last executing test programs: 21.500083017s ago: executing program 4 (id=3003): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0xb766a199c7bbf13b) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) (fail_nth: 1) 19.404093044s ago: executing program 4 (id=3006): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400448e6, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 18.908169457s ago: executing program 4 (id=3008): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002e80)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000040)=""/8, 0x8}], 0x3, &(0x7f0000000380)=""/18, 0x12}, 0x8}, {{&(0x7f0000001440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f00000014c0)=""/15, 0xf}, {&(0x7f0000001500)=""/123, 0x7b}, {&(0x7f0000001580)=""/20, 0x14}, {&(0x7f00000015c0)=""/233, 0xe9}, {&(0x7f00000016c0)=""/17, 0x11}, {&(0x7f0000001700)=""/125, 0x7d}, {&(0x7f0000001780)=""/65, 0x41}], 0x8, &(0x7f0000001880)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002880)=@rc, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002900)=""/239, 0xef}, {&(0x7f0000002a00)=""/136, 0x88}, {&(0x7f0000002ac0)=""/96, 0x60}, {&(0x7f0000002b40)=""/221, 0xdd}], 0x4, &(0x7f0000002c80)=""/13, 0xd}, 0x60c}, {{&(0x7f0000002cc0)=@caif=@dgm, 0x80, &(0x7f0000002d40), 0x0, &(0x7f0000002d80)=""/235, 0xeb}}], 0x4, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r4, 0x1) close(0xffffffffffffffff) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x80) mknodat(r5, 0x0, 0x0, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 16.405517977s ago: executing program 4 (id=3016): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = fsmount(r0, 0x1, 0xf1) (rerun: 64) fchdir(r1) (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (rerun: 32) 16.204088445s ago: executing program 4 (id=3019): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x8, 0x0, {{0x47, 0x4, 0x1, 0x23, 0x11c, 0x66, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, {[@cipso={0x86, 0x10, 0x1, [{0x2, 0xa, "daf241c3d6bd79d3"}]}, @lsrr={0x83, 0x7, 0xd2, [@broadcast]}, @cipso={0x86, 0x58, 0x3, [{0x1, 0x7, "142b522f0c"}, {0x7, 0x12, "36c4fa84b977537d191778f13d5eab4f"}, {0x2, 0xb, "858d33914cdafb408c"}, {0x2, 0x10, "2172e3ea1c722b84de36c0b63f16"}, {0x2, 0x9, "fde39bb5d3fbf6"}, {0x7, 0x7, "45dac0e2ce"}, {0x7, 0xe, "70ec57047446e5e1e3a2b680"}]}, @timestamp_prespec={0x44, 0x64, 0x8f, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}}, {@multicast2, 0x7}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3c53}, {@loopback, 0x3}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2, 0x8}, {@rand_addr=0x64010100, 0x10000}]}, @timestamp={0x44, 0x18, 0x50, 0x0, 0x5, [0x0, 0x7, 0x409, 0x0, 0xbd3]}, @ssrr={0x89, 0x1b, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000001040)={'syztnl1\x00', &(0x7f00000004c0)={'gretap0\x00', r3, 0x0, 0xab00, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x7e, 0x29, 0x0, @empty, @empty, {[@timestamp={0x44, 0x18, 0x4f, 0x0, 0x7, [0x707, 0x37420842, 0x81, 0xa52, 0x7]}, @lsrr={0x83, 0x27, 0x42, [@multicast2, @rand_addr=0x64010100, @loopback, @broadcast, @private=0xa010101, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}}}) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) pread64(r4, 0x0, 0x0, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000002001400001400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 13.056910147s ago: executing program 4 (id=3024): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)={0x3, 'macvlan0\x00', {0x6f6a}, 0x4}) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x1d, 0x0, 0x0, {0x3, 0x0, 0x4}, 0x1}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x400d1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x5, 0xfd, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0x5) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 8.988088238s ago: executing program 2 (id=3036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000240), 0x0}, 0x20) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000440)={0x2}) 8.263977831s ago: executing program 1 (id=3040): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000580)='_', 0x1}, {&(0x7f0000000640)='X{', 0x2}], 0x2}], 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x20, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x1000, 0x5c8, 0x7fffffff, 0x6}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) syz_io_uring_setup(0x6167, &(0x7f0000000400)={0x0, 0xfffffffe, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r7 = socket$inet6(0xa, 0x3, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x1}, 0x20) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="0cf1b7d69889ab"], 0x57) 8.153424931s ago: executing program 2 (id=3041): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, {0xa, 0x0, 0x0, @empty, 0x3}, 0x0, {[0x0, 0x3]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001540)="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", 0xfd}], 0x4}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0a0300050200000000000000000002a46ac0a8d9d9ade42600000000000000000000000000000006a48fbe134671ae3981958c27827c0c7e99c0224f9202780e604ad32dd778afe8de7b48f536ccd9b7657575ad84c8bb433b10c23e39887d2fc93bed7bfcecaa3a92e179effc"], 0x4e) setresuid(0x0, 0xee01, 0x0) setpriority(0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) 7.389138368s ago: executing program 1 (id=3044): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x1) shutdown(r2, 0x0) pwrite64(r0, &(0x7f0000000200)="93960b9c42e2396d0bec7f090383896861b5b1b36c39a90f929b40ffd0cae8", 0x1f, 0x4) userfaultfd(0x80001) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7, 0x2}]}, {0x0, [0x0, 0x2e, 0x0]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = socket(0x15, 0xa, 0x3fc) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000580)={[0x800]}, &(0x7f00000005c0), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) 7.351952251s ago: executing program 2 (id=3045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r7 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, &(0x7f00000001c0)=""/83, 0x3, 0x1}}, 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.802828935s ago: executing program 2 (id=3048): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000000040'], 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r1, 0xefca115) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x4, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf9d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x1, 0x3, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x20000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0x401, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x7, 0x5, 0x3, 0x1ff, 0x200e5, 0x2f, 0xd, 0x3, 0xa, 0x4, 0x1, 0x9, 0x11, 0x6154, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x4, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x405, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x4, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x80000001, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0x1, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1000001, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0xd, 0x8, 0xba, 0x204, 0x89, 0x2, 0x6, 0x100, 0xa60, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb7, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x180, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x9, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x723, 0x0, 0xe, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x3, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb87, 0x6, 0x8d8d, 0x55, 0x101, 0x8, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88888080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x510}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}]}, 0x2c}}, 0x4) r7 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) fcntl$setstatus(r7, 0x4, 0x2c00) gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) 5.866725954s ago: executing program 1 (id=3051): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000200)={0x4000000, 0x3, &(0x7f0000000100)=[0x4, 0xf1c1, 0x9], &(0x7f0000000140)=[0x4], &(0x7f0000000180)=[0x2, 0x2, 0x5, 0x7, 0x7f, 0x84f3], &(0x7f00000001c0)}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x7) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880), 0x0, 0x1, 0x0, 0x0, r5}) write$uinput_user_dev(r2, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="67727071756eaa6762396e6f64655f68617264209290ed9c20ef476c"]) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') 5.865917783s ago: executing program 2 (id=3052): ioperm(0x6, 0x6, 0x8) r0 = getpid() migrate_pages(r0, 0xa, 0x0, &(0x7f0000000080)=0xc040000000000000) set_mempolicy(0x1, &(0x7f0000000180)=0x6c0d05c5, 0x2) set_mempolicy(0x4000, &(0x7f00000001c0)=0xffffffffffffffc0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r4, 0x607, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x1003ff}, 0xffffffff, 0x7}) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0x1fc00, 0x1, 0x1}) unshare(0x68040200) socket$inet_smc(0x2b, 0x1, 0x0) 5.154541807s ago: executing program 1 (id=3054): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, {0xa, 0x0, 0x0, @empty, 0x3}, 0x0, {[0x0, 0x3]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001540)="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", 0xfd}], 0x4}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0a0300050200000000000000000002a46ac0a8d9d9ade42600000000000000000000000000000006a48fbe134671ae3981958c27827c0c7e99c0224f9202780e604ad32dd778afe8de7b48f536ccd9b7657575ad84c8bb433b10c23e39887d2fc93bed7bfcecaa3a92e179effc"], 0x4e) setresuid(0x0, 0xee01, 0x0) setpriority(0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) 4.131435004s ago: executing program 3 (id=3057): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0xb7) 4.058822812s ago: executing program 3 (id=3059): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) execveat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000180)='::%#[\',^\x00', &(0x7f00000001c0)='\x00']}, &(0x7f0000000480)={[&(0x7f0000000280)='/dev/video37\x00', &(0x7f00000002c0)='/dev/snd/timer\x00', &(0x7f0000000300)=')/\x00', &(0x7f0000000340)='/dev/snd/timer\x00', &(0x7f0000000380)='\'#\x00', &(0x7f00000003c0)='%+&/:%*\x00', &(0x7f0000000400)='/dev/video37\x00', &(0x7f0000000440)='@:\x00']}, 0x400) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 3.28327242s ago: executing program 1 (id=3061): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f001000904550701034902000905820300040033810000000010000000000000"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'\x00', 0x200}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xa, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x240) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001d00)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="96aef32369da6ccc281ca9600928000400280d19d663749fbf691d097da91a8125a0d3a71014b3b52ecd8434b9ff0100003b5c4153c23c3bee"], &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, &(0x7f0000001ec0)={0x2c, &(0x7f0000001d40)={0x20, 0x18, 0x19, "103d8228f28572c9ec8273af64abfeec055e1f6c21a202d799"}, 0x0, &(0x7f0000001dc0)={0x0, 0x8, 0x1, 0x70}, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.129890797s ago: executing program 3 (id=3062): r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000040)=0xb7f) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) fsopen(&(0x7f0000000040)='romfs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.004222105s ago: executing program 3 (id=3063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000016ffffffffffffaaaaaaaaaabb86dd68be831400442f01fe8000000000000000000000000000aafc0000000000000000000000000000030420880b000000000c000800010086dd080088be000000001f0883020100000000000190080022eb00000002203bbb7e0200000000000004000194060805655800000002"], 0x7e) 1.786545702s ago: executing program 0 (id=3065): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{}, {0x1, 0xc8}}}, 0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.591554898s ago: executing program 3 (id=3066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000740)={0x42, 0x3, 0x2}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x80, 0x80, 0x2, 0x5, {{0xd, 0x4, 0x2, 0x23, 0x34, 0x65, 0x0, 0x5, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0xad, [@private=0xa010101, @multicast1, @local]}, @noop, @rr={0x7, 0xf, 0xe2, [@local, @multicast1, @loopback]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x7, 0x8, 0x1c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x20, 0x10001, 0x28}}) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe06a8a6d3615a5e8}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020028bd7000fedbdf250b00000005000500090000000800030003000000080002000100000008000200080000003c000180060001000a000000050002000800000008000700", @ANYRESDEC=r8, @ANYBLOB="ecfd0600", @ANYRES32=r8, @ANYBLOB="060001000a00000008000700", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB], 0x70}}, 0x22004040) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0x25, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x3b, 0x0, "6606ca7ce41b346ac33e74fc00d9165a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f0"}, 0xd8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000580)={0x2, 0x4e20}, 0x10) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r11) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r13 = dup(r12) sendmsg$nl_route_sched(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r13}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r13) socket$nl_route(0x10, 0x3, 0x0) getpid() 1.5727925s ago: executing program 0 (id=3067): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x3, &(0x7f0000000140)) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x24000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x40, @time={0xc0, 0x8}, 0x1, {0x3, 0xe}, 0x4, 0x0, 0x3}) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x19, &(0x7f0000000000)=[{&(0x7f00000001c0)="9a3aac261f8b38a9fee104c301af03fa15dc9871c81fba0191d203fea589288c2f649095a4d07c4bf6bd69ce808f09d4984a59f438bf38d2e68d54f8dbdcb65b03d70e79c8d252413493040edd55ceb7b821752ceaaf624a01c15ba18271836d9b015b4363000000000000000000"}, {&(0x7f0000000240)="fd06e0e22f2722be1fe1e8d04bd6bd69d0acea15b83a55f6879f1e4b5c521074d03925ec0d40f38ee47022ae6baa111813c6cf61472ad723d607cc259f7062d29b424ade6703bba6c9a35ac201ff636c63ccd328e0f80c8c648e79f1621e90c5e5add5791009604f189e86721849928cbc723b2d2010f5cdcc8a3ec4b77ce1a7b158b00fe61ddfeb795b3458da269a81cb6dd1f4a059a34041cbb2cb5b70a3532155520584b872755da9cbd343f90c070178ef702e9b424ec4ed01e66d82c4c2cf9c6b1742573df7610e2f21c2c906fa5bcb2bc4f6094e4bf70834897eb71936acd0a04669e3a482af720c1181bf9448142af44f0266055b02cda8db79c018f2b7adcec47a19b8fb7e1d03488472677bce0cffad55ab7ef75dcfb326f715ed01e9d4c71b72cb2d2741cd2ca3705cea170f58c88260ad158be76ef143983caccf16c84eb70c3f49c8c61b06d80716720ecd5391914364a840b214636a8604e04bf1b54cdc6cadbaef9270488cbc0d10e46f509b775562b41a8a5e0b7f36c8be8d16a397682e9ead7a3c13120878d4469b7fd525cddd6487b288504f2db7fc62164ff165a017097e1db359cab4b2cba712b41e3301ef58a559fc2ed7bf8e4895dc4d2b6f73acfccbde067fdd37decf34812cf1d9faf2ff1356f05007de4018fea6ac6dc8ffdd65a489f81e28c0c227b5fb3a6fd24f4964f9811a21e3b0cb05c6be9f8936bd6ebc68972e06cb4e64a14c475648427294f665aeb8e8eb83d88d46ffc52701376d8d7d6484b2c88f02ae71f0d9f84e90edc40d61bb46dc09f83f14a3388484b331c3f8174d430f73b41ba948d1710bb2b77cfa48afc267688b95076f15ad35c0b96522c8229ae4ae41446eb0f7dcca0517c1a4428fb1bba5dfcd81e01e943da8b749f1988bad0d762947e0d153e605de9205c284820939b279dba7e1ddcab38cd0980b5056e312502c1a69c6e3221946992395e3ab2d4a2dd242908cc08a97440b4fa8bef783a0ef0920d4514e89598f83a2ca9869454395b4bf77e6dadc00bf17d1eb8cb125a9e105da9ac9147e62695981a6e554aae98431667bd7508d755608bcd9572ae6f427a9d80dc7378ff96458b00b2d842fed39d028641ce4c26085cad2eec6bde70aae4cde88a2caf0ebf841bbd9756db93b46461ce41dc1793eb7749247bcd4c7575ec98d8828cd2dd3861a371efae4f51e8834cc0d61f59f3685cc6f787965b30becdbf210d57c145a8b6b375d7f97d5c1dcc42e455885bff83dd044e9e60fbb542c01cae49038e6179d56cdd5d8077cf0a5b2d516f699a29d121edccd889f88e141c9ecea75346f5cf7f179d9bd64b94e99550d655b7c2fff86f354132853f4b9073ae327ffdd5b01eda7bf69331c0202d6b7c7aeebf5e5f1872e301d07ab7c4ebc69fa5bf7bbffa9de249e8474dc015360de67f1e9ba791e7a72d89f593f1f5e9b4fd87830f5848f64afae15d68501a6836f3eb45bf3a702a661248f12ad6267cb0905aa900ebdbc5284dd28df16c4c54bc64b85341093f0c95de544d1939579fe6efc171f8c93c9881c6d1361deb77722638f4c27b104eb414382ce4c01b044822a811464a93811ca7c311e30615136e37a22f2d6fd7d4cc718e99ce1316064c48a351f1e50d34fe601dda6a42cecc54c6b166d1d14bd9a49604ee4231b16f0a4c05b1de868a554558f18247d4b07f16cd6d05bff22692f155c1342fb58496790ddc4bd5d37463416479896a2d90f9a99d4bbc345941a03b9379858f4e02a782b1e979902d1fac3848df0b59f10e52ec79811db39c16f8c7a7730efda58ef517f7b472ed40cd4bfb79d08bb4b87894c31dde06539ba8dc99ab3576c0d5925f1b0a4449002e44d3685492bbdf857f1f71c8b81ec846c0e7dd424706ada05c0a6ca25601499b272fc494b03cb987b7c1aaa64ead368ad01ead245f5c43d48d3de21fb715783b7ab6944f14eb0537ceeea15aa8f9ef92609bddb9d6af7db186cff83c202c4bdc7e9758d83f25e099b6da6abe06f52e0988f8bc378499a7a6c834a8edaf43e3b4be843b4807f49c919399f2471cebc13879e2a20c507918a3057f3cc5fe7a5d8147df49b4cb992d9d119252cbf221c421c2f84055b307ea65e2d3c9b63b94cfc2babb85a870d705f71d0cf2b01358e33a46f0ce1605a795428f226f7b3828610a81d667df450ed5493a688a78ce1a2aa040b5bb30bb1300f404091871404e04394bb7b705a1d8a890f5cfca978532f85e7d6d465b666336874a6ad6116e678a78316eda273a9e446db58208532174acf13d1ec6f21ea5d0ab7da176983dd1ac9ed3c6599805bcc493fee564e60afcc4a2bb951ca6881605db6e4b9f41b541facb6e35c42b9c54a0ea0deb7c6ce4836d450b8b2d272c7c3f19f146b15a7f88fdf746118a7308baa7832e4a6ae1e261bf03f362a87374fcc4b795dbbcaa68632664c9869a752e338f3db673a6dee51bda35560450d84e99bc43936deb061df416d166b1586e301d5aa92247aa8b2d0d661b9c6f519a96b308c76617590861f1df7d8f9c49cf985d8c45c195ffcc80f82a97ad732c290364c459dfb37656b4a3edaf13822a24ba1540a1edada6543d849745d9875b308b3126bb388881b4111550180aa5a61566b05444ea36d4673f21f3916109164d262843c362dd89ccc61ec56a4d3888a77dd35e494040cf54ae916d456b6d719f1ec68266f319efb92f1b1b197613f9af62679b84ead00447507d88cbb34b781b223a04fce47a9dd27e3e1e9474d01fdd63e603f6db9bfcfff7a613ce05e335e9df4c9f24b1105a12075aad39ca87a1bd5e7a2483964726659447f586f0974061149bf505fdaeafd6fb30e858ccbedc8ffe2f23631e0e1bf20b4bfd9fca12f8ecf7d7c412eddb3559cf10c2249fd7a7598f23449c61586e75f4333a495031989a38b0f081b4fe6bee36de896266e737f7c23101d5fc328f688878d5b0a753e7ed3ca47b3375b763d1f8fd4752015f2fcc07913833b83b48951d045f9708d8bbbbccfc02e36749b21c8fa02c7577c8d85b5bfb618e3bed4657d6f0cf162ff86943ca8ec7525258c20fa2a2caa90d22632377b7578826cda164ec27698876cc7f601298fee5efc0f162bedae5ca3a8d62a2a976a7ba8efccdcf471b3f5bb34bc23e83349181a852342ac1a434e7846f8b3b9693e08e1a25f6651ecc0d58dee72e39d3645582df3588dbb78f0363bcc4c2ecc5c575f2f17a0b945a6885f3d3e9e608fc3d3924b9cf689b7af93343b15495f1a7af6af25d58cd17bb8e24b587384b1c4643eaea781df2c6d91a97f3dffaa6b6ddb7feb6f56bcd410a1103df76b7cf76818e74a533e7389d6caf4a3c720fc2180a875dad8b203280ef6f08e3b152e9c68f10589e5b1143aa96fc71ef23429854094931c47967163314ba37c9f8a3f1ebc010554141b2440afbc49fd2985a2d23691b20b50ff8bcff8449f894206852ee549e629000a881c28a3c3f743e1ce1d61066ddd91cc4283094a27c56c340da88cafd4a0a9808b993de1c758c844be34001e17dd1d267b6d2bc2ee9a044f60e9a0218fae397f9ef257029d5737cc88690916ef94062d38cd949305ab6af34dff516cab25a7d9f4c79d2790cfac3f3c749ef003414b0b6cf60419ec74936f73e654e36c42c02b77ac47268b7ef4d38f5a9967ad771219e83970edea1989b205bcb52c2cdfc65a542c881e269c09e4337cda5b4f192b34fd943e96a4f145f6aecb9ffce9a3b78b079f191a183a8bb68bc78e9d3bcb9e6b98737edc145d220cbecd10509daf6c2d5554d019e2c9eb1309bc41cd1e65173c12adc83d1754736803759c7d44ea66c63caa5fcdbabf9f350346a8f8cd22acb494d9ed6e9d3385ce9d8aec2234a4512dee0b7d0b127e41fabac26843c7b75f7ee5090849d22a584ed8fbdded943c03a9467598586d7f6c2b8197651599111a1496ecb5ce9b25c4fec28a9298054e90164463bb43f0a853401d7896bbe8531573b5e839511d4b03696224a8e8081dc66f4e1811486764bb8b232c4f93eb4ee52091c89807fb186c67b62c91dec0da6b6aa7a3b2602326e5d5e0d1180c8c5cf667139ad3107d64dba744c340aeed9ab522beb543d1cadf078e55c84596ac0f79445d8358fc6671ae1068502ccc4be24d7e980505275b515ccc782ba8903c0c05290265f6e157d935680a72d4291772a38bc5e877bde1de746f8a831d11581c9c6aee4ba1505bf6d5ced16b38ad82b2d3c1ef3d48b48c8f68ae53dd1f803e7c3ac29020562088b108811877c46e97dbd283be95c55247fcaffb210f8c8ff8e43c8e793fba37e1b085f25967e14c3e9a1ca231be9078c5de07921b24900076971bd3994daee2085ddc61e9aa276b5c91d4a00cf3ca01a9e590c29d6343c0c5254441dd79dbffe26cb41b75c34ede4125cd8312e8cb365f32e5f5d0c0438172c608a4383c37b70c8d1933d5323ec4323335ea2eb1c263df2aa3181ce3b343ef39a52218c2ce30465d4f7a74aaabb2d96c3af0f0a5a9e37a5b443e6b02b7d9445efc35b808f2ef41e40461892d58d570026759558a841d7e60bd68e4e5ce234243a7a11f047e1bae26d4233b298007b510a8a40a0865b98be7ac609560087379211e6c346e195c11ae9c277b642ebc2faba98f17613a38ea73c4123d5a44e2d3af17e43187d2dca6bb64b270be8dd1795faa7939d80c74f781e688380160ae6feb4fb07b1e2d2dac4aada41d0846c5a4c7c40ade1658c0614a57972351eeef22bb0fb9a9153d9d2b023468bd7a51d7fdc9ce8bb775d1487f4f9736b3dbd8e8f05b3a646fc7b6675b2431a87f635948d003dd4c08f37f276060ce37ab6bee261848a6ead36802dfafe393063dc4ccbc60b5a8f33b2a0a369501e972a7c43d9700be8ccbb989ada4fce7c2fb6afde178b4b0c9a4d96a69161526b9e533a13ae43166697bf4289a02815a08022c2493bbbef865655763d548fbb6b52aeb80bf2c162f5406276205cc2b39f815b1c22d5456c6a0b672399675ae6d7b145224f56ac935d4acf50d4292121fdbcf8511835c54773bddcca944b3ba1b2bee358ed0e5ed16c999c4da29676bcc4fb8f470afe26143ac3feec4d2b9bd15f901823d888542df8a542a3536e17269cb700ee7bf86caf53fce4f6f688499dafd56784a0a4abb395747ca71adb3f90441f19e942717820cfd6c23ff407c4562b64dcc1063cfdfebd77699b7d688843cc1b7e1d3d64ab7ece8b3de9e69acc43fa6316a808492e1a5f7856d1629eca24a1d5f35f6a37ebdce429fb485c00dd7e1dd93bbae7f533fbc5501e1102275a32f5a8f1872666d176651982cb68c7a2c257224e6e06882f5641a7e2726931ca64a312ad497339999512045abd0467f276f776317699b72b352fc58be6529d759b3cf0442abfa656c318f2936792bc1f3cf88c0b55335c69ffc195ae14bc4f3da8f3e6618b69685f596bbd4a22a94b44e182de518fde428037fafe0ad0820e468593c7566b0fab830ec6ea2b5656e2054367c08cb52ca9335e2da7055224b0e40fe8d6d14051b84a965b29020d6e6a535df8d7af3fe439702d2bc798a502dedc7f307d45513d60797a3f5b58cf27737d2dcd4e509d0c2f905c7a692c81b3b94aef9a864acbb57815bb030aefb3f5fa93c3981d03a0ede93daf832b2676aec1b3109895cf614f74f571c085ef5603882d5726605fa06987eb5be5124002f953c5ebf2bafe9b29cc9389d5855a8315c291d8fbdd9ee112f3357261cd9ce58754267ea"}]}, 0x2004c800) 1.420215221s ago: executing program 0 (id=3068): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0xb7) 1.281379296s ago: executing program 0 (id=3069): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1234c1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000500)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0x1, 0x7}, 0x0) landlock_restrict_self(r0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) landlock_restrict_self(r0, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000940)) 948.209493ms ago: executing program 0 (id=3070): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, {0xa, 0x0, 0x0, @empty, 0x3}, 0x0, {[0x0, 0x3]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001540)="d95ca6bf8726951ee388cee0b4cebd93753d6f648eeaee2f36b22f7bb7591a6f7350a3dee1e77c7d43eab4d1649d591a2d39065d21e0a1b46315e391b2c57e009d363fad43bdcfb9154a8a4aa894fde282494f45c3741b1c5821e2e50e608fe1b5ace3d4da3c60bfdf94b25a4af29d0835bdbcae160026809ad3b711bc0def26e2a871c9043077847a035aaafe9978233f03d8b17d9d085dc91eca7857d802491773e08598835f439aa7a108703088e8dbbc07b0842b4f2e8cb9658a4b1264e42bc17edfbbfc46876544f252929b767044014ca521ed298c793c6aeb205327467bf066999dbc44f5803d55cd7c8463f9816d80707186f26fe95ae6dca5", 0xfd}], 0x4}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0a0300050200000000000000000002a46ac0a8d9d9ade42600000000000000000000000000000006a48fbe134671ae3981958c27827c0c7e99c0224f9202780e604ad32dd778afe8de7b48f536ccd9b7657575ad84c8bb433b10c23e39887d2fc93bed7bfcecaa3a92e179effc"], 0x4e) setresuid(0x0, 0xee01, 0x0) setpriority(0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) 529.277386ms ago: executing program 3 (id=3071): mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040), 0x49) open(&(0x7f0000000140)='./file0\x00', 0x101000, 0x1a) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x10, 0x2, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x2000000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 418.476415ms ago: executing program 2 (id=3072): syz_open_dev$dri(&(0x7f0000000100), 0xb, 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x420000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000000600000004", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) writev(r1, &(0x7f00000003c0), 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) 144.863922ms ago: executing program 0 (id=3073): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x5, 0x90, 0xffffffff, @vifc_lcl_ifindex, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0xb}]}, 0x24}}, 0x0) r2 = fcntl$getown(r0, 0x9) prlimit64(r2, 0x5, &(0x7f0000000080)={0x5, 0x80000001}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r5, &(0x7f0000000300)="a7d1049379c7b742a2f4627dc8e78ee2c657e4d98e1390bcdd2ea0636818e1cbe70733661e1fcc2337a9732b8082059991", &(0x7f0000000340)=""/143}, 0x20) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000180)=0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r6, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000180)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\x00\x00\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r7, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, 0x0, 0x0) 0s ago: executing program 1 (id=3074): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_io_uring_setup(0x5ce, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000040)}, 0x10) syz_open_dev$vim2m(&(0x7f0000000880), 0x5, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000880)='ns\x00') r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) signalfd4(r1, 0x0, 0x0, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kernel console output (not intermixed with test programs): d: -22 [ 685.640697][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.653275][ T10] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 685.837126][ T5867] usb 3-1: config 0 has an invalid interface number: 57 but max is 0 [ 685.852383][ T5867] usb 3-1: config 0 has no interface number 0 [ 685.925910][ T5867] usb 3-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 685.950348][ T24] usb 1-1: USB disconnect, device number 27 [ 685.980082][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.008453][ T5867] usb 3-1: config 0 descriptor?? [ 686.022812][ T5867] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 686.032720][ T5867] gspca_mr97310a: reg write [21] error -22 [ 686.041846][ T5867] mr97310a 3-1:0.57: probe with driver mr97310a failed with error -22 [ 686.064976][ T52] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 686.226979][ T52] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 686.246685][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.283252][ T52] usb 2-1: config 0 descriptor?? [ 686.323346][T15067] delete_channel: no stack [ 686.328313][T15067] delete_channel: no stack [ 686.384858][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 686.493229][ T30] audit: type=1326 audit(1745641137.247:159967): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15111 comm="syz.3.2754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52d798e969 code=0x0 [ 686.593505][T15094] fuse: Bad value for 'fd' [ 686.660191][T15114] IPVS: Scheduler module ip_vs_sip not found [ 686.694182][ T10] libceph: connect (1)[c::]:6789 error -101 [ 686.737681][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 686.896567][T15117] ceph: No mds server is up or the cluster is laggy [ 687.424883][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 687.439256][ T52] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 687.452123][ T52] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 687.471801][ T52] [drm:udl_init] *ERROR* Selecting channel failed [ 687.877608][ T52] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 687.884375][ T52] [drm] Initialized udl on minor 2 [ 687.891002][ T52] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 687.901179][ T52] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 687.913007][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 687.921983][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 687.949233][ T52] usb 2-1: USB disconnect, device number 39 [ 687.989075][ T5958] usb 5-1: USB disconnect, device number 34 [ 688.159430][T15134] netlink: 'syz.4.2758': attribute type 11 has an invalid length. [ 688.464862][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 689.504875][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 690.412165][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 690.544974][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 690.614842][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 690.642936][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 690.662637][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 690.725007][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 690.754841][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 690.779518][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 691.187318][ T24] usb 4-1: string descriptor 0 read error: -71 [ 691.209849][ T24] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 691.240111][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.289583][ T24] usb 4-1: config 0 descriptor?? [ 691.315224][ T24] usb 4-1: can't set config #0, error -71 [ 691.340852][ T5958] usb 3-1: USB disconnect, device number 32 [ 691.455036][ T24] usb 4-1: USB disconnect, device number 35 [ 691.584979][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 691.684943][T15160] delete_channel: no stack [ 692.378677][ T30] audit: type=1400 audit(1745641143.147:159968): avc: denied { kexec_image_load } for pid=15170 comm="syz.0.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 692.420036][T15173] FAULT_INJECTION: forcing a failure. [ 692.420036][T15173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.462770][T15173] CPU: 0 UID: 0 PID: 15173 Comm: syz.2.2768 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 692.462795][T15173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 692.462804][T15173] Call Trace: [ 692.462809][T15173] [ 692.462815][T15173] dump_stack_lvl+0x16c/0x1f0 [ 692.462839][T15173] should_fail_ex+0x512/0x640 [ 692.462864][T15173] _copy_to_user+0x32/0xd0 [ 692.462886][T15173] simple_read_from_buffer+0xcb/0x170 [ 692.462911][T15173] proc_fail_nth_read+0x197/0x270 [ 692.462935][T15173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.462959][T15173] ? rw_verify_area+0xcf/0x680 [ 692.462978][T15173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.463001][T15173] vfs_read+0x1de/0xc70 [ 692.463034][T15173] ? __pfx___mutex_lock+0x10/0x10 [ 692.463051][T15173] ? __pfx_vfs_read+0x10/0x10 [ 692.463080][T15173] ? __fget_files+0x20e/0x3c0 [ 692.463110][T15173] ksys_read+0x12a/0x240 [ 692.463133][T15173] ? __pfx_ksys_read+0x10/0x10 [ 692.463163][T15173] do_syscall_64+0xcd/0x260 [ 692.463183][T15173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.463200][T15173] RIP: 0033:0x7fa5acb8d37c [ 692.463213][T15173] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 692.463229][T15173] RSP: 002b:00007fa5ada6c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 692.463244][T15173] RAX: ffffffffffffffda RBX: 00007fa5acdb5fa0 RCX: 00007fa5acb8d37c [ 692.463255][T15173] RDX: 000000000000000f RSI: 00007fa5ada6c0a0 RDI: 0000000000000004 [ 692.463264][T15173] RBP: 00007fa5ada6c090 R08: 0000000000000000 R09: 0000000000000000 [ 692.463273][T15173] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.463282][T15173] R13: 0000000000000000 R14: 00007fa5acdb5fa0 R15: 00007ffcf31c20c8 [ 692.463305][T15173] [ 692.488160][ T30] audit: type=1400 audit(1745641143.247:159969): avc: denied { write } for pid=15174 comm="syz.3.2770" path="socket:[51250]" dev="sockfs" ino=51250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 692.635162][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 692.729611][ T30] audit: type=1400 audit(1745641143.247:159970): avc: denied { nlmsg_read } for pid=15174 comm="syz.3.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 692.758680][ T30] audit: type=1400 audit(1745641143.317:159971): avc: denied { map } for pid=15176 comm="syz.1.2771" path="socket:[50425]" dev="sockfs" ino=50425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 693.201831][ T30] audit: type=1400 audit(1745641143.527:159972): avc: denied { read } for pid=15178 comm="syz.0.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 693.259525][T15186] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 693.282320][ T30] audit: type=1400 audit(1745641144.047:159973): avc: denied { getopt } for pid=15176 comm="syz.1.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 693.323094][ T30] audit: type=1400 audit(1745641144.077:159974): avc: denied { bind } for pid=15178 comm="syz.0.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 693.665064][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 693.678079][T15196] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 693.688793][T15196] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 693.845580][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 694.003847][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 694.019605][ T10] usb 3-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 694.048002][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 694.082933][ T10] usb 3-1: New USB device found, idVendor=16d8, idProduct=10a9, bcdDevice=30.52 [ 694.093953][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.120747][ T10] usb 3-1: Product: syz [ 694.133198][ T10] usb 3-1: Manufacturer: syz [ 694.152806][ T10] usb 3-1: SerialNumber: syz [ 694.172731][ T10] usb 3-1: config 0 descriptor?? [ 694.412766][T15159] delete_channel: no stack [ 694.704864][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 695.015364][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 695.387769][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 695.396281][ T24] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 695.414060][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.443959][ T24] usb 2-1: Product: syz [ 695.455927][ T10] usb 3-1: USB disconnect, device number 33 [ 695.458717][ T24] usb 2-1: Manufacturer: syz [ 695.476877][ T24] usb 2-1: SerialNumber: syz [ 695.500396][ T24] usb 2-1: config 0 descriptor?? [ 695.518256][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 695.744850][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 695.836538][T15201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.943128][T15201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.183830][ T24] gspca_ov534_9: reg_w failed -71 [ 696.211224][T15222] __nla_validate_parse: 4 callbacks suppressed [ 696.211240][T15222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2784'. [ 696.246193][T15099] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 696.698406][T15099] usb 4-1: Using ep0 maxpacket: 16 [ 696.705522][ T30] audit: type=1400 audit(1745641147.327:159975): avc: denied { write } for pid=15224 comm="syz.2.2785" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 696.784845][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 696.792870][T15099] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 696.927294][ T24] gspca_ov534_9: Unknown sensor 0000 [ 696.927370][ T24] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 696.949383][T15099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 696.984562][ T24] usb 2-1: USB disconnect, device number 40 [ 697.003114][T15099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 697.050647][T15099] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.089841][T15099] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 697.245364][T15099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.302036][T15241] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2788'. [ 697.321188][T15241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2788'. [ 697.360416][T15099] usb 4-1: config 0 descriptor?? [ 697.369563][T15216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 697.498616][T15099] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input42 [ 697.808759][T15256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2792'. [ 697.824850][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 697.833719][ T30] audit: type=1400 audit(1745641148.557:159976): avc: denied { create } for pid=15250 comm="syz.4.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 698.122582][ T30] audit: type=1400 audit(1745641148.567:159977): avc: denied { connect } for pid=15250 comm="syz.4.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 698.143458][ T30] audit: type=1400 audit(1745641148.567:159978): avc: denied { bind } for pid=15250 comm="syz.4.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 698.146986][ T951] usb 4-1: USB disconnect, device number 36 [ 698.270194][ T30] audit: type=1400 audit(1745641149.037:159979): avc: denied { read } for pid=15258 comm="syz.0.2794" path="socket:[50703]" dev="sockfs" ino=50703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 698.577229][ T30] audit: type=1400 audit(1745641149.197:159980): avc: denied { setopt } for pid=15258 comm="syz.0.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 698.864889][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 699.746276][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2798'. [ 699.904848][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 699.917459][T15272] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 699.944622][T15279] ip6erspan0: entered promiscuous mode [ 700.409783][ T30] audit: type=1400 audit(1745641150.787:159981): avc: denied { create } for pid=15273 comm="syz.3.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 700.586630][ T30] audit: type=1400 audit(1745641150.787:159982): avc: denied { write } for pid=15273 comm="syz.3.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 700.944841][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 701.015412][ T5870] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 701.185368][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 701.201724][ T5870] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 701.211500][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.220356][ T5870] usb 3-1: Product: syz [ 701.226724][ T5870] usb 3-1: Manufacturer: syz [ 701.324714][T15309] pimreg: entered allmulticast mode [ 701.325290][ T5870] usb 3-1: SerialNumber: syz [ 701.340883][ T5870] usb 3-1: config 0 descriptor?? [ 701.349682][ T5870] gspca_main: se401-2.14.0 probing 047d:5003 [ 701.389441][T15309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2809'. [ 701.497812][T15314] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2810'. [ 701.518953][ T30] audit: type=1400 audit(1745641152.297:159983): avc: denied { mounton } for pid=15313 comm="syz.1.2810" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 701.653151][ T30] audit: type=1400 audit(1745641152.417:159984): avc: denied { append } for pid=15316 comm="syz.0.2812" name="v4l-subdev2" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 701.707077][ T30] audit: type=1400 audit(1745641152.477:159985): avc: denied { setopt } for pid=15316 comm="syz.0.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 701.751231][ T5870] gspca_se401: Wrong descriptor type [ 701.778687][T15322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=15322 comm=syz.0.2812 [ 701.804216][T15322] ieee802154 phy0 wpan0: encryption failed: -22 [ 701.835681][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 701.954199][ T951] usb 3-1: USB disconnect, device number 34 [ 701.984838][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 702.009059][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 702.017904][ T24] usb 2-1: config 2 has an invalid interface number: 241 but max is 0 [ 702.031194][ T24] usb 2-1: config 2 has no interface number 0 [ 702.042191][ T24] usb 2-1: config 2 interface 241 has no altsetting 0 [ 702.057919][ T24] usb 2-1: New USB device found, idVendor=5986, idProduct=1172, bcdDevice= 4.c1 [ 702.069643][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.079676][ T24] usb 2-1: Product: ଃ쨦ꈅç¤ë¯Œï‰¶ã¯‘囓ã…㒜媪] [ 702.091909][ T24] usb 2-1: SerialNumber: syz [ 702.162040][T15336] FAULT_INJECTION: forcing a failure. [ 702.162040][T15336] name failslab, interval 1, probability 0, space 0, times 0 [ 702.178349][T15336] CPU: 1 UID: 0 PID: 15336 Comm: syz.3.2815 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 702.178372][T15336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 702.178385][T15336] Call Trace: [ 702.178391][T15336] [ 702.178397][T15336] dump_stack_lvl+0x16c/0x1f0 [ 702.178422][T15336] should_fail_ex+0x512/0x640 [ 702.178443][T15336] ? __kmalloc_noprof+0xbf/0x510 [ 702.178471][T15336] ? nla_strdup+0xc6/0x150 [ 702.178492][T15336] should_failslab+0xc2/0x120 [ 702.178510][T15336] __kmalloc_noprof+0xd2/0x510 [ 702.178540][T15336] nla_strdup+0xc6/0x150 [ 702.178563][T15336] nf_tables_newtable+0xdeb/0x1b40 [ 702.178586][T15336] ? __pfx___nla_validate_parse+0x10/0x10 [ 702.178611][T15336] ? __pfx_nf_tables_newtable+0x10/0x10 [ 702.178631][T15336] ? __nla_parse+0x40/0x60 [ 702.178654][T15336] nfnetlink_rcv_batch+0x1908/0x2350 [ 702.178685][T15336] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 702.178704][T15336] ? find_held_lock+0x2b/0x80 [ 702.178740][T15336] ? avc_has_perm_noaudit+0x149/0x3b0 [ 702.178792][T15336] ? __nla_parse+0x40/0x60 [ 702.178820][T15336] nfnetlink_rcv+0x3c1/0x430 [ 702.178838][T15336] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 702.178870][T15336] netlink_unicast+0x53a/0x7f0 [ 702.178890][T15336] ? __pfx_netlink_unicast+0x10/0x10 [ 702.178913][T15336] netlink_sendmsg+0x8d1/0xdd0 [ 702.178933][T15336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.178959][T15336] ____sys_sendmsg+0xa95/0xc70 [ 702.178979][T15336] ? copy_msghdr_from_user+0x10a/0x160 [ 702.179002][T15336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 702.179032][T15336] ___sys_sendmsg+0x134/0x1d0 [ 702.179058][T15336] ? __pfx____sys_sendmsg+0x10/0x10 [ 702.179112][T15336] __sys_sendmsg+0x16d/0x220 [ 702.179136][T15336] ? __pfx___sys_sendmsg+0x10/0x10 [ 702.179168][T15336] ? rcu_is_watching+0x12/0xc0 [ 702.179194][T15336] do_syscall_64+0xcd/0x260 [ 702.179215][T15336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.179232][T15336] RIP: 0033:0x7f52d798e969 [ 702.179246][T15336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.179262][T15336] RSP: 002b:00007f52d8895038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.179279][T15336] RAX: ffffffffffffffda RBX: 00007f52d7bb5fa0 RCX: 00007f52d798e969 [ 702.179290][T15336] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 702.179300][T15336] RBP: 00007f52d8895090 R08: 0000000000000000 R09: 0000000000000000 [ 702.179310][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.179320][T15336] R13: 0000000000000000 R14: 00007f52d7bb5fa0 R15: 00007ffce41dc7f8 [ 702.179343][T15336] [ 702.527667][ T24] usb 2-1: Found UVC 0.00 device ଃ쨦ꈅç¤ë¯Œï‰¶ã¯‘囓ã…㒜媪] (5986:1172) [ 702.536928][ T24] usb 2-1: No valid video chain found. [ 702.560919][ T24] usb 2-1: USB disconnect, device number 41 [ 702.681831][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2817'. [ 702.903143][ T30] audit: type=1400 audit(1745641153.557:159986): avc: denied { read write } for pid=15344 comm="syz.2.2819" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 702.950215][ T30] audit: type=1400 audit(1745641153.557:159987): avc: denied { open } for pid=15344 comm="syz.2.2819" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 702.975291][ T30] audit: type=1400 audit(1745641153.557:159988): avc: denied { ioctl } for pid=15344 comm="syz.2.2819" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 703.024858][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 703.336255][ T30] audit: type=1400 audit(1745641154.007:159989): avc: denied { create } for pid=15358 comm="syz.2.2823" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 703.362960][ T30] audit: type=1400 audit(1745641154.017:159990): avc: denied { write } for pid=15358 comm="syz.2.2823" name="file0" dev="tmpfs" ino=3024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 703.430483][ T30] audit: type=1400 audit(1745641154.017:159991): avc: denied { open } for pid=15358 comm="syz.2.2823" path="/563/file0" dev="tmpfs" ino=3024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 703.491542][ T30] audit: type=1400 audit(1745641154.017:159992): avc: denied { ioctl } for pid=15358 comm="syz.2.2823" path="/563/file0" dev="tmpfs" ino=3024 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 703.519871][T15363] FAULT_INJECTION: forcing a failure. [ 703.519871][T15363] name failslab, interval 1, probability 0, space 0, times 0 [ 703.541724][T15363] CPU: 1 UID: 0 PID: 15363 Comm: syz.0.2824 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 703.541748][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 703.541758][T15363] Call Trace: [ 703.541764][T15363] [ 703.541771][T15363] dump_stack_lvl+0x16c/0x1f0 [ 703.541796][T15363] should_fail_ex+0x512/0x640 [ 703.541816][T15363] ? __kmalloc_noprof+0xbf/0x510 [ 703.541844][T15363] ? __tipc_nl_compat_doit+0xe4/0x3d0 [ 703.541871][T15363] should_failslab+0xc2/0x120 [ 703.541889][T15363] __kmalloc_noprof+0xd2/0x510 [ 703.541912][T15363] ? avc_has_perm_noaudit+0x149/0x3b0 [ 703.541943][T15363] __tipc_nl_compat_doit+0xe4/0x3d0 [ 703.541964][T15363] ? kasan_save_track+0x14/0x30 [ 703.541989][T15363] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 703.542010][T15363] ? consume_skb+0xcc/0x100 [ 703.542038][T15363] ? bpf_lsm_capable+0x9/0x10 [ 703.542062][T15363] ? security_capable+0x7e/0x260 [ 703.542084][T15363] tipc_nl_compat_doit+0x11e/0x290 [ 703.542108][T15363] tipc_nl_compat_recv+0x95b/0xc50 [ 703.542131][T15363] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 703.542153][T15363] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 703.542169][T15363] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 703.542195][T15363] ? __mutex_trylock_common+0xe9/0x250 [ 703.542229][T15363] ? rcu_is_watching+0x12/0xc0 [ 703.542247][T15363] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 703.542278][T15363] genl_family_rcv_msg_doit+0x206/0x2f0 [ 703.542299][T15363] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 703.542318][T15363] ? genl_get_cmd+0x194/0x580 [ 703.542342][T15363] ? __local_bh_enable_ip+0xa4/0x120 [ 703.542362][T15363] ? __dev_queue_xmit+0x896/0x43e0 [ 703.542381][T15363] ? __radix_tree_lookup+0x21f/0x2c0 [ 703.542402][T15363] genl_rcv_msg+0x55c/0x800 [ 703.542424][T15363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 703.542441][T15363] ? __pfx___dev_queue_xmit+0x10/0x10 [ 703.542461][T15363] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 703.542486][T15363] ? __lock_acquire+0xaa4/0x1ba0 [ 703.542515][T15363] netlink_rcv_skb+0x16a/0x440 [ 703.542531][T15363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 703.542550][T15363] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 703.542579][T15363] ? __pfx_down_read+0x10/0x10 [ 703.542601][T15363] ? netlink_deliver_tap+0x1ae/0xd30 [ 703.542629][T15363] genl_rcv+0x28/0x40 [ 703.542645][T15363] netlink_unicast+0x53a/0x7f0 [ 703.542664][T15363] ? __pfx_netlink_unicast+0x10/0x10 [ 703.542687][T15363] netlink_sendmsg+0x8d1/0xdd0 [ 703.542708][T15363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.542734][T15363] ____sys_sendmsg+0xa95/0xc70 [ 703.542753][T15363] ? copy_msghdr_from_user+0x10a/0x160 [ 703.542776][T15363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 703.542806][T15363] ___sys_sendmsg+0x134/0x1d0 [ 703.542832][T15363] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.542894][T15363] __sys_sendmsg+0x16d/0x220 [ 703.542918][T15363] ? __pfx___sys_sendmsg+0x10/0x10 [ 703.542949][T15363] ? rcu_is_watching+0x12/0xc0 [ 703.542976][T15363] do_syscall_64+0xcd/0x260 [ 703.542997][T15363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.543013][T15363] RIP: 0033:0x7f574e58e969 [ 703.543027][T15363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.543043][T15363] RSP: 002b:00007f574f3d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.543059][T15363] RAX: ffffffffffffffda RBX: 00007f574e7b5fa0 RCX: 00007f574e58e969 [ 703.543070][T15363] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 703.543079][T15363] RBP: 00007f574f3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 703.543090][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.543099][T15363] R13: 0000000000000000 R14: 00007f574e7b5fa0 R15: 00007ffce52bd388 [ 703.543120][T15363] [ 703.973402][T15368] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.2825' sets config #0 [ 704.064845][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 704.656474][ T30] audit: type=1400 audit(1745641155.057:159993): avc: denied { write } for pid=15365 comm="syz.4.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 704.676705][ T30] audit: type=1400 audit(1745641155.057:159994): avc: denied { ioctl } for pid=15365 comm="syz.4.2822" path="socket:[51674]" dev="sockfs" ino=51674 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 704.869438][ T30] audit: type=1400 audit(1745641155.617:159995): avc: denied { unlink } for pid=5828 comm="syz-executor" name="file0" dev="tmpfs" ino=3024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 705.104843][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 705.281914][T15378] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 705.425312][T15099] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 705.433172][ T24] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 705.515588][T15383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2828'. [ 705.595510][T15099] usb 5-1: Using ep0 maxpacket: 16 [ 705.614436][T15099] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 705.629443][T15099] usb 5-1: config 0 has no interface number 0 [ 705.637844][T15099] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 705.647596][T15099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 705.656769][T15099] usb 5-1: Product: syz [ 705.665722][T15099] usb 5-1: Manufacturer: syz [ 705.671378][T15099] usb 5-1: SerialNumber: syz [ 705.688806][T15099] usb 5-1: config 0 descriptor?? [ 705.805651][ T951] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 705.818815][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 705.914740][T15099] hub 5-1:0.132: bad descriptor, ignoring hub [ 705.929305][T15099] hub 5-1:0.132: probe with driver hub failed with error -5 [ 705.953641][T15099] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input43 [ 705.991121][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 706.135478][ T951] usb 3-1: Using ep0 maxpacket: 8 [ 706.144853][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 706.146640][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.171770][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.195818][T15099] usb 5-1: USB disconnect, device number 35 [ 706.263204][ T24] usb 4-1: config 129 has an invalid interface number: 81 but max is 0 [ 706.271864][ T951] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 706.312309][T15399] tipc: Started in network mode [ 706.330814][T15399] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 706.351109][T15399] tipc: Enabled bearer , priority 0 [ 706.468008][ T24] usb 4-1: config 129 has no interface number 0 [ 706.474535][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.500260][ T24] usb 4-1: config 129 interface 81 has no altsetting 0 [ 706.511795][ T951] usb 3-1: config 0 descriptor?? [ 706.533424][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=97.a8 [ 706.542882][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.551291][ T24] usb 4-1: Product: syz [ 706.555902][ T24] usb 4-1: Manufacturer: syz [ 706.560600][ T24] usb 4-1: SerialNumber: syz [ 707.030333][ T951] usbhid 3-1:0.0: can't add hid device: -71 [ 707.184856][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 707.200670][ T951] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 707.255541][T15388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.263811][ T951] usb 3-1: USB disconnect, device number 35 [ 707.444408][T15388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.472751][ T5870] tipc: Node number set to 11578026 [ 707.585950][ T24] ttusbir 4-1:129.81: cannot find expected altsetting [ 707.729376][ T24] usb 4-1: USB disconnect, device number 37 [ 707.968637][T15418] netlink: 'syz.0.2840': attribute type 4 has an invalid length. [ 708.017364][T15421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.027867][ T52] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 708.030870][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 708.030882][ T30] audit: type=1400 audit(1745641158.797:160004): avc: denied { name_bind } for pid=15422 comm="syz.0.2842" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 708.224852][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 709.175737][ T52] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.248389][ T30] audit: type=1400 audit(1745641159.967:160005): avc: denied { connect } for pid=15422 comm="syz.0.2842" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 709.264836][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 709.334249][ T52] usb 2-1: config 0 interface 0 has no altsetting 0 [ 709.434084][ T52] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 709.442065][ T30] audit: type=1400 audit(1745641159.967:160006): avc: denied { name_connect } for pid=15422 comm="syz.0.2842" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 709.466130][ T30] audit: type=1400 audit(1745641160.057:160007): avc: denied { name_connect } for pid=15422 comm="syz.0.2842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 709.502444][ T951] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 709.514843][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.552917][ T52] usb 2-1: config 0 descriptor?? [ 709.621884][T15436] program syz.3.2846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 709.672119][ T30] audit: type=1400 audit(1745641160.437:160008): avc: denied { append } for pid=15439 comm="syz.3.2848" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 709.710116][ T30] audit: type=1400 audit(1745641160.477:160009): avc: denied { mount } for pid=15439 comm="syz.3.2848" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 709.734731][ T30] audit: type=1400 audit(1745641160.477:160010): avc: denied { write } for pid=15439 comm="syz.3.2848" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 709.860977][ T30] audit: type=1400 audit(1745641160.577:160011): avc: denied { setattr } for pid=15439 comm="syz.3.2848" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 709.891500][ T5870] kernel write not supported for file bpf-map (pid: 5870 comm: kworker/0:5) [ 709.940755][ T30] audit: type=1400 audit(1745641160.707:160012): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 710.108855][ T30] audit: type=1400 audit(1745641160.877:160013): avc: denied { ioctl } for pid=15448 comm="syz.4.2851" path="socket:[51041]" dev="sockfs" ino=51041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 710.138429][T15449] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 710.154254][T15449] overlayfs: missing 'lowerdir' [ 710.163719][ T52] uclogic 0003:5543:0004.0009: item fetching failed at offset 4/5 [ 710.172783][ T52] uclogic 0003:5543:0004.0009: parse failed [ 710.178832][ T52] uclogic 0003:5543:0004.0009: probe with driver uclogic failed with error -22 [ 710.304970][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 710.868076][ T5870] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 710.871653][T15453] macvtap1: entered allmulticast mode [ 710.882214][T15453] veth0_macvtap: entered allmulticast mode [ 711.226665][T15099] usb 2-1: USB disconnect, device number 42 [ 711.325431][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 711.331897][ T5870] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 711.341004][ T5870] usb 4-1: config 0 has no interface number 0 [ 711.347135][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 711.357783][ T5870] usb 4-1: config 0 interface 184 has no altsetting 0 [ 711.359610][T15464] FAULT_INJECTION: forcing a failure. [ 711.359610][T15464] name failslab, interval 1, probability 0, space 0, times 0 [ 711.383014][T15464] CPU: 1 UID: 0 PID: 15464 Comm: syz.0.2855 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 711.383039][T15464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 711.383049][T15464] Call Trace: [ 711.383055][T15464] [ 711.383061][T15464] dump_stack_lvl+0x16c/0x1f0 [ 711.383088][T15464] should_fail_ex+0x512/0x640 [ 711.383112][T15464] should_failslab+0xc2/0x120 [ 711.383130][T15464] __kmalloc_cache_noprof+0x6a/0x3e0 [ 711.383153][T15464] ? sctp_add_bind_addr+0xae/0x3f0 [ 711.383173][T15464] sctp_add_bind_addr+0xae/0x3f0 [ 711.383192][T15464] sctp_copy_local_addr_list+0x39d/0x5a0 [ 711.383223][T15464] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 711.383247][T15464] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 711.383272][T15464] ? sctp_bind_addr_copy+0x331/0x530 [ 711.383287][T15464] sctp_bind_addr_copy+0x331/0x530 [ 711.383309][T15464] sctp_connect_new_asoc+0x1d7/0x790 [ 711.383336][T15464] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 711.383365][T15464] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 711.383390][T15464] sctp_sendmsg+0x15f9/0x1ee0 [ 711.383421][T15464] ? __pfx_sctp_sendmsg+0x10/0x10 [ 711.383448][T15464] ? __pfx_sock_has_perm+0x10/0x10 [ 711.383475][T15464] ? __import_iovec+0x1c8/0x660 [ 711.383499][T15464] ? __pfx_sctp_sendmsg+0x10/0x10 [ 711.383531][T15464] inet_sendmsg+0x119/0x140 [ 711.383551][T15464] ____sys_sendmsg+0x973/0xc70 [ 711.383571][T15464] ? copy_msghdr_from_user+0x10a/0x160 [ 711.383593][T15464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.383615][T15464] ? __pfx__kstrtoull+0x10/0x10 [ 711.383636][T15464] ___sys_sendmsg+0x134/0x1d0 [ 711.383662][T15464] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.383698][T15464] ? find_held_lock+0x2b/0x80 [ 711.383735][T15464] __sys_sendmmsg+0x200/0x420 [ 711.383761][T15464] ? __pfx___sys_sendmmsg+0x10/0x10 [ 711.383793][T15464] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 711.383822][T15464] ? fput+0x70/0xf0 [ 711.383840][T15464] ? ksys_write+0x1b9/0x240 [ 711.383862][T15464] ? __pfx_ksys_write+0x10/0x10 [ 711.383882][T15464] ? rcu_is_watching+0x12/0xc0 [ 711.383905][T15464] __x64_sys_sendmmsg+0x9c/0x100 [ 711.383928][T15464] ? lockdep_hardirqs_on+0x7c/0x110 [ 711.383944][T15464] do_syscall_64+0xcd/0x260 [ 711.383964][T15464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.383981][T15464] RIP: 0033:0x7f574e58e969 [ 711.383996][T15464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.384012][T15464] RSP: 002b:00007f574f3d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 711.384029][T15464] RAX: ffffffffffffffda RBX: 00007f574e7b5fa0 RCX: 00007f574e58e969 [ 711.384039][T15464] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 711.384049][T15464] RBP: 00007f574f3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 711.384059][T15464] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000001 [ 711.384069][T15464] R13: 0000000000000000 R14: 00007f574e7b5fa0 R15: 00007ffce52bd388 [ 711.384092][T15464] [ 711.384130][ T5870] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 712.319124][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.327704][ T5870] usb 4-1: Product: syz [ 712.331882][ T5870] usb 4-1: Manufacturer: syz [ 712.337030][ T5870] usb 4-1: SerialNumber: syz [ 712.357373][ T5870] usb 4-1: config 0 descriptor?? [ 712.385138][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 712.391358][T15478] FAULT_INJECTION: forcing a failure. [ 712.391358][T15478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.409625][ T5870] smsc75xx v1.0.0 [ 712.412014][T15478] CPU: 1 UID: 0 PID: 15478 Comm: syz.1.2859 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 712.412037][T15478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 712.412046][T15478] Call Trace: [ 712.412051][T15478] [ 712.412057][T15478] dump_stack_lvl+0x16c/0x1f0 [ 712.412080][T15478] should_fail_ex+0x512/0x640 [ 712.412102][T15478] _copy_to_user+0x32/0xd0 [ 712.412125][T15478] video_usercopy+0xf3e/0x1720 [ 712.412144][T15478] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 712.412166][T15478] ? selinux_bprm_creds_for_exec+0xc40/0xc60 [ 712.412188][T15478] ? __pfx_video_usercopy+0x10/0x10 [ 712.412218][T15478] v4l2_ioctl+0x1ba/0x250 [ 712.412231][T15478] ? __pfx_v4l2_ioctl+0x10/0x10 [ 712.412246][T15478] __x64_sys_ioctl+0x190/0x200 [ 712.412268][T15478] do_syscall_64+0xcd/0x260 [ 712.412286][T15478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.412301][T15478] RIP: 0033:0x7eff1e58e969 [ 712.412314][T15478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.412328][T15478] RSP: 002b:00007eff1f412038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.412344][T15478] RAX: ffffffffffffffda RBX: 00007eff1e7b5fa0 RCX: 00007eff1e58e969 [ 712.412353][T15478] RDX: 0000200000000000 RSI: 00000000c0085666 RDI: 0000000000000003 [ 712.412362][T15478] RBP: 00007eff1f412090 R08: 0000000000000000 R09: 0000000000000000 [ 712.412371][T15478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.412379][T15478] R13: 0000000000000000 R14: 00007eff1e7b5fa0 R15: 00007ffe9b93d6e8 [ 712.412398][T15478] [ 712.800702][T15485] usb usb8: usbfs: process 15485 (syz.4.2861) did not claim interface 0 before use [ 713.234856][ T52] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 713.424861][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 713.974845][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 713.981379][ T52] usb 5-1: config 0 interface 0 has no altsetting 0 [ 713.988950][ T52] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 714.008168][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.018943][ T52] usb 5-1: config 0 descriptor?? [ 714.035369][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 714.143112][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 714.143141][ T30] audit: type=1400 audit(1745641164.907:160020): avc: denied { map } for pid=15513 comm="syz.1.2870" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 714.439845][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 714.464843][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 714.508018][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 714.543074][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 714.569993][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 714.580884][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 714.607192][ T5870] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 714.619677][ T5870] usb 4-1: USB disconnect, device number 38 [ 715.504837][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 715.821957][ T30] audit: type=1400 audit(1745641166.587:160021): avc: denied { shutdown } for pid=15545 comm="syz.3.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 715.822759][T15547] xt_hashlimit: size too large, truncated to 1048576 [ 715.984215][T15549] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 716.060336][T15553] audit: audit_lost=2960 audit_rate_limit=0 audit_backlog_limit=64 [ 716.074375][T15553] audit: out of memory in audit_log_start [ 716.544835][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 716.928017][ T30] audit: type=1400 audit(1745641167.697:160022): avc: denied { mount } for pid=15554 comm="syz.1.2880" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 717.293108][ T30] audit: type=1400 audit(1745641167.727:160023): avc: denied { read write } for pid=15554 comm="syz.1.2880" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 717.361681][ T52] usbhid 5-1:0.0: can't add hid device: -71 [ 717.364208][ T30] audit: type=1400 audit(1745641167.727:160024): avc: denied { open } for pid=15554 comm="syz.1.2880" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 717.367906][ T52] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 717.369813][ T52] usb 5-1: USB disconnect, device number 36 [ 717.437946][ T30] audit: type=1400 audit(1745641167.727:160025): avc: denied { ioctl } for pid=15554 comm="syz.1.2880" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 717.584831][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 717.602530][ T30] audit: type=1400 audit(1745641167.787:160026): avc: denied { mount } for pid=15554 comm="syz.1.2880" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 717.671980][ T30] audit: type=1400 audit(1745641168.307:160027): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 717.916449][T15573] FAULT_INJECTION: forcing a failure. [ 717.916449][T15573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.931716][T15573] CPU: 0 UID: 0 PID: 15573 Comm: syz.4.2885 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 717.931741][T15573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 717.931755][T15573] Call Trace: [ 717.931761][T15573] [ 717.931767][T15573] dump_stack_lvl+0x16c/0x1f0 [ 717.931790][T15573] should_fail_ex+0x512/0x640 [ 717.931815][T15573] _copy_from_user+0x2e/0xd0 [ 717.931837][T15573] mfill_atomic_copy+0x11ae/0x1c20 [ 717.931865][T15573] ? find_held_lock+0x2b/0x80 [ 717.931883][T15573] ? __might_fault+0xe3/0x190 [ 717.931898][T15573] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 717.931926][T15573] userfaultfd_ioctl+0x20bb/0x3890 [ 717.931952][T15573] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 717.931971][T15573] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 717.931996][T15573] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 717.932030][T15573] ? hook_file_ioctl_common+0x145/0x410 [ 717.932061][T15573] ? selinux_file_ioctl+0x180/0x270 [ 717.932084][T15573] ? selinux_file_ioctl+0xb4/0x270 [ 717.932106][T15573] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 717.932128][T15573] ? __x64_sys_ioctl+0x190/0x200 [ 717.932149][T15573] __x64_sys_ioctl+0x190/0x200 [ 717.932171][T15573] do_syscall_64+0xcd/0x260 [ 717.932191][T15573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.932207][T15573] RIP: 0033:0x7f03ef58e969 [ 717.932220][T15573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.932236][T15573] RSP: 002b:00007f03f044a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.932252][T15573] RAX: ffffffffffffffda RBX: 00007f03ef7b5fa0 RCX: 00007f03ef58e969 [ 717.932261][T15573] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 717.932271][T15573] RBP: 00007f03f044a090 R08: 0000000000000000 R09: 0000000000000000 [ 717.932280][T15573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.932289][T15573] R13: 0000000000000000 R14: 00007f03ef7b5fa0 R15: 00007ffc765b0df8 [ 717.932311][T15573] [ 718.136380][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.452776][T15564] syz.2.2879 (15564): drop_caches: 2 [ 718.624837][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 718.653691][T15564] syz.2.2879 (15564): drop_caches: 2 [ 718.730069][T15586] overlayfs: failed to resolve 'obj_user=/dev/fuse': -2 [ 719.664843][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 720.465532][ T52] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 720.635183][ T52] usb 4-1: device descriptor read/64, error -71 [ 720.704853][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 720.894979][ T52] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 721.051674][T15621] geneve2: entered promiscuous mode [ 721.065274][T15621] geneve2: entered allmulticast mode [ 721.534889][ T52] usb 4-1: device descriptor read/64, error -71 [ 721.641088][T15625] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 132, id = 0 [ 721.725392][ T5870] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 721.744963][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 721.789627][ T52] usb usb4-port1: attempt power cycle [ 721.899483][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.917728][ T5870] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 721.955253][ T5870] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 721.987448][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.007368][ T5870] usb 2-1: config 0 descriptor?? [ 722.055211][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 722.135213][ T52] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 722.168320][ T52] usb 4-1: device descriptor read/8, error -71 [ 722.206895][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 722.241106][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 722.268603][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 722.277964][T15099] usb 2-1: USB disconnect, device number 43 [ 722.285561][ T24] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 722.293312][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 722.315759][ T10] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 722.335372][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.353629][ T10] usb 3-1: Product: syz [ 722.363667][ T10] usb 3-1: Manufacturer: syz [ 722.373805][ T10] usb 3-1: SerialNumber: syz [ 722.385765][ T10] usb 3-1: config 0 descriptor?? [ 722.397578][ T10] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 722.424882][ T52] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 722.448646][ T52] usb 4-1: device descriptor read/8, error -71 [ 722.455724][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 722.464077][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 722.480035][ T24] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 722.488550][ T24] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 722.499665][ T24] usb 1-1: config 5 has no interface number 0 [ 722.506340][ T24] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 722.517318][ T24] usb 1-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 722.530460][ T24] usb 1-1: config 5 interface 246 has no altsetting 0 [ 722.539569][ T24] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 722.548730][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.556816][ T24] usb 1-1: Product: syz [ 722.561039][ T24] usb 1-1: Manufacturer: syz [ 722.566909][ T52] usb usb4-port1: unable to enumerate USB device [ 722.576583][ T24] usb 1-1: SerialNumber: syz [ 722.785177][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 722.920407][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2900'. [ 723.762511][ T24] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 723.780393][ T9985] usb 1-1: Failed to submit usb control message: -71 [ 723.798295][ T24] usb 1-1: USB disconnect, device number 29 [ 723.808039][ T9985] usb 1-1: unable to send the bmi data to the device: -71 [ 723.824851][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 723.835086][ T9985] usb 1-1: unable to get target info from device [ 723.907349][ T9985] usb 1-1: could not get target info (-71) [ 723.913221][ T9985] usb 1-1: could not probe fw (-71) [ 724.864932][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 724.885631][T15659] xt_hashlimit: overflow, try lower: 3/0 [ 725.095638][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 725.095648][ T30] audit: type=1400 audit(1745641175.857:160030): avc: denied { create } for pid=15656 comm="syz.0.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 725.147511][ T30] audit: type=1400 audit(1745641175.907:160031): avc: denied { write } for pid=15656 comm="syz.0.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 725.281337][T15670] FAULT_INJECTION: forcing a failure. [ 725.281337][T15670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.294733][T15670] CPU: 0 UID: 0 PID: 15670 Comm: syz.3.2910 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 725.294755][T15670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 725.294767][T15670] Call Trace: [ 725.294772][T15670] [ 725.294778][T15670] dump_stack_lvl+0x16c/0x1f0 [ 725.294802][T15670] should_fail_ex+0x512/0x640 [ 725.294825][T15670] _copy_to_user+0x32/0xd0 [ 725.294849][T15670] simple_read_from_buffer+0xcb/0x170 [ 725.294873][T15670] proc_fail_nth_read+0x197/0x270 [ 725.294898][T15670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 725.294922][T15670] ? rw_verify_area+0xcf/0x680 [ 725.294942][T15670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 725.294966][T15670] vfs_read+0x1de/0xc70 [ 725.294991][T15670] ? __pfx___mutex_lock+0x10/0x10 [ 725.295010][T15670] ? __pfx_vfs_read+0x10/0x10 [ 725.295039][T15670] ? __fget_files+0x20e/0x3c0 [ 725.295070][T15670] ksys_read+0x12a/0x240 [ 725.295090][T15670] ? __pfx_ksys_read+0x10/0x10 [ 725.295114][T15670] do_syscall_64+0xcd/0x260 [ 725.295127][T15670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.295138][T15670] RIP: 0033:0x7f52d798d37c [ 725.295146][T15670] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 725.295156][T15670] RSP: 002b:00007f52d8874030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 725.295167][T15670] RAX: ffffffffffffffda RBX: 00007f52d7bb6080 RCX: 00007f52d798d37c [ 725.295173][T15670] RDX: 000000000000000f RSI: 00007f52d88740a0 RDI: 0000000000000009 [ 725.295179][T15670] RBP: 00007f52d8874090 R08: 0000000000000000 R09: 0000000000000000 [ 725.295185][T15670] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 725.295191][T15670] R13: 0000000000000000 R14: 00007f52d7bb6080 R15: 00007ffce41dc7f8 [ 725.295204][T15670] [ 725.904840][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 726.055228][ T30] audit: type=1400 audit(1745641176.817:160032): avc: denied { read write } for pid=15677 comm="syz.0.2913" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 726.092463][ T30] audit: type=1400 audit(1745641176.817:160033): avc: denied { read write open } for pid=15677 comm="syz.0.2913" path="/567/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 726.275782][ T30] audit: type=1400 audit(1745641176.967:160034): avc: denied { append } for pid=15694 comm="syz.2.2918" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 726.320675][ T30] audit: type=1400 audit(1745641177.027:160035): avc: denied { append } for pid=15692 comm="syz.0.2917" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 726.534514][ T30] audit: type=1400 audit(1745641177.297:160036): avc: denied { ioctl } for pid=15700 comm="syz.2.2921" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 726.954874][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 727.807086][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 727.933347][ T30] audit: type=1400 audit(1745641178.517:160037): avc: denied { ioctl } for pid=15711 comm="syz.3.2923" path="socket:[54000]" dev="sockfs" ino=54000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 727.968842][T15717] netlink: 'syz.3.2923': attribute type 1 has an invalid length. [ 727.984837][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 728.234599][T15715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.243514][T15715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.351832][T15717] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2923'. [ 728.364396][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 728.389868][ T30] audit: type=1400 audit(1745641179.147:160038): avc: denied { setopt } for pid=15711 comm="syz.3.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 728.427597][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.427971][T15725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2925'. [ 728.458348][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.622445][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 728.644825][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 728.654569][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.674292][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 729.034833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 729.060970][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 729.074005][ T24] usb 1-1: Manufacturer: syz [ 729.080831][ T24] usb 1-1: config 0 descriptor?? [ 729.824947][ T24] rc_core: IR keymap rc-hauppauge not found [ 729.843592][ T24] Registered IR keymap rc-empty [ 729.863568][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 729.906299][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.031508][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 730.064836][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 730.445743][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input45 [ 730.503879][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.555292][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.556408][T15756] !: renamed from dummy0 (while UP) [ 730.694062][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.114834][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 731.401059][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.426040][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.466069][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.485979][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.505236][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.511213][ T30] audit: type=1400 audit(1745641182.187:160039): avc: denied { create } for pid=15754 comm="syz.1.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 731.532206][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.567445][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.785192][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 731.863356][ T24] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 731.871920][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 731.889024][ T24] usb 1-1: USB disconnect, device number 30 [ 732.070748][ T30] audit: type=1400 audit(1745641182.837:160040): avc: denied { accept } for pid=15769 comm="syz.2.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 732.155062][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 732.399674][ T30] audit: type=1400 audit(1745641183.167:160041): avc: denied { map } for pid=15786 comm="syz.4.2943" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 732.850280][ T52] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 733.108145][ T30] audit: type=1400 audit(1745641183.167:160042): avc: denied { execute } for pid=15786 comm="syz.4.2943" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 733.132590][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.184968][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 733.600182][ T30] audit: type=1400 audit(1745641183.957:160043): avc: denied { create } for pid=15785 comm="syz.1.2942" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 733.806229][ T30] audit: type=1400 audit(1745641183.957:160044): avc: denied { rename } for pid=15785 comm="syz.1.2942" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=52774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 733.876648][ T52] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 733.884966][ T52] usb 4-1: config 0 has no interface number 0 [ 733.891088][ T52] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 733.902082][ T52] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 733.913479][ T52] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 733.922651][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.938190][ T52] usb 4-1: config 0 descriptor?? [ 733.943682][T15780] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 733.953357][ T52] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 734.142918][T15804] ptrace attach of "./syz-executor exec"[5816] was attempted by "./syz-executor exec"[15804] [ 734.224833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 734.227004][ T52] usb 4-1: USB disconnect, device number 43 [ 734.481197][ T30] audit: type=1400 audit(1745641185.247:160045): avc: denied { write } for pid=15802 comm="syz.4.2947" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 735.126683][T15817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 735.155444][T15817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 735.166377][T15817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 735.186804][T15817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 735.195245][T15817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 735.264846][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 735.511830][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 735.523039][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 735.532830][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 735.552975][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 735.569597][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 735.604895][ T30] audit: type=1400 audit(1745641186.359:160046): avc: denied { mounton } for pid=15815 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 736.304835][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 737.231765][ T30] audit: type=1400 audit(1745641187.999:160047): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 737.256966][T15842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2957'. [ 737.275439][T15843] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2957'. [ 737.344833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 737.364929][T15841] FAULT_INJECTION: forcing a failure. [ 737.364929][T15841] name failslab, interval 1, probability 0, space 0, times 0 [ 737.439768][T15841] CPU: 1 UID: 0 PID: 15841 Comm: syz.2.2958 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 737.439809][T15841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 737.439818][T15841] Call Trace: [ 737.439824][T15841] [ 737.439893][T15841] dump_stack_lvl+0x16c/0x1f0 [ 737.439918][T15841] should_fail_ex+0x512/0x640 [ 737.439940][T15841] should_failslab+0xc2/0x120 [ 737.439957][T15841] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 737.439977][T15841] ? skb_clone+0x190/0x3f0 [ 737.439994][T15841] skb_clone+0x190/0x3f0 [ 737.440010][T15841] netlink_deliver_tap+0xabd/0xd30 [ 737.440033][T15841] netlink_dump+0xb6d/0xd00 [ 737.440060][T15841] ? __pfx_netlink_dump+0x10/0x10 [ 737.440081][T15841] ? __rhashtable_lookup.constprop.0+0x3a5/0x760 [ 737.440108][T15841] ? __netlink_dump_start+0x150/0x990 [ 737.440129][T15841] ? netlink_lookup+0x258/0x520 [ 737.440144][T15841] ? __pfx_netlink_lookup+0x10/0x10 [ 737.440163][T15841] __netlink_dump_start+0x6d6/0x990 [ 737.440187][T15841] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 737.440208][T15841] rtnetlink_rcv_msg+0xb3e/0xe90 [ 737.440231][T15841] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 737.440255][T15841] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 737.440270][T15841] ? __pfx_rtnl_dumpit+0x10/0x10 [ 737.440282][T15841] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 737.440300][T15841] netlink_rcv_skb+0x16a/0x440 [ 737.440309][T15841] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 737.440332][T15841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.440360][T15841] ? netlink_deliver_tap+0x1ae/0xd30 [ 737.440388][T15841] netlink_unicast+0x53a/0x7f0 [ 737.440402][T15841] ? __pfx_netlink_unicast+0x10/0x10 [ 737.440416][T15841] netlink_sendmsg+0x8d1/0xdd0 [ 737.440428][T15841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.440442][T15841] ____sys_sendmsg+0xa95/0xc70 [ 737.440454][T15841] ? copy_msghdr_from_user+0x10a/0x160 [ 737.440476][T15841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 737.440504][T15841] ___sys_sendmsg+0x134/0x1d0 [ 737.440527][T15841] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.440562][T15841] __sys_sendmsg+0x16d/0x220 [ 737.440577][T15841] ? __pfx___sys_sendmsg+0x10/0x10 [ 737.440596][T15841] ? rcu_is_watching+0x12/0xc0 [ 737.440619][T15841] do_syscall_64+0xcd/0x260 [ 737.440645][T15841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.440660][T15841] RIP: 0033:0x7fa5acb8e969 [ 737.440674][T15841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.440686][T15841] RSP: 002b:00007fa5ada6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.440696][T15841] RAX: ffffffffffffffda RBX: 00007fa5acdb5fa0 RCX: 00007fa5acb8e969 [ 737.440702][T15841] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 737.440709][T15841] RBP: 00007fa5ada6c090 R08: 0000000000000000 R09: 0000000000000000 [ 737.440714][T15841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.440720][T15841] R13: 0000000000000000 R14: 00007fa5acdb5fa0 R15: 00007ffcf31c20c8 [ 737.440733][T15841] [ 738.291690][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.299381][ T30] audit: type=1400 audit(1745641188.569:160048): avc: denied { getopt } for pid=15846 comm="syz.3.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 738.304377][ T5830] Bluetooth: hci5: command tx timeout [ 738.384837][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 738.427013][T15854] batadv0: entered promiscuous mode [ 738.449481][T15854] macsec1: entered promiscuous mode [ 738.464046][T15859] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2962'. [ 738.495210][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.563735][T15862] netlink: 'syz.0.2964': attribute type 4 has an invalid length. [ 738.617751][T15862] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 738.627062][T15865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.652823][T15865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.667459][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.856466][ T5958] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 739.425409][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 739.432818][ T30] audit: type=1400 audit(1745641190.169:160049): avc: denied { setopt } for pid=15864 comm="syz.2.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 739.485208][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 739.730533][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.844257][ T5958] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 739.853713][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.865737][T15815] chnl_net:caif_netlink_parms(): no params data found [ 739.867345][ T5958] usb 4-1: config 0 descriptor?? [ 739.891679][ T5958] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 740.261536][ T5958] usb 4-1: Detected FT232B [ 740.395186][T15817] Bluetooth: hci5: command tx timeout [ 740.464833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 740.490301][ T30] audit: type=1400 audit(1745641191.259:160050): avc: denied { mount } for pid=15857 comm="syz.3.2963" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 740.491360][ T5958] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 740.523355][ T5958] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 740.541710][ T5958] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 740.573036][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.588493][ T5958] usb 4-1: USB disconnect, device number 44 [ 740.594598][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.610233][ T5958] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 740.620622][T15815] bridge_slave_0: entered allmulticast mode [ 740.640645][T15815] bridge_slave_0: entered promiscuous mode [ 740.647820][ T5958] ftdi_sio 4-1:0.0: device disconnected [ 740.658540][ T12] bridge_slave_1: left allmulticast mode [ 740.665456][ T12] bridge_slave_1: left promiscuous mode [ 740.671266][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.684220][ T12] bridge_slave_0: left allmulticast mode [ 740.690213][ T12] bridge_slave_0: left promiscuous mode [ 740.696408][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.060565][ T30] audit: type=1400 audit(1745641191.829:160051): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 741.065447][ T5958] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 741.222550][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.236959][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 741.251944][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.292303][ T12] bond0 (unregistering): Released all slaves [ 741.318299][ T5958] usb 1-1: config 0 interface 0 has no altsetting 0 [ 741.353694][ T5958] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 741.369600][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.380025][ T5958] usb 1-1: Product: syz [ 741.399103][ T5958] usb 1-1: Manufacturer: syz [ 741.411013][ T5958] usb 1-1: SerialNumber: syz [ 741.417245][T15884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 741.504998][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 741.540380][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.552884][ T5958] usb 1-1: config 0 descriptor?? [ 741.667170][ T5958] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 741.682026][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.695679][T15815] bridge_slave_1: entered allmulticast mode [ 741.703345][T15815] bridge_slave_1: entered promiscuous mode [ 742.123238][T15815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.150305][T15815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.251811][T15815] team0: Port device team_slave_0 added [ 742.283607][T15815] team0: Port device team_slave_1 added [ 742.342352][T15922] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 742.357949][ T30] audit: type=1400 audit(1745641193.129:160052): avc: denied { name_bind } for pid=15903 comm="syz.0.2970" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 742.466669][T15817] Bluetooth: hci5: command tx timeout [ 742.515586][ T5958] gspca_stk1135: reg_w 0x3 err -110 [ 742.521900][ T5958] gspca_stk1135: serial bus timeout: status=0x00 [ 742.537703][ T5958] gspca_stk1135: Sensor write failed [ 742.543147][ T5958] gspca_stk1135: serial bus timeout: status=0x00 [ 742.549790][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 742.573234][T15815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.580365][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.595293][ T5958] gspca_stk1135: Sensor write failed [ 742.606589][T15815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.608155][T15815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.632758][T15930] delete_channel: no stack [ 742.645558][ T5958] gspca_stk1135: serial bus timeout: status=0x00 [ 742.655295][ T5958] gspca_stk1135: Sensor read failed [ 742.660568][ T5958] gspca_stk1135: serial bus timeout: status=0x00 [ 742.667751][ T30] audit: type=1400 audit(1745641193.419:160053): avc: denied { wake_alarm } for pid=15931 comm="syz.2.2978" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 742.669660][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.710032][ T5958] gspca_stk1135: Sensor read failed [ 742.721304][ T5958] gspca_stk1135: Detected sensor type unknown (0x0) [ 742.728693][ T5958] gspca_stk1135: serial bus timeout: status=0x00 [ 742.735799][ T5958] gspca_stk1135: Sensor read failed [ 742.741097][ T5958] gspca_stk1135: serial bus timeout: status=0x00 [ 742.785467][ T5958] gspca_stk1135: Sensor read failed [ 742.799077][ T5958] gspca_stk1135: serial bus timeout: status=0x00 [ 742.871878][ T5958] gspca_stk1135: Sensor write failed [ 742.885912][ T5958] gspca_stk1135: serial bus timeout: status=0x00 [ 742.900462][T15815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.912474][ T5958] gspca_stk1135: Sensor write failed [ 742.940118][ T12] hsr_slave_0: left promiscuous mode [ 742.953283][ T12] hsr_slave_1: left promiscuous mode [ 742.963116][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.971288][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.002054][ T5958] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 743.072715][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.081429][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.238380][ T52] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 743.277166][ T12] batadv0: left promiscuous mode [ 743.302557][ T12] veth1_macvtap: left promiscuous mode [ 743.323305][ T12] veth0_macvtap: left promiscuous mode [ 743.357227][ T12] veth1_vlan: left promiscuous mode [ 743.365243][ T12] veth0_vlan: left promiscuous mode [ 743.485611][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 743.537905][ T52] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 743.562850][ T52] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 743.584968][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 743.613568][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.639841][ T52] usb 5-1: config 0 descriptor?? [ 743.897776][T14544] usb 1-1: USB disconnect, device number 31 [ 744.055120][ T5958] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 744.195663][ T12] team0 (unregistering): Port device team_slave_1 removed [ 744.216389][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 744.297174][T14544] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 744.305213][ T5958] usb 4-1: config 1 has an invalid interface number: 133 but max is 0 [ 744.322510][ T5958] usb 4-1: config 1 has no interface number 0 [ 744.353576][ T5958] usb 4-1: config 1 interface 133 has no altsetting 0 [ 744.369931][ T5958] usb 4-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 744.380682][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.389082][ T5958] usb 4-1: Product: syz [ 744.393240][ T5958] usb 4-1: Manufacturer: syz [ 744.398291][ T5958] usb 4-1: SerialNumber: syz [ 744.403297][ T12] team0 (unregistering): Port device team_slave_0 removed [ 744.528277][T14544] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.544527][T14544] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.554205][T15817] Bluetooth: hci5: command tx timeout [ 744.575665][T14544] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 744.599083][T14544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 744.627395][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 744.635525][T14544] usb 1-1: SerialNumber: syz [ 744.651346][T14544] usb 1-1: 0:2 : does not exist [ 744.692202][ T5958] sierra 4-1:1.133: Sierra USB modem converter detected [ 744.714571][ T5958] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 744.752691][ T5958] usb 4-1: USB disconnect, device number 45 [ 744.897314][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 744.910359][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 744.920352][ T5958] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 744.929745][ T5958] sierra 4-1:1.133: device disconnected [ 744.966303][T14544] usb 1-1: USB disconnect, device number 32 [ 745.267683][ T30] audit: type=1400 audit(1745641196.039:160054): avc: denied { bind } for pid=15960 comm="syz.2.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 745.620884][T15527] Bluetooth: Error in BCSP hdr checksum [ 745.646151][ T30] audit: type=1400 audit(1745641196.419:160055): avc: denied { map } for pid=15969 comm="syz.2.2991" path="/proc/1918/net/rt_cache" dev="proc" ino=4026532937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 745.671373][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 745.775945][T15099] infiniband syz1: ib_query_port failed (-19) [ 745.778014][ T5958] usb 5-1: USB disconnect, device number 37 [ 745.881270][ T1111] Bluetooth: Error in BCSP hdr checksum [ 745.996993][T14544] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 746.031675][T15815] hsr_slave_0: entered promiscuous mode [ 746.039924][T15815] hsr_slave_1: entered promiscuous mode [ 746.125197][T15099] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 746.145147][ T13] Bluetooth: Error in BCSP hdr checksum [ 746.175281][T14544] usb 1-1: Using ep0 maxpacket: 32 [ 746.206846][T14544] usb 1-1: unable to get BOS descriptor or descriptor too short [ 746.216733][T14544] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 746.225891][T14544] usb 1-1: config 0 has no interface number 0 [ 746.232040][T14544] usb 1-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 746.244363][T14544] usb 1-1: config 0 interface 143 has no altsetting 0 [ 746.254381][T14544] usb 1-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 746.264589][T14544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.273258][T14544] usb 1-1: Product: syz [ 746.278101][T14544] usb 1-1: Manufacturer: syz [ 746.282723][T14544] usb 1-1: SerialNumber: syz [ 746.284635][ T12] IPVS: stop unused estimator thread 0... [ 746.292344][T14544] r8152-cfgselector 1-1: Unknown version 0x0000 [ 746.293651][T15099] usb 4-1: device descriptor read/64, error -71 [ 746.300465][T14544] r8152-cfgselector 1-1: config 0 descriptor?? [ 746.350800][T14544] r8152 1-1:0.143: Expected endpoints are not found [ 746.628559][ T13] Bluetooth: Error in BCSP hdr checksum [ 746.704954][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 746.855414][T15987] FAULT_INJECTION: forcing a failure. [ 746.855414][T15987] name failslab, interval 1, probability 0, space 0, times 0 [ 746.868207][T15987] CPU: 1 UID: 0 PID: 15987 Comm: syz.4.2994 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 746.868231][T15987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 746.868241][T15987] Call Trace: [ 746.868250][T15987] [ 746.868257][T15987] dump_stack_lvl+0x16c/0x1f0 [ 746.868282][T15987] should_fail_ex+0x512/0x640 [ 746.868312][T15987] should_failslab+0xc2/0x120 [ 746.868329][T15987] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 746.868357][T15987] ? skb_clone+0x190/0x3f0 [ 746.868385][T15987] skb_clone+0x190/0x3f0 [ 746.868409][T15987] netlink_deliver_tap+0xabd/0xd30 [ 746.868436][T15987] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 746.868458][T15987] netlink_dump+0x638/0xd00 [ 746.868486][T15987] ? __pfx_netlink_dump+0x10/0x10 [ 746.868509][T15987] ? __rhashtable_lookup.constprop.0+0x3a5/0x760 [ 746.868533][T15987] ? __netlink_dump_start+0x150/0x990 [ 746.868566][T15987] ? netlink_lookup+0x258/0x520 [ 746.868590][T15987] ? __pfx_netlink_lookup+0x10/0x10 [ 746.868622][T15987] __netlink_dump_start+0x6d6/0x990 [ 746.868650][T15987] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 746.868666][T15987] rtnetlink_rcv_msg+0xb3e/0xe90 [ 746.868690][T15987] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 746.868709][T15987] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 746.868733][T15987] ? __pfx_rtnl_dumpit+0x10/0x10 [ 746.868751][T15987] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 746.868778][T15987] netlink_rcv_skb+0x16a/0x440 [ 746.868794][T15987] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 746.868819][T15987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 746.868850][T15987] ? netlink_deliver_tap+0x1ae/0xd30 [ 746.868879][T15987] netlink_unicast+0x53a/0x7f0 [ 746.868899][T15987] ? __pfx_netlink_unicast+0x10/0x10 [ 746.868922][T15987] netlink_sendmsg+0x8d1/0xdd0 [ 746.868942][T15987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.868968][T15987] ____sys_sendmsg+0xa95/0xc70 [ 746.868987][T15987] ? copy_msghdr_from_user+0x10a/0x160 [ 746.869010][T15987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.869035][T15987] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 746.869058][T15987] ___sys_sendmsg+0x134/0x1d0 [ 746.869082][T15987] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.869139][T15987] __sys_sendmsg+0x16d/0x220 [ 746.869163][T15987] ? __pfx___sys_sendmsg+0x10/0x10 [ 746.869204][T15987] do_syscall_64+0xcd/0x260 [ 746.869225][T15987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.869242][T15987] RIP: 0033:0x7f03ef58e969 [ 746.869256][T15987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.869272][T15987] RSP: 002b:00007f03f0408038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.869288][T15987] RAX: ffffffffffffffda RBX: 00007f03ef7b6160 RCX: 00007f03ef58e969 [ 746.869299][T15987] RDX: 0000000000004080 RSI: 0000200000000080 RDI: 0000000000000008 [ 746.869315][T15987] RBP: 00007f03f0408090 R08: 0000000000000000 R09: 0000000000000000 [ 746.869325][T15987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.869335][T15987] R13: 0000000000000000 R14: 00007f03ef7b6160 R15: 00007ffc765b0df8 [ 746.869357][T15987] [ 747.031193][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.054266][ T30] audit: type=1400 audit(1745641197.619:160056): avc: denied { mount } for pid=15979 comm="syz.4.2994" name="/" dev="rpc_pipefs" ino=55341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 747.062156][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.143858][ T13] Bluetooth: Error in BCSP hdr checksum [ 747.581584][ T30] audit: type=1400 audit(1745641198.349:160057): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 747.607011][T15529] Bluetooth: Error in BCSP hdr checksum [ 747.633096][T15099] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 747.666238][T15817] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 747.744830][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 747.879407][T15528] Bluetooth: Error in BCSP hdr checksum [ 748.676523][T15996] netlink: 'syz.4.2997': attribute type 1 has an invalid length. [ 748.684402][T15996] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2997'. [ 748.734433][T15997] loop9: detected capacity change from 0 to 7 [ 748.762380][T15099] usb 4-1: device descriptor read/64, error -71 [ 748.776886][T15997] Dev loop9: unable to read RDB block 7 [ 748.782741][T15997] loop9: unable to read partition table [ 748.784831][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 748.788640][T15997] loop9: partition table beyond EOD, truncated [ 748.801656][T15997] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 748.811163][ T1111] Bluetooth: Error in BCSP hdr checksum [ 748.823103][T15995] lo speed is unknown, defaulting to 1000 [ 748.830081][T15995] lo speed is unknown, defaulting to 1000 [ 748.836915][T15995] lo speed is unknown, defaulting to 1000 [ 748.986422][T15995] infiniband syz0: set active [ 748.991174][T15995] infiniband syz0: added lo [ 749.007873][ T5958] r8152-cfgselector 1-1: USB disconnect, device number 33 [ 749.015879][T15099] usb usb4-port1: attempt power cycle [ 749.083018][T15995] RDS/IB: syz0: added [ 749.087487][T15995] smc: adding ib device syz0 with port count 1 [ 749.093696][T15995] smc: ib device syz0 port 1 has pnetid [ 749.102829][ T951] lo speed is unknown, defaulting to 1000 [ 749.110224][T15995] lo speed is unknown, defaulting to 1000 [ 749.266203][T15995] lo speed is unknown, defaulting to 1000 [ 749.377017][T15995] lo speed is unknown, defaulting to 1000 [ 749.488791][T15995] lo speed is unknown, defaulting to 1000 [ 749.600042][T15995] lo speed is unknown, defaulting to 1000 [ 749.711029][ T52] lo speed is unknown, defaulting to 1000 [ 749.834845][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 749.990355][T15815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 750.099972][T15815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 750.698018][T15815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 750.864825][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 750.995289][T15815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 751.528130][T15815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.538816][T16020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.547428][T16020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.580917][T15815] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.610910][T15527] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.618149][T15527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.681106][T15527] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.688394][T15527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.905013][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 752.459754][T16023] FAULT_INJECTION: forcing a failure. [ 752.459754][T16023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 752.474191][T16023] CPU: 1 UID: 0 PID: 16023 Comm: syz.4.3003 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 752.474214][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 752.474229][T16023] Call Trace: [ 752.474234][T16023] [ 752.474241][T16023] dump_stack_lvl+0x16c/0x1f0 [ 752.474266][T16023] should_fail_ex+0x512/0x640 [ 752.474289][T16023] should_fail_alloc_page+0xe7/0x130 [ 752.474308][T16023] prepare_alloc_pages+0x3c2/0x610 [ 752.474329][T16023] ? unwind_get_return_address+0x59/0xa0 [ 752.474352][T16023] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 752.474382][T16023] ? __lock_acquire+0xaa4/0x1ba0 [ 752.474404][T16023] ? _parse_integer_limit+0x17f/0x1d0 [ 752.474424][T16023] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 752.474458][T16023] ? look_up_lock_class+0x59/0x150 [ 752.474477][T16023] ? register_lock_class+0x41/0x4c0 [ 752.474500][T16023] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 752.474526][T16023] ? policy_nodemask+0xea/0x4e0 [ 752.474545][T16023] alloc_pages_mpol+0x1fb/0x550 [ 752.474563][T16023] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 752.474586][T16023] alloc_pages_noprof+0x131/0x390 [ 752.474603][T16023] get_zeroed_page_noprof+0x14/0x50 [ 752.474622][T16023] simple_transaction_get+0x62/0x140 [ 752.474645][T16023] ? __pfx_sel_write_user+0x10/0x10 [ 752.474661][T16023] selinux_transaction_write+0xc3/0x180 [ 752.474679][T16023] vfs_write+0x25c/0x1180 [ 752.474699][T16023] ? __pfx_selinux_transaction_write+0x10/0x10 [ 752.474719][T16023] ? __pfx___mutex_lock+0x10/0x10 [ 752.474737][T16023] ? __pfx_vfs_write+0x10/0x10 [ 752.474765][T16023] ? __fget_files+0x20e/0x3c0 [ 752.474796][T16023] ksys_write+0x12a/0x240 [ 752.474819][T16023] ? __pfx_ksys_write+0x10/0x10 [ 752.474841][T16023] ? rcu_is_watching+0x12/0xc0 [ 752.474866][T16023] do_syscall_64+0xcd/0x260 [ 752.474886][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.474903][T16023] RIP: 0033:0x7f03ef58e969 [ 752.474918][T16023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.474934][T16023] RSP: 002b:00007f03f0429038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 752.474950][T16023] RAX: ffffffffffffffda RBX: 00007f03ef7b6080 RCX: 00007f03ef58e969 [ 752.474962][T16023] RDX: 0000000000000027 RSI: 0000200000000040 RDI: 0000000000000006 [ 752.474973][T16023] RBP: 00007f03f0429090 R08: 0000000000000000 R09: 0000000000000000 [ 752.474983][T16023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.474993][T16023] R13: 0000000000000000 R14: 00007f03ef7b6080 R15: 00007ffc765b0df8 [ 752.475017][T16023] [ 752.732545][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.945374][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 753.046847][T15815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.377163][T16031] SELinux: syz.0.3004 (16031) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 753.984822][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 754.508024][T15815] veth0_vlan: entered promiscuous mode [ 754.630768][T15815] veth1_vlan: entered promiscuous mode [ 754.650304][ T30] audit: type=1400 audit(1745641205.419:160058): avc: denied { ioctl } for pid=16042 comm="syz.2.3009" path="socket:[54906]" dev="sockfs" ino=54906 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 754.710632][T15815] veth0_macvtap: entered promiscuous mode [ 754.741117][T15815] veth1_macvtap: entered promiscuous mode [ 754.778148][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.795136][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.815558][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.837546][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.867973][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.897123][ T30] audit: type=1400 audit(1745641205.659:160059): avc: denied { mount } for pid=16048 comm="syz.2.3013" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 754.919340][ C1] vkms_vblank_simulate: vblank timer overrun [ 754.919511][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.919527][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.919540][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.920669][T15815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.981758][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.998859][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.010689][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.022732][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.032636][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 755.043193][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.842515][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.853006][T15815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.864106][T15815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.876433][T15815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.976747][T15815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.055542][T15815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.065261][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 756.082538][T15815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.122526][T15815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.096639][T15528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.104837][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 757.158431][T15528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.579198][T16087] sctp: [Deprecated]: syz.0.3021 (pid 16087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 757.579198][T16087] Use struct sctp_sack_info instead [ 758.144994][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 759.173969][T15529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.182408][T15529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.184820][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 759.291907][ T30] audit: type=1400 audit(1745641210.039:160060): avc: denied { mounton } for pid=15815 comm="syz-executor" path="/root/syzkaller.mJ68BJ/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 759.357247][ T30] audit: type=1400 audit(1745641210.109:160061): avc: denied { mount } for pid=15815 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 759.431904][ T30] audit: type=1400 audit(1745641210.109:160062): avc: denied { mounton } for pid=15815 comm="syz-executor" path="/root/syzkaller.mJ68BJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 759.497717][ T30] audit: type=1400 audit(1745641210.109:160063): avc: denied { mounton } for pid=15815 comm="syz-executor" path="/root/syzkaller.mJ68BJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=55892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 759.745003][T15099] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 759.910674][T15099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 760.224834][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 760.299133][ T30] audit: type=1400 audit(1745641210.129:160064): avc: denied { mounton } for pid=15815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 760.322945][ T30] audit: type=1400 audit(1745641210.399:160065): avc: denied { setopt } for pid=16095 comm="syz.1.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 760.344376][T16100] mkiss: ax0: crc mode is auto. [ 760.345547][T15099] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 760.435366][T15099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 760.620103][T15099] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 760.632099][T15099] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 760.642392][T15099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.659499][T15099] usb 4-1: config 0 descriptor?? [ 760.745715][ T52] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 761.162264][ T30] audit: type=1400 audit(1745641211.489:160066): avc: denied { bind } for pid=16103 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 761.188394][ T30] audit: type=1400 audit(1745641211.489:160067): avc: denied { shutdown } for pid=16103 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 761.264968][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 761.423208][T15099] hdpvr 4-1:0.0: firmware version 0xc7 dated [ 761.434235][T15099] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 761.457223][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 761.471804][ T52] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 761.496963][ T52] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 761.515511][ T52] usb 2-1: Product: syz [ 761.519897][ T52] usb 2-1: Manufacturer: syz [ 761.524603][ T52] usb 2-1: SerialNumber: syz [ 761.546383][ T52] usb 2-1: config 0 descriptor?? [ 761.668108][T15817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 761.687448][ T30] audit: type=1400 audit(1745641212.459:160068): avc: denied { setcurrent } for pid=16093 comm="syz.3.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 761.725614][T15817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 761.738435][T15817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 761.742599][T16094] lo speed is unknown, defaulting to 1000 [ 761.757188][T15817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 761.765932][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 761.775626][T15817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 761.781930][ T30] audit: type=1401 audit(1745641212.459:160069): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 761.820788][T16118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.857050][ T30] audit: type=1400 audit(1745641212.619:160070): avc: denied { create } for pid=16104 comm="syz.1.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 761.898337][T16118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.957219][ T30] audit: type=1400 audit(1745641212.619:160071): avc: denied { setopt } for pid=16104 comm="syz.1.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 762.010054][ T52] usb 2-1: USB disconnect, device number 44 [ 762.121766][ T1111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.221268][ T1111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.240260][ T1111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 762.304966][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 762.504692][ T1111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.562156][ T1111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.590892][ T1111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 762.622344][ T30] audit: type=1400 audit(1745641213.389:160072): avc: denied { name_bind } for pid=16130 comm="syz.1.3031" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 762.651318][T16113] lo speed is unknown, defaulting to 1000 [ 762.698840][ T30] audit: type=1400 audit(1745641213.469:160073): avc: denied { ioctl } for pid=16130 comm="syz.1.3031" path="socket:[55175]" dev="sockfs" ino=55175 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 762.781709][ T1111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.804982][ T1111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.815974][ T1111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 762.920157][ T1111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.953239][ T1111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.965982][ T1111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 763.344987][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 763.419467][T15099] hdpvr 4-1:0.0: Could not setup controls [ 763.455954][T15099] hdpvr 4-1:0.0: registering videodev failed [ 763.488156][T15099] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 763.513169][T15099] usb 4-1: USB disconnect, device number 49 [ 763.557066][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.572962][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.893831][T15817] Bluetooth: hci0: command tx timeout [ 764.001559][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3038'. [ 764.106661][T16163] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3038'. [ 764.119880][T16165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8021 sclass=netlink_route_socket pid=16165 comm=syz.1.3039 [ 764.322474][ T1111] bond1 (unregistering): (slave geneve2): Releasing active interface [ 764.384957][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 764.675918][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.798197][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.817339][ T1111] bond0 (unregistering): Released all slaves [ 764.832882][ T1111] bond1 (unregistering): Released all slaves [ 764.996665][T16181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3042'. [ 765.047754][T16181] bond0: option ad_select: unable to set because the bond device is up [ 765.199012][T16113] chnl_net:caif_netlink_parms(): no params data found [ 765.350418][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 765.350433][ T30] audit: type=1326 audit(1745641216.119:160101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16194 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d798e969 code=0x7ffc0000 [ 765.424960][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 765.478072][ T30] audit: type=1326 audit(1745641216.119:160102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16194 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d798e969 code=0x7ffc0000 [ 765.954927][T15817] Bluetooth: hci0: command tx timeout [ 766.366140][T16113] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.376660][T16113] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.412341][T16113] bridge_slave_0: entered allmulticast mode [ 766.431302][T16113] bridge_slave_0: entered promiscuous mode [ 766.454316][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.464949][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 766.498032][T16113] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.506298][T16113] bridge_slave_1: entered allmulticast mode [ 766.513789][T16113] bridge_slave_1: entered promiscuous mode [ 766.585630][ T1111] hsr_slave_0: left promiscuous mode [ 766.609157][T16215] FAULT_INJECTION: forcing a failure. [ 766.609157][T16215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.626529][T16216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.635505][ T1111] hsr_slave_1: left promiscuous mode [ 766.642359][T16216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.646588][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.654854][T16215] CPU: 1 UID: 0 PID: 16215 Comm: syz.3.3050 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 766.654877][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 766.654886][T16215] Call Trace: [ 766.654892][T16215] [ 766.654898][T16215] dump_stack_lvl+0x16c/0x1f0 [ 766.654925][T16215] should_fail_ex+0x512/0x640 [ 766.654946][T16215] _copy_from_user+0x2e/0xd0 [ 766.654967][T16215] copy_msghdr_from_user+0x98/0x160 [ 766.654989][T16215] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 766.655020][T16215] ___sys_sendmsg+0xfe/0x1d0 [ 766.655041][T16215] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.655087][T16215] __sys_sendmsg+0x16d/0x220 [ 766.655108][T16215] ? __pfx___sys_sendmsg+0x10/0x10 [ 766.655134][T16215] ? rcu_is_watching+0x12/0xc0 [ 766.655157][T16215] do_syscall_64+0xcd/0x260 [ 766.655176][T16215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.655191][T16215] RIP: 0033:0x7f52d798e969 [ 766.655203][T16215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.655217][T16215] RSP: 002b:00007f52d8895038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.655232][T16215] RAX: ffffffffffffffda RBX: 00007f52d7bb5fa0 RCX: 00007f52d798e969 [ 766.655245][T16215] RDX: 0000000000004044 RSI: 0000200000000280 RDI: 0000000000000003 [ 766.655254][T16215] RBP: 00007f52d8895090 R08: 0000000000000000 R09: 0000000000000000 [ 766.655263][T16215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.655272][T16215] R13: 0000000000000000 R14: 00007f52d7bb5fa0 R15: 00007ffce41dc7f8 [ 766.655291][T16215] [ 766.834013][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.842960][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.073851][T16222] ptrace attach of "./syz-executor exec"[15815] was attempted by "./syz-executor exec"[16222] [ 767.118270][T14544] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 767.156011][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.281560][ T1111] veth1_macvtap: left promiscuous mode [ 767.287669][T14544] usb 1-1: Using ep0 maxpacket: 8 [ 767.292902][ T1111] veth0_macvtap: left promiscuous mode [ 767.313959][T14544] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 767.391857][T16227] FAULT_INJECTION: forcing a failure. [ 767.391857][T16227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.405117][T16227] CPU: 1 UID: 0 PID: 16227 Comm: syz.3.3053 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 767.405142][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 767.405153][T16227] Call Trace: [ 767.405160][T16227] [ 767.405168][T16227] dump_stack_lvl+0x16c/0x1f0 [ 767.405192][T16227] should_fail_ex+0x512/0x640 [ 767.405215][T16227] _copy_from_user+0x2e/0xd0 [ 767.405239][T16227] memdup_user+0x6b/0xe0 [ 767.405262][T16227] strndup_user+0x78/0xe0 [ 767.405287][T16227] __x64_sys_mount+0x137/0x310 [ 767.405306][T16227] ? __pfx___x64_sys_mount+0x10/0x10 [ 767.405332][T16227] do_syscall_64+0xcd/0x260 [ 767.405352][T16227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.405370][T16227] RIP: 0033:0x7f52d798e969 [ 767.405384][T16227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.405400][T16227] RSP: 002b:00007f52d8853038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 767.405417][T16227] RAX: ffffffffffffffda RBX: 00007f52d7bb6160 RCX: 00007f52d798e969 [ 767.405427][T16227] RDX: 0000200000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 767.405438][T16227] RBP: 00007f52d8853090 R08: 0000200000000300 R09: 0000000000000000 [ 767.405448][T16227] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 767.405458][T16227] R13: 0000000000000000 R14: 00007f52d7bb6160 R15: 00007ffce41dc7f8 [ 767.405481][T16227] [ 767.407287][ T30] audit: type=1400 audit(1745641218.159:160103): avc: denied { create } for pid=16220 comm="syz.3.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 767.407908][ T1111] veth1_vlan: left promiscuous mode [ 767.552223][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 767.556686][ T30] audit: type=1400 audit(1745641218.159:160104): avc: denied { ioctl } for pid=16220 comm="syz.3.3053" path="socket:[56266]" dev="sockfs" ino=56266 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 767.582790][T14544] usb 1-1: config 0 interface 0 has no altsetting 0 [ 767.625456][T14544] usb 1-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 767.634559][T14544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.645472][ T1111] veth0_vlan: left promiscuous mode [ 767.651473][T14544] usb 1-1: config 0 descriptor?? [ 767.887180][T14544] usbhid 1-1:0.0: can't add hid device: -71 [ 767.893974][T14544] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 767.985724][T15817] Bluetooth: hci0: command tx timeout [ 767.997121][T14544] usb 1-1: USB disconnect, device number 34 [ 768.147339][ T30] audit: type=1400 audit(1745641218.919:160105): avc: denied { ioctl } for pid=16236 comm="syz.3.3055" path="socket:[56280]" dev="sockfs" ino=56280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 768.187941][ T1111] pimreg (unregistering): left allmulticast mode [ 768.624677][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 768.632447][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 768.676402][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 769.007597][ T12] smc: removing ib device syz0 [ 769.096068][ T5958] lo speed is unknown, defaulting to 1000 [ 769.102521][ T5958] syz0: Port: 1 Link DOWN [ 769.108140][T16258] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3060'. [ 769.142190][T16113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.227195][T16113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.528000][ T5958] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 769.664987][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 769.705583][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 769.737542][ T5958] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 769.763520][ T5958] usb 2-1: can't read configurations, error -61 [ 769.904950][ T5958] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 770.065493][T15817] Bluetooth: hci0: command tx timeout [ 770.075527][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 770.106620][ T5958] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 770.123872][ T5958] usb 2-1: can't read configurations, error -61 [ 770.132147][ T5958] usb usb2-port1: attempt power cycle [ 770.485472][ T5958] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 770.529206][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 770.552120][ T5958] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 770.568157][ T5958] usb 2-1: can't read configurations, error -61 [ 770.691383][T16113] team0: Port device team_slave_0 added [ 770.705056][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 770.724681][ T5958] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 770.767671][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 770.789802][T16113] team0: Port device team_slave_1 added [ 770.820366][ T5958] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 770.845428][ T5958] usb 2-1: can't read configurations, error -61 [ 770.874565][ T5958] usb usb2-port1: unable to enumerate USB device [ 771.053020][T16276] TCP: TCP_TX_DELAY enabled [ 771.098599][T16113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.118440][T16113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.146962][T16113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.202836][T16113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.218768][T16113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.245650][T16113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.339645][ T30] audit: type=1400 audit(1745641222.109:160106): avc: denied { ioctl } for pid=16283 comm="syz.0.3069" path="socket:[56562]" dev="sockfs" ino=56562 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 771.481407][T16113] hsr_slave_0: entered promiscuous mode [ 771.488715][T16113] hsr_slave_1: entered promiscuous mode [ 771.495666][T16113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.504665][T16113] Cannot create hsr debugfs directory [ 771.744994][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 771.985836][ T30] audit: type=1400 audit(1745641222.749:160107): avc: denied { watch watch_reads } for pid=16293 comm="syz.3.3071" path="/629/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 772.069755][ T30] audit: type=1400 audit(1745641222.839:160108): avc: denied { write } for pid=16296 comm="syz.2.3072" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 772.785005][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 773.824955][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 774.864831][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 775.905003][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 776.944822][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 777.984833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 779.024825][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 780.065100][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 781.104826][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 782.144827][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 783.184828][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 784.224824][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 785.264830][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 786.304826][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 787.344827][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 788.384821][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 789.424851][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 790.464826][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 791.504958][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 792.544813][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 793.584812][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 794.624825][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 795.664830][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 796.704808][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 797.744806][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 798.784803][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 799.824813][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 800.864808][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 801.904804][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 802.944816][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 803.984806][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 805.024804][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 806.064804][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 807.104803][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 808.144934][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 808.237359][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.184815][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 810.224809][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 811.264803][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 812.304801][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 813.344991][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 814.384798][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 815.424839][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 816.464930][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 817.504801][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 818.544801][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 819.584800][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 820.624800][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 821.664808][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 822.704796][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 823.744807][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 824.784802][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 825.824798][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 826.864795][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 827.904807][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 828.944805][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 829.984810][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 831.024816][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 832.064804][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 833.104800][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 834.144797][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 835.184802][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 836.224799][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 837.264803][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 838.304797][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 839.344939][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 840.384792][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 841.424833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 842.464795][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 843.504791][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 844.544790][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 845.584791][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 846.624911][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 847.664793][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 848.704938][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 849.744789][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 850.784790][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 851.824909][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 852.864813][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 853.904805][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 854.944801][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 855.984808][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 857.024794][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 858.064798][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 859.104793][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 860.144790][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 861.184809][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 861.505379][T15817] Bluetooth: hci5: command 0x0406 tx timeout [ 862.224799][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 863.264784][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 864.304780][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 865.344793][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 866.384826][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 867.424818][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 868.464799][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 869.504781][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 869.677653][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.544795][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 871.584781][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 872.624784][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 873.664800][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 874.704932][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 875.744779][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 876.784799][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 877.824784][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 877.994726][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 878.001689][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16298/1:b..l [ 878.010087][ C1] rcu: (detected by 1, t=10503 jiffies, g=75609, q=219 ncpus=2) [ 878.017787][ C1] task:syz.3.3071 state:R running task stack:26392 pid:16298 tgid:16293 ppid:5815 task_flags:0x400040 flags:0x00004002 [ 878.032486][ C1] Call Trace: [ 878.035779][ C1] [ 878.038698][ C1] __schedule+0x116f/0x5de0 [ 878.043202][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 878.049003][ C1] ? __pfx___schedule+0x10/0x10 [ 878.053852][ C1] ? mark_held_locks+0x49/0x80 [ 878.058615][ C1] preempt_schedule_irq+0x51/0x90 [ 878.063630][ C1] irqentry_exit+0x36/0x90 [ 878.068033][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 878.073999][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 878.079190][ C1] Code: a0 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 f2 d6 ec 0e 0f 82 74 02 00 00 8b 35 8a 06 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 c9 9f 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 878.098832][ C1] RSP: 0018:ffffc90003c9ec20 EFLAGS: 00000206 [ 878.104890][ C1] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 0000000096984cfb [ 878.112863][ C1] RDX: 0000000000000000 RSI: ffffffff8dbb963f RDI: ffffffff8bf47720 [ 878.120828][ C1] RBP: 0000000000000002 R08: cdb2f65bb9cae6f2 R09: 0000000000000000 [ 878.128797][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 878.136763][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 878.144762][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 878.149969][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 878.156113][ C1] unwind_next_frame+0xd1/0x20a0 [ 878.161040][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 878.166162][ C1] ? do_user_addr_fault+0x7a6/0x1370 [ 878.171438][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 878.177575][ C1] arch_stack_walk+0x94/0x100 [ 878.182286][ C1] ? do_user_addr_fault+0x7a6/0x1370 [ 878.187563][ C1] stack_trace_save+0x8e/0xc0 [ 878.192323][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 878.197683][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 878.202611][ C1] save_stack+0x160/0x1f0 [ 878.206932][ C1] ? __pfx_save_stack+0x10/0x10 [ 878.211777][ C1] ? post_alloc_hook+0x181/0x1b0 [ 878.216702][ C1] ? get_page_from_freelist+0x135c/0x3920 [ 878.222492][ C1] ? __alloc_frozen_pages_noprof+0x263/0x23a0 [ 878.228555][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 878.233562][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 878.239101][ C1] ? vma_alloc_folio_noprof+0xed/0x1e0 [ 878.244572][ C1] ? do_wp_page+0x1282/0x58e0 [ 878.249232][ C1] ? __handle_mm_fault+0x1ada/0x2a40 [ 878.254504][ C1] ? handle_mm_fault+0x3fe/0xad0 [ 878.259429][ C1] ? do_user_addr_fault+0x7a6/0x1370 [ 878.264711][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 878.269650][ C1] __set_page_owner+0x91/0x550 [ 878.274400][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 878.279767][ C1] ? bad_range+0x244/0x490 [ 878.284162][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.289354][ C1] ? get_page_from_freelist+0x133c/0x3920 [ 878.295072][ C1] post_alloc_hook+0x181/0x1b0 [ 878.299818][ C1] get_page_from_freelist+0x135c/0x3920 [ 878.305370][ C1] ? __pfx___might_resched+0x10/0x10 [ 878.310644][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 878.316519][ C1] ? should_fail_alloc_page+0xee/0x130 [ 878.321952][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 878.327220][ C1] ? rcu_is_watching+0x12/0xc0 [ 878.331972][ C1] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 878.337868][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 878.342886][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 878.348158][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 878.353096][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 878.359500][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 878.364445][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 878.369398][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 878.375307][ C1] ? policy_nodemask+0xea/0x4e0 [ 878.380165][ C1] alloc_pages_mpol+0x1fb/0x550 [ 878.385014][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 878.390376][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 878.395350][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 878.400740][ C1] vma_alloc_folio_noprof+0xed/0x1e0 [ 878.406012][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 878.411893][ C1] ? find_held_lock+0x2b/0x80 [ 878.416560][ C1] ? do_wp_page+0x229a/0x58e0 [ 878.421218][ C1] do_wp_page+0x1282/0x58e0 [ 878.425703][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 878.430530][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 878.435881][ C1] ? ___pte_offset_map+0x1bc/0x540 [ 878.440992][ C1] __handle_mm_fault+0x1ada/0x2a40 [ 878.446111][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 878.451566][ C1] ? find_vma+0xbf/0x140 [ 878.455801][ C1] ? __pfx_find_vma+0x10/0x10 [ 878.460472][ C1] handle_mm_fault+0x3fe/0xad0 [ 878.465313][ C1] do_user_addr_fault+0x7a6/0x1370 [ 878.470423][ C1] ? rcu_is_watching+0x12/0xc0 [ 878.475212][ C1] exc_page_fault+0x5c/0xc0 [ 878.479742][ C1] asm_exc_page_fault+0x26/0x30 [ 878.484607][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 878.490323][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 878.509955][ C1] RSP: 0018:ffffc90003c9f9f8 EFLAGS: 00050246 [ 878.516017][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000001e9030 [ 878.523986][ C1] RDX: 0000000000080000 RSI: ffffffff893d1b13 RDI: 0000000000000005 [ 878.531948][ C1] RBP: ffffc90003c9fd98 R08: 0000000000000005 R09: 0000000000000000 [ 878.539938][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 878.547903][ C1] R13: 00002000001e9000 R14: ffffc90003c9fddc R15: 0000000000000002 [ 878.555881][ C1] ? ____sys_recvmsg+0x2e3/0x6b0 [ 878.560813][ C1] ____sys_recvmsg+0x2ee/0x6b0 [ 878.565574][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 878.570839][ C1] ? kfree+0x252/0x4d0 [ 878.574900][ C1] ? rcu_is_watching+0x12/0xc0 [ 878.579660][ C1] ___sys_recvmsg+0x114/0x1a0 [ 878.584324][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 878.589523][ C1] ? __pfx___might_resched+0x10/0x10 [ 878.594824][ C1] do_recvmmsg+0x2fe/0x740 [ 878.599258][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 878.604189][ C1] ? find_held_lock+0x2b/0x80 [ 878.608872][ C1] ? __might_fault+0xe3/0x190 [ 878.613537][ C1] ? __might_fault+0x13b/0x190 [ 878.618284][ C1] ? do_futex+0x122/0x350 [ 878.622610][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 878.627546][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 878.632563][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 878.638114][ C1] ? rcu_is_watching+0x12/0xc0 [ 878.642890][ C1] do_syscall_64+0xcd/0x260 [ 878.647387][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.653266][ C1] RIP: 0033:0x7f52d798e969 [ 878.657680][ C1] RSP: 002b:00007f52d8874038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 878.666137][ C1] RAX: ffffffffffffffda RBX: 00007f52d7bb6080 RCX: 00007f52d798e969 [ 878.674369][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 878.682335][ C1] RBP: 00007f52d7a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 878.690293][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 878.698252][ C1] R13: 0000000000000000 R14: 00007f52d7bb6080 R15: 00007ffce41dc7f8 [ 878.706221][ C1] [ 878.709232][ C1] rcu: rcu_preempt kthread starved for 5192 jiffies! g75609 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 878.720323][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 878.730281][ C1] rcu: RCU grace-period kthread stack dump: [ 878.736161][ C1] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 878.749633][ C1] Call Trace: [ 878.752889][ C1] [ 878.755808][ C1] __schedule+0x116f/0x5de0 [ 878.760307][ C1] ? __pfx___schedule+0x10/0x10 [ 878.765339][ C1] ? find_held_lock+0x2b/0x80 [ 878.770008][ C1] ? schedule+0x2d7/0x3a0 [ 878.774338][ C1] schedule+0xe7/0x3a0 [ 878.778386][ C1] schedule_timeout+0x123/0x290 [ 878.783216][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 878.788567][ C1] ? __pfx_process_timeout+0x10/0x10 [ 878.793848][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 878.799642][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 878.805079][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 878.809839][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 878.815104][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 878.819935][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 878.825717][ C1] rcu_gp_kthread+0x270/0x380 [ 878.830378][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 878.835557][ C1] ? rcu_is_watching+0x12/0xc0 [ 878.840296][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.845489][ C1] ? __kthread_parkme+0x19e/0x250 [ 878.850501][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 878.855851][ C1] kthread+0x3c2/0x780 [ 878.859902][ C1] ? __pfx_kthread+0x10/0x10 [ 878.864470][ C1] ? __pfx_kthread+0x10/0x10 [ 878.864774][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 878.869026][ C1] ? __pfx_kthread+0x10/0x10 [ 878.869044][ C1] ? __pfx_kthread+0x10/0x10 [ 878.884990][ C1] ? rcu_is_watching+0x12/0xc0 [ 878.889754][ C1] ? __pfx_kthread+0x10/0x10 [ 878.894344][ C1] ret_from_fork+0x45/0x80 [ 878.898768][ C1] ? __pfx_kthread+0x10/0x10 [ 878.903380][ C1] ret_from_fork_asm+0x1a/0x30 [ 878.908137][ C1] [ 878.911148][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 878.917460][ C1] Sending NMI from CPU 1 to CPUs 0: [ 878.922652][ C0] NMI backtrace for cpu 0 [ 878.922663][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 878.922679][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 878.922686][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 878.922703][ C0] Code: c5 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 ea 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 878.922715][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 878.922727][ C0] RAX: 0000000002e44be9 RBX: 0000000000000000 RCX: ffffffff8b6c0419 [ 878.922736][ C0] RDX: 0000000000000000 RSI: ffffffff8dbdebe6 RDI: ffffffff8bf47720 [ 878.922747][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 878.922755][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 878.922763][ C0] R13: ffffffff8e097740 R14: ffffffff9084e710 R15: 0000000000000000 [ 878.922772][ C0] FS: 0000000000000000(0000) GS:ffff8881249e5000(0000) knlGS:0000000000000000 [ 878.922785][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.922794][ C0] CR2: 00007fff324c23a8 CR3: 0000000074e44000 CR4: 00000000003526f0 [ 878.922802][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 878.922810][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 878.922818][ C0] Call Trace: [ 878.922825][ C0] [ 878.922830][ C0] default_idle+0x13/0x20 [ 878.922846][ C0] default_idle_call+0x6d/0xb0 [ 878.922860][ C0] do_idle+0x391/0x510 [ 878.922878][ C0] ? __pfx_do_idle+0x10/0x10 [ 878.922892][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 878.922910][ C0] ? do_idle+0x2ea/0x510 [ 878.922924][ C0] cpu_startup_entry+0x4f/0x60 [ 878.922939][ C0] rest_init+0x16b/0x2b0 [ 878.922954][ C0] ? acpi_subsystem_init+0x133/0x180 [ 878.922972][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 878.922988][ C0] start_kernel+0x3e9/0x4d0 [ 878.923002][ C0] x86_64_start_reservations+0x18/0x30 [ 878.923015][ C0] x86_64_start_kernel+0xb0/0xc0 [ 878.923027][ C0] common_startup_64+0x13e/0x148 [ 878.923047][ C0] [ 879.905241][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 880.944777][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 881.984797][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 883.024780][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 884.064780][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 885.104793][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 886.144776][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 887.184780][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available