last executing test programs: 2m0.306520242s ago: executing program 4 (id=557): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x20002) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000300)={{0x73, 0x4}, {0x3, 0x6}, 0x3, 0x0, 0x2}) (async, rerun: 64) r1 = syz_clone(0x80000000, &(0x7f0000000000)="66ccde57bdfafed57c4725a42fef53c329f4893a547b158e0b87bacae70671f765ed9f7103c6dc8177aa1e9801f14affb01cee3e21409a1990441a1b1d207a33cec9a50dac42fedcc874d93b1ff42ed686ab6717dbb05e859ea08ba1bdf0a0da9f37d28dd57d13044e5caace737703e1ff04e0338063a69ed0c195b3b4a18ac059a517c471215ec851038f42606dee5b3a5c1abf9284dbde1348056fb7177799da59b1b3230e5de64c99d993aa3fc9e9a0cc9897709c3408d8f09dc0005e43f91f51de1aeb17529f66a0ed5e13793d9573be92c9da02a6bd09e32303b721", 0xde, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="5805c60819a975127befaa211146cc2be533620ddf652b85e4e942b8d248b8561aaf3eeb54ca65b80c95d37d50970b5634ae41b2217cad8823a5ce25c5d952951efe3253a9306ed3c5382cd3819aa28b09a388b55bae644b0d316742e9cf169021f814acfd81e7394168a3a93b051a9f828df1f35add181dd4f7f47f02153f35f7a5a84952d5ff7cb002172c2db34a19e525a753ab5f929a2fbf1a340d7734057c58cc") (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x6, r1, 0x3, 0x0) 1m58.906714227s ago: executing program 4 (id=566): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000003200)=[{0x2, &(0x7f0000000300)=0x1, 0x82}, {0x7, &(0x7f0000000480)=0x5, 0x2}, {0xa, &(0x7f00000004c0)=0x80, 0x2}, {0x7fffffffffffffff, &(0x7f0000000540), 0x82}, {0x0, &(0x7f0000000580)=0x200, 0x2}, {0x1, &(0x7f00000005c0)=0xfffffffffffffffb, 0x82}, {0x9, &(0x7f0000000600)=0x6, 0x2}, {0x8c, &(0x7f0000000640)=0x56b6, 0x2}, {0x6, &(0x7f0000000680)=0x5, 0x2}, {0x3, &(0x7f00000006c0)=0x527, 0x2}, {0x3680, &(0x7f0000000700)=0x7, 0x2}, {0x27, &(0x7f0000000740)=0xfffffffffffffffa, 0x2}, {0x4, &(0x7f0000000780)=0x1ff, 0x82}, {0x3f, &(0x7f00000007c0)=0x7, 0x2}, {0x80000001, &(0x7f0000000800)=0x7, 0x82}, {0x81, &(0x7f00000008c0)=0x9, 0x2}, {0x5, &(0x7f0000000900)=0x96, 0x2}, {0x4, 0x0, 0x82}, {0xa093174, &(0x7f0000000980)=0x100000000, 0x82}, {0x7, 0x0, 0x2}, {0xc59, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0xfe, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0xb9b5, 0x0, 0x82}, {0xffffffffffffffff, 0x0, 0x2}, {0x3ff, 0x0, 0x2}, {0x3fd78c1, &(0x7f0000000f00)=0x7, 0x82}, {0x8, &(0x7f0000000f40)=0x70, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0xffffffffffffffff, &(0x7f0000002400)=0x7, 0x82}, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x7bd, 0x0, 0x2}, {0x8db2, &(0x7f00000027c0)=0x7, 0x2}, {0x7, 0x0, 0x82}, {0xec, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x180000000000, 0x0, 0x82}, {0x8000000000000001, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0xfffffffffffffff1, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0xc, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x264e, &(0x7f00000031c0)=0x3, 0x82}], 0x33, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) bind$alg(0xffffffffffffffff, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) 1m56.632135764s ago: executing program 4 (id=573): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xd}}, './file0\x00'}) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x20}, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0xff, 0x5, 0xfff, 0x3, 0x5, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f00000001c0)={r2, r1, 0x6}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000240)=r5) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x1, @raw_data="57c626d76bd40cc9003578f389b9dbec668529a27b95858bc6a54216f93246b177d725a95eeb404409fe3c431b796885f84999e05944e24615fcdd2ceb2e2bc2def7e0b74d1a1546ec94fb0ed3593c910a19f945899d5082a0fa37c07e2dc5bde8704319f96e69898454c4ef2c813b222c393323fa20f8953d1b4e092fa3264238872b4e959adcd362ac0727335730f9695292582b9141dff75a8826613ea585cf86762784ee4982148b76f0f20d503d8868ca1e2498908db57ec102faf5098a0511ef91553c9f9b"}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0xf, 0x5, 0x8}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000480), 0x6000000000000, 0x301480) ioctl$VIDIOC_DBG_G_REGISTER(r6, 0xc0385650, &(0x7f00000004c0)={{0x2, @name="c36573b052c60145288d8157044a82cc4525de8b13ae32fdb20006e9d4d1061b"}, 0x8, 0x939b, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$getflags(r1, 0x1) syz_emit_ethernet(0x88, &(0x7f0000000500)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@generic={0x5, "f9e82ea4931c5609a438f96a5836223f3a64c12ea02c26b0e4994db377b197a5d5106214fe4427a8847a68bf5ce3976d469b3f1507446a5e137e7d02d738c636bec790d1a712500f8e1f54916c3cff6427d32feb4a0b1508d391366fe821d3a0d1b710f63ff33d100df3ebeb3914c7e3eae84f328a18"}}}, &(0x7f00000005c0)={0x1, 0x1, [0x997, 0x2d5, 0xeed, 0x5fe]}) accept(r1, &(0x7f0000000600)=@ax25={{0x3, @netrom}, [@rose, @netrom, @rose, @default, @remote, @default, @default]}, &(0x7f0000000680)=0x80) write(r2, &(0x7f00000006c0)="5445edac692efd788114ca89eeec7961750eccba685b71257132ba13da9766b4385efe952e422a416335d0bee7cc38d32a1b7d659cdbf29c40522743d26ca4ba5707bebd61e90f810ad938d8df0e5ce0366b4f90cdf5792b8f5fd0447ebb742ac9773385938474f6df5c63bd81a62ef7b3903108cf2daf8964d29072d57339026462f35099cc0b07dcec78f64ebb1f3dac2de3f1cb5bb89f94305d9125c243759c56e7caecbf954a5f7825a13e871dc3e18793227f61dc2b21182172501951afb175f1186b67eb3101932fce131fe3c7c18a840cde", 0xd5) openat$vimc0(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) fsync(r1) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000800)=0x80000000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x18, 0x140a, 0x10, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x44011}, 0x3035ebf9f45aa68c) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000940)={'batadv_slave_1\x00', {0x2, 0x4e24, @multicast2}}) r7 = creat(&(0x7f0000000980)='./file0\x00', 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f00000009c0)={{0x9, 0x0, 0x1, 0x7, '\x00', 0x5}, 0x1, [0x7fffffffffffffff, 0x8, 0x1000, 0x2, 0xa4, 0x8, 0x2, 0x80, 0x6, 0x2, 0x5, 0x6, 0x40, 0x2, 0xf509, 0x5f4eb69f, 0xca3, 0x7, 0x6, 0x0, 0x0, 0xffff, 0x800, 0x360f, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5, 0x114, 0x2, 0x7ff, 0x2, 0x8, 0x400, 0x5, 0x1b3, 0x3, 0x4, 0x100000000, 0xfffffffffffffff8, 0x5, 0x5, 0xb, 0x2, 0x1, 0x8, 0x0, 0x400000, 0x6b, 0x2, 0x1, 0x5, 0xfed8, 0x9b7e, 0x8, 0x4, 0xffff, 0x8, 0x8c, 0x200, 0x9, 0x7fffffff, 0x4, 0x3822, 0xf06, 0x8, 0x2, 0x9, 0x2, 0x2, 0x2f, 0x9, 0x5, 0x0, 0xfffffffffffffff7, 0xffffffff, 0x1, 0x4a, 0x5, 0x5, 0x1000, 0x0, 0xffff, 0x3, 0xffffffffffffffc0, 0x40, 0x1, 0x2e, 0x40, 0x2, 0x7, 0x80000000, 0x1, 0x4, 0x8, 0x8, 0x995c, 0x2, 0x2, 0x100000001, 0x8, 0x2, 0x100, 0x1aa3, 0x0, 0x3, 0x3, 0x2, 0x6, 0xfffffffffffffe00, 0x8, 0x9, 0x3, 0x3, 0x93, 0x1, 0xff, 0x3, 0x8, 0x6e1, 0x4, 0x8, 0xffffffffffffffff, 0x2, 0x8, 0x7]}) syz_open_dev$vivid(&(0x7f0000000ec0), 0x0, 0x2) 1m55.226806794s ago: executing program 4 (id=581): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x70bd28, 0x200, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (fail_nth: 9) 1m52.101025394s ago: executing program 4 (id=587): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x8000) io_uring_enter(0xffffffffffffffff, 0x4687, 0xda48, 0x67, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x800) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES32=r0, @ANYBLOB="3d5ac262dc37b54f649e8a41848cbbabb4f70c3468e5561fee4a2f8b6903a93ad520f6be07d66608e26d99aadb34f26ea90b9902"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/244, 0xf4}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) 1m46.377629999s ago: executing program 4 (id=601): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344], 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m31.124961588s ago: executing program 32 (id=601): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344], 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.459377555s ago: executing program 3 (id=871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000ffffff7fffffffff00006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) read$FUSE(0xffffffffffffffff, &(0x7f0000003940)={0x2020}, 0x2020) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000400)=ANY=[@ANYBLOB="603ebea8d96b5648a76ee38514afe14ad546092c8d7210c6ee1a340dba0b48315d145954c6526050a2772065aee6a83e531d27de9931550d39bf516d39faf471535b68469a0edff828f1f0696188224617da913cd0192c7f12faacfecbbe065ae0ff04b7afd14f8f6be02d28331e0964483706560ce2da3b41abf7144673f6a46cbe1c5a125b86ebe8284f2e9b58e19021779b7fa6d106424e3b3add40b408c5ba1abda175"], 0xfe49, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x60000000}, 0x20000004) syz_init_net_socket$x25(0x9, 0x5, 0x0) 13.839331371s ago: executing program 3 (id=879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x7101}) 13.716764115s ago: executing program 3 (id=880): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@mask_fadd={0x58, 0x114, 0x8, {{0x8}, &(0x7f0000000080)=0x6, 0x0, 0x9, 0x7fffffff, 0x1, 0xe, 0x1c, 0x8000000000000000}}], 0x58}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0xffffffffffffffff) 10.542809236s ago: executing program 2 (id=889): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x0, 0x140) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40044104, 0xfffffffffffffffe) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/3, 0x1e000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x0, r8}, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a37", 0xd, 0x2400c0c7, 0x1}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9.752994437s ago: executing program 3 (id=890): syz_usb_connect(0x2, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$cdc_ecm(0x0, 0x163, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x151, 0x1, 0x1, 0xfb, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "a8ed849ef6e5"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x56, 0x9d3, 0xfffe, 0x5}, [@mdlm_detail={0xf3, 0x24, 0x13, 0x0, "121adadaec8b0477478406465aef7663caab1fb0b7ddf96630176bd7fe4761a24180b6c830a0c6c128dffffafcc0a6f5ab76bf8f85f3432041e9d10040163ad0efd2f541b18cc2e8eaa22ffd097baf340a6caa68cf6d5c4ed6c36a6a39a768c0df10a676a47de2b18af3700dc8da61e424b2e80afd11dc24d9a7131e0abf7af53a42f304e2084b98c7efdf4f893206689097e52c07ac0bb691164c975f093750d13741356458b724958c6b8496e81780f9e748f2d82d753983c1bf4321ef4e1f4911c359fe8cf045a607b3d5fba52aa30f069031431c676fa1f4f6633aca52e0b6a3c32734c71cc67b20abc32e4d01"}, @acm={0x4, 0x24, 0x2, 0x9}, @obex={0x5, 0x24, 0x15, 0x3f}, @acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x5, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ef, 0x9, 0x3, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x14, 0x3}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0xe, 0x5c, 0xbf}, 0x8b, &(0x7f0000000240)={0x5, 0xf, 0x8b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7, 0x0, 0xcf}, @ptm_cap={0x3}, @generic={0x72, 0x10, 0x15, "bd2a5f8ec5450eba5f3860f8b64b1dd4645df9c25e10256457872bfa2ddc99439947c7da8663046fe558b2c3a3cbb2f521a62fef09671e810c9b74ee0dab2a78dbadfac38dbf4625b9d47ff894165ff31416d9ae90f48d361356df6f3e93fc6a9e93c200e83edb8e5e97e6d6fa5011"}, @ext_cap={0x7, 0x10, 0x2, 0xe2e00a8896cf639a, 0xd, 0x5, 0x9}]}}) 9.442289967s ago: executing program 5 (id=894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0x0, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x5}}, {0x4}}]}]}, 0x64}}, 0x4000010) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0x0, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x5}}, {0x4}}]}]}, 0x64}}, 0x4000010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) (async) 9.190948118s ago: executing program 5 (id=895): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xe, 0x3, 0x200, &(0x7f0000003c40)="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"}) 9.017120273s ago: executing program 2 (id=897): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x8000) io_uring_enter(0xffffffffffffffff, 0x4687, 0xda48, 0x67, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x800) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES32=r0, @ANYBLOB="3d5ac262dc37b54f649e8a41848cbbabb4f70c3468e5561fee4a2f8b6903a93ad520f6be07d66608e26d99aadb34f26ea90b9902"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/244, 0xf4}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) 8.958584523s ago: executing program 5 (id=898): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) preadv(r5, &(0x7f0000001500)=[{&(0x7f0000000180)}, {&(0x7f0000001140)=""/203, 0xcb}, {&(0x7f0000001240)}, {0x0}, {0x0}], 0x5, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x78}}, 0x20040054) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000001240)}, 0x10) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="10000008640400022bbd7e00fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x24004000}, 0x800) 7.757419307s ago: executing program 1 (id=899): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x103600, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) clock_getres(0xf1f81c070db0eba1, 0x0) mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x8802) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002880)=@newtaction={0xe98, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0xe84, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x62d, 0x8, 0x7}, {0xdf, 0x4, 0x5, 0x3, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x3, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xfffffff8, 0x3}, {0x0, 0x4, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xfff, 0x9, 0xffff, 0x1, 0x81}, {0x8, 0xfff, 0x9, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x7fffffff, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x0, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0x79, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x6, 0x9, 0x27, 0xb, 0x5}, {0x6, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x8, 0x0, 0xff, 0x10003}, {0xb, 0x7f, 0x5, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x4d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x5}, {0x10002, 0xffffffff, 0x401, 0x2, 0x8001, 0x40}, {0x7, 0x81, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2b}, {0x9, 0x81, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x810000, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x2, 0x10003, 0x3, 0x0, 0x3, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0x2}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x8, 0x4d800, 0x33}, {0x20, 0x5, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0xe5a7}, {0xda1, 0x893, 0x2, 0x6, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x9, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x5}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x5, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x1605}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0x4, 0x3ee, 0x4}, {0xbfffffe, 0xfff, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x2, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x6a5, 0x2}, {0x29dbdf0, 0xd, 0x0, 0x7, 0x6, 0x2}, {0x7, 0x95, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x4, 0x7, 0xffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x2, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x200}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x0, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x7, 0x5, 0x8, 0xffffffff, 0x405bd, 0x6}, {0x9, 0x0, 0x9, 0x0, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x2}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x5, 0x5, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x2000005, 0x3, 0x7, 0x97fd, 0xef, 0x2}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0x7fffffff}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0x4, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x6, 0x5, 0x2, 0x0, 0x0, 0x10001}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x5, 0x3, 0x400, 0x81}, {0x970, 0x100, 0x5, 0x2, 0x3, 0x9}, {0x3, 0x3, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x0, 0x96, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x8c5}, {0xfffffffb, 0x3, 0x1, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0xc, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x2, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0x9, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfff7fff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0x4}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0xd, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x6}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x5, 0x3, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x3, 0x6, 0x7, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xad}, {0x7, 0x9, 0x8, 0x3, 0xe02, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096}, {&(0x7f00000014c0)=""/155}, {&(0x7f00000024c0)=""/170}], 0x1}}], 0x40000000000013e, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0xfffffdf9, 0x0) 7.18831308s ago: executing program 0 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mkdir(0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 6.369069853s ago: executing program 2 (id=901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xf5ff}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) 6.332123053s ago: executing program 5 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0x8, 0x9, 0x6bf8}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r6, 0x5, 0x70bd25, 0x8, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0xb) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x802ca2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r9 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x200, 0x1}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) 6.202745202s ago: executing program 1 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a83000/0x4000)=nil, 0x4000}) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)) 6.182419508s ago: executing program 2 (id=904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETLE(r3, 0x400454de, &(0x7f0000001140)) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r4, 0xc) socket$inet6(0xa, 0x4, 0x40004) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f00000005c0)={0x77359400}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000180)={0x2, 'wg2\x00', {0x9}, 0x1}) write$uinput_user_dev(r6, 0x0, 0x0) syz_io_uring_setup(0x57d6, &(0x7f0000000000)={0x0, 0xc847, 0x1, 0x1, 0x44, 0x0, r6}, &(0x7f00000000c0), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r8, 0xc00864c0, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r8, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r8, 0xc01064c5, &(0x7f00000003c0)={0x0}) 3.983566431s ago: executing program 0 (id=905): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000003200)=[{0x2, &(0x7f0000000300)=0x1, 0x82}, {0x7, &(0x7f0000000480)=0x5, 0x2}, {0xa, &(0x7f00000004c0)=0x80, 0x2}, {0x7fffffffffffffff, &(0x7f0000000540), 0x82}, {0x0, &(0x7f0000000580)=0x200, 0x2}, {0x1, &(0x7f00000005c0)=0xfffffffffffffffb, 0x82}, {0x9, &(0x7f0000000600)=0x6, 0x2}, {0x8c, 0x0, 0x2}, {0x3, &(0x7f00000006c0)=0x527, 0x2}, {0x4, 0x0, 0x82}, {0x81, 0x0, 0x2}, {0x5, &(0x7f0000000900)=0x96, 0x2}, {0x4, 0x0, 0x82}, {0xa093174, &(0x7f0000000980)=0x100000000, 0x82}, {0x7, 0x0, 0x2}, {0xc59, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0xfe, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0xb9b5, 0x0, 0x82}, {0xffffffffffffffff, 0x0, 0x2}, {0x3ff, 0x0, 0x2}, {0x3fd78c1, &(0x7f0000000f00)=0x7, 0x82}, {0x8, &(0x7f0000000f40)=0x70, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0xffffffffffffffff, &(0x7f0000002400)=0x7, 0x82}, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x7bd, 0x0, 0x2}, {0x8db2, &(0x7f00000027c0)=0x7, 0x2}, {0x7, 0x0, 0x82}, {0xec, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x180000000000, 0x0, 0x82}, {0x8000000000000001, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0xfffffffffffffff1, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0xc, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x264e, &(0x7f00000031c0)=0x3, 0x82}], 0x2e, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) bind$alg(0xffffffffffffffff, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) 3.570728987s ago: executing program 1 (id=906): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000240)=0x9, 0x4) 3.413411403s ago: executing program 3 (id=907): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="e815fc3848f8e3a4bb0c0fcc95681df9241e83815109f05f40a838b43ace8bd4188f88b6f083fa91f3ef54f2426737f7eae3614d101fee8a1255", 0x3a}, {&(0x7f00000001c0)="5f8796bb476135084945fad80dab6e448d594cc3979d3161fe60aaaaddfba3eeba73b337df6588f18c9938b83f275afb2e5445cb95bf98b8e27321a79c516fa1dfe7a500f80e37f5bb16a02deed0fcd8c33b035167996352c69fde66350cedb98e8ec5937bcc554d416132c9d8a4b1be9b2287f18f5745bb8ed4c8b7edaf1bb0b01f33a8dce67bf8bc1afaa85ad45564ab1bbf9054eb22eb45643808f145035bfb8d7b2811348b18e4d45e03baef734d6a1d0ba592031eb6b73c380c30bf90cf608217fd6966f31630627850fcd48bca", 0xd0}, {&(0x7f00000002c0)="8ea0a45cafbfa9016b4d90903bcb5527d3", 0x11}], 0x3}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0x3, @loopback, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000380)="7435c7abf890bc060c954728c4234ea01b84f2954e954d5275fc9edcb41600fb920f7729ce53d9553242f2562bf5a2f452cabce1c8673d8a318d8ac8aaf855766a5cd38ba9b5963ecccca5a3406935ac41a4666c3f81ea79", 0x58}, {&(0x7f0000000400)="f3e9bb158c758610028d7cb07550aeed23504b31bcfc374bb688fe8ec41618da13f64b1fa165244f9138799ed7cde215ea659a32496b60ef6812e7afef5e1b77e596dcd360046b7acbe29fdf603cb4425d2b95a26f8f02240fa910a83393dc47af13ebc566e10e10d9c0221e8edd8b77440232b1b4f074e5fae4edc89e6a1a8a5d2b4dd77a01ffdb6f23dd07b452227475d63110dcf9e23c56f4a612227d5541f7296a0a93f92068ab350e4fa94ac39b94d66d0d94fd3db4ae0bd02342", 0xbd}, {&(0x7f00000004c0)="10e72e46b53b33bfdbaa4ace964b58a15ae8c3e39663af089b4852d42b5f23a132fe64a9ddc2dd9fd470511d2d0d2c1f7eb8feea98dea154be6f0b03a75ebb57b7f87c9e060bc93a21b4a1b6f2c329979601952a5a19ced3d49a2aae1174b05898014bee20776fea8395ed878051af5093531ea51ad0ba6a1a27f81257b94104bd87b60ad3295306f061211fa4ab75bba4d467d8ac233f6fcb327b033126dc93a89337825bfe1dc8b88b7565f574f50f1187b79d8301049501681867d91db1542f32b24d616410a78dd7cb68c05b851432b8ffa33c26", 0xd6}], 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="0100000000000000290000003e0000009094000000000000200000000000000029000000360000002900000000000000050204000000000014000000000000002900000043000000d00600000000000098000000000000002900000039000000041001470000000000000000000000000000000000000000ff020000000000000000000000000001ff01dd000000000000000000000000010000000001000000000000000000000020010000000000000000000000000000fe880000000000000000000000000001fc0000000000000000000000000000000000000000004130000000000000002900000037000000fd0200000000000000010004010bc2040000000c010600000000000000000000680000000000000029000000370000002f0900000000000008277380e1546607848da44040eb3350b3ead278b80edb78fb8ba8941077a44513d0bd37de245ee445c910fc01000000000000000000000000000005020001000100c204000000090502000753f2fe03143ab63aa45dea0158e8ea0101010000280000000000000029000000360000003b0200000000000005020401010600000000000005020001"], 0x1a8}}, {{&(0x7f00000007c0)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="bf40913fd385cabc9af635b02b8cc56bb78da937f9cdf216eac1a62642781bda34a9f4d3f3770fe75f716a2378f440afb3dacc2a1e6abf9bea0e4388f36dc1be9768d96ff0c60a2dddac7dcea9a4447ab5abc55c7b90bd225daa045eeb4bc0f5de0f12e92284ca61bfcab344f226a1a49ea6e288dd00cb0310549b74db1c089ff4e984ace3a37846b6e0bb9cebb6f704eb24644de8fe9e2bbe4566cbe5773c0625f13c93b46c2304b279cf1df0feb60af03350bb903e19ddeb90d0", 0xbb}, {&(0x7f00000018c0)="26fec9e00fefdd713e4875a8104eccc554e16d8ff3e7662f8e462c08c2f2d01bfd0ef1d5e7cf90824338568c0805d56aed0889771724a5d6938bf3896013d359d4968bc225931d29e290a6d5c6cd68b1eb1bbf3dfba06850087bcaff4bd795403998188ee68e4aaa8f6e1f1ac34a2460e80bbf8a4f983bf13a3947748c75ee4b", 0x80}], 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="980000000000000029000000390000000010020700000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000100000000000000000000000000000001fe880000000000000000000000000601fc020000000000bfd39f7100000000012000000000000000000000000000c204000000080000300000000000002900000004000000620200000000000004010c040163c20400000003010100010400"/232], 0xe8}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x71eb0, @local}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000001ac0)="e0afcbba1db3ec091e1e6c3f554fe8c603ef61009e22687863c192d327e1c2cf62b73b3a351b4a08e31ddece9d45d6dcce012fec2049e149b5787ce24a993eb224e9e1d57f62a842a94e41f88f06b5f45f3066955d249273777b73b28f32ebe5175f07fdfc6103710bf5fb99b2c51cc470057cc02b2ca83c1a154af75c388e7bb8fa572b66c83b042f840f359bb6da00aba3947fcbef8dddb3a6919662c219413d9d7ead4b7f220a8cdd7094a065aedc1dab2aef6056193fb1a17e7c05a1e02803c1309f7154ee6d96a27fccabb4c68b7ea7bb31ebd499bbc75e524b9d85e7530885b532929320195644", 0xea}, {&(0x7f0000001bc0)="637fd618119043efe798e84db06e64e6da95e2b5f6b504dfdfdae04f4ef98c720bb1082ed2d56c5fbc59cf92fc1f374265a3843ade0c69a0930ced2547640a19dec17e6b4d6d323f203fae56cb1b7df95c8a3ca8b3786cf3453b1ddc6ae59fe7fc130ecf15e898e07096f8fd3a8d5ad67a9686", 0x73}, {&(0x7f0000001c40)="8c932605a26355edb1fa05dbfb33e4245bde69f1f75972258ae0decddeb7402079ce1d018f0baa978d2fb3c596808d644534f03f5329d55ba3c18f3f3b137efc691657b2b270d0cf74270997df0ea54f6ac90bbc1eaaf42d790f6a64f9b3b2ec648878e500cdfc4b0deb25bba472272218aa31de3e05d194b906f32952006df29876eb20e8", 0x85}, {&(0x7f0000001d00)="8ae80d124ee09267e0ce1f0ff62b4f5999b71effba0f53e535cbabb20820df7a614e828ceadc71282a6b6bc29f1f6212748cfc8f9868d7b394a6ec9d7937c1ab66929f7a31873be7f4bd9acf064bcd7ab5166a79e2aabe409976225f50affc9f6863f5281493bdd53db26e1f5a772871d4143740c3cfb6bb9bdfe62d41c3b066b708888de2266e65ea806263e3a7dc32e9a16acdeaa977839f6b7a13598da9cb292e", 0xa2}, {&(0x7f0000001dc0)="a712eeaf3f15a24bcbcc7dc814a68ddf3e2b2ed5ff3072179030b5ff1617f4a8467aa0749ec95388e0e6350dc215072f6fe1f3d4f695ecbd8803c9d48e75da4e510a594b70ac9660f437166b0675b5c857cdf6edab9f326787eac513e31855", 0x5f}, {&(0x7f0000001e40)="90bbd6c9d7ff2937c5392c68dabe03a61ee5878950facbc40a21f709699c3ff6a6edbb80dd459b41f8d0a576eaff4e5b47413bfcaeb187b84b6024fb607673feb9688b5cf17d5812a2fab48c2bec3d394315c793072fc2a49c0db136a1bc484e427b78", 0x63}], 0x6, &(0x7f0000001f40)=ANY=[@ANYBLOB="180000000000000029000000370000002c000000000000001400000000000000290000003400000006000000000000001400000000001529000000430000000409eb7c000000001400000000000000290000000b0000000000191f00000000580000000000000029000000390000003c08000100000000fc01000000000000000000000000000100000000000000000000000000000001fe880000000000000000000000000001fc0100000000000000000000000000031400000000000000290000003e00000006000000000000001400000000000000290000000800"/232], 0xe8}}], 0x4, 0x4000001) accept4$unix(r0, &(0x7f0000000640), &(0x7f00000006c0)=0x6e, 0x80000) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff33}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000600)) r5 = epoll_create1(0x80000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) epoll_pwait2(r5, &(0x7f0000000180)=[{}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x9, 0x4) listen(r0, 0x1) 3.370811657s ago: executing program 0 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) getpriority(0x1, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.18400625s ago: executing program 3 (id=909): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='btrfs_trigger_flush\x00', 0xffffffffffffffff, 0x0, 0xa0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) set_mempolicy(0x1, &(0x7f0000000600)=0x8, 0x5) 2.049382059s ago: executing program 0 (id=910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000280)={0x400, 0xd, 0x0, 0x2}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x6d, 0x0, 0x8000000) socket$inet_smc(0x2b, 0x1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) syz_io_uring_submit(0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000500)="00335b9f4edb3a117d347516fe4e685f082bef143d6e4ac601535dd652986c9352eb48800a35b8b99aaa1cd4b09ea5033a9a3a6000ed97c56353c7238e2a01d472601335a09439567bfa70", 0x4b, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getpid() r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = openat$cgroup(r1, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="48000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="2825020000080000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES32=r7, @ANYBLOB="9035fa35c76d5904b7546fc37ed961c608dbfa9926efbcaccf1e192c31f26a445b1dd6a30db3cfa3d0d191cb57c479e222f82fef2db544ce0ae663afcacbdbd06dea2a8c1627a3e88c308612243b94803ee17eb71fabbcc25118ea97af45975532d0fe6e9de5137a8e01e555907e9718297dfcd8b6504536391b1cb918f834ee074b1703fc8908709bf1c643003ca6a6d84f041cc1f175"], 0x48}, 0x1, 0x0, 0x0, 0xafb8a1a4416d9a34}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="75b084d3a3f465cf1b499e1e2f06083df5339448b47f6f43d29f511e4389ce6277d21cf336071f9ab95d80589f96d4f95a6276fe57ffd6a8efb33acfb6b4bda9f76fe74f25e3e06546151d329be1ffe7420bae346019b1e9b6eb5bda7caa01f230250665aac589ec4d173d9b9158d4b9e455c9b1a2a41c5980", @ANYRESHEX, @ANYRES8=r6, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES64=r6, @ANYRESDEC=r7, @ANYBLOB="a40620a82d67ee951d57dd6b3821d37655b565688c241ac21f3ee4d21c2414d3ceffa92d034f788b"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.046067911s ago: executing program 1 (id=911): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0xffffffff80080004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffb, 0x6, 0x40, @scatter={0xf2, 0x0, 0x0}, &(0x7f0000000340)="98aebbbe28ef", 0x0, 0x4, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2}) 1.929569097s ago: executing program 5 (id=912): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x8000) io_uring_enter(0xffffffffffffffff, 0x4687, 0xda48, 0x67, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x800) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES32=r0, @ANYBLOB="3d5ac262dc37b54f649e8a41848cbbabb4f70c3468e5561fee4a2f8b6903a93ad520f6be07d66608e26d99aadb34f26ea90b9902"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/244, 0xf4}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) 1.853928788s ago: executing program 2 (id=913): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) preadv(r5, &(0x7f0000001500)=[{&(0x7f0000000180)}, {&(0x7f0000001140)=""/203, 0xcb}, {&(0x7f0000001240)}, {0x0}, {0x0}], 0x5, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x78}}, 0x20040054) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000001240)}, 0x10) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="10000008640400022bbd7e00fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x24004000}, 0x800) 1.80386085s ago: executing program 0 (id=914): mount(0x0, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x5f458000) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) getitimer(0x0, &(0x7f0000000800)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) waitid(0x0, r1, &(0x7f0000000240), 0x80000000, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$selinux_context(r0, &(0x7f00000000c0)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, &(0x7f00000034c0)={{0x2, 0x0, 0x80, {0xeeee0000, 0x5, 0x2}}, "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", "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"}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r2, 0x9620}], 0x1, 0x0, 0x0, 0xffffffffffffff41) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) setitimer(0x0, 0x0, 0x0) 1.621808229s ago: executing program 1 (id=915): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'veth1_to_hsr\x00', {0x2}, 0x8}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x4c7e, 0x2001, 0x6a, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x59) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/18, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000040) 850.220652ms ago: executing program 2 (id=916): getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x54, 0xa, 0x3, "325857bb0000090000000000000000000020000000000020000000000200", 0x34343459}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x70bd26, 0x700, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 796.128986ms ago: executing program 5 (id=917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a83000/0x4000)=nil, 0x4000}) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)) 682.91847ms ago: executing program 0 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mkdir(0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (fail_nth: 3) 0s ago: executing program 1 (id=919): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0xfffffffe, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x800000000000000, 0x0, 0x4000}, 0x2000080) kernel console output (not intermixed with test programs): /syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd298ebe9 code=0x7ffc0000 [ 208.247253][ T30] audit: type=1326 audit(1754904448.929:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9bd298ebe9 code=0x7ffc0000 [ 208.270379][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.396278][ T7967] netlink: 'syz.0.479': attribute type 32 has an invalid length. [ 208.575169][ T30] audit: type=1326 audit(1754904448.929:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd298ebe9 code=0x7ffc0000 [ 208.598424][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.642320][ T5916] usb 3-1: USB disconnect, device number 8 [ 208.694462][ T30] audit: type=1326 audit(1754904448.929:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9bd298ebe9 code=0x7ffc0000 [ 208.717590][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.798136][ T7977] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 209.625122][ T30] audit: type=1326 audit(1754904448.929:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd298ebe9 code=0x7ffc0000 [ 209.683333][ T5885] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 209.916355][ T7983] netlink: 'syz.1.483': attribute type 6 has an invalid length. [ 210.283470][ T30] audit: type=1326 audit(1754904448.939:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd298ebe9 code=0x7ffc0000 [ 210.687915][ T30] audit: type=1400 audit(1754904451.579:464): avc: denied { connect } for pid=7990 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 210.711239][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 210.720488][ T5885] usb 5-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 210.761077][ T5885] usb 5-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 210.775951][ T5885] usb 5-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 210.787215][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.795695][ T5885] usb 5-1: Product: syz [ 210.804210][ T5885] usb 5-1: Manufacturer: syz [ 210.810040][ T5885] usb 5-1: SerialNumber: syz [ 210.847671][ T5885] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 210.916845][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 210.950664][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 210.978870][ T7998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.488'. [ 211.025710][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.046516][ T5885] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 211.133126][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 211.164593][ T5885] usb 5-1: media controller created [ 211.184669][ T10] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 211.210064][ T10] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 211.220781][ T10] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 211.229538][ T10] usb 3-1: config 0 has no interface number 0 [ 211.238959][ T10] usb 3-1: config 0 interface 25 altsetting 237 has an invalid descriptor for endpoint zero, skipping [ 211.250085][ T10] usb 3-1: config 0 interface 25 altsetting 237 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 211.263839][ T10] usb 3-1: config 0 interface 25 altsetting 237 endpoint 0xF has invalid maxpacket 1535, setting to 64 [ 211.275831][ T10] usb 3-1: config 0 interface 25 altsetting 237 has an invalid descriptor for endpoint zero, skipping [ 211.276978][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.289090][ T10] usb 3-1: config 0 interface 25 altsetting 237 has an invalid descriptor for endpoint zero, skipping [ 211.308553][ T5924] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 211.347760][ T10] usb 3-1: config 0 interface 25 altsetting 237 bulk endpoint 0x8 has invalid maxpacket 1024 [ 211.361582][ T10] usb 3-1: config 0 interface 25 has no altsetting 0 [ 211.380718][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 211.387072][ T5885] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 211.428814][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=8ef0, bcdDevice=5e.63 [ 211.439954][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.464694][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 211.476188][ T10] usb 3-1: Product: syz [ 211.492812][ T5924] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 211.530665][ T5924] usb 2-1: config 0 has no interface number 0 [ 211.554396][ T5924] usb 2-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.560986][ T30] audit: type=1400 audit(1754904452.439:465): avc: denied { setopt } for pid=8004 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.569223][ T10] usb 3-1: Manufacturer: syz [ 211.624056][ T5885] dvb-usb: schedule remote query interval to 150 msecs. [ 211.648737][ T10] usb 3-1: SerialNumber: syz [ 211.655302][ T5924] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 211.665070][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.673190][ T5924] usb 2-1: Product: syz [ 211.677463][ T5924] usb 2-1: Manufacturer: syz [ 211.721794][ T10] usb 3-1: config 0 descriptor?? [ 211.726750][ T5924] usb 2-1: SerialNumber: syz [ 211.734617][ T7988] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 211.752588][ T5924] usb 2-1: config 0 descriptor?? [ 211.758219][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 211.805370][ T5885] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 211.891026][ T5885] usb 5-1: USB disconnect, device number 7 [ 212.265088][ T10] option 3-1:0.25: GSM modem (1-port) converter detected [ 212.300024][ T10] usb 3-1: USB disconnect, device number 9 [ 212.591662][ T30] audit: type=1326 audit(1754904453.429:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfab8ebe9 code=0x7ffc0000 [ 212.710503][ T8024] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 213.323453][ T10] option 3-1:0.25: device disconnected [ 213.358238][ T30] audit: type=1326 audit(1754904453.429:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfab8ebe9 code=0x7ffc0000 [ 213.381522][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.685971][ T30] audit: type=1326 audit(1754904453.519:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8bfab8ebe9 code=0x7ffc0000 [ 213.757208][ T30] audit: type=1326 audit(1754904453.519:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfab8ebe9 code=0x7ffc0000 [ 213.773530][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 213.805462][ T30] audit: type=1326 audit(1754904453.519:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfab8ebe9 code=0x7ffc0000 [ 213.829980][ T5885] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 213.955579][ T30] audit: type=1326 audit(1754904453.519:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8bfab8ebe9 code=0x7ffc0000 [ 213.981305][ T30] audit: type=1326 audit(1754904453.519:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfab8ebe9 code=0x7ffc0000 [ 214.892072][ T5924] qmi_wwan 2-1:0.49: probe with driver qmi_wwan failed with error -22 [ 214.926559][ T8046] syz.2.502: attempt to access beyond end of device [ 214.926559][ T8046] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 214.939837][ T8046] SQUASHFS error: Failed to read block 0x0: -5 [ 214.946085][ T8046] unable to read squashfs_super_block [ 214.957147][ T5924] usb 2-1: USB disconnect, device number 11 [ 215.463600][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 215.463616][ T30] audit: type=1400 audit(1754904456.359:475): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 215.718488][ T8065] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 215.725026][ T8065] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 215.733704][ T8065] vhci_hcd vhci_hcd.0: Device attached [ 216.174283][ T2149] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 216.965777][ T8066] vhci_hcd: connection closed [ 216.974447][ T6361] vhci_hcd: stop threads [ 216.983697][ T6361] vhci_hcd: release socket [ 216.988271][ T6361] vhci_hcd: disconnect device [ 217.051253][ T8073] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.508'. [ 217.945198][ T8074] ALSA: mixer_oss: invalid OSS volume 'u' [ 219.939482][ T30] audit: type=1400 audit(1754904460.809:476): avc: denied { write } for pid=8097 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 221.507230][ T8118] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 221.507271][ T8118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.508274][ T8118] vhci_hcd vhci_hcd.0: Device attached [ 222.500063][ T8119] vhci_hcd: connection reset by peer [ 222.538932][ T13] vhci_hcd: stop threads [ 222.566330][ T13] vhci_hcd: release socket [ 222.588396][ T13] vhci_hcd: disconnect device [ 222.734081][ T2149] vhci_hcd: vhci_device speed not set [ 223.453123][ T8128] ALSA: mixer_oss: invalid OSS volume 'u' [ 223.776508][ T30] audit: type=1400 audit(1754904464.589:477): avc: denied { write } for pid=8136 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.950686][ T30] audit: type=1400 audit(1754904465.829:478): avc: denied { mount } for pid=8152 comm="syz.2.528" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 224.972437][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.300655][ T30] audit: type=1400 audit(1754904467.159:479): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 227.332002][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 227.783037][ T1206] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 228.050604][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 228.057632][ T1206] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 228.070665][ T1206] usb 3-1: config 0 has no interface number 0 [ 228.077103][ T1206] usb 3-1: config 0 interface 85 has no altsetting 0 [ 228.105447][ T1206] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 228.617814][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.634619][ T1206] usb 3-1: Product: syz [ 228.657568][ T1206] usb 3-1: Manufacturer: syz [ 228.699570][ T1206] usb 3-1: SerialNumber: syz [ 228.813986][ T8195] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 228.820532][ T8195] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.828293][ T8195] vhci_hcd vhci_hcd.0: Device attached [ 229.160813][ T5916] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 229.526615][ T8196] vhci_hcd: connection reset by peer [ 229.580164][ T6361] vhci_hcd: stop threads [ 229.680187][ T6361] vhci_hcd: release socket [ 229.770305][ T6361] vhci_hcd: disconnect device [ 230.037835][ T1206] usb 3-1: config 0 descriptor?? [ 230.260017][ T1206] appletouch 3-1:0.85: Failed to read mode from device. [ 230.270866][ T1206] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 230.294674][ T1206] usb 3-1: USB disconnect, device number 10 [ 230.960350][ T8217] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 230.966890][ T8217] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.975324][ T8217] vhci_hcd vhci_hcd.0: Device attached [ 230.989699][ T8220] FAULT_INJECTION: forcing a failure. [ 230.989699][ T8220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.002829][ T8220] CPU: 1 UID: 0 PID: 8220 Comm: syz.0.540 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 231.002854][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.002865][ T8220] Call Trace: [ 231.002872][ T8220] [ 231.002879][ T8220] dump_stack_lvl+0x16c/0x1f0 [ 231.002902][ T8220] should_fail_ex+0x512/0x640 [ 231.002926][ T8220] core_sys_select+0x949/0xc10 [ 231.002951][ T8220] ? __pfx_core_sys_select+0x10/0x10 [ 231.002995][ T8220] ? set_user_sigmask+0x21b/0x2b0 [ 231.003016][ T8220] ? __pfx_set_user_sigmask+0x10/0x10 [ 231.003042][ T8220] do_pselect.constprop.0+0x19f/0x1e0 [ 231.003063][ T8220] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 231.003092][ T8220] __x64_sys_pselect6+0x182/0x240 [ 231.003113][ T8220] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 231.003140][ T8220] do_syscall_64+0xcd/0x4c0 [ 231.003162][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.003179][ T8220] RIP: 0033:0x7fc40c38ebe9 [ 231.003194][ T8220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.003211][ T8220] RSP: 002b:00007fc40a5b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 231.003229][ T8220] RAX: ffffffffffffffda RBX: 00007fc40c5b6180 RCX: 00007fc40c38ebe9 [ 231.003241][ T8220] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 231.003252][ T8220] RBP: 00007fc40a5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 231.003263][ T8220] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 231.003274][ T8220] R13: 00007fc40c5b6218 R14: 00007fc40c5b6180 R15: 00007ffd7dcf0918 [ 231.003298][ T8220] [ 231.438402][ T8218] vhci_hcd: connection closed [ 231.457551][ T76] vhci_hcd: stop threads [ 232.125338][ T76] vhci_hcd: release socket [ 232.260701][ T76] vhci_hcd: disconnect device [ 232.454238][ T8237] FAULT_INJECTION: forcing a failure. [ 232.454238][ T8237] name failslab, interval 1, probability 0, space 0, times 0 [ 232.515859][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.3.546 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 232.515885][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.515895][ T8237] Call Trace: [ 232.515901][ T8237] [ 232.515907][ T8237] dump_stack_lvl+0x16c/0x1f0 [ 232.515941][ T8237] should_fail_ex+0x512/0x640 [ 232.515959][ T8237] ? __kmalloc_noprof+0xbf/0x510 [ 232.515978][ T8237] ? iovec_from_user+0x108/0x140 [ 232.515999][ T8237] should_failslab+0xc2/0x120 [ 232.516017][ T8237] __kmalloc_noprof+0xd2/0x510 [ 232.516038][ T8237] iovec_from_user+0x108/0x140 [ 232.516062][ T8237] __import_iovec+0x88/0x650 [ 232.516088][ T8237] import_iovec+0x109/0x140 [ 232.516113][ T8237] blk_rq_map_user_io.part.0+0x1c8/0x2c0 [ 232.516141][ T8237] ? __pfx_blk_rq_map_user_io.part.0+0x10/0x10 [ 232.516174][ T8237] ? __mutex_trylock_common+0xe9/0x250 [ 232.516211][ T8237] ? find_held_lock+0x2b/0x80 [ 232.516237][ T8237] blk_rq_map_user_io+0xe3/0x230 [ 232.516264][ T8237] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 232.516293][ T8237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.516316][ T8237] ? avc_has_perm_noaudit+0x149/0x3b0 [ 232.516339][ T8237] sg_common_write.constprop.0+0xd43/0x1c90 [ 232.516377][ T8237] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 232.516404][ T8237] ? bpf_lsm_capable+0x9/0x10 [ 232.516428][ T8237] ? security_capable+0x7e/0x260 [ 232.516453][ T8237] sg_new_write.isra.0+0x53c/0xab0 [ 232.516481][ T8237] ? __pfx_sg_new_write.isra.0+0x10/0x10 [ 232.516532][ T8237] sg_ioctl+0x189c/0x2880 [ 232.516560][ T8237] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 232.516589][ T8237] ? __pfx_sg_ioctl+0x10/0x10 [ 232.516614][ T8237] ? hook_file_ioctl_common+0x145/0x410 [ 232.516638][ T8237] ? selinux_file_ioctl+0x180/0x270 [ 232.516660][ T8237] ? selinux_file_ioctl+0xb4/0x270 [ 232.516685][ T8237] ? __pfx_sg_ioctl+0x10/0x10 [ 232.516709][ T8237] __x64_sys_ioctl+0x18b/0x210 [ 232.516737][ T8237] do_syscall_64+0xcd/0x4c0 [ 232.516756][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.516773][ T8237] RIP: 0033:0x7f9c93b8ebe9 [ 232.516786][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.516803][ T8237] RSP: 002b:00007f9c94ac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.516820][ T8237] RAX: ffffffffffffffda RBX: 00007f9c93db5fa0 RCX: 00007f9c93b8ebe9 [ 232.516831][ T8237] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000003 [ 232.516841][ T8237] RBP: 00007f9c94ac2090 R08: 0000000000000000 R09: 0000000000000000 [ 232.516851][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.516861][ T8237] R13: 00007f9c93db6038 R14: 00007f9c93db5fa0 R15: 00007fffa424fc38 [ 232.516884][ T8237] [ 233.170728][ T48] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 233.337721][ T8247] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 233.344343][ T8247] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 233.352118][ T8247] vhci_hcd vhci_hcd.0: Device attached [ 233.364911][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 233.536918][ T48] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 233.706997][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.859636][ T48] usb 3-1: Product: syz [ 233.927001][ T48] usb 3-1: Manufacturer: syz [ 234.003489][ T48] usb 3-1: SerialNumber: syz [ 234.019650][ T30] audit: type=1400 audit(1754904474.909:480): avc: denied { read } for pid=8241 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.186012][ T48] usb 3-1: config 0 descriptor?? [ 234.800770][ T8248] vhci_hcd: connection closed [ 234.803912][ T48] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 234.850687][ T5923] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 235.191598][ T5916] vhci_hcd: vhci_device speed not set [ 235.303879][ T13] vhci_hcd: stop threads [ 235.308190][ T13] vhci_hcd: release socket [ 235.314303][ T13] vhci_hcd: disconnect device [ 235.649273][ T48] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 236.899116][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'. [ 236.908231][ T8296] netlink: 52 bytes leftover after parsing attributes in process `syz.1.561'. [ 236.917306][ T8296] netlink: 208 bytes leftover after parsing attributes in process `syz.1.561'. [ 236.940288][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'. [ 237.039109][ T2149] usb 3-1: USB disconnect, device number 11 [ 237.321368][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.563'. [ 238.390784][ T2149] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 238.608423][ T2149] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.687319][ T2149] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.745138][ T2149] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.775705][ T2149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.811473][ T2149] usb 3-1: SerialNumber: syz [ 238.842532][ T8329] netlink: 'syz.3.570': attribute type 322 has an invalid length. [ 239.040948][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 239.108644][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.217651][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.037999][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.048217][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.063538][ T2149] usb 3-1: 0:2 : does not exist [ 240.073505][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 240.088863][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 240.109096][ T2149] usb 3-1: USB disconnect, device number 12 [ 240.128685][ T9] usb 2-1: Product: syz [ 240.139479][ T9] usb 2-1: Manufacturer: syz [ 240.149715][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.158832][ T9] usb 2-1: SerialNumber: syz [ 240.240646][ T5923] vhci_hcd: vhci_device speed not set [ 240.351785][ T8346] FAULT_INJECTION: forcing a failure. [ 240.351785][ T8346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.370674][ T8346] CPU: 0 UID: 0 PID: 8346 Comm: syz.3.575 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 240.370701][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.370711][ T8346] Call Trace: [ 240.370718][ T8346] [ 240.370724][ T8346] dump_stack_lvl+0x16c/0x1f0 [ 240.370746][ T8346] should_fail_ex+0x512/0x640 [ 240.370769][ T8346] _copy_to_user+0x32/0xd0 [ 240.370793][ T8346] copy_siginfo_to_user+0x27/0xc0 [ 240.370818][ T8346] x64_setup_rt_frame+0x811/0xcf0 [ 240.370846][ T8346] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 240.370876][ T8346] arch_do_signal_or_restart+0x5e4/0x7d0 [ 240.370899][ T8346] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 240.370936][ T8346] exit_to_user_mode_loop+0x84/0x110 [ 240.370956][ T8346] do_syscall_64+0x3f6/0x4c0 [ 240.370976][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.370993][ T8346] RIP: 0033:0x7f9c93b8ebe7 [ 240.371007][ T8346] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 240.371024][ T8346] RSP: 002b:00007f9c94ac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 240.371041][ T8346] RAX: 0000000000000114 RBX: 00007f9c93db5fa0 RCX: 00007f9c93b8ebe9 [ 240.371052][ T8346] RDX: fffffffffffffc01 RSI: 0000000000000006 RDI: 0000000000000003 [ 240.371062][ T8346] RBP: 00007f9c94ac2090 R08: 0000000000000000 R09: 0000000000000000 [ 240.371071][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.371081][ T8346] R13: 00007f9c93db6038 R14: 00007f9c93db5fa0 R15: 00007fffa424fc38 [ 240.371103][ T8346] [ 240.925504][ T5924] usb 2-1: USB disconnect, device number 12 [ 240.984551][ T30] audit: type=1400 audit(1754904481.879:481): avc: denied { write } for pid=8347 comm="syz.4.573" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 241.052014][ T30] audit: type=1400 audit(1754904481.949:482): avc: denied { getopt } for pid=8347 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 241.154611][ T30] audit: type=1400 audit(1754904482.019:483): avc: denied { accept } for pid=8347 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 241.243497][ T30] audit: type=1400 audit(1754904482.039:484): avc: denied { ioctl } for pid=8347 comm="syz.4.573" path="socket:[19219]" dev="sockfs" ino=19219 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 241.403381][ T8357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8357 comm=syz.3.578 [ 241.513775][ T8357] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 241.759343][ T8357] bond1: (slave bridge2): making interface the new active one [ 241.771701][ T8357] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 241.820711][ T5923] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 242.130661][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 242.141903][ T8375] FAULT_INJECTION: forcing a failure. [ 242.141903][ T8375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.156433][ T5923] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 242.182426][ T5923] usb 1-1: config 0 has no interface number 0 [ 242.243782][ T5923] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 242.309643][ T8379] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 242.316160][ T8379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 242.324246][ T8379] vhci_hcd vhci_hcd.0: Device attached [ 242.354314][ T5923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 242.570753][ T48] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 243.010220][ T8380] vhci_hcd: connection closed [ 243.210623][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 243.351054][ T8375] CPU: 1 UID: 0 PID: 8375 Comm: syz.4.581 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 243.351073][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.351079][ T8375] Call Trace: [ 243.351083][ T8375] [ 243.351087][ T8375] dump_stack_lvl+0x16c/0x1f0 [ 243.351103][ T8375] should_fail_ex+0x512/0x640 [ 243.351117][ T8375] _copy_to_user+0x32/0xd0 [ 243.351132][ T8375] simple_read_from_buffer+0xcb/0x170 [ 243.351144][ T8375] proc_fail_nth_read+0x197/0x240 [ 243.351158][ T8375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.351170][ T8375] ? rw_verify_area+0xcf/0x6c0 [ 243.351186][ T8375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.351198][ T8375] vfs_read+0x1e1/0xcf0 [ 243.351210][ T8375] ? __pfx___mutex_lock+0x10/0x10 [ 243.351222][ T8375] ? __pfx_vfs_read+0x10/0x10 [ 243.351235][ T8375] ? __fget_files+0x20e/0x3c0 [ 243.351250][ T8375] ksys_read+0x12a/0x250 [ 243.351261][ T8375] ? __pfx_ksys_read+0x10/0x10 [ 243.351275][ T8375] do_syscall_64+0xcd/0x4c0 [ 243.351286][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.351298][ T8375] RIP: 0033:0x7f8bfab8d5fc [ 243.351307][ T8375] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.351318][ T8375] RSP: 002b:00007f8bfb986030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.351328][ T8375] RAX: ffffffffffffffda RBX: 00007f8bfadb5fa0 RCX: 00007f8bfab8d5fc [ 243.351335][ T8375] RDX: 000000000000000f RSI: 00007f8bfb9860a0 RDI: 0000000000000004 [ 243.351341][ T8375] RBP: 00007f8bfb986090 R08: 0000000000000000 R09: 0000000000000000 [ 243.351347][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.351353][ T8375] R13: 00007f8bfadb6038 R14: 00007f8bfadb5fa0 R15: 00007ffde1a3ba58 [ 243.351366][ T8375] [ 243.573198][ T5923] usb 1-1: Product: syz [ 243.577464][ T5923] usb 1-1: SerialNumber: syz [ 243.583295][ T5923] usb 1-1: config 0 descriptor?? [ 243.594154][ T5923] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 243.612635][ T6361] vhci_hcd: stop threads [ 243.616887][ T6361] vhci_hcd: release socket [ 243.631457][ T6361] vhci_hcd: disconnect device [ 243.842897][ T5923] usb 1-1: USB disconnect, device number 12 [ 243.968095][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.046084][ T8395] batman_adv: batadv0: Adding interface: dummy0 [ 245.065450][ T8395] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.190153][ T8395] batman_adv: batadv0: Interface activated: dummy0 [ 245.206972][ T5851] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 245.214515][ T5851] Bluetooth: hci3: unexpected event for opcode 0x203e [ 247.771586][ T8416] ALSA: mixer_oss: invalid OSS volume 'u' [ 248.403385][ T8428] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 248.409921][ T8428] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 248.417814][ T8428] vhci_hcd vhci_hcd.0: Device attached [ 248.670881][ T5923] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 248.710876][ T48] vhci_hcd: vhci_device speed not set [ 249.193485][ T8429] vhci_hcd: connection reset by peer [ 249.251742][ T6064] vhci_hcd: stop threads [ 249.281470][ T5851] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 249.291761][ T5851] Bluetooth: hci3: Injecting HCI hardware error event [ 249.302698][ T50] Bluetooth: hci3: hardware error 0x00 [ 249.367882][ T6064] vhci_hcd: release socket [ 249.721926][ T6064] vhci_hcd: disconnect device [ 250.095964][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 250.123223][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 251.360721][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 251.601715][ T30] audit: type=1400 audit(1754904492.449:485): avc: denied { watch watch_reads } for pid=8456 comm="syz.3.603" path="/135/bus" dev="overlay" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 253.190810][ T48] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 253.569759][ T8472] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 253.576290][ T8472] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.584312][ T8472] vhci_hcd vhci_hcd.0: Device attached [ 254.342592][ T8473] vhci_hcd: connection closed [ 254.784803][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 254.839853][ T2999] vhci_hcd: stop threads [ 254.881674][ T2999] vhci_hcd: release socket [ 254.891363][ T48] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 254.901613][ T48] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 254.913567][ T2999] vhci_hcd: disconnect device [ 254.933939][ T8479] FAULT_INJECTION: forcing a failure. [ 254.933939][ T8479] name failslab, interval 1, probability 0, space 0, times 0 [ 254.950625][ T5923] vhci_hcd: vhci_device speed not set [ 254.963978][ T48] usb 3-1: string descriptor 0 read error: -22 [ 254.972061][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.991946][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.002135][ T8479] CPU: 1 UID: 0 PID: 8479 Comm: syz.1.609 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 255.002159][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.002169][ T8479] Call Trace: [ 255.002175][ T8479] [ 255.002182][ T8479] dump_stack_lvl+0x16c/0x1f0 [ 255.002203][ T8479] should_fail_ex+0x512/0x640 [ 255.002222][ T8479] ? fs_reclaim_acquire+0xae/0x150 [ 255.002245][ T8479] ? tomoyo_encode2+0x100/0x3e0 [ 255.002267][ T8479] should_failslab+0xc2/0x120 [ 255.002284][ T8479] __kmalloc_noprof+0xd2/0x510 [ 255.002300][ T8479] ? d_absolute_path+0x136/0x1a0 [ 255.002327][ T8479] tomoyo_encode2+0x100/0x3e0 [ 255.002354][ T8479] tomoyo_encode+0x29/0x50 [ 255.002376][ T8479] tomoyo_realpath_from_path+0x18f/0x6e0 [ 255.002407][ T8479] tomoyo_path_number_perm+0x245/0x580 [ 255.002427][ T8479] ? tomoyo_path_number_perm+0x237/0x580 [ 255.002450][ T8479] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 255.002472][ T8479] ? find_held_lock+0x2b/0x80 [ 255.002516][ T8479] ? find_held_lock+0x2b/0x80 [ 255.002536][ T8479] ? hook_file_ioctl_common+0x145/0x410 [ 255.002558][ T8479] ? __fget_files+0x20e/0x3c0 [ 255.002582][ T8479] security_file_ioctl+0x9b/0x240 [ 255.002608][ T8479] __x64_sys_ioctl+0xb7/0x210 [ 255.002636][ T8479] do_syscall_64+0xcd/0x4c0 [ 255.002656][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.002674][ T8479] RIP: 0033:0x7f9bd298ebe9 [ 255.002688][ T8479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.002704][ T8479] RSP: 002b:00007f9bd38df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.002720][ T8479] RAX: ffffffffffffffda RBX: 00007f9bd2bb5fa0 RCX: 00007f9bd298ebe9 [ 255.002730][ T8479] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000003 [ 255.002740][ T8479] RBP: 00007f9bd38df090 R08: 0000000000000000 R09: 0000000000000000 [ 255.002749][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.002759][ T8479] R13: 00007f9bd2bb6038 R14: 00007f9bd2bb5fa0 R15: 00007ffc537167c8 [ 255.002783][ T8479] [ 255.002798][ T8479] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.311459][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.317809][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.336149][ T48] usb 3-1: can't set config #1, error -71 [ 255.594839][ T48] usb 3-1: USB disconnect, device number 13 [ 255.904733][ T50] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 255.912446][ T50] Bluetooth: hci2: unexpected event for opcode 0x203e [ 256.259614][ T8493] netlink: 64 bytes leftover after parsing attributes in process `syz.1.612'. [ 256.996069][ T8498] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.613'. [ 257.315471][ T30] audit: type=1400 audit(1754904498.109:486): avc: denied { map } for pid=8497 comm="syz.0.614" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 257.574738][ T30] audit: type=1400 audit(1754904498.109:487): avc: denied { execute } for pid=8497 comm="syz.0.614" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 257.940583][ T30] audit: type=1400 audit(1754904498.829:488): avc: denied { bind } for pid=8506 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.008222][ T30] audit: type=1400 audit(1754904498.829:489): avc: denied { setopt } for pid=8506 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.150572][ T8515] netlink: 'syz.2.620': attribute type 9 has an invalid length. [ 258.324096][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.621'. [ 258.619500][ T30] audit: type=1400 audit(1754904498.829:490): avc: denied { listen } for pid=8506 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.746043][ T30] audit: type=1400 audit(1754904498.829:491): avc: denied { connect } for pid=8506 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.830720][ T30] audit: type=1400 audit(1754904498.859:492): avc: denied { accept } for pid=8506 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.509945][ T30] audit: type=1400 audit(1754904498.859:493): avc: denied { read } for pid=8506 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.980679][ T8535] netlink: 'syz.0.624': attribute type 32 has an invalid length. [ 259.985137][ T50] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 260.005699][ T50] Bluetooth: hci2: Injecting HCI hardware error event [ 260.015815][ T50] Bluetooth: hci2: hardware error 0x00 [ 260.186798][ T30] audit: type=1400 audit(1754904500.609:494): avc: denied { load_policy } for pid=8522 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 260.576167][ T8526] SELinux: failed to load policy [ 260.780873][ T8533] netlink: 'syz.2.623': attribute type 1 has an invalid length. [ 261.762228][ T30] audit: type=1400 audit(1754904502.659:495): avc: denied { getopt } for pid=8536 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 262.801228][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 263.590673][ T30] audit: type=1400 audit(1754904504.429:496): avc: denied { bind } for pid=8555 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 263.956404][ T8575] netlink: 'syz.0.634': attribute type 10 has an invalid length. [ 263.956516][ T8575] batman_adv: batadv0: Interface deactivated: dummy0 [ 263.959400][ T8575] batman_adv: batadv0: Removing interface: dummy0 [ 263.961246][ T8575] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 263.993124][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.000640][ T8577] program syz.3.635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.005955][ T30] audit: type=1326 audit(1754904505.899:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c93b8ebe9 code=0x7ffc0000 [ 265.006001][ T30] audit: type=1326 audit(1754904505.899:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c93b8ebe9 code=0x7ffc0000 [ 265.006035][ T30] audit: type=1326 audit(1754904505.899:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9c93b8ebe9 code=0x7ffc0000 [ 265.006071][ T30] audit: type=1326 audit(1754904505.899:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c93b8ebe9 code=0x7ffc0000 [ 265.006103][ T30] audit: type=1326 audit(1754904505.899:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c93b8ebe9 code=0x7ffc0000 [ 265.014737][ T30] audit: type=1326 audit(1754904505.899:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9c93b8ebe9 code=0x7ffc0000 [ 265.014764][ T30] audit: type=1326 audit(1754904505.899:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c93b8ebe9 code=0x7ffc0000 [ 265.014785][ T30] audit: type=1326 audit(1754904505.899:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c93b8ebe9 code=0x7ffc0000 [ 265.186480][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 265.913325][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.679005][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.028708][ T8599] binder: BINDER_SET_CONTEXT_MGR already set [ 267.028740][ T8599] binder: 8598:8599 ioctl 4018620d 200000004a80 returned -16 [ 267.614005][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.635292][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.645636][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.655154][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.663004][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.920163][ T30] audit: type=1400 audit(1754904508.809:505): avc: denied { setattr } for pid=8617 comm="syz.2.646" name="NETLINK" dev="sockfs" ino=21606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.096872][ T8624] program syz.2.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.402385][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 269.810714][ T50] Bluetooth: hci5: command tx timeout [ 270.142099][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 270.142138][ T30] audit: type=1400 audit(1754904511.029:512): avc: denied { connect } for pid=8648 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 270.301432][ T30] audit: type=1400 audit(1754904511.079:513): avc: denied { wake_alarm } for pid=8644 comm="syz.0.652" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 270.542159][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.564833][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.586944][ T8607] bridge_slave_0: entered allmulticast mode [ 270.615891][ T8607] bridge_slave_0: entered promiscuous mode [ 270.648889][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.680623][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.705626][ T8607] bridge_slave_1: entered allmulticast mode [ 270.827017][ T8607] bridge_slave_1: entered promiscuous mode [ 270.969724][ T30] audit: type=1400 audit(1754904511.849:514): avc: denied { call } for pid=8657 comm="syz.3.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 271.841721][ T50] Bluetooth: hci5: command tx timeout [ 272.299121][ T8675] program syz.0.658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.545533][ T30] audit: type=1326 audit(1754904513.219:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8661 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 272.600660][ T30] audit: type=1326 audit(1754904513.219:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8661 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 272.634131][ T30] audit: type=1326 audit(1754904513.229:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8661 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 272.890580][ T30] audit: type=1326 audit(1754904513.229:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8661 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 272.913789][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.425344][ T30] audit: type=1326 audit(1754904513.229:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8661 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 273.449571][ T30] audit: type=1326 audit(1754904513.229:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8661 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 273.591634][ T8677] ALSA: mixer_oss: invalid OSS volume 'u' [ 273.645684][ T8686] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 273.810576][ T30] audit: type=1326 audit(1754904513.229:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8661 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 273.922357][ T50] Bluetooth: hci5: command tx timeout [ 273.997147][ T8298] syz.4.557 (8298) used greatest stack depth: 18600 bytes left [ 274.173170][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.243362][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.290632][ T5924] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 274.481227][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 274.589827][ T5924] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 274.598127][ T5924] usb 4-1: config 0 has no interface number 1 [ 274.613926][ T5924] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.625336][ T5924] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 274.637508][ T5924] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 274.650049][ T5924] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 274.660301][ T5924] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.673426][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.685385][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 274.698171][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 274.715774][ T5924] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 274.739051][ T8702] netlink: 'syz.1.667': attribute type 10 has an invalid length. [ 274.746878][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.667'. [ 274.760575][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.782477][ T5924] usb 4-1: Product: syz [ 274.792601][ T5924] usb 4-1: Manufacturer: syz [ 274.797249][ T5924] usb 4-1: SerialNumber: syz [ 274.877592][ T8702] dummy0: entered promiscuous mode [ 274.909455][ T8702] bridge0: port 3(dummy0) entered blocking state [ 274.918489][ T8702] bridge0: port 3(dummy0) entered disabled state [ 274.927057][ T8702] dummy0: entered allmulticast mode [ 274.957958][ T8702] bridge0: port 3(dummy0) entered blocking state [ 274.964557][ T8702] bridge0: port 3(dummy0) entered forwarding state [ 274.975795][ T5924] usb 4-1: config 0 descriptor?? [ 274.990342][ T8694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 275.007250][ T5924] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.020225][ T8607] team0: Port device team_slave_0 added [ 275.021801][ T5924] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.153925][ T8607] team0: Port device team_slave_1 added [ 275.683852][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 275.911842][ T5924] usb 4-1: USB disconnect, device number 12 [ 276.000746][ T50] Bluetooth: hci5: command tx timeout [ 276.153995][ T8721] program syz.0.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.360586][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 276.360596][ T30] audit: type=1326 audit(1754904517.109:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 276.453841][ T30] audit: type=1326 audit(1754904517.119:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 276.513704][ T8715] udevd[8715]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.557014][ T30] audit: type=1326 audit(1754904517.129:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 276.580252][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.601622][ T30] audit: type=1326 audit(1754904517.139:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 276.624775][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.635758][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.656472][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.696134][ T8607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.708875][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.718166][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.719003][ T30] audit: type=1326 audit(1754904517.139:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 276.744128][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.779140][ T8607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.816947][ T30] audit: type=1326 audit(1754904517.149:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 276.966172][ T8607] hsr_slave_0: entered promiscuous mode [ 277.035096][ T8607] hsr_slave_1: entered promiscuous mode [ 277.595657][ T8607] debugfs: 'hsr0' already exists in 'hsr' [ 277.601714][ T8607] Cannot create hsr debugfs directory [ 278.847712][ T8745] FAULT_INJECTION: forcing a failure. [ 278.847712][ T8745] name failslab, interval 1, probability 0, space 0, times 0 [ 278.949913][ T8745] CPU: 0 UID: 0 PID: 8745 Comm: syz.1.678 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 278.949939][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.949950][ T8745] Call Trace: [ 278.949956][ T8745] [ 278.949963][ T8745] dump_stack_lvl+0x16c/0x1f0 [ 278.949987][ T8745] should_fail_ex+0x512/0x640 [ 278.950011][ T8745] should_failslab+0xc2/0x120 [ 278.950032][ T8745] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 278.950052][ T8745] ? skb_clone+0x190/0x3f0 [ 278.950073][ T8745] skb_clone+0x190/0x3f0 [ 278.950092][ T8745] netlink_deliver_tap+0xabd/0xd30 [ 278.950115][ T8745] netlink_dump+0xa5f/0xd30 [ 278.950135][ T8745] ? __pfx_netlink_dump+0x10/0x10 [ 278.950165][ T8745] ? __asan_memcpy+0x3c/0x60 [ 278.950190][ T8745] ? kmemdup_noprof+0x49/0x60 [ 278.950211][ T8745] __netlink_dump_start+0x6d6/0x990 [ 278.950229][ T8745] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 278.950250][ T8745] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 278.950270][ T8745] nf_tables_getset+0x7a3/0x970 [ 278.950301][ T8745] ? __pfx_nf_tables_getset+0x10/0x10 [ 278.950325][ T8745] ? __pfx_nf_tables_dump_sets_start+0x10/0x10 [ 278.950346][ T8745] ? __pfx_nf_tables_dump_sets+0x10/0x10 [ 278.950371][ T8745] ? __pfx_nf_tables_dump_sets_done+0x10/0x10 [ 278.950406][ T8745] ? __nla_parse+0x40/0x60 [ 278.950428][ T8745] ? __pfx_nf_tables_getset+0x10/0x10 [ 278.950453][ T8745] nfnetlink_rcv_msg+0x580/0x1200 [ 278.950485][ T8745] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 278.950514][ T8745] ? __lock_acquire+0x62e/0x1ce0 [ 278.950562][ T8745] ? avc_has_perm_noaudit+0x149/0x3b0 [ 278.950594][ T8745] netlink_rcv_skb+0x158/0x420 [ 278.950613][ T8745] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 278.950639][ T8745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.950670][ T8745] ? ns_capable+0xd7/0x110 [ 278.950693][ T8745] nfnetlink_rcv+0x1b3/0x430 [ 278.950717][ T8745] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 278.950739][ T8745] ? netlink_deliver_tap+0x1ae/0xd30 [ 278.950762][ T8745] netlink_unicast+0x5a7/0x870 [ 278.950783][ T8745] ? __pfx_netlink_unicast+0x10/0x10 [ 278.950812][ T8745] netlink_sendmsg+0x8d1/0xdd0 [ 278.950834][ T8745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.950863][ T8745] ____sys_sendmsg+0xa98/0xc70 [ 278.950885][ T8745] ? copy_msghdr_from_user+0x10a/0x160 [ 278.950902][ T8745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.950935][ T8745] ___sys_sendmsg+0x134/0x1d0 [ 278.950954][ T8745] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.950994][ T8745] ? __mutex_unlock_slowpath+0x100/0x800 [ 278.951019][ T8745] __sys_sendmsg+0x16d/0x220 [ 278.951037][ T8745] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.951071][ T8745] do_syscall_64+0xcd/0x4c0 [ 278.951090][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.951108][ T8745] RIP: 0033:0x7f9bd298ebe9 [ 278.951122][ T8745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.951139][ T8745] RSP: 002b:00007f9bd38df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.951156][ T8745] RAX: ffffffffffffffda RBX: 00007f9bd2bb5fa0 RCX: 00007f9bd298ebe9 [ 278.951168][ T8745] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 278.951178][ T8745] RBP: 00007f9bd38df090 R08: 0000000000000000 R09: 0000000000000000 [ 278.951189][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.951199][ T8745] R13: 00007f9bd2bb6038 R14: 00007f9bd2bb5fa0 R15: 00007ffc537167c8 [ 278.951223][ T8745] [ 279.388090][ T8299] syz.4.557 (8299) used greatest stack depth: 18400 bytes left [ 279.483061][ T8607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.624374][ T8607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.870959][ T8607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.028148][ T8607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.230635][ T5924] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 280.268361][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'. [ 280.279422][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.316108][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.336142][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.344213][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.505813][ T5924] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 280.525038][ T2135] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.532217][ T2135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.049620][ T5924] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.076750][ T5924] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.179749][ T5924] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.181781][ T8607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.220349][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.263686][ T8607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.342131][ T5924] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.368746][ T5924] usb 1-1: invalid MIDI out EP 0 [ 281.778572][ T5924] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 281.835376][ T5924] usb 1-1: USB disconnect, device number 13 [ 281.843700][ T2135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.004676][ T2135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44681 - 0 [ 282.167604][ T8791] netlink: 36 bytes leftover after parsing attributes in process `syz.1.687'. [ 282.493270][ T2135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 49029 - 0 [ 282.507852][ T30] audit: type=1400 audit(1754904523.019:529): avc: denied { setattr } for pid=8786 comm="syz.1.687" name="" dev="pipefs" ino=4459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 283.046407][ T2135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.263162][ T2135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44681 - 0 [ 283.499673][ T2135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 49029 - 0 [ 283.573759][ T30] audit: type=1400 audit(1754904524.439:530): avc: denied { mount } for pid=8804 comm="syz.2.688" name="/" dev="ramfs" ino=22107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 283.752125][ T30] audit: type=1400 audit(1754904524.649:531): avc: denied { module_request } for pid=8804 comm="syz.2.688" kmod="net-pf-10-proto-12-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 283.790438][ T8820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.691'. [ 283.814555][ T8607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.016210][ T2135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.051939][ T2135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44681 - 0 [ 284.146816][ T2135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 49029 - 0 [ 284.649231][ T2135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.678683][ T2135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44681 - 0 [ 284.704708][ T2135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 49029 - 0 [ 284.732081][ T8851] 9pnet_fd: Insufficient options for proto=fd [ 284.807109][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.814200][ T8851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.822511][ T5885] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 284.962238][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 285.012366][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 285.038907][ T5885] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 285.197444][ T5885] usb 1-1: config 1 has no interface number 0 [ 285.219836][ T5885] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 285.257827][ T5885] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 285.278720][ T5885] usb 1-1: config 1 interface 105 has no altsetting 0 [ 285.298292][ T5885] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 285.308262][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.318567][ T5885] usb 1-1: Product: syz [ 285.323055][ T5885] usb 1-1: Manufacturer: syz [ 285.329690][ T5885] usb 1-1: SerialNumber: syz [ 285.345439][ T8845] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 285.355916][ T8845] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 285.940224][ T8867] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 285.951486][ T8867] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.406082][ T5885] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 286.435261][ T2135] bond0 (unregistering): Released all slaves [ 286.483419][ T5885] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 286.770457][ T2135] bond1 (unregistering): Released all slaves [ 286.955005][ T2135] bond2 (unregistering): Released all slaves [ 287.533586][ T5885] aqc111 1-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8e:a4:d9:99:7e:b9 [ 287.684023][ T48] usb 1-1: USB disconnect, device number 14 [ 287.789789][ T48] aqc111 1-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 288.506093][ T48] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 288.559535][ T48] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 288.578119][ T48] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 288.731542][ T8607] veth0_vlan: entered promiscuous mode [ 288.759596][ T8607] veth1_vlan: entered promiscuous mode [ 288.821705][ T8607] veth0_macvtap: entered promiscuous mode [ 288.873259][ T8607] veth1_macvtap: entered promiscuous mode [ 288.896431][ T8918] netlink: 'syz.3.701': attribute type 10 has an invalid length. [ 288.929918][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.938207][ T8918] bridge_slave_1: left allmulticast mode [ 288.943912][ T8918] bridge_slave_1: left promiscuous mode [ 288.949651][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.039117][ T30] audit: type=1400 audit(1754904529.899:532): avc: denied { create } for pid=8917 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 289.074942][ T8918] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 289.131738][ T2135] hsr_slave_0: left promiscuous mode [ 289.216241][ T8924] netlink: 'syz.0.702': attribute type 6 has an invalid length. [ 289.620186][ T2135] veth1_macvtap: left promiscuous mode [ 289.662077][ T2135] veth0_macvtap: left promiscuous mode [ 289.687972][ T2135] veth1_vlan: left promiscuous mode [ 289.873399][ T2135] veth0_vlan: left promiscuous mode [ 291.647655][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 291.658034][ T8951] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 291.664535][ T8951] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 291.711531][ T8952] vhci_hcd: connection closed [ 291.715454][ T8951] vhci_hcd vhci_hcd.0: Device attached [ 291.733056][ T6600] vhci_hcd: stop threads [ 291.737485][ T6600] vhci_hcd: release socket [ 291.742402][ T6600] vhci_hcd: disconnect device [ 292.247437][ T8961] netlink: 'syz.2.710': attribute type 9 has an invalid length. [ 292.312435][ T1206] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 292.481302][ T1206] usb 2-1: Using ep0 maxpacket: 16 [ 292.503620][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.541365][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.655386][ T1206] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 292.689470][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.700689][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.888078][ T1206] usb 2-1: config 0 descriptor?? [ 292.940217][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.007658][ T6497] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.058279][ T6497] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.086954][ T8974] FAULT_INJECTION: forcing a failure. [ 293.086954][ T8974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.108803][ T6497] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.124006][ T6497] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.146167][ T8974] CPU: 1 UID: 0 PID: 8974 Comm: syz.3.713 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 293.146194][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.146204][ T8974] Call Trace: [ 293.146209][ T8974] [ 293.146217][ T8974] dump_stack_lvl+0x16c/0x1f0 [ 293.146239][ T8974] should_fail_ex+0x512/0x640 [ 293.146261][ T8974] _copy_from_user+0x2e/0xd0 [ 293.146284][ T8974] get_user_ifreq+0xf1/0x250 [ 293.146304][ T8974] sock_do_ioctl+0x16b/0x280 [ 293.146326][ T8974] ? __pfx_sock_do_ioctl+0x10/0x10 [ 293.146353][ T8974] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 293.146380][ T8974] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 293.146408][ T8974] sock_ioctl+0x227/0x6b0 [ 293.146432][ T8974] ? __pfx_sock_ioctl+0x10/0x10 [ 293.146452][ T8974] ? hook_file_ioctl_common+0x145/0x410 [ 293.146476][ T8974] ? selinux_file_ioctl+0x180/0x270 [ 293.146498][ T8974] ? selinux_file_ioctl+0xb4/0x270 [ 293.146524][ T8974] ? __pfx_sock_ioctl+0x10/0x10 [ 293.146546][ T8974] __x64_sys_ioctl+0x18b/0x210 [ 293.146573][ T8974] do_syscall_64+0xcd/0x4c0 [ 293.146592][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.146608][ T8974] RIP: 0033:0x7f9c93b8ebe9 [ 293.146621][ T8974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.146636][ T8974] RSP: 002b:00007f9c94ac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.146651][ T8974] RAX: ffffffffffffffda RBX: 00007f9c93db5fa0 RCX: 00007f9c93b8ebe9 [ 293.146662][ T8974] RDX: 0000200000000040 RSI: 00000000000089b1 RDI: 0000000000000004 [ 293.146672][ T8974] RBP: 00007f9c94ac2090 R08: 0000000000000000 R09: 0000000000000000 [ 293.146682][ T8974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.146690][ T8974] R13: 00007f9c93db6038 R14: 00007f9c93db5fa0 R15: 00007fffa424fc38 [ 293.146710][ T8974] [ 293.390730][ T5924] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 293.545080][ T6064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.560924][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 293.568488][ T6064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.581464][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.640584][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.673139][ T5924] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 293.696251][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.727772][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.768032][ T5924] usb 3-1: config 0 descriptor?? [ 293.777641][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.778063][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.841396][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.850160][ T30] audit: type=1400 audit(1754904534.719:533): avc: denied { mounton } for pid=8607 comm="syz-executor" path="/root/syzkaller.Tvwpgs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 293.913622][ T30] audit: type=1400 audit(1754904534.789:534): avc: denied { mounton } for pid=8607 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 294.018859][ T8996] program syz.0.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.411836][ T5924] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 294.723765][ T8999] netlink: set zone limit has 4 unknown bytes [ 294.934683][ T30] audit: type=1326 audit(1754904534.989:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 294.958615][ T30] audit: type=1326 audit(1754904534.999:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 295.018871][ T30] audit: type=1326 audit(1754904535.009:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 295.056706][ T5924] usb 3-1: USB disconnect, device number 14 [ 295.198270][ T30] audit: type=1326 audit(1754904535.019:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 295.258140][ T9000] fido_id[9000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 295.301256][ T30] audit: type=1326 audit(1754904535.019:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 295.752766][ T30] audit: type=1326 audit(1754904535.049:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 295.864581][ T30] audit: type=1326 audit(1754904535.049:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 296.014158][ T1206] usbhid 2-1:0.0: can't add hid device: -71 [ 296.020220][ T1206] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 296.059716][ T30] audit: type=1326 audit(1754904535.049:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8987 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 296.422501][ T1206] usb 2-1: USB disconnect, device number 13 [ 296.426965][ T30] audit: type=1400 audit(1754904537.299:543): avc: denied { bind } for pid=9008 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 296.638460][ T9035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9035 comm=syz.3.722 [ 296.952358][ T9050] FAULT_INJECTION: forcing a failure. [ 296.952358][ T9050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.969813][ T9050] CPU: 0 UID: 0 PID: 9050 Comm: syz.2.728 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 296.969839][ T9050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.969849][ T9050] Call Trace: [ 296.969855][ T9050] [ 296.969861][ T9050] dump_stack_lvl+0x16c/0x1f0 [ 296.969885][ T9050] should_fail_ex+0x512/0x640 [ 296.969908][ T9050] _copy_from_user+0x2e/0xd0 [ 296.969931][ T9050] restore_altstack+0x93/0x170 [ 296.969958][ T9050] ? __pfx_restore_altstack+0x10/0x10 [ 296.969990][ T9050] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.970014][ T9050] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.970031][ T9050] ? _raw_spin_unlock_irq+0x2e/0x50 [ 296.970052][ T9050] ? set_current_blocked+0xdd/0x120 [ 296.970070][ T9050] __do_sys_rt_sigreturn+0x13c/0x230 [ 296.970092][ T9050] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 296.970123][ T9050] do_syscall_64+0xcd/0x4c0 [ 296.970141][ T9050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.970157][ T9050] RIP: 0033:0x7f406e52add9 [ 296.970171][ T9050] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 296.970187][ T9050] RSP: 002b:00007f406c7f5340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 296.970203][ T9050] RAX: ffffffffffffffda RBX: 00007f406e7b5fa0 RCX: 00007f406e52add9 [ 296.970214][ T9050] RDX: 00007f406c7f5340 RSI: 00007f406c7f5470 RDI: 0000000000000021 [ 296.970224][ T9050] RBP: 00007f406c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 296.970233][ T9050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 296.970243][ T9050] R13: 00007f406e7b6038 R14: 00007f406e7b5fa0 R15: 00007ffc9a2d9778 [ 296.970266][ T9050] [ 297.214991][ T1206] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 297.390758][ T5931] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 297.580209][ T30] audit: type=1400 audit(1754904538.469:544): avc: denied { write } for pid=9057 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.634321][ T1206] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 297.645592][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.666481][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.809739][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.834895][ T1206] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 297.848190][ T5931] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 297.865921][ T1206] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 297.891109][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.902501][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 297.926885][ T1206] usb 2-1: Manufacturer: syz [ 297.973688][ T1206] usb 2-1: config 0 descriptor?? [ 298.024181][ T5931] usb 6-1: config 0 descriptor?? [ 298.093691][ T1206] rc_core: IR keymap rc-hauppauge not found [ 298.099968][ T1206] Registered IR keymap rc-empty [ 298.122661][ T1206] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 298.136954][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 298.143710][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 298.156508][ T1206] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 298.167844][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.191283][ T5924] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 298.199258][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.215135][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.265209][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.301183][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.314403][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.386442][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 298.399883][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.422786][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.450734][ T5924] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 298.459823][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.485634][ T5931] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 298.511509][ T5931] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 298.534773][ T5924] usb 3-1: config 0 descriptor?? [ 298.625979][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 298.646174][ T10] usbtmc 4-1:16.0: can't read capabilities [ 298.672588][ T5885] usb 2-1: USB disconnect, device number 14 [ 298.683432][ T5931] cp2112 0003:10C4:EA90.000C: error requesting version [ 298.720812][ T1206] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 298.732890][ T5931] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -71 [ 298.765060][ T5931] usb 6-1: USB disconnect, device number 2 [ 298.903076][ T1206] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.916644][ T1206] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.937688][ T1206] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 298.947197][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 298.970071][ T9058] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 298.970773][ T10] usb 4-1: USB disconnect, device number 13 [ 299.005372][ T5924] savu 0003:1E7D:2D5A.000D: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 299.017196][ T1206] usb 1-1: Product: syz [ 299.023601][ T1206] usb 1-1: Manufacturer: syz [ 299.032058][ T1206] usb 1-1: SerialNumber: syz [ 299.165295][ T1206] usb 3-1: USB disconnect, device number 15 [ 299.297714][ T9059] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 299.304347][ T9059] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 299.312293][ T9059] vhci_hcd vhci_hcd.0: Device attached [ 299.621353][ T5885] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 300.709625][ T9112] FAULT_INJECTION: forcing a failure. [ 300.709625][ T9112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.723888][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.5.733 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 300.723912][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.723923][ T9112] Call Trace: [ 300.723929][ T9112] [ 300.723936][ T9112] dump_stack_lvl+0x16c/0x1f0 [ 300.723960][ T9112] should_fail_ex+0x512/0x640 [ 300.723984][ T9112] _copy_from_user+0x2e/0xd0 [ 300.724006][ T9112] io_register_rsrc_update+0xba/0x180 [ 300.724030][ T9112] ? __pfx_io_register_rsrc_update+0x10/0x10 [ 300.724061][ T9112] ? __pfx___mutex_trylock_common+0x10/0x10 [ 300.724095][ T9112] __io_uring_register+0x1ca/0x2440 [ 300.724115][ T9112] ? trace_contention_end+0xdd/0x130 [ 300.724144][ T9112] ? __pfx___io_uring_register+0x10/0x10 [ 300.724170][ T9112] ? __pfx___mutex_lock+0x10/0x10 [ 300.724197][ T9112] ? __fget_files+0x20e/0x3c0 [ 300.724225][ T9112] __x64_sys_io_uring_register+0x169/0x280 [ 300.724254][ T9112] do_syscall_64+0xcd/0x4c0 [ 300.724275][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.724293][ T9112] RIP: 0033:0x7f0eba38ebe9 [ 300.724308][ T9112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.724325][ T9112] RSP: 002b:00007f0ebb171038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 300.724342][ T9112] RAX: ffffffffffffffda RBX: 00007f0eba5b6180 RCX: 00007f0eba38ebe9 [ 300.724353][ T9112] RDX: 00002000000003c0 RSI: 0000000000000010 RDI: 0000000000000006 [ 300.724364][ T9112] RBP: 00007f0ebb171090 R08: 0000000000000000 R09: 0000000000000000 [ 300.724375][ T9112] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 300.724385][ T9112] R13: 00007f0eba5b6218 R14: 00007f0eba5b6180 R15: 00007ffdcee908a8 [ 300.724410][ T9112] [ 300.987440][ T9098] vhci_hcd: connection reset by peer [ 301.120580][ T1206] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 301.134863][ T6002] vhci_hcd: stop threads [ 301.165895][ T6002] vhci_hcd: release socket [ 301.193030][ T6002] vhci_hcd: disconnect device [ 301.271232][ T1206] usb 3-1: Using ep0 maxpacket: 16 [ 301.281243][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.466711][ T1206] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 301.507956][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.571379][ T1206] usb 3-1: config 0 descriptor?? [ 301.647191][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 301.724651][ T10] usb 1-1: USB disconnect, device number 15 [ 301.988510][ T9140] autofs: Unknown parameter '/dev/ptmx' [ 302.209504][ T5931] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 302.221697][ T1206] cypress 0003:04B4:DE61.000E: reserved main item tag 0xd [ 302.263424][ T1206] cypress 0003:04B4:DE61.000E: unexpected long global item [ 302.275843][ T10] IPVS: starting estimator thread 0... [ 302.286107][ T1206] cypress 0003:04B4:DE61.000E: parse failed [ 302.309293][ T1206] cypress 0003:04B4:DE61.000E: probe with driver cypress failed with error -22 [ 302.361402][ T48] usb 3-1: USB disconnect, device number 16 [ 302.390764][ T9141] IPVS: using max 76 ests per chain, 182400 per kthread [ 302.411992][ T5931] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.428540][ T5931] usb 6-1: config 0 has no interface number 0 [ 302.448572][ T5931] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 302.497467][ T5931] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 302.511509][ T5931] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 302.523769][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.544196][ T5931] usb 6-1: config 0 descriptor?? [ 302.555642][ T9133] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 302.575343][ T5931] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 302.619213][ T9148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9148 comm=syz.1.739 [ 302.829829][ T30] audit: type=1326 audit(1754904543.719:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.3.742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c93b8ebe9 code=0x0 [ 302.884343][ T1206] usb 6-1: USB disconnect, device number 3 [ 304.807533][ T30] audit: type=1400 audit(1754904545.669:546): avc: denied { read append } for pid=9176 comm="syz.1.746" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 304.900657][ T5885] vhci_hcd: vhci_device speed not set [ 304.950629][ T30] audit: type=1400 audit(1754904545.669:547): avc: denied { open } for pid=9176 comm="syz.1.746" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 305.552890][ T1206] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 305.794576][ T9203] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.749'. [ 306.182034][ T1206] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 306.191468][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.257547][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.748'. [ 306.266484][ T9198] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 306.369279][ T1206] usb 1-1: config 0 descriptor?? [ 306.944593][ T1206] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 306.960598][ T1206] [drm:udl_init] *ERROR* Selecting channel failed [ 306.992185][ T1206] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 307.009145][ T1206] [drm] Initialized udl on minor 2 [ 307.016237][ T1206] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 307.071295][ T1206] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 307.113175][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 307.131311][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 307.138178][ T1206] usb 1-1: USB disconnect, device number 16 [ 307.545279][ T30] audit: type=1326 audit(1754904548.439:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.0.752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x0 [ 307.867097][ T9229] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9229 comm=syz.1.753 [ 309.014387][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 309.322761][ T9248] netlink: 'syz.1.756': attribute type 6 has an invalid length. [ 309.743856][ T30] audit: type=1400 audit(1754904550.619:549): avc: denied { getopt } for pid=9244 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 309.800913][ T9246] tipc: Started in network mode [ 309.808543][ T9246] tipc: Node identity 4, cluster identity 4711 [ 309.880655][ T9246] tipc: Node number set to 4 [ 309.985329][ T9257] lo speed is unknown, defaulting to 1000 [ 309.991635][ T9257] lo speed is unknown, defaulting to 1000 [ 310.007290][ T9257] lo speed is unknown, defaulting to 1000 [ 310.045469][ T9257] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 310.095558][ T9257] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 310.416229][ T9257] lo speed is unknown, defaulting to 1000 [ 310.424301][ T9257] lo speed is unknown, defaulting to 1000 [ 310.431594][ T9257] lo speed is unknown, defaulting to 1000 [ 310.438980][ T9257] lo speed is unknown, defaulting to 1000 [ 310.447003][ T9257] lo speed is unknown, defaulting to 1000 [ 310.500904][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 310.700657][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 310.718438][ T10] usb 6-1: config 4 has an invalid interface number: 222 but max is 3 [ 310.795215][ T10] usb 6-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 311.085343][ T10] usb 6-1: config 4 has 1 interface, different from the descriptor's value: 4 [ 311.155331][ T10] usb 6-1: config 4 has no interface number 0 [ 311.173815][ T10] usb 6-1: config 4 interface 222 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 311.225250][ T10] usb 6-1: config 4 interface 222 has no altsetting 0 [ 311.270184][ T10] usb 6-1: New USB device found, idVendor=067b, idProduct=0612, bcdDevice= 8.01 [ 311.300196][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.366165][ T10] usb 6-1: Product: syz [ 311.414117][ T10] usb 6-1: Manufacturer: ᐉ [ 311.428362][ T10] usb 6-1: SerialNumber: syz [ 311.450995][ T5931] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 311.662767][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 311.673575][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 311.700589][ T5916] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 311.719571][ T5931] usb 1-1: config 4 has an invalid interface number: 92 but max is 0 [ 311.774402][ T10] pl2303 6-1:4.222: required endpoints missing [ 311.810786][ T5931] usb 1-1: config 4 has no interface number 0 [ 311.841554][ T5931] usb 1-1: config 4 interface 92 has no altsetting 0 [ 311.853157][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 311.859714][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.891988][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.910767][ T10] usb 6-1: USB disconnect, device number 4 [ 311.923774][ T5916] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 311.942816][ T5931] usb 1-1: New USB device found, idVendor=12d1, idProduct=141d, bcdDevice= 0.00 [ 311.965529][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.986643][ T5931] usb 1-1: Product: syz [ 311.988189][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.024529][ T5931] usb 1-1: Manufacturer: syz [ 312.029594][ T5931] usb 1-1: SerialNumber: syz [ 312.061792][ T5916] usb 4-1: config 0 descriptor?? [ 312.267504][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 312.504032][ T5916] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 313.149182][ T9299] netlink: 'syz.5.766': attribute type 10 has an invalid length. [ 313.159395][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.167170][ T9299] bridge_slave_1: left allmulticast mode [ 313.172894][ T9299] bridge_slave_1: left promiscuous mode [ 313.178614][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.252101][ T9299] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 313.438721][ T9307] evm: overlay not supported [ 313.861059][ T5931] usb-storage 1-1:4.92: USB Mass Storage device detected [ 314.012007][ T1206] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 314.070469][ T9319] netlink: 'syz.5.769': attribute type 6 has an invalid length. [ 314.474494][ T5931] usb 1-1: USB disconnect, device number 17 [ 314.893270][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 314.931424][ T9336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.119428][ T9340] FAULT_INJECTION: forcing a failure. [ 315.119428][ T9340] name failslab, interval 1, probability 0, space 0, times 0 [ 315.134409][ T9332] netlink: 136 bytes leftover after parsing attributes in process `syz.1.772'. [ 315.154488][ T5973] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 315.168497][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.185105][ T9340] CPU: 1 UID: 0 PID: 9340 Comm: syz.2.774 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 315.185132][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.185142][ T9340] Call Trace: [ 315.185148][ T9340] [ 315.185155][ T9340] dump_stack_lvl+0x16c/0x1f0 [ 315.185178][ T9340] should_fail_ex+0x512/0x640 [ 315.185198][ T9340] ? __kmalloc_noprof+0xbf/0x510 [ 315.185217][ T9340] ? fib6_info_alloc+0x40/0x160 [ 315.185237][ T9340] should_failslab+0xc2/0x120 [ 315.185256][ T9340] __kmalloc_noprof+0xd2/0x510 [ 315.185278][ T9340] fib6_info_alloc+0x40/0x160 [ 315.185301][ T9340] ip6_route_info_create+0x14c/0x870 [ 315.185322][ T9340] ip6_route_multipath_add+0xcb6/0x1bd0 [ 315.185350][ T9340] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 315.185386][ T9340] ? avc_has_perm_noaudit+0x117/0x3b0 [ 315.185407][ T9340] ? avc_has_perm_noaudit+0x149/0x3b0 [ 315.185427][ T9340] ? inet6_rtm_newroute+0xe4/0x1a0 [ 315.185443][ T9340] inet6_rtm_newroute+0xe4/0x1a0 [ 315.185461][ T9340] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 315.185479][ T9340] ? __lock_acquire+0x62e/0x1ce0 [ 315.185519][ T9340] ? find_held_lock+0x2b/0x80 [ 315.185539][ T9340] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 315.185557][ T9340] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 315.185573][ T9340] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 315.185594][ T9340] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 315.185613][ T9340] rtnetlink_rcv_msg+0x95b/0xe90 [ 315.185633][ T9340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.185659][ T9340] ? ref_tracker_free+0x37c/0x830 [ 315.185689][ T9340] netlink_rcv_skb+0x158/0x420 [ 315.185707][ T9340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.185727][ T9340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.185755][ T9340] ? netlink_deliver_tap+0x1ae/0xd30 [ 315.185777][ T9340] netlink_unicast+0x5a7/0x870 [ 315.185799][ T9340] ? __pfx_netlink_unicast+0x10/0x10 [ 315.185817][ T9340] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 315.185843][ T9340] netlink_sendmsg+0x8d1/0xdd0 [ 315.185866][ T9340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.185893][ T9340] ____sys_sendmsg+0xa98/0xc70 [ 315.185915][ T9340] ? copy_msghdr_from_user+0x10a/0x160 [ 315.185930][ T9340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.185957][ T9340] ? __pfx__kstrtoull+0x10/0x10 [ 315.185988][ T9340] ___sys_sendmsg+0x134/0x1d0 [ 315.186007][ T9340] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.186036][ T9340] ? find_held_lock+0x2b/0x80 [ 315.186072][ T9340] __sys_sendmmsg+0x200/0x420 [ 315.186093][ T9340] ? __pfx___sys_sendmmsg+0x10/0x10 [ 315.186118][ T9340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 315.186151][ T9340] ? fput+0x9b/0xd0 [ 315.186174][ T9340] ? ksys_write+0x1ac/0x250 [ 315.186191][ T9340] ? __pfx_ksys_write+0x10/0x10 [ 315.186213][ T9340] __x64_sys_sendmmsg+0x9c/0x100 [ 315.186230][ T9340] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.186246][ T9340] do_syscall_64+0xcd/0x4c0 [ 315.186265][ T9340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.186284][ T9340] RIP: 0033:0x7f406e58ebe9 [ 315.186298][ T9340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.186314][ T9340] RSP: 002b:00007f406c7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 315.186332][ T9340] RAX: ffffffffffffffda RBX: 00007f406e7b5fa0 RCX: 00007f406e58ebe9 [ 315.186344][ T9340] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 315.186354][ T9340] RBP: 00007f406c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.186364][ T9340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.186374][ T9340] R13: 00007f406e7b6038 R14: 00007f406e7b5fa0 R15: 00007ffc9a2d9778 [ 315.186397][ T9340] [ 315.195517][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.351858][ T5973] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 315.393055][ T10] usb 4-1: USB disconnect, device number 14 [ 315.499924][ T5973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.499953][ T5973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 315.651060][ T5973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 315.666514][ T5973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 315.838996][ T5973] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 315.939952][ T5973] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.978358][ T9365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.781'. [ 315.990782][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 316.002505][ T5973] usb 2-1: SerialNumber: syz [ 316.056725][ T9333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.067759][ T9333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.083561][ T9333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.144928][ T5973] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 316.262857][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 316.420720][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 316.461527][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.749755][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.766889][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.782960][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.867201][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.951165][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 317.079305][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.092975][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.107826][ T10] usb 6-1: config 0 descriptor?? [ 317.908249][ T9387] ksmbd: Unknown IPC event: 3, ignore. [ 317.955245][ T30] audit: type=1326 audit(1754904558.839:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 318.047557][ T30] audit: type=1326 audit(1754904558.849:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 318.079197][ T30] audit: type=1326 audit(1754904558.849:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 318.094490][ T10] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 318.144560][ T30] audit: type=1326 audit(1754904558.849:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 318.174486][ T30] audit: type=1326 audit(1754904558.849:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 318.197702][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.221147][ T30] audit: type=1326 audit(1754904558.849:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 318.244379][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.272583][ T9400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.789'. [ 318.350051][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.787'. [ 318.404040][ T9401] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 318.660152][ T30] audit: type=1326 audit(1754904558.849:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 318.980384][ T30] audit: type=1326 audit(1754904558.849:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 319.013469][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.080702][ T30] audit: type=1326 audit(1754904558.849:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 319.109448][ T30] audit: type=1326 audit(1754904558.849:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c38ebe9 code=0x7ffc0000 [ 319.245178][ T5973] usb 2-1: USB disconnect, device number 15 [ 319.369195][ T9417] program syz.3.790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.506681][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 319.741280][ T5923] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 319.870162][ T9429] input: syz1 as /devices/virtual/input/input22 [ 319.877921][ T9429] input: failed to attach handler leds to device input22, error: -6 [ 319.973500][ T9430] FAULT_INJECTION: forcing a failure. [ 319.973500][ T9430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.987241][ T9430] CPU: 0 UID: 0 PID: 9430 Comm: syz.0.796 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 319.987265][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.987275][ T9430] Call Trace: [ 319.987280][ T9430] [ 319.987285][ T9430] dump_stack_lvl+0x16c/0x1f0 [ 319.987308][ T9430] should_fail_ex+0x512/0x640 [ 319.987330][ T9430] _copy_to_user+0x32/0xd0 [ 319.987351][ T9430] simple_read_from_buffer+0xcb/0x170 [ 319.987372][ T9430] proc_fail_nth_read+0x197/0x240 [ 319.987393][ T9430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.987412][ T9430] ? rw_verify_area+0xcf/0x6c0 [ 319.987435][ T9430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.987452][ T9430] vfs_read+0x1e1/0xcf0 [ 319.987472][ T9430] ? __pfx___mutex_lock+0x10/0x10 [ 319.987491][ T9430] ? __pfx_vfs_read+0x10/0x10 [ 319.987514][ T9430] ? __fget_files+0x20e/0x3c0 [ 319.987546][ T9430] ksys_read+0x12a/0x250 [ 319.987563][ T9430] ? __pfx_ksys_read+0x10/0x10 [ 319.987586][ T9430] do_syscall_64+0xcd/0x4c0 [ 319.987606][ T9430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.987623][ T9430] RIP: 0033:0x7fc40c38d5fc [ 319.987637][ T9430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.987653][ T9430] RSP: 002b:00007fc40a5d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.987670][ T9430] RAX: ffffffffffffffda RBX: 00007fc40c5b6090 RCX: 00007fc40c38d5fc [ 319.987680][ T9430] RDX: 000000000000000f RSI: 00007fc40a5d50a0 RDI: 0000000000000005 [ 319.987690][ T9430] RBP: 00007fc40a5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 319.987699][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.987708][ T9430] R13: 00007fc40c5b6128 R14: 00007fc40c5b6090 R15: 00007ffd7dcf0918 [ 319.987730][ T9430] [ 320.387352][ T9429] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 320.529916][ T9435] can0: slcan on ptm0. [ 320.820756][ T9444] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 320.951040][ T9448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.305607][ T9428] can0 (unregistered): slcan off ptm0. [ 321.420296][ T5885] usb 6-1: USB disconnect, device number 5 [ 322.751855][ T9482] program syz.3.805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.337683][ T9494] FAULT_INJECTION: forcing a failure. [ 323.337683][ T9494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.351028][ T9494] CPU: 1 UID: 0 PID: 9494 Comm: syz.1.808 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 323.351053][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.351063][ T9494] Call Trace: [ 323.351069][ T9494] [ 323.351076][ T9494] dump_stack_lvl+0x16c/0x1f0 [ 323.351099][ T9494] should_fail_ex+0x512/0x640 [ 323.351118][ T9494] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 323.351142][ T9494] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 323.351162][ T9494] _copy_from_user+0x2e/0xd0 [ 323.351185][ T9494] sctp_getsockopt_local_addrs+0x106/0xcd0 [ 323.351205][ T9494] ? __pfx___schedule+0x10/0x10 [ 323.351240][ T9494] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 323.351263][ T9494] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 323.351284][ T9494] ? preempt_schedule_common+0x44/0xc0 [ 323.351312][ T9494] ? preempt_schedule_thunk+0x16/0x30 [ 323.351342][ T9494] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 323.351361][ T9494] sctp_getsockopt+0x124f/0x6a40 [ 323.351382][ T9494] ? __pfx___schedule+0x10/0x10 [ 323.351412][ T9494] ? avc_has_perm_noaudit+0x149/0x3b0 [ 323.351431][ T9494] ? __pfx_sctp_getsockopt+0x10/0x10 [ 323.351463][ T9494] ? __lock_acquire+0xb97/0x1ce0 [ 323.351503][ T9494] ? find_held_lock+0x2b/0x80 [ 323.351523][ T9494] ? __might_fault+0xe3/0x190 [ 323.351539][ T9494] ? __might_fault+0xe3/0x190 [ 323.351554][ T9494] ? __might_fault+0x13b/0x190 [ 323.351580][ T9494] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 323.351600][ T9494] do_sock_getsockopt+0x34a/0x440 [ 323.351623][ T9494] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 323.351642][ T9494] ? __fget_files+0x204/0x3c0 [ 323.351675][ T9494] __sys_getsockopt+0x12f/0x260 [ 323.351714][ T9494] __x64_sys_getsockopt+0xbd/0x160 [ 323.351729][ T9494] ? do_syscall_64+0x91/0x4c0 [ 323.351746][ T9494] ? lockdep_hardirqs_on+0x7c/0x110 [ 323.351763][ T9494] do_syscall_64+0xcd/0x4c0 [ 323.351782][ T9494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.351799][ T9494] RIP: 0033:0x7f9bd298ebe9 [ 323.351814][ T9494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.351830][ T9494] RSP: 002b:00007f9bd389d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 323.351847][ T9494] RAX: ffffffffffffffda RBX: 00007f9bd2bb6180 RCX: 00007f9bd298ebe9 [ 323.351857][ T9494] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000006 [ 323.351867][ T9494] RBP: 00007f9bd389d090 R08: 0000200000000040 R09: 0000000000000000 [ 323.351877][ T9494] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 323.351888][ T9494] R13: 00007f9bd2bb6218 R14: 00007f9bd2bb6180 R15: 00007ffc537167c8 [ 323.351918][ T9494] [ 324.092568][ T50] Bluetooth: hci5: link tx timeout [ 324.099491][ T50] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 324.113395][ T50] Bluetooth: hci5: link tx timeout [ 324.118582][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 324.190857][ T5851] Bluetooth: hci5: link tx timeout [ 324.196053][ T5851] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 324.203946][ T5851] Bluetooth: hci5: link tx timeout [ 324.209121][ T5851] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 324.218600][ T5851] Bluetooth: hci5: link tx timeout [ 324.223833][ T5851] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 324.231667][ T5851] Bluetooth: hci5: link tx timeout [ 324.237145][ T5851] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 324.245704][ T5851] Bluetooth: hci5: link tx timeout [ 324.250997][ T5851] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 324.258686][ T5851] Bluetooth: hci5: link tx timeout [ 324.263885][ T5851] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 324.283893][ T5851] Bluetooth: hci5: link tx timeout [ 324.289088][ T5851] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 324.384920][ T5851] Bluetooth: hci5: link tx timeout [ 324.390157][ T5851] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 324.430426][ T5851] Bluetooth: hci5: link tx timeout [ 324.500752][ T5851] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 324.508736][ T5851] Bluetooth: hci5: link tx timeout [ 324.513966][ T5851] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 324.522229][ T5851] Bluetooth: hci5: link tx timeout [ 324.532291][ T5851] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 324.540067][ T5851] Bluetooth: hci5: link tx timeout [ 324.545674][ T5851] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 324.836242][ T9514] syz.5.812: attempt to access beyond end of device [ 324.836242][ T9514] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 324.921057][ T9514] syz.5.812: attempt to access beyond end of device [ 324.921057][ T9514] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 324.985726][ T9514] Mount JFS Failure: -5 [ 325.162488][ T5851] Bluetooth: hci5: link tx timeout [ 325.170297][ T5851] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 325.178373][ T5851] Bluetooth: hci5: link tx timeout [ 325.183963][ T5851] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.192037][ T5851] Bluetooth: hci5: link tx timeout [ 325.197513][ T5851] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 325.207332][ T5851] Bluetooth: hci5: link tx timeout [ 325.212831][ T5851] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 326.037996][ T9531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.815'. [ 326.287745][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 327.093066][ T9529] ALSA: mixer_oss: invalid OSS volume 'u' [ 327.163583][ T9541] program syz.1.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.730989][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 327.731001][ T30] audit: type=1400 audit(1754904568.629:578): avc: denied { connect } for pid=9553 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 327.925624][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.820'. [ 328.562512][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 328.755157][ T9574] vlan2: entered allmulticast mode [ 328.760448][ T9574] erspan0: entered allmulticast mode [ 328.913059][ T30] audit: type=1400 audit(1754904569.809:579): avc: denied { create } for pid=9576 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 329.620522][ T30] audit: type=1400 audit(1754904570.509:580): avc: denied { read } for pid=9576 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 330.040571][ T9602] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 330.049731][ T9602] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 330.719750][ T30] audit: type=1400 audit(1754904571.609:581): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 330.806924][ T9611] netlink: 'syz.1.832': attribute type 21 has an invalid length. [ 330.825819][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 331.440781][ T5973] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 331.981034][ T5973] usb 1-1: Using ep0 maxpacket: 32 [ 331.999529][ T5973] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 332.039580][ T5973] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 332.066984][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 332.119917][ T5973] usb 1-1: Product: syz [ 332.126140][ T5973] usb 1-1: Manufacturer: syz [ 332.140535][ T5973] usb 1-1: SerialNumber: syz [ 332.158761][ T5973] usb 1-1: config 0 descriptor?? [ 332.173779][ T9629] netlink: 36 bytes leftover after parsing attributes in process `syz.5.836'. [ 332.185465][ T9613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 332.522926][ T9613] netlink: 5 bytes leftover after parsing attributes in process `syz.0.834'. [ 332.532022][ T5973] usb 1-1: USB disconnect, device number 18 [ 332.767413][ T30] audit: type=1400 audit(1754904573.639:582): avc: denied { audit_write } for pid=9635 comm="syz.3.838" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 332.964613][ T9613] 0XD: renamed from macvtap0 (while UP) [ 333.387784][ T9613] 0XD: entered allmulticast mode [ 333.398118][ T30] audit: type=1107 audit(1754904573.639:583): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 333.435819][ T9613] veth0_macvtap: entered allmulticast mode [ 333.456000][ T9613] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 333.857010][ T9657] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.841'. [ 334.582101][ T9648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.607178][ T9666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9666 comm=syz.5.843 [ 334.894930][ T30] audit: type=1400 audit(1754904575.789:584): avc: denied { create } for pid=9674 comm="syz.5.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 335.054506][ T30] audit: type=1400 audit(1754904575.929:585): avc: denied { getopt } for pid=9674 comm="syz.5.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 335.147212][ T9683] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.846'. [ 336.038572][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'. [ 336.142694][ T9696] netlink: 36 bytes leftover after parsing attributes in process `syz.5.850'. [ 336.764294][ T9710] netlink: 'syz.5.852': attribute type 10 has an invalid length. [ 338.065130][ T9717] ALSA: mixer_oss: invalid OSS volume 'u' [ 340.634410][ T9772] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 340.634410][ T9772] program syz.2.866 not setting count and/or reply_len properly [ 340.651342][ T9772] FAULT_INJECTION: forcing a failure. [ 340.651342][ T9772] name failslab, interval 1, probability 0, space 0, times 0 [ 340.664118][ T9772] CPU: 1 UID: 0 PID: 9772 Comm: syz.2.866 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 340.664143][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.664153][ T9772] Call Trace: [ 340.664158][ T9772] [ 340.664164][ T9772] dump_stack_lvl+0x16c/0x1f0 [ 340.664185][ T9772] should_fail_ex+0x512/0x640 [ 340.664206][ T9772] ? blk_rq_map_user_iov+0x2b2/0x13b0 [ 340.664227][ T9772] should_failslab+0xc2/0x120 [ 340.664246][ T9772] __kmalloc_noprof+0xd2/0x510 [ 340.664267][ T9772] blk_rq_map_user_iov+0x2b2/0x13b0 [ 340.664298][ T9772] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 340.664324][ T9772] ? policy_nodemask+0xea/0x4e0 [ 340.664343][ T9772] ? find_held_lock+0x2b/0x80 [ 340.664362][ T9772] ? sg_common_write.constprop.0+0xbf9/0x1c90 [ 340.664385][ T9772] ? import_ubuf+0x1b6/0x220 [ 340.664406][ T9772] blk_rq_map_user_io+0x1ff/0x230 [ 340.664429][ T9772] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 340.664450][ T9772] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.664477][ T9772] sg_common_write.constprop.0+0xd43/0x1c90 [ 340.664508][ T9772] ? __pfx__printk+0x10/0x10 [ 340.664522][ T9772] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 340.664547][ T9772] ? __pfx____ratelimit+0x10/0x10 [ 340.664575][ T9772] sg_write+0x813/0xe10 [ 340.664599][ T9772] ? __pfx_sg_write+0x10/0x10 [ 340.664619][ T9772] ? __pfx__kstrtoull+0x10/0x10 [ 340.664666][ T9772] ? bpf_lsm_file_permission+0x9/0x10 [ 340.664685][ T9772] ? security_file_permission+0x71/0x210 [ 340.664707][ T9772] ? iov_iter_advance+0x1e3/0x6c0 [ 340.664725][ T9772] ? rw_verify_area+0xcf/0x6c0 [ 340.664750][ T9772] ? __pfx_sg_write+0x10/0x10 [ 340.664769][ T9772] vfs_writev+0x5df/0xde0 [ 340.664790][ T9772] ? __pfx_vfs_writev+0x10/0x10 [ 340.664804][ T9772] ? find_held_lock+0x2b/0x80 [ 340.664836][ T9772] ? __fget_files+0x20e/0x3c0 [ 340.664852][ T9772] ? __fget_files+0x200/0x3c0 [ 340.664873][ T9772] ? do_writev+0x132/0x340 [ 340.664886][ T9772] do_writev+0x132/0x340 [ 340.664900][ T9772] ? __pfx_do_writev+0x10/0x10 [ 340.664922][ T9772] do_syscall_64+0xcd/0x4c0 [ 340.664939][ T9772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.664955][ T9772] RIP: 0033:0x7f406e58ebe9 [ 340.664968][ T9772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.664983][ T9772] RSP: 002b:00007f406c7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 340.664997][ T9772] RAX: ffffffffffffffda RBX: 00007f406e7b6090 RCX: 00007f406e58ebe9 [ 340.665008][ T9772] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000004 [ 340.665017][ T9772] RBP: 00007f406c7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 340.665026][ T9772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.665035][ T9772] R13: 00007f406e7b6128 R14: 00007f406e7b6090 R15: 00007ffc9a2d9778 [ 340.665056][ T9772] [ 340.950323][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.158115][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 341.210223][ T9782] chnl_net:caif_netlink_parms(): no params data found [ 341.661408][ T9795] netlink: 'syz.3.871': attribute type 10 has an invalid length. [ 343.015590][ T30] audit: type=1400 audit(1754904839.907:586): avc: denied { write } for pid=9824 comm="syz.5.877" path="socket:[26071]" dev="sockfs" ino=26071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.172163][ T30] audit: type=1400 audit(1754904840.057:587): avc: denied { bind } for pid=9836 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 343.202303][ T9838] atomic_op ffff8880328a4198 conn xmit_atomic 0000000000000000 [ 343.215626][ T30] audit: type=1400 audit(1754904840.087:588): avc: denied { write } for pid=9836 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 343.246273][ T30] audit: type=1400 audit(1754904840.137:589): avc: denied { read } for pid=9840 comm="syz.2.881" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 343.382165][ T30] audit: type=1400 audit(1754904840.137:590): avc: denied { open } for pid=9840 comm="syz.2.881" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 343.465427][ T30] audit: type=1400 audit(1754904840.357:591): avc: denied { create } for pid=9840 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 343.465577][ T9846] netlink: 'syz.2.881': attribute type 8 has an invalid length. [ 343.962647][ T30] audit: type=1400 audit(1754904840.397:592): avc: denied { setopt } for pid=9840 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 343.983546][ T9850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.882'. [ 344.009543][ T30] audit: type=1400 audit(1754904840.397:593): avc: denied { connect } for pid=9840 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 344.189330][ T1206] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 344.224876][ T30] audit: type=1400 audit(1754904840.468:594): avc: denied { ioctl } for pid=9840 comm="syz.2.881" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 344.250854][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.509290][ T1206] usb 4-1: Using ep0 maxpacket: 8 [ 344.518883][ T1206] usb 4-1: config 0 has no interfaces? [ 345.496171][ T1206] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.518951][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.709723][ T1206] usb 4-1: Product: syz [ 345.713915][ T1206] usb 4-1: Manufacturer: syz [ 345.721418][ T1206] usb 4-1: SerialNumber: syz [ 345.748609][ T5969] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 345.788173][ T1206] usb 4-1: config 0 descriptor?? [ 345.998841][ T5969] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 346.006946][ T5969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.116499][ T1206] usb 4-1: USB disconnect, device number 15 [ 346.233377][ T5969] usb 6-1: config 0 has no interface number 0 [ 347.122618][ T5969] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 347.137717][ T5969] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 8456, setting to 64 [ 347.149086][ T5969] usb 6-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.162180][ T5969] usb 6-1: config 0 interface 11 has no altsetting 0 [ 347.175416][ T5969] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 347.185466][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.260678][ T5969] usb 6-1: config 0 descriptor?? [ 347.291047][ T5969] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 347.312622][ T30] audit: type=1400 audit(1754904844.209:595): avc: denied { write } for pid=9888 comm="syz.1.891" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 347.333776][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 7 [ 347.398134][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 347.497809][ T5973] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 347.512271][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 347.594375][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 347.633123][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 347.670257][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 347.670327][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 347.672843][ T5973] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 347.679961][ T5969] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 347.700356][ T5973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.852109][ T5973] usb 4-1: config 0 has no interface number 0 [ 347.882940][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 347.890036][ T5973] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 348.023670][ T5973] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 348.025914][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 348.042948][ T30] audit: type=1400 audit(1754904844.940:596): avc: denied { mount } for pid=9913 comm="syz.0.896" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 348.066013][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 349.047037][ T5973] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 349.132140][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 349.492677][ T5973] usb 4-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 349.509125][ T5973] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 349.538996][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.539123][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86 [ 349.571964][ T5973] usb 4-1: Product: syz [ 349.576179][ T5973] usb 4-1: Manufacturer: syz [ 349.601220][ T5973] usb 4-1: SerialNumber: syz [ 349.710836][ T5969] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6 [ 349.893945][ T5969] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 350.426354][ T5973] usb 4-1: config 0 descriptor?? [ 350.433798][ T5973] symbolserial 4-1:0.175: symbol converter detected [ 350.446676][ T5973] usb 4-1: symbol converter now attached to ttyUSB2 [ 350.601268][ T5969] usb 6-1: USB disconnect, device number 6 [ 351.896550][ T5969] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 352.857465][ T5969] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 353.225867][ T5969] keyspan 6-1:0.11: device disconnected [ 353.274825][ T5923] usb 4-1: USB disconnect, device number 16 [ 353.510539][ T5923] symbol ttyUSB2: symbol converter now disconnected from ttyUSB2 [ 353.943126][ T5923] symbolserial 4-1:0.175: device disconnected [ 354.920698][ T9977] netlink: 'syz.0.910': attribute type 9 has an invalid length. [ 354.993981][ T50] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 355.001825][ T50] Bluetooth: hci5: unexpected event for opcode 0x203e [ 356.001876][ T9991] syz.0.914 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 356.019244][ T9999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.915'. [ 356.905278][T10010] FAULT_INJECTION: forcing a failure. [ 356.905278][T10010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.906530][T10010] [ 356.906537][T10010] ====================================================== [ 356.906544][T10010] WARNING: possible circular locking dependency detected [ 356.906550][T10010] 6.17.0-rc1-syzkaller #0 Not tainted [ 356.906559][T10010] ------------------------------------------------------ [ 356.906564][T10010] syz.0.918/10010 is trying to acquire lock: [ 356.906573][T10010] ffffffff8e4ce820 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 356.906618][T10010] [ 356.906618][T10010] but task is already holding lock: [ 356.906622][T10010] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 356.906661][T10010] [ 356.906661][T10010] which lock already depends on the new lock. [ 356.906661][T10010] [ 356.906666][T10010] [ 356.906666][T10010] the existing dependency chain (in reverse order) is: [ 356.906671][T10010] [ 356.906671][T10010] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 356.906691][T10010] _raw_spin_lock_nested+0x31/0x40 [ 356.906716][T10010] raw_spin_rq_lock_nested+0x29/0x130 [ 356.906734][T10010] task_rq_lock+0xcf/0x490 [ 356.906752][T10010] cgroup_move_task+0x81/0x2a0 [ 356.906772][T10010] css_set_move_task+0x288/0x5f0 [ 356.906793][T10010] cgroup_post_fork+0x201/0x9e0 [ 356.906811][T10010] copy_process+0x5cfa/0x7690 [ 356.906833][T10010] kernel_clone+0xfc/0x930 [ 356.906852][T10010] user_mode_thread+0xc7/0x110 [ 356.906872][T10010] rest_init+0x23/0x2b0 [ 356.906890][T10010] start_kernel+0x3ee/0x4d0 [ 356.906912][T10010] x86_64_start_reservations+0x18/0x30 [ 356.906935][T10010] x86_64_start_kernel+0x130/0x190 [ 356.906957][T10010] common_startup_64+0x13e/0x148 [ 356.906975][T10010] [ 356.906975][T10010] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 356.906995][T10010] _raw_spin_lock_irqsave+0x3a/0x60 [ 356.907017][T10010] try_to_wake_up+0xb7/0x1870 [ 356.907033][T10010] __wake_up_common+0x135/0x1f0 [ 356.907056][T10010] __wake_up+0x31/0x60 [ 356.907075][T10010] tty_port_default_wakeup+0x2a/0x40 [ 356.907093][T10010] serial8250_tx_chars+0x68e/0x860 [ 356.907112][T10010] serial8250_handle_irq+0x761/0xcb0 [ 356.907131][T10010] serial8250_default_handle_irq+0x9a/0x250 [ 356.907151][T10010] serial8250_interrupt+0xf5/0x1b0 [ 356.907171][T10010] __handle_irq_event_percpu+0x22c/0x7d0 [ 356.907190][T10010] handle_irq_event+0xab/0x1e0 [ 356.907207][T10010] handle_edge_irq+0x3ca/0x9e0 [ 356.907224][T10010] __common_interrupt+0xd0/0x2f0 [ 356.907246][T10010] common_interrupt+0xba/0xe0 [ 356.907266][T10010] asm_common_interrupt+0x26/0x40 [ 356.907281][T10010] console_flush_all+0x9a2/0xc60 [ 356.907298][T10010] console_unlock+0xd8/0x210 [ 356.907315][T10010] vprintk_emit+0x418/0x6d0 [ 356.907333][T10010] _printk+0xc7/0x100 [ 356.907345][T10010] kauditd_hold_skb+0x205/0x250 [ 356.907369][T10010] kauditd_send_queue+0x236/0x290 [ 356.907391][T10010] kauditd_thread+0x623/0xa70 [ 356.907414][T10010] kthread+0x3c5/0x780 [ 356.907428][T10010] ret_from_fork+0x5d7/0x6f0 [ 356.907442][T10010] ret_from_fork_asm+0x1a/0x30 [ 356.907462][T10010] [ 356.907462][T10010] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 356.907482][T10010] _raw_spin_lock_irqsave+0x3a/0x60 [ 356.907505][T10010] __wake_up+0x1c/0x60 [ 356.907523][T10010] tty_port_default_wakeup+0x2a/0x40 [ 356.907540][T10010] serial8250_tx_chars+0x68e/0x860 [ 356.907557][T10010] serial8250_handle_irq+0x761/0xcb0 [ 356.907576][T10010] serial8250_default_handle_irq+0x9a/0x250 [ 356.907596][T10010] serial8250_interrupt+0xf5/0x1b0 [ 356.907614][T10010] __handle_irq_event_percpu+0x22c/0x7d0 [ 356.907632][T10010] handle_irq_event+0xab/0x1e0 [ 356.907650][T10010] handle_edge_irq+0x3ca/0x9e0 [ 356.907666][T10010] __common_interrupt+0xd0/0x2f0 [ 356.907687][T10010] common_interrupt+0xba/0xe0 [ 356.907705][T10010] asm_common_interrupt+0x26/0x40 [ 356.907720][T10010] _raw_spin_unlock_irqrestore+0x31/0x80 [ 356.907743][T10010] uart_write+0x2a4/0xb30 [ 356.907758][T10010] n_tty_write+0x41f/0x11e0 [ 356.907781][T10010] file_tty_write.constprop.0+0x501/0x9b0 [ 356.907797][T10010] redirected_tty_write+0xd4/0x150 [ 356.907812][T10010] vfs_write+0x7d3/0x11d0 [ 356.907827][T10010] ksys_write+0x12a/0x250 [ 356.907841][T10010] do_syscall_64+0xcd/0x4c0 [ 356.907856][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.907872][T10010] [ 356.907872][T10010] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 356.907892][T10010] _raw_spin_lock_irqsave+0x3a/0x60 [ 356.907914][T10010] serial8250_console_write+0x181/0x1890 [ 356.907935][T10010] console_flush_all+0x801/0xc60 [ 356.907952][T10010] console_unlock+0xd8/0x210 [ 356.907968][T10010] vprintk_emit+0x418/0x6d0 [ 356.907986][T10010] _printk+0xc7/0x100 [ 356.907998][T10010] register_console+0xc2d/0x11b0 [ 356.908017][T10010] univ8250_console_init+0x5f/0x90 [ 356.908041][T10010] console_init+0x14f/0x680 [ 356.908064][T10010] start_kernel+0x29f/0x4d0 [ 356.908084][T10010] x86_64_start_reservations+0x18/0x30 [ 356.908107][T10010] x86_64_start_kernel+0x130/0x190 [ 356.908129][T10010] common_startup_64+0x13e/0x148 [ 356.908145][T10010] [ 356.908145][T10010] -> #0 (console_owner){-.-.}-{0:0}: [ 356.908165][T10010] __lock_acquire+0x12a6/0x1ce0 [ 356.908188][T10010] lock_acquire+0x179/0x350 [ 356.908211][T10010] console_lock_spinning_enable+0xb0/0xd0 [ 356.908228][T10010] console_flush_all+0x7aa/0xc60 [ 356.908245][T10010] console_unlock+0xd8/0x210 [ 356.908262][T10010] vprintk_emit+0x418/0x6d0 [ 356.908280][T10010] _printk+0xc7/0x100 [ 356.908292][T10010] should_fail_ex+0x4e7/0x640 [ 356.908309][T10010] strncpy_from_user+0x3b/0x2e0 [ 356.908322][T10010] strncpy_from_user_nofault+0x7f/0x180 [ 356.908341][T10010] bpf_probe_read_user_str+0x26/0x70 [ 356.908364][T10010] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 356.908378][T10010] bpf_trace_run4+0x252/0x5b0 [ 356.908393][T10010] __bpf_trace_sched_switch+0x145/0x190 [ 356.908410][T10010] __traceiter_sched_switch+0x6c/0xc0 [ 356.908427][T10010] __schedule+0x183b/0x5de0 [ 356.908449][T10010] preempt_schedule_irq+0x51/0x90 [ 356.908473][T10010] irqentry_exit+0x36/0x90 [ 356.908487][T10010] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 356.908503][T10010] debug_lockdep_rcu_enabled+0xe/0x40 [ 356.908518][T10010] unwind_next_frame+0x3de/0x20a0 [ 356.908535][T10010] arch_stack_walk+0x94/0x100 [ 356.908552][T10010] stack_trace_save+0x8e/0xc0 [ 356.908573][T10010] kasan_save_stack+0x33/0x60 [ 356.908588][T10010] kasan_save_track+0x14/0x30 [ 356.908602][T10010] __kasan_kmalloc+0xaa/0xb0 [ 356.908616][T10010] __kmalloc_noprof+0x223/0x510 [ 356.908631][T10010] tomoyo_realpath_from_path+0xc2/0x6e0 [ 356.908654][T10010] tomoyo_path_number_perm+0x245/0x580 [ 356.908673][T10010] security_file_ioctl+0x9b/0x240 [ 356.908694][T10010] __x64_sys_ioctl+0xb7/0x210 [ 356.908716][T10010] do_syscall_64+0xcd/0x4c0 [ 356.908731][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.908746][T10010] [ 356.908746][T10010] other info that might help us debug this: [ 356.908746][T10010] [ 356.908751][T10010] Chain exists of: [ 356.908751][T10010] console_owner --> &p->pi_lock --> &rq->__lock [ 356.908751][T10010] [ 356.908774][T10010] Possible unsafe locking scenario: [ 356.908774][T10010] [ 356.908783][T10010] CPU0 CPU1 [ 356.908787][T10010] ---- ---- [ 356.908791][T10010] lock(&rq->__lock); [ 356.908801][T10010] lock(&p->pi_lock); [ 356.908811][T10010] lock(&rq->__lock); [ 356.908822][T10010] lock(console_owner); [ 356.908832][T10010] [ 356.908832][T10010] *** DEADLOCK *** [ 356.908832][T10010] [ 356.908836][T10010] 6 locks held by syz.0.918/10010: [ 356.908846][T10010] #0: ffffffff8f05b2f0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x237/0x580 [ 356.908886][T10010] #1: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 356.908924][T10010] #2: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 356.908964][T10010] #3: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 356.909000][T10010] #4: ffffffff8e5aec60 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 356.909033][T10010] #5: ffffffff8e5aecd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 356.909072][T10010] [ 356.909072][T10010] stack backtrace: [ 356.909079][T10010] CPU: 0 UID: 0 PID: 10010 Comm: syz.0.918 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 356.909098][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.909108][T10010] Call Trace: [ 356.909113][T10010] [ 356.909120][T10010] dump_stack_lvl+0x116/0x1f0 [ 356.909137][T10010] print_circular_bug+0x275/0x350 [ 356.909162][T10010] check_noncircular+0x14c/0x170 [ 356.909189][T10010] __lock_acquire+0x12a6/0x1ce0 [ 356.909217][T10010] lock_acquire+0x179/0x350 [ 356.909241][T10010] ? console_lock_spinning_enable+0x9f/0xd0 [ 356.909261][T10010] ? console_lock_spinning_enable+0x88/0xd0 [ 356.909282][T10010] console_lock_spinning_enable+0xb0/0xd0 [ 356.909301][T10010] ? console_lock_spinning_enable+0x9f/0xd0 [ 356.909319][T10010] console_flush_all+0x7aa/0xc60 [ 356.909341][T10010] ? __pfx_console_flush_all+0x10/0x10 [ 356.909364][T10010] ? is_printk_cpu_sync_owner+0x32/0x40 [ 356.909388][T10010] console_unlock+0xd8/0x210 [ 356.909406][T10010] ? __pfx_console_unlock+0x10/0x10 [ 356.909424][T10010] ? do_raw_spin_unlock+0xe0/0x230 [ 356.909443][T10010] ? _printk+0xc7/0x100 [ 356.909457][T10010] ? __down_trylock_console_sem+0xb0/0x140 [ 356.909473][T10010] vprintk_emit+0x418/0x6d0 [ 356.909494][T10010] ? __pfx_vprintk_emit+0x10/0x10 [ 356.909514][T10010] ? bsearch+0x9e/0xc0 [ 356.909535][T10010] ? __pfx_cmp_ex_search+0x10/0x10 [ 356.909551][T10010] _printk+0xc7/0x100 [ 356.909565][T10010] ? __pfx__printk+0x10/0x10 [ 356.909578][T10010] ? strncpy_from_user+0x1d5/0x2e0 [ 356.909595][T10010] ? __pfx____ratelimit+0x10/0x10 [ 356.909622][T10010] should_fail_ex+0x4e7/0x640 [ 356.909639][T10010] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 356.909658][T10010] strncpy_from_user+0x3b/0x2e0 [ 356.909672][T10010] ? lock_acquire+0x179/0x350 [ 356.909698][T10010] strncpy_from_user_nofault+0x7f/0x180 [ 356.909718][T10010] bpf_probe_read_user_str+0x26/0x70 [ 356.909743][T10010] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 356.909756][T10010] bpf_trace_run4+0x252/0x5b0 [ 356.909773][T10010] ? __pfx_bpf_trace_run4+0x10/0x10 [ 356.909797][T10010] ? __lock_acquire+0xb97/0x1ce0 [ 356.909823][T10010] __bpf_trace_sched_switch+0x145/0x190 [ 356.909843][T10010] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 356.909862][T10010] ? lock_acquire+0x179/0x350 [ 356.909889][T10010] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 356.909911][T10010] __traceiter_sched_switch+0x6c/0xc0 [ 356.909927][T10010] ? set_next_task_rt+0x403/0x6a0 [ 356.909952][T10010] __schedule+0x183b/0x5de0 [ 356.909975][T10010] ? strncpy_from_user+0x1d2/0x2e0 [ 356.909990][T10010] ? strncpy_from_user+0x1d9/0x2e0 [ 356.910006][T10010] ? strncpy_from_user+0x203/0x2e0 [ 356.910025][T10010] ? __pfx___schedule+0x10/0x10 [ 356.910048][T10010] ? __lock_acquire+0x62e/0x1ce0 [ 356.910076][T10010] ? mark_held_locks+0x49/0x80 [ 356.910101][T10010] preempt_schedule_irq+0x51/0x90 [ 356.910127][T10010] irqentry_exit+0x36/0x90 [ 356.910141][T10010] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 356.910159][T10010] RIP: 0010:debug_lockdep_rcu_enabled+0xe/0x40 [ 356.910177][T10010] Code: 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 16 f5 17 05 85 c0 74 20 <8b> 05 f0 25 18 05 85 c0 74 16 65 48 8b 05 98 ee 42 08 8b 80 ec 0a [ 356.910194][T10010] RSP: 0018:ffffc9000bab7770 EFLAGS: 00000202 [ 356.910208][T10010] RAX: 0000000000000002 RBX: ffffc9000bab7b38 RCX: ffffc9000bab8001 [ 356.910219][T10010] RDX: ffffc9000bab7b40 RSI: ffffc9000bab7b20 RDI: ffffc9000bab77f8 [ 356.910230][T10010] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 356.910240][T10010] R10: 0000000000000001 R11: 00000000000121b4 R12: ffffc9000bab7838 [ 356.910251][T10010] R13: ffffc9000bab77e8 R14: ffffc9000bab7b38 R15: ffffc9000bab781c [ 356.910268][T10010] unwind_next_frame+0x3de/0x20a0 [ 356.910286][T10010] ? kasan_save_stack+0x33/0x60 [ 356.910303][T10010] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 356.910326][T10010] arch_stack_walk+0x94/0x100 [ 356.910347][T10010] ? kasan_save_track+0x14/0x30 [ 356.910364][T10010] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 356.910388][T10010] stack_trace_save+0x8e/0xc0 [ 356.910410][T10010] ? __pfx_stack_trace_save+0x10/0x10 [ 356.910435][T10010] kasan_save_stack+0x33/0x60 [ 356.910450][T10010] ? kasan_save_stack+0x33/0x60 [ 356.910481][T10010] kasan_save_track+0x14/0x30 [ 356.910497][T10010] __kasan_kmalloc+0xaa/0xb0 [ 356.910512][T10010] __kmalloc_noprof+0x223/0x510 [ 356.910531][T10010] tomoyo_realpath_from_path+0xc2/0x6e0 [ 356.910556][T10010] ? tomoyo_profile+0x47/0x60 [ 356.910572][T10010] tomoyo_path_number_perm+0x245/0x580 [ 356.910591][T10010] ? tomoyo_path_number_perm+0x237/0x580 [ 356.910612][T10010] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 356.910634][T10010] ? find_held_lock+0x2b/0x80 [ 356.910655][T10010] ? __pfx___schedule+0x10/0x10 [ 356.910684][T10010] ? rcu_is_watching+0x12/0xc0 [ 356.910704][T10010] ? irqentry_exit+0x3b/0x90 [ 356.910719][T10010] ? lockdep_hardirqs_on+0x7c/0x110 [ 356.910735][T10010] ? hook_file_ioctl_common+0x145/0x410 [ 356.910754][T10010] ? __x64_sys_ioctl+0x94/0x210 [ 356.910783][T10010] ? security_file_ioctl+0x18/0x240 [ 356.910807][T10010] security_file_ioctl+0x9b/0x240 [ 356.910829][T10010] __x64_sys_ioctl+0xb7/0x210 [ 356.910854][T10010] do_syscall_64+0xcd/0x4c0 [ 356.910871][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.910888][T10010] RIP: 0033:0x7fc40c38ebe9 [ 356.910900][T10010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.910916][T10010] RSP: 002b:00007fc40a5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.910931][T10010] RAX: ffffffffffffffda RBX: 00007fc40c5b6180 RCX: 00007fc40c38ebe9 [ 356.910942][T10010] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000005 [ 356.910953][T10010] RBP: 00007fc40a5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 356.910963][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.910973][T10010] R13: 00007fc40c5b6218 R14: 00007fc40c5b6180 R15: 00007ffd7dcf0918 [ 356.910989][T10010] [ 358.337186][T10010] CPU: 0 UID: 0 PID: 10010 Comm: syz.0.918 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 358.337202][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.337209][T10010] Call Trace: [ 358.337215][T10010] [ 358.337220][T10010] dump_stack_lvl+0x116/0x1f0 [ 358.337235][T10010] should_fail_ex+0x512/0x640 [ 358.337248][T10010] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 358.337260][T10010] strncpy_from_user+0x3b/0x2e0 [ 358.337269][T10010] ? lock_acquire+0x179/0x350 [ 358.337286][T10010] strncpy_from_user_nofault+0x7f/0x180 [ 358.337301][T10010] bpf_probe_read_user_str+0x26/0x70 [ 358.337318][T10010] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 358.337327][T10010] bpf_trace_run4+0x252/0x5b0 [ 358.337338][T10010] ? __pfx_bpf_trace_run4+0x10/0x10 [ 358.337349][T10010] ? __lock_acquire+0xb97/0x1ce0 [ 358.337366][T10010] __bpf_trace_sched_switch+0x145/0x190 [ 358.337379][T10010] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 358.337391][T10010] ? lock_acquire+0x179/0x350 [ 358.337407][T10010] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 358.337420][T10010] __traceiter_sched_switch+0x6c/0xc0 [ 358.337431][T10010] ? set_next_task_rt+0x403/0x6a0 [ 358.337446][T10010] __schedule+0x183b/0x5de0 [ 358.337462][T10010] ? strncpy_from_user+0x1d2/0x2e0 [ 358.337471][T10010] ? strncpy_from_user+0x1d9/0x2e0 [ 358.337481][T10010] ? strncpy_from_user+0x203/0x2e0 [ 358.337492][T10010] ? __pfx___schedule+0x10/0x10 [ 358.337507][T10010] ? __lock_acquire+0x62e/0x1ce0 [ 358.337524][T10010] ? mark_held_locks+0x49/0x80 [ 358.337540][T10010] preempt_schedule_irq+0x51/0x90 [ 358.337556][T10010] irqentry_exit+0x36/0x90 [ 358.337565][T10010] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 358.337576][T10010] RIP: 0010:debug_lockdep_rcu_enabled+0xe/0x40 [ 358.337587][T10010] Code: 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 16 f5 17 05 85 c0 74 20 <8b> 05 f0 25 18 05 85 c0 74 16 65 48 8b 05 98 ee 42 08 8b 80 ec 0a [ 358.337598][T10010] RSP: 0018:ffffc9000bab7770 EFLAGS: 00000202 [ 358.337607][T10010] RAX: 0000000000000002 RBX: ffffc9000bab7b38 RCX: ffffc9000bab8001 [ 358.337613][T10010] RDX: ffffc9000bab7b40 RSI: ffffc9000bab7b20 RDI: ffffc9000bab77f8 [ 358.337619][T10010] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 358.337625][T10010] R10: 0000000000000001 R11: 00000000000121b4 R12: ffffc9000bab7838 [ 358.337631][T10010] R13: ffffc9000bab77e8 R14: ffffc9000bab7b38 R15: ffffc9000bab781c [ 358.337640][T10010] unwind_next_frame+0x3de/0x20a0 [ 358.337652][T10010] ? kasan_save_stack+0x33/0x60 [ 358.337684][T10010] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 358.337699][T10010] arch_stack_walk+0x94/0x100 [ 358.337713][T10010] ? kasan_save_track+0x14/0x30 [ 358.337723][T10010] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.337739][T10010] stack_trace_save+0x8e/0xc0 [ 358.337756][T10010] ? __pfx_stack_trace_save+0x10/0x10 [ 358.337771][T10010] kasan_save_stack+0x33/0x60 [ 358.337780][T10010] ? kasan_save_stack+0x33/0x60 [ 358.337798][T10010] kasan_save_track+0x14/0x30 [ 358.337808][T10010] __kasan_kmalloc+0xaa/0xb0 [ 358.337817][T10010] __kmalloc_noprof+0x223/0x510 [ 358.337829][T10010] tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.337844][T10010] ? tomoyo_profile+0x47/0x60 [ 358.337854][T10010] tomoyo_path_number_perm+0x245/0x580 [ 358.337866][T10010] ? tomoyo_path_number_perm+0x237/0x580 [ 358.337878][T10010] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 358.337891][T10010] ? find_held_lock+0x2b/0x80 [ 358.337904][T10010] ? __pfx___schedule+0x10/0x10 [ 358.337922][T10010] ? rcu_is_watching+0x12/0xc0 [ 358.337935][T10010] ? irqentry_exit+0x3b/0x90 [ 358.337944][T10010] ? lockdep_hardirqs_on+0x7c/0x110 [ 358.337953][T10010] ? hook_file_ioctl_common+0x145/0x410 [ 358.337964][T10010] ? __x64_sys_ioctl+0x94/0x210 [ 358.337979][T10010] ? security_file_ioctl+0x18/0x240 [ 358.337994][T10010] security_file_ioctl+0x9b/0x240 [ 358.338009][T10010] __x64_sys_ioctl+0xb7/0x210 [ 358.338024][T10010] do_syscall_64+0xcd/0x4c0 [ 358.338035][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.338045][T10010] RIP: 0033:0x7fc40c38ebe9 [ 358.338054][T10010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.338063][T10010] RSP: 002b:00007fc40a5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.338072][T10010] RAX: ffffffffffffffda RBX: 00007fc40c5b6180 RCX: 00007fc40c38ebe9 [ 358.338079][T10010] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000005 [ 358.338084][T10010] RBP: 00007fc40a5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 358.338090][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.338096][T10010] R13: 00007fc40c5b6218 R14: 00007fc40c5b6180 R15: 00007ffd7dcf0918 [ 358.338105][T10010] [ 358.338138][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.806111][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.927361][T10005] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 358.944106][ T5973] lo speed is unknown, defaulting to 1000 [ 359.031910][ T50] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 359.040184][ T50] Bluetooth: hci5: Injecting HCI hardware error event [ 359.047015][ T50] Bluetooth: hci5: hardware error 0x00 [ 361.110899][ T50] Bluetooth: hci5: Opcode 0x0c03 failed: -110