/0x880 [ 406.684349][T11225] ip_rcv_finish_core+0x46f/0x2290 [ 406.684375][T11225] ip_rcv+0x1c0/0x5d0 [ 406.684395][T11225] ? __pfx_ip_rcv+0x10/0x10 [ 406.684413][T11225] __netif_receive_skb_one_core+0x199/0x1e0 [ 406.684436][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 406.684459][T11225] ? rcu_is_watching+0x12/0xc0 [ 406.684480][T11225] ? netif_receive_skb+0x109/0x7b0 [ 406.684507][T11225] __netif_receive_skb+0x1d/0x160 [ 406.684530][T11225] netif_receive_skb+0x13f/0x7b0 [ 406.684560][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 406.684584][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 406.684609][T11225] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 406.684630][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 406.684660][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 406.684692][T11225] ? tun_get_user+0x13e6/0x3e50 [ 406.684708][T11225] ? lock_acquire+0x2f/0xb0 [ 406.684729][T11225] ? tun_get_user+0x13e6/0x3e50 [ 406.684757][T11225] tun_get_user+0x2a22/0x3e50 [ 406.684782][T11225] ? inode_has_perm+0x16f/0x1d0 [ 406.684805][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 406.684821][T11225] ? find_held_lock+0x2d/0x110 [ 406.684846][T11225] ? __pfx_lock_release+0x10/0x10 [ 406.684883][T11225] tun_chr_write_iter+0xdc/0x210 [ 406.684903][T11225] vfs_write+0x5ae/0x1150 [ 406.684930][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 406.684951][T11225] ? __pfx_vfs_write+0x10/0x10 [ 406.684978][T11225] ? __fget_files+0x40/0x3a0 [ 406.685009][T11225] ksys_write+0x12b/0x250 [ 406.685024][T11225] ? __pfx_ksys_write+0x10/0x10 [ 406.685049][T11225] do_syscall_64+0xcd/0x250 [ 406.685074][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.685098][T11225] RIP: 0033:0x7fbbc938bc1f [ 406.685112][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 406.685127][T11225] RSP: 002b:00007fbbca237000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 406.685144][T11225] RAX: ffffffffffffffda RBX: 00007fbbc95a5fa0 RCX: 00007fbbc938bc1f [ 406.685155][T11225] RDX: 000000000000003e RSI: 0000200000000500 RDI: 00000000000000c8 [ 406.685165][T11225] RBP: 00007fbbca237090 R08: 0000000000000000 R09: 0000000000000000 [ 406.685175][T11225] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 406.685185][T11225] R13: 0000000000000000 R14: 00007fbbc95a5fa0 R15: 00007ffc3d31b758 [ 406.685209][T11225] [ 407.094032][ T47] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 407.533276][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 407.594085][ T47] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 407.603158][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.674940][ T47] usb 3-1: Product: syz [ 407.679114][ T47] usb 3-1: Manufacturer: syz [ 407.713971][ T47] usb 3-1: SerialNumber: syz [ 407.729652][ T47] usb 3-1: config 0 descriptor?? [ 407.751384][ T47] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 407.910784][T11249] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1437'. [ 407.920472][T11246] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1437'. [ 408.167010][ T47] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 408.565411][ T47] usb 3-1: USB disconnect, device number 43 [ 408.573492][ T47] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 408.588761][ T47] visor 3-1:0.0: device disconnected [ 408.687374][T11246] 9pnet_fd: Insufficient options for proto=fd [ 409.559625][ T30] audit: type=1326 audit(1742865536.384:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.5.1444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27f178d169 code=0x0 [ 412.902253][T11319] xt_hashlimit: max too large, truncated to 1048576 [ 413.627146][T11330] overlay: Unknown parameter '/' [ 413.633043][ T30] audit: type=1400 audit(1742865540.454:1095): avc: denied { append } for pid=11334 comm="syz.0.1457" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 413.954637][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 414.107403][ T5866] kworker/0:3 (5866) used greatest stack depth: 18208 bytes left [ 414.145800][ T10] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 414.161423][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.212999][ T10] usb 1-1: config 0 descriptor?? [ 414.337116][T11351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.262676][ T10] semitek 0003:1EA7:0907.0007: unknown main item tag 0x0 [ 415.293679][ T10] semitek 0003:1EA7:0907.0007: item fetching failed at offset 3/5 [ 415.329586][ T10] semitek 0003:1EA7:0907.0007: probe with driver semitek failed with error -22 [ 415.528861][T11335] x_tables: duplicate underflow at hook 4 [ 415.552790][ T10] usb 1-1: USB disconnect, device number 30 [ 417.210147][ T30] audit: type=1400 audit(1742865544.034:1096): avc: denied { bind } for pid=11381 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 417.471718][T11399] fuse: Unknown parameter 'grou00000000000000000000' [ 418.115236][T11413] geneve2: entered promiscuous mode [ 418.580110][T11428] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 419.287953][T11428] dlm: plock device version mismatch: kernel (1.2.0), user (33022.0.0) [ 419.661679][T11438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1485'. [ 419.691967][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 420.074118][ T30] audit: type=1400 audit(1742865546.894:1097): avc: denied { ioctl } for pid=11451 comm="syz.2.1489" path="socket:[35033]" dev="sockfs" ino=35033 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 420.143871][ T5818] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 420.296809][ T5818] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 420.312793][ T5818] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 420.333605][ T5818] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 420.353348][ T5818] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 420.375965][ T5818] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 420.390985][ T5818] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 420.400505][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 420.413987][ T5818] usb 7-1: Product: syz [ 420.418205][ T5818] usb 7-1: Manufacturer: syz [ 420.427536][ T5818] cdc_wdm 7-1:1.0: skipping garbage [ 420.432859][ T5818] cdc_wdm 7-1:1.0: skipping garbage [ 420.439112][ T5818] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 420.447275][ T5818] cdc_wdm 7-1:1.0: Unknown control protocol [ 420.664893][ T5818] usb 7-1: USB disconnect, device number 26 [ 421.644336][T11491] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 421.654320][T11479] IPVS: stopping master sync thread 11491 ... [ 422.765285][T11505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=11505 comm=syz.2.1505 [ 424.813864][ T30] audit: type=1400 audit(1742865551.284:1098): avc: denied { create } for pid=11528 comm="syz.6.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 424.859788][ T30] audit: type=1400 audit(1742865551.404:1099): avc: denied { sys_admin } for pid=11528 comm="syz.6.1514" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 426.210303][T11549] netdevsim netdevsim4: Direct firmware load for . [ 426.210303][T11549] failed with error -2 [ 426.221317][T11549] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 426.221317][T11549] [ 426.695627][ T30] audit: type=1400 audit(1742865553.474:1100): avc: denied { ioctl } for pid=11556 comm="syz.5.1520" path="socket:[35243]" dev="sockfs" ino=35243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 427.354524][ T30] audit: type=1400 audit(1742865554.174:1101): avc: denied { map } for pid=11556 comm="syz.5.1520" path="socket:[35248]" dev="sockfs" ino=35248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 429.600791][T11587] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1530'. [ 431.015739][ T30] audit: type=1400 audit(1742865557.764:1102): avc: denied { getopt } for pid=11607 comm="syz.4.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 433.155415][ T5867] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 433.538058][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 433.719315][ T5867] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 433.738703][ T5867] usb 7-1: config 0 has no interface number 0 [ 433.748411][ T5867] usb 7-1: config 0 interface 184 has no altsetting 0 [ 433.771080][ T5867] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 433.790631][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.818021][ T5867] usb 7-1: Product: syz [ 433.822410][ T5867] usb 7-1: Manufacturer: syz [ 433.832427][ T5867] usb 7-1: SerialNumber: syz [ 433.845440][ T5867] usb 7-1: config 0 descriptor?? [ 433.870018][ T5867] smsc75xx v1.0.0 [ 434.018889][ T5818] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 434.059759][ T5867] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 434.080994][ T5867] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 434.185612][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 434.203404][ T5818] usb 1-1: can't read configurations, error -61 [ 434.343974][ T5818] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 434.428918][ T5867] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 434.439846][ T5867] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 434.454185][ T5867] usb 7-1: USB disconnect, device number 27 [ 434.523044][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 434.540963][ T5818] usb 1-1: can't read configurations, error -61 [ 434.557846][ T5818] usb usb1-port1: attempt power cycle [ 434.592079][T11650] netlink: 'syz.5.1549': attribute type 1 has an invalid length. [ 435.475415][ T5818] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 435.533971][ T5867] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 435.536101][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 435.551013][ T5818] usb 1-1: can't read configurations, error -61 [ 435.599390][T11669] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 435.608249][T11669] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 435.697596][ T5867] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 435.713895][ T5867] usb 7-1: can't read configurations, error -22 [ 435.723985][ T5818] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 435.741194][ T30] audit: type=1326 audit(1742865562.564:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 435.769478][ T30] audit: type=1326 audit(1742865562.564:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 435.796607][ T30] audit: type=1326 audit(1742865562.594:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 435.821190][ T30] audit: type=1326 audit(1742865562.594:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 435.845998][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 435.853715][ T5818] usb 1-1: can't read configurations, error -61 [ 435.853910][ T5867] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 435.860412][ T5818] usb usb1-port1: unable to enumerate USB device [ 435.877984][ T30] audit: type=1326 audit(1742865562.594:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 435.908402][ T30] audit: type=1326 audit(1742865562.594:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 435.939496][ T30] audit: type=1326 audit(1742865562.594:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.034955][ T30] audit: type=1326 audit(1742865562.594:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.063210][ T30] audit: type=1326 audit(1742865562.594:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.065569][ T5867] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 436.091396][ T30] audit: type=1326 audit(1742865562.594:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.097917][ T5867] usb 7-1: can't read configurations, error -22 [ 436.125727][ T5867] usb usb7-port1: attempt power cycle [ 436.144739][ T30] audit: type=1326 audit(1742865562.594:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.170478][ T30] audit: type=1326 audit(1742865562.594:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.196746][ T30] audit: type=1326 audit(1742865562.594:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.221982][ T30] audit: type=1326 audit(1742865562.594:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.253429][ T30] audit: type=1326 audit(1742865562.594:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.304812][ T30] audit: type=1326 audit(1742865562.594:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.328700][ T30] audit: type=1326 audit(1742865562.594:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.5.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27f178d169 code=0x7ffc0000 [ 436.424154][T11680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1559'. [ 436.993985][ T5867] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 437.029962][ T5867] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 437.064466][ T5867] usb 7-1: can't read configurations, error -22 [ 437.204714][ T5867] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 437.242185][ T5867] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 437.250434][ T5867] usb 7-1: can't read configurations, error -22 [ 437.257173][ T5867] usb usb7-port1: unable to enumerate USB device [ 440.136213][T11732] syz.4.1569: attempt to access beyond end of device [ 440.136213][T11732] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 440.153130][T11732] FAT-fs (loop9): unable to read boot sector [ 442.840826][T11763] overlay: Unknown parameter 'obj_role' [ 442.842372][T11767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=11767 comm=syz.2.1586 [ 443.117864][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 443.117877][ T30] audit: type=1400 audit(1742865569.944:1128): avc: denied { read } for pid=11774 comm="syz.2.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 443.234830][T11781] netlink: 'syz.6.1591': attribute type 39 has an invalid length. [ 443.726402][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 444.437885][ T30] audit: type=1326 audit(1742865571.264:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb78d169 code=0x0 [ 444.633550][ T30] audit: type=1400 audit(1742865571.454:1130): avc: denied { setopt } for pid=11812 comm="syz.2.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 444.733520][T11818] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1600'. [ 446.886488][ T30] audit: type=1400 audit(1742865573.384:1131): avc: denied { associate } for pid=11842 comm="syz.2.1605" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 447.983906][ T30] audit: type=1400 audit(1742865574.684:1132): avc: denied { map } for pid=11840 comm="syz.0.1607" path="pipe:[3807]" dev="pipefs" ino=3807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 448.265032][T11863] : entered promiscuous mode [ 449.283925][ T1201] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 449.550308][ T1201] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.632134][ T1201] usb 1-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 449.667416][ T1201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.714560][ T1201] usb 1-1: config 0 descriptor?? [ 450.758257][ T1201] usbhid 1-1:0.0: can't add hid device: -71 [ 450.768567][ T1201] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 450.790335][ T1201] usb 1-1: USB disconnect, device number 35 [ 450.797271][ T30] audit: type=1326 audit(1742865577.624:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.6.1621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06add8d169 code=0x0 [ 452.820553][T11928] : entered promiscuous mode [ 452.972517][T11926] dlm: plock device version mismatch: kernel (1.2.0), user (33022.0.0) [ 453.263988][ T5818] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 453.366653][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 453.376127][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 453.450990][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.472257][ T5818] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 453.496784][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.511319][ T5818] usb 1-1: config 0 descriptor?? [ 453.616224][ T30] audit: type=1326 audit(1742865580.444:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.5.1637" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27f178d169 code=0x0 [ 453.704037][ T1201] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 453.863873][ T1201] usb 7-1: Using ep0 maxpacket: 32 [ 453.872023][ T1201] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 453.881259][ T1201] usb 7-1: config 0 has no interface number 0 [ 453.890969][ T1201] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 453.902193][ T1201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.912976][ T1201] usb 7-1: Product: syz [ 453.919378][ T1201] usb 7-1: Manufacturer: syz [ 453.924403][ T1201] usb 7-1: SerialNumber: syz [ 453.977663][ T5818] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 453.990442][ T1201] usb 7-1: config 0 descriptor?? [ 453.992008][ T5818] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input19 [ 454.078712][ T5818] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 454.191459][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.200326][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.422064][T11947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.453232][T11947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.538630][T11926] : entered promiscuous mode [ 455.565517][ T5818] usb 1-1: USB disconnect, device number 36 [ 455.584482][ T1201] usb 7-1: USB disconnect, device number 32 [ 455.786198][T11986] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 455.792758][T11986] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 455.809898][T11986] vhci_hcd vhci_hcd.0: Device attached [ 455.983962][ T1201] vhci_hcd: vhci_device speed not set [ 456.043878][ T1201] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 456.484318][ T30] audit: type=1400 audit(1742865839.179:1135): avc: denied { name_connect } for pid=11992 comm="syz.6.1645" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 457.123537][T11999] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 457.288010][ T30] audit: type=1400 audit(1742865840.109:1136): avc: denied { create } for pid=12007 comm="syz.2.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 457.332647][T12010] lo speed is unknown, defaulting to 1000 [ 457.338867][T12010] lo speed is unknown, defaulting to 1000 [ 457.345364][T12010] lo speed is unknown, defaulting to 1000 [ 457.353371][T12010] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 457.364623][T12010] lo speed is unknown, defaulting to 1000 [ 457.371026][T12010] lo speed is unknown, defaulting to 1000 [ 457.928008][T12010] lo speed is unknown, defaulting to 1000 [ 457.934320][T12010] lo speed is unknown, defaulting to 1000 [ 457.940844][T12010] lo speed is unknown, defaulting to 1000 [ 458.797603][T11987] vhci_hcd: connection reset by peer [ 458.801541][T12024] kAFS: unable to lookup cell '/Sjˡ8' [ 458.810708][ T54] vhci_hcd: stop threads [ 458.819259][ T54] vhci_hcd: release socket [ 458.857182][ T54] vhci_hcd: disconnect device [ 458.947138][T12031] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 460.187151][T12047] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1657'. [ 460.437829][T12049] netlink: 'syz.6.1659': attribute type 1 has an invalid length. [ 461.393945][ T1201] vhci_hcd: vhci_device speed not set [ 461.415248][ T30] audit: type=1400 audit(1742865844.252:1137): avc: denied { connect } for pid=12055 comm="syz.6.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.633935][ T5867] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 462.769550][ C1] hrtimer: interrupt took 18292 ns [ 462.785459][ T5867] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.802742][ T5867] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 462.816571][ T5867] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 462.826035][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 462.876423][ T5867] usb 7-1: SerialNumber: syz [ 462.902399][ T5867] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 462.911428][ T5867] usb-storage 7-1:1.0: USB Mass Storage device detected [ 462.920573][ T5867] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 462.980525][ T5867] scsi host1: usb-storage 7-1:1.0 [ 463.786159][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'. [ 463.840896][T12096] veth0_vlan: left promiscuous mode [ 463.848632][T12096] veth0_vlan: entered promiscuous mode [ 463.929219][T12096] lo speed is unknown, defaulting to 1000 [ 464.468616][ T5818] usb 7-1: USB disconnect, device number 33 [ 465.892089][ T30] audit: type=1400 audit(1742865848.722:1138): avc: denied { setopt } for pid=12117 comm="syz.2.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 466.825197][ T30] audit: type=1400 audit(1742865849.662:1139): avc: denied { ioctl } for pid=12137 comm="syz.4.1688" path="socket:[37101]" dev="sockfs" ino=37101 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 467.776139][T12149] xt_l2tp: v2 tid > 0xffff: 262144 [ 468.204755][ T30] audit: type=1400 audit(1742865850.522:1140): avc: denied { write } for pid=12140 comm="syz.5.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 469.259656][T12160] geneve1: entered promiscuous mode [ 469.285470][T12160] FAULT_INJECTION: forcing a failure. [ 469.285470][T12160] name failslab, interval 1, probability 0, space 0, times 0 [ 469.298785][T12160] CPU: 0 UID: 0 PID: 12160 Comm: syz.6.1695 Not tainted 6.14.0-syzkaller #0 [ 469.298808][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.298819][T12160] Call Trace: [ 469.298824][T12160] [ 469.298831][T12160] dump_stack_lvl+0x16c/0x1f0 [ 469.298860][T12160] should_fail_ex+0x50a/0x650 [ 469.298892][T12160] ? nsim_fib_event_nb+0x1b6/0xec0 [ 469.298918][T12160] should_failslab+0xc2/0x120 [ 469.298939][T12160] __kmalloc_cache_noprof+0x68/0x410 [ 469.298969][T12160] ? lock_acquire.part.0+0x11b/0x380 [ 469.299003][T12160] nsim_fib_event_nb+0x1b6/0xec0 [ 469.299028][T12160] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 469.299053][T12160] ? rcu_is_watching+0x12/0xc0 [ 469.299075][T12160] notifier_call_chain+0xb7/0x410 [ 469.299096][T12160] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 469.299125][T12160] atomic_notifier_call_chain+0x71/0x1c0 [ 469.299147][T12160] call_fib_notifiers+0x33/0x70 [ 469.299172][T12160] fib6_del+0xeb4/0x1760 [ 469.299202][T12160] ? __pfx_fib6_del+0x10/0x10 [ 469.299226][T12160] ? fib6_ifdown+0xcd/0x8f0 [ 469.299244][T12160] ? __pfx_mark_lock+0x10/0x10 [ 469.299277][T12160] fib6_clean_node+0x426/0x5b0 [ 469.299300][T12160] ? __pfx_fib6_clean_node+0x10/0x10 [ 469.299324][T12160] ? fib6_walk+0x17a/0x370 [ 469.299341][T12160] ? __pfx_lock_release+0x10/0x10 [ 469.299369][T12160] fib6_walk_continue+0x44f/0x8d0 [ 469.299393][T12160] fib6_walk+0x182/0x370 [ 469.299411][T12160] ? __pfx_fib6_ifdown+0x10/0x10 [ 469.299431][T12160] fib6_clean_tree+0xd7/0x120 [ 469.299449][T12160] ? __pfx_fib6_clean_tree+0x10/0x10 [ 469.299473][T12160] ? __pfx_fib6_clean_node+0x10/0x10 [ 469.299494][T12160] ? __pfx_fib6_ifdown+0x10/0x10 [ 469.299516][T12160] ? lock_acquire+0x2f/0xb0 [ 469.299537][T12160] ? __fib6_clean_all+0xe5/0x2d0 [ 469.299559][T12160] ? __pfx_fib6_ifdown+0x10/0x10 [ 469.299579][T12160] __fib6_clean_all+0x100/0x2d0 [ 469.299604][T12160] rt6_disable_ip+0x2ef/0x940 [ 469.299621][T12160] ? find_held_lock+0x2d/0x110 [ 469.299642][T12160] ? __pfx_rt6_disable_ip+0x10/0x10 [ 469.299659][T12160] ? __pfx_lock_release+0x10/0x10 [ 469.299682][T12160] ? rcu_is_watching+0x12/0xc0 [ 469.299704][T12160] addrconf_ifdown.isra.0+0x126/0x1af0 [ 469.299730][T12160] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 469.299757][T12160] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 469.299784][T12160] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 469.299808][T12160] ? tls_dev_event+0xfe/0x1100 [ 469.299838][T12160] addrconf_notify+0x220/0x19c0 [ 469.299862][T12160] ? ip6mr_device_event+0x1bc/0x230 [ 469.299892][T12160] notifier_call_chain+0xb7/0x410 [ 469.299911][T12160] ? __pfx_addrconf_notify+0x10/0x10 [ 469.299939][T12160] call_netdevice_notifiers_info+0xbe/0x140 [ 469.299961][T12160] __dev_notify_flags+0x1f9/0x2e0 [ 469.299986][T12160] ? __pfx___dev_notify_flags+0x10/0x10 [ 469.300018][T12160] ? __pfx___dev_change_flags+0x10/0x10 [ 469.300046][T12160] ? __pfx_validate_linkmsg+0x10/0x10 [ 469.300074][T12160] dev_change_flags+0x10c/0x160 [ 469.300103][T12160] do_setlink.constprop.0+0x699/0x3f80 [ 469.300135][T12160] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 469.300163][T12160] ? __bpf_trace_contention_end+0xca/0x110 [ 469.300187][T12160] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 469.300214][T12160] ? __mutex_trylock_common+0xea/0x250 [ 469.300241][T12160] ? rtnl_newlink+0x5d9/0x1d60 [ 469.300266][T12160] ? rcu_is_watching+0x12/0xc0 [ 469.300284][T12160] ? trace_contention_end+0xee/0x140 [ 469.300310][T12160] ? __mutex_lock+0x1cc/0xb10 [ 469.300334][T12160] ? rcu_is_watching+0x12/0xc0 [ 469.300351][T12160] ? rtnl_newlink+0x5d9/0x1d60 [ 469.300377][T12160] ? __pfx___mutex_lock+0x10/0x10 [ 469.300400][T12160] ? cap_capable+0xb3/0x250 [ 469.300437][T12160] rtnl_newlink+0x1306/0x1d60 [ 469.300468][T12160] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.300500][T12160] ? __pfx___lock_acquire+0x10/0x10 [ 469.300523][T12160] ? cred_has_capability.isra.0+0x192/0x2f0 [ 469.300549][T12160] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 469.300579][T12160] ? find_held_lock+0x2d/0x110 [ 469.300601][T12160] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 469.300625][T12160] ? __pfx_lock_release+0x10/0x10 [ 469.300648][T12160] ? trace_lock_acquire+0x14e/0x1f0 [ 469.300674][T12160] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.300700][T12160] rtnetlink_rcv_msg+0x95b/0xea0 [ 469.300728][T12160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.300765][T12160] netlink_rcv_skb+0x16b/0x440 [ 469.300790][T12160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.300817][T12160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.300857][T12160] ? netlink_deliver_tap+0x1ae/0xd30 [ 469.300886][T12160] netlink_unicast+0x53c/0x7f0 [ 469.300914][T12160] ? __pfx_netlink_unicast+0x10/0x10 [ 469.300947][T12160] netlink_sendmsg+0x8b8/0xd70 [ 469.300977][T12160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.301016][T12160] ____sys_sendmsg+0xaaf/0xc90 [ 469.301037][T12160] ? copy_msghdr_from_user+0x10b/0x160 [ 469.301062][T12160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.301095][T12160] ___sys_sendmsg+0x135/0x1e0 [ 469.301123][T12160] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.301160][T12160] ? __pfx_lock_release+0x10/0x10 [ 469.301183][T12160] ? trace_lock_acquire+0x14e/0x1f0 [ 469.301212][T12160] ? __fget_files+0x206/0x3a0 [ 469.301237][T12160] __sys_sendmsg+0x16e/0x220 [ 469.301263][T12160] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.301307][T12160] do_syscall_64+0xcd/0x250 [ 469.301333][T12160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.301356][T12160] RIP: 0033:0x7f06add8d169 [ 469.301372][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.301389][T12160] RSP: 002b:00007f06aec06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.301406][T12160] RAX: ffffffffffffffda RBX: 00007f06adfa5fa0 RCX: 00007f06add8d169 [ 469.301416][T12160] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 469.301425][T12160] RBP: 00007f06aec06090 R08: 0000000000000000 R09: 0000000000000000 [ 469.301434][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.301443][T12160] R13: 0000000000000000 R14: 00007f06adfa5fa0 R15: 00007ffc5f206968 [ 469.301467][T12160] [ 470.485202][T12181] FAULT_INJECTION: forcing a failure. [ 470.485202][T12181] name failslab, interval 1, probability 0, space 0, times 0 [ 470.498161][T12181] CPU: 1 UID: 0 PID: 12181 Comm: syz.0.1697 Not tainted 6.14.0-syzkaller #0 [ 470.498183][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 470.498193][T12181] Call Trace: [ 470.498198][T12181] [ 470.498204][T12181] dump_stack_lvl+0x16c/0x1f0 [ 470.498233][T12181] should_fail_ex+0x50a/0x650 [ 470.498263][T12181] should_failslab+0xc2/0x120 [ 470.498282][T12181] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 470.498301][T12181] ? alloc_inode+0xbf/0x230 [ 470.498324][T12181] alloc_inode+0xbf/0x230 [ 470.498343][T12181] new_inode+0x22/0x210 [ 470.498365][T12181] devpts_fill_super+0x2ea/0x9d0 [ 470.498388][T12181] ? __pfx_set_anon_super+0x10/0x10 [ 470.498412][T12181] ? __pfx_devpts_fill_super+0x10/0x10 [ 470.498435][T12181] mount_nodev+0x65/0x120 [ 470.498459][T12181] ? __pfx_devpts_mount+0x10/0x10 [ 470.498479][T12181] legacy_get_tree+0x109/0x220 [ 470.498500][T12181] vfs_get_tree+0x8b/0x340 [ 470.498522][T12181] vfs_cmd_create+0xd7/0x2a0 [ 470.498543][T12181] __do_sys_fsconfig+0x7ba/0xbe0 [ 470.498565][T12181] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 470.498598][T12181] do_syscall_64+0xcd/0x250 [ 470.498623][T12181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.498646][T12181] RIP: 0033:0x7f0bbb78d169 [ 470.498659][T12181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.498674][T12181] RSP: 002b:00007f0bbc5f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 470.498691][T12181] RAX: ffffffffffffffda RBX: 00007f0bbb9a6160 RCX: 00007f0bbb78d169 [ 470.498702][T12181] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 470.498711][T12181] RBP: 00007f0bbc5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 470.498721][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.498731][T12181] R13: 0000000000000000 R14: 00007f0bbb9a6160 R15: 00007ffc3cb00068 [ 470.498755][T12181] [ 470.690560][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.413541][ T30] audit: type=1400 audit(1742865853.722:1141): avc: denied { read } for pid=12190 comm="syz.6.1705" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 471.436626][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.599374][T12200] FAULT_INJECTION: forcing a failure. [ 471.599374][T12200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.612692][T12200] CPU: 1 UID: 0 PID: 12200 Comm: syz.0.1709 Not tainted 6.14.0-syzkaller #0 [ 471.612713][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 471.612723][T12200] Call Trace: [ 471.612728][T12200] [ 471.612734][T12200] dump_stack_lvl+0x16c/0x1f0 [ 471.612769][T12200] should_fail_ex+0x50a/0x650 [ 471.612799][T12200] _copy_from_user+0x2e/0xd0 [ 471.612817][T12200] kstrtouint_from_user+0xd7/0x1c0 [ 471.612839][T12200] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 471.612870][T12200] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 471.612896][T12200] proc_fail_nth_write+0x84/0x250 [ 471.612920][T12200] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 471.612942][T12200] ? ksys_write+0x12b/0x250 [ 471.612963][T12200] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 471.612985][T12200] vfs_write+0x24c/0x1150 [ 471.613010][T12200] ? __fget_files+0x1fc/0x3a0 [ 471.613027][T12200] ? __pfx___mutex_lock+0x10/0x10 [ 471.613052][T12200] ? __pfx_vfs_write+0x10/0x10 [ 471.613085][T12200] ? __fget_files+0x206/0x3a0 [ 471.613108][T12200] ksys_write+0x12b/0x250 [ 471.613123][T12200] ? __pfx_ksys_write+0x10/0x10 [ 471.613146][T12200] do_syscall_64+0xcd/0x250 [ 471.613170][T12200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.613192][T12200] RIP: 0033:0x7f0bbb78bc1f [ 471.613205][T12200] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 471.613221][T12200] RSP: 002b:00007f0bbc632030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 471.613237][T12200] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0bbb78bc1f [ 471.613247][T12200] RDX: 0000000000000001 RSI: 00007f0bbc6320a0 RDI: 0000000000000003 [ 471.613257][T12200] RBP: 00007f0bbc632090 R08: 0000000000000000 R09: 0000000000000000 [ 471.613267][T12200] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 471.613276][T12200] R13: 0000000000000000 R14: 00007f0bbb9a5fa0 R15: 00007ffc3cb00068 [ 471.613299][T12200] [ 471.807303][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.071406][T12197] overlay: ./file1 is not a directory [ 473.128195][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.176279][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.339949][ T30] audit: type=1400 audit(1742865856.172:1142): avc: denied { ioctl } for pid=12253 comm="syz.0.1722" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x5618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 473.373865][ T5818] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 473.684009][ T5818] usb 7-1: Using ep0 maxpacket: 8 [ 473.696669][ T5818] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 473.719930][ T5818] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 473.752308][ T5818] usb 7-1: config 0 has no interface number 0 [ 473.778510][ T5818] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.801096][ T5818] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 473.845357][ T5818] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.862548][ T5818] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 473.872203][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 473.886650][ T5818] usb 7-1: Product: syz [ 473.890933][ T30] audit: type=1400 audit(1742865856.722:1143): avc: denied { listen } for pid=12260 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 473.970043][ T5818] usb 7-1: config 0 descriptor?? [ 473.985236][ T30] audit: type=1400 audit(1742865856.722:1144): avc: denied { accept } for pid=12260 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 474.007116][T12238] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 474.219260][ T5818] usb 7-1: USB disconnect, device number 34 [ 474.355026][ T30] audit: type=1326 audit(1742865857.182:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.2.1725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0b8d169 code=0x0 [ 475.624066][ T5818] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 475.737864][T12252] ------------[ cut here ]------------ [ 475.743554][T12252] UBSAN: array-index-out-of-bounds in kernel/bpf/core.c:2384:29 [ 475.830397][T12252] index 16 is out of range for type ' *[16]' [ 475.845048][T12252] CPU: 0 UID: 0 PID: 12252 Comm: syz.4.1720 Not tainted 6.14.0-syzkaller #0 [ 475.845072][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 475.845082][T12252] Call Trace: [ 475.845088][T12252] [ 475.845095][T12252] dump_stack_lvl+0x16c/0x1f0 [ 475.845125][T12252] __ubsan_handle_out_of_bounds+0x110/0x150 [ 475.845150][T12252] bpf_prog_select_runtime+0x665/0x6f0 [ 475.845170][T12252] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 475.845192][T12252] bpf_prog_load+0xe70/0x2480 [ 475.845221][T12252] ? __pfx_bpf_prog_load+0x10/0x10 [ 475.845239][T12252] ? avc_has_perm_noaudit+0x143/0x3a0 [ 475.845277][T12252] ? selinux_bpf+0xde/0x130 [ 475.845298][T12252] __sys_bpf+0x4043/0x49c0 [ 475.845315][T12252] ? __pfx___lock_acquire+0x10/0x10 [ 475.845343][T12252] ? __pfx___sys_bpf+0x10/0x10 [ 475.845364][T12252] ? do_user_addr_fault+0xdc7/0x13f0 [ 475.845388][T12252] ? reacquire_held_locks+0x20b/0x4c0 [ 475.845413][T12252] ? do_user_addr_fault+0xdc7/0x13f0 [ 475.845441][T12252] ? find_held_lock+0x59/0x110 [ 475.845472][T12252] ? lock_acquire+0x2f/0xb0 [ 475.845503][T12252] __x64_sys_bpf+0x78/0xc0 [ 475.845522][T12252] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.845545][T12252] do_syscall_64+0xcd/0x250 [ 475.845579][T12252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.845605][T12252] RIP: 0033:0x7fbbc938d169 [ 475.845619][T12252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.845636][T12252] RSP: 002b:00007fbbca237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.845653][T12252] RAX: ffffffffffffffda RBX: 00007fbbc95a5fa0 RCX: 00007fbbc938d169 [ 475.845665][T12252] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 475.845676][T12252] RBP: 00007fbbc940e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 475.845686][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.845696][T12252] R13: 0000000000000001 R14: 00007fbbc95a5fa0 R15: 00007ffc3d31b758 [ 475.845718][T12252] [ 475.845780][T12252] ---[ end trace ]--- [ 475.884044][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 475.895737][T12252] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 475.895751][T12252] CPU: 0 UID: 0 PID: 12252 Comm: syz.4.1720 Not tainted 6.14.0-syzkaller #0 [ 475.895769][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 475.895779][T12252] Call Trace: [ 475.895784][T12252] [ 475.895790][T12252] dump_stack_lvl+0x3d/0x1f0 [ 475.895817][T12252] panic+0x71d/0x800 [ 475.895836][T12252] ? __pfx_panic+0x10/0x10 [ 475.895856][T12252] ? __pfx__printk+0x10/0x10 [ 475.895885][T12252] check_panic_on_warn+0xab/0xb0 [ 475.895904][T12252] __ubsan_handle_out_of_bounds+0x137/0x150 [ 475.895925][T12252] bpf_prog_select_runtime+0x665/0x6f0 [ 475.895943][T12252] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 475.895962][T12252] bpf_prog_load+0xe70/0x2480 [ 475.895989][T12252] ? __pfx_bpf_prog_load+0x10/0x10 [ 475.896004][T12252] ? avc_has_perm_noaudit+0x143/0x3a0 [ 475.896034][T12252] ? selinux_bpf+0xde/0x130 [ 475.896052][T12252] __sys_bpf+0x4043/0x49c0 [ 475.896067][T12252] ? __pfx___lock_acquire+0x10/0x10 [ 475.896091][T12252] ? __pfx___sys_bpf+0x10/0x10 [ 475.896108][T12252] ? do_user_addr_fault+0xdc7/0x13f0 [ 475.896129][T12252] ? reacquire_held_locks+0x20b/0x4c0 [ 475.896150][T12252] ? do_user_addr_fault+0xdc7/0x13f0 [ 475.896173][T12252] ? find_held_lock+0x59/0x110 [ 475.896199][T12252] ? lock_acquire+0x2f/0xb0 [ 475.896226][T12252] __x64_sys_bpf+0x78/0xc0 [ 475.896243][T12252] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.896264][T12252] do_syscall_64+0xcd/0x250 [ 475.896287][T12252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.896308][T12252] RIP: 0033:0x7fbbc938d169 [ 475.896320][T12252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.896335][T12252] RSP: 002b:00007fbbca237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.896351][T12252] RAX: ffffffffffffffda RBX: 00007fbbc95a5fa0 RCX: 00007fbbc938d169 [ 475.896362][T12252] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 475.896372][T12252] RBP: 00007fbbc940e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 475.896382][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.896392][T12252] R13: 0000000000000001 R14: 00007fbbc95a5fa0 R15: 00007ffc3d31b758 [ 475.896411][T12252] [ 475.897441][T12252] Kernel Offset: disabled