last executing test programs: 12.895286441s ago: executing program 0 (id=667): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="b9570800000f328f2870869a0000c0fe0742df3a66b8d7000f00d066ba400066edb9050200000f3265400fc76f040f2de966420f693d905500000f01cf", 0x3d}], 0x1, 0x43, 0x0, 0x0) mlockall(0x7) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x0, 0x30, 0x69, {0x69, 0x21, "4fc47c5f6ec6796cd27a2808b163b06f24795b325d049ad108918121cfa813558f1ea624d1192f2ea9847c9ceaa659c67350fbc56bd579a4b69ed8780b6c7ba5db1c5b45730ef3b7989298d59e7aced99f3fae9dbf3f82957ae692a2b4e1d322b8acd898d905d2"}}, &(0x7f00000006c0)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "b82758ed70e4399b13b4271e385b3dc8618876cba5d45de558366145e9e729a710318d1aacf74a777137661f02fd20a3d1b65af904d7364e52955ce7a68969acd7bbbff89b6b9ee8c8d9542258c0a6fc3b29d6b0a01f33fe73b1c7752be39219c3af37444f51a17381e5d6a3c57e067faa64b00657b31b8a499698cd5cda4b5ca6df776210b67814204f3005ea5462b1ed4251ed6a1623b0d04f86d60e7688cde48afc01e1919d559ee4d3b8eef9aeeccae364e3a43f7588b617d78d7ecfe719583fb2217cb9e73dd994f762916fc026c769ad548f381a467dffb92ebf96b27afd2e4717"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000880)=ANY=[@ANYBLOB="0006e90000001e17571237b3c5e4efe43d13dc5047b5c69f82d64e00e1e750a478af4ea354267055b52967777d3d01c9ce36282f8c5ce8ca3174dd375993db98a2cd6c548693ca74765698ba0dd75b875848eabd1099eb9cb817cce212ea1b7448b679f9852d31f40d78e1ff6b3dd8d3fa70276f7e71a861c7cfd29f7c36713171f95e85826fefe3e0bb9b1193325c7822a4fbf7c8aeec6a966d4eea14dfc69f5f1e11b8a0f2ac5b4940c57d2fa0cca6d7a12d7b15115fbb013ad7df1302a56b7ab079d84066b97bb0f4582254692dc86ab6961ece0d5117d7774dafdd25d75aeb69cf2e088d1c4b65176d0f038e93"], &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x0, 0x29, {0x27, "b5589ad859841466139c2396dc799dd91b9f3297d034e20452568e3bd06d6911ca7ec1eccf95fe"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x3}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x6b}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlockall(0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="65670f32430f21120f005b07260fc72e400f23bbf20f38f07b000f20c035010000000f22c066b87e008ee8660f320f6b1f", 0x31}], 0x1, 0x0, 0x0, 0x0) dup(r2) 9.012099144s ago: executing program 2 (id=677): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xd0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0xc05c5340, &(0x7f0000000040)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) io_setup(0x1, &(0x7f0000000140)) close(0xffffffffffffffff) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r7 = accept4(r5, 0x0, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) ioctl$KVM_SET_IRQCHIP(r9, 0x4048aec9, &(0x7f0000000bc0)={0x2, 0x0, @ioapic={0xfee00, 0xfffffffe, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x4, '\x00', 0x8}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x90, '\x00', 0xa}, {0xf, 0x10, 0x8, '\x00', 0xaa}, {0x1, 0x8, 0xe1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x9, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x81, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0xb9, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x6, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x2, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 8.280280097s ago: executing program 2 (id=678): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x1, 0x7fffffff) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x5, 0x3, 0x9, 0x0, 0x7, 0x6, 0x7}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file1\x00', 0x0, 0x181) open_tree(r3, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000400)=""/239, 0xef}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffeb6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001038010000000000000000000000000a78000000060a0b040000000000000000020000004c0004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000891c000180090001006d617371000000000c000280080002400000000c0900010073797a3000000000090002007379933200000000140000001100010000000000000000000000000a"], 0xa0}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) 8.010747731s ago: executing program 4 (id=681): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x60000000) 5.753773298s ago: executing program 1 (id=684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) (fail_nth: 14) 5.445113407s ago: executing program 2 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = getpgid(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffa9) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x72, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb86dd63000000003c3affe8880000000000000000000000000001ff02000000000000000000000000000101049078810000006cde2efd02812f0001fc0000000000000003000000000000013b00071165000000aa7f4d189695678643b872fbd99c540fca8512442edeb14cd134913629617d5c01a54612be5745560cd6ce643a0b1199bfbd6ca7363e69fd37e9aa10c6063103ad3cdd556afe56dbb9f7057e33069c68e1e7a455785919713a1b80526d601804a2c176f31169667daa87894a46a65fe29fafa9cc976daba69d30f95ce4cceb36b7721cfb82546a3763d208235a22079a88edcda88bc9759931b99d0ff464642a3979cb284b146b362071cfdf"], 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@can={{0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "18ebe23db8546dd1"}, 0x10}, 0x1, 0x0, 0x0, 0x20008800}, 0x44041) capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000001080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, 0x0) r5 = socket(0x1e, 0x4, 0x3) r6 = dup(r5) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000400)={0x0, 0x4008d2de, 0x200, 0xfffffffe, 0xd6, 0x0, r6}, &(0x7f0000000680)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, r6, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='./file0\x00', r6, 0x1000, 0x1}) io_uring_enter(r7, 0x47f5, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) 5.325759181s ago: executing program 3 (id=686): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x202400, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) syz_open_pts(r0, 0x141601) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x0, 0x401, {0x0}, {0xee01}, 0x8, 0x7478}) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x200001, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) syz_open_dev$dri(0x0, 0x1, 0x0) 5.058738694s ago: executing program 2 (id=687): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x8001, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x44}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x31, &(0x7f0000000100), 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e, 0x80400) 5.056328863s ago: executing program 0 (id=688): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xd0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0xc05c5340, &(0x7f0000000040)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) io_setup(0x1, &(0x7f0000000140)) close(0xffffffffffffffff) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r7 = accept4(r5, 0x0, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) ioctl$KVM_SET_IRQCHIP(r9, 0x4048aec9, &(0x7f0000000bc0)={0x2, 0x0, @ioapic={0xfee00, 0xfffffffe, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x4, '\x00', 0x8}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x90, '\x00', 0xa}, {0xf, 0x10, 0x8, '\x00', 0xaa}, {0x1, 0x8, 0xe1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x9, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x81, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0xb9, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x6, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x2, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 4.677252075s ago: executing program 1 (id=689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003c00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0xd) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000e00)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000002c0)="8cb3c4edb41c8f2ba8f835c7b242e0406f0fc41297d42edfeb206a5ceb9c69dd81c73d9df14f1403ff1b7280b6c17ab5cfebd33ca0cadda3707745e18e22f938c5007b128c6849b8fde63cd6b3ec590b8a70b07ece247065eba34eb43423a3bd70083f5b2acb1a9b5aa45e8fcbd633a1e6c7dbc67cb198efc5835cf56d0617ae467d5dc55e5e9873563869228821b212e443937f8cf4fa5e56c5ca32ebb6cdace68de072dc6d153c6cf1abad79408ad363bab24057c836", 0xb7}, {&(0x7f0000000500)="018374ecdea907c6a1efc18df267ed494318605f955edbf09554cd751c61eb7d1cc578485c5a0c569a94b730fcdecb157123da1d7da77a87e23e8f021810d220860c169d96293089f8144af10253c898169943eb6e260ab8a000f15f3a6aec528a63646ae88eff48eb63b18410ed285b6ad8c2ff7e16c5", 0x77}, {&(0x7f00000001c0)="ac195d0bf4959afa30fd99a374cca4ae8efef032a5ee2cb699c78512b93203fb3a0744e994ff44fb8b5fd792ae4e44f6c402daca46c433811dad883196612f", 0x3f}], 0x3, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r6, r4}}}], 0x20, 0x10}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="e3e219949d8ea19ab637fd59f1a00095394bbf29ff6151cd34807cf6b7a61c4336c45872b52c25463eb29eb448dc2c053afa43e057a0cc4fb9502bbf4d929f67c51ef6d76c3bc2ec52cc4ae8feecd307cd7ecbfd3ece85fd1fd556e5d8f10e61c4a7f96f1496bdd1de35fda2e5fbc9d92295bac90d6a06411c28dc0cd49fff4799b9bc55be62b189ef3d7cb9d237fac714e772f9ee921b04a36eb1b27c93035d1cf2b4aa3c9579c54427af8a715ff2dc2b5823e996c1faa9302d7f11c57d20b718c932ece1c9c6f73d6c9f46a27361dbcaf3e2c5eab1201f1d878b09f9d3ff21b5972fcabf83335060d04def2f3f0274e1527e", 0xf3}], 0x1, &(0x7f0000000d00)=[@rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [r8, r3, r8, r8, r3, r0]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r8, r0, r8, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0xf8, 0x20000010}}], 0x2, 0x4000001) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r9, r9, 0x0, 0x40008) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="a8efd031606355259a3f37dccf844c468c44b973b5c76e5114c2f45f2186063c6ce3426291f66d8f3c1a2fae45ba3db1d69fd466634b39b6eef0b3820ba0f0cb2aeeb6aed1705081bb0a4f44cf8d54018ba4e07d6d39c79b006003708cfbfb39673177877e8517f75604c39c4ad21e5f0cbccb40e00e4ac8c7b9a16d2a83e4f19eae9547a698c85d", @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="25270100897558f640c6cb4910cadf0b3bae5dff08718a6e470046c5d56d06b19a92f38a7646f7", @ANYRES64=0x0]) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4.431190525s ago: executing program 3 (id=690): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001400090500000000fddbdf25020000cb", @ANYRES32=0x0, @ANYBLOB=':\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440), {0x3e}, &(0x7f0000000480)=""/194, 0xc2, &(0x7f0000000580), &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, &(0x7f0000000680)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r5 = open$dir(&(0x7f0000000240)='./file0\x00', 0x8000, 0x10) fanotify_mark(r4, 0x0, 0x8000011, r5, &(0x7f0000000280)='./file0\x00') r6 = dup(r1) getsockopt$inet_buf(r6, 0x0, 0x23, &(0x7f0000000d80)=""/4096, &(0x7f00000000c0)=0x1000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r7 = dup(r2) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 4.163829101s ago: executing program 0 (id=691): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @random, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4008843) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x0, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) unshare(0xc040400) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, 0x0, 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.017199043s ago: executing program 3 (id=692): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x19) 3.953145929s ago: executing program 4 (id=693): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x9a, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0xfffffff5, 0x2, "b3a5a32c15a74899004ccf462627b693b424cfac6d6f6c18a07448e7cfc77224", "eeb79b8e5cc84de93512fdd553dabc6b", {"2adfa4d4d8104bb99fa1887ab53acb45", "40e3d0b4c2c5585ef57152f112ea5a1e"}}}}}}}}, 0x0) 3.573702421s ago: executing program 4 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0x6}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0']) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r2, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r4, {0xf}}, 0x18) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe909393fe089393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 3.517570809s ago: executing program 3 (id=695): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aa00001c00000002001190"], 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8947, &(0x7f0000000200)={'bond0\x00', 0x10000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xa, &(0x7f0000000380)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f0000000400)='GPL\x00', 0x5, 0xbc, &(0x7f0000000480)=""/188, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x6, 0x530, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x1, 0x3, 0x4, 0xe}, {0x2, 0x4, 0x1, 0x3}, {0x1, 0x2, 0x3, 0x4}, {0x3, 0x1, 0x10, 0x8}, {0x5, 0x5, 0xc, 0x7}, {0x0, 0x5, 0x3, 0x8}, {0x5, 0x5, 0xd, 0x6}]}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) syz_usb_connect$uac1(0x1, 0xa4, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x3, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2ce, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x5, 0x5, 0x8, 0x3, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x6, 0x2, 0x5}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x3, 0x3}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x5, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x2, 0x5, {0x7, 0x25, 0x1, 0x3, 0x6, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x5, 0xd9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xfd, 0x7, {0x7, 0x25, 0x1, 0x80, 0x2, 0x5}}}}}}}]}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e", 0x5}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000216c0000001e0a0103000000000000000007000000090002008a797a31000000000900010073797a30"], 0xf0}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x40, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$audion(&(0x7f0000000000), 0xffffffffffff7fff, 0x301) 3.309319766s ago: executing program 1 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) dup3(r0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}, 0x1, 0x0, 0x0, 0x400d0}, 0x20040040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="da1ecab933af287594563ed181cd5c70e111d22d06eee99247abd5d8fc752accb5e03b6e3ca5dd6b1bd4"]) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) setxattr$security_selinux(0x0, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000080)=0x6, 0x4) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b", 0x81, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 2.916996745s ago: executing program 0 (id=697): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) syz_open_dev$video4linux(0x0, 0x10, 0x8140) r1 = syz_io_uring_setup(0x69e, &(0x7f0000000300)={0x0, 0xec8c, 0x10000, 0x2, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x517c}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x4000) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x115, 0x5000003a, 0xffffffffffffffff, 0x0) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000840), 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f00000008c0)=0xfed, 0x4) keyctl$read(0xb, r6, 0x0, 0x0) r8 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) close(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x56555941, 0x3, 0x9, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x0, 0x7}}) io_uring_enter(r1, 0x3649, 0xe475, 0x0, 0x0, 0x0) 2.905800475s ago: executing program 1 (id=698): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd48040ffc30000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0x980902, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYRES16=r5], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x70}}, 0x24040880) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x8, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d2be6eb35cb8acf3b8af44e73725688ed79881154c56c3d17f82952a3f2a719009c02", @ANYRESHEX, @ANYBLOB=',\x00']) 2.321126613s ago: executing program 4 (id=699): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x3, 0x5002) 1.996434137s ago: executing program 1 (id=700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f00000001c0)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x100000000}) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0x4e95, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x2000) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 1.643208914s ago: executing program 0 (id=701): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x8000) 1.541596317s ago: executing program 4 (id=702): syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18240400935b3467ed52030518382062b97dcb94c9de540f876e19245f3bcadf8b8b0173292965171bc0deb53d4dfbfa4fe11ea84758df1e1934f6662caebc08155d10acac3145bcde03253a567a3586640ac7d12cdba9b7050c5e4c8abdbc2ce2b597172ce17bb36956829fdc76953f1771234046b055ffefaf07e8a2fa42625070c1e6e2d3dc3a64cc1728ab9fc09e4656eaf8886be02a9a", @ANYRES32, @ANYBLOB="0000000005000000183200000200"/24], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x5, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='f2fs_filemap_fault\x00', r0, 0x0, 0x3e3f}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000200000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, &(0x7f0000000000)=""/42, 0x2a) getdents64(r4, &(0x7f0000000080)=""/147, 0x93) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') renameat2(r6, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x5) lseek(r6, 0x2004, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000"], 0x4c}}, 0xc050) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7}) 1.256292352s ago: executing program 0 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dontfrag={{0x14}}, @flowinfo={{0x14}}], 0x48}}], 0x1, 0x68034) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000880)={0x0, 0x3}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000900)={r6, 0x8000, 0x0, 0x8000000000000000, 0x1}, &(0x7f0000000940)=0x18) writev(r3, &(0x7f0000000800)=[{&(0x7f00000000c0)="f53a6558b6f060d9e13c953703129556b085d1ceca1cd4fe674cfa02411a7be54f2caa1b923c0cc8fdfef6f8780b5d98a03b317e7b2573f22283a56e5d0764602a653de94aba76e035a84d4d7dc74d4cf0e9fdca74862adec512669333deae7452a84e80c75a1e833814a6817bf1fc07ea6a8ffe330b", 0x76}, {&(0x7f00000002c0)="160eaaea1b773f0aa38f951be296d92f234e0a0c8ca310cd1ca1133df1a247608c97329404e60d62c32379ce932ab00109b496513643135a65297ad502e2cb1d349aeb223a04cf4a5a766207c9a578c95a2ef44ccdca86caebaf5cb067e57280a0fca78ad88fe778ce81ecb58d0e989da354d327214d68e11f1581a34265ba5fcda050ce31fa0c4969d8422d177ce1ea5605b68366da7883b0887f23e999101ceba6906161e8786cd23a6629ec3f9d63e3e8c949682c7efb2fd2", 0xba}, {&(0x7f0000000380)="d7601fcf5ae18a949b43f53353c97b20a2b390127d361332cd82457a99bf545b6a33777b4d6e52eb4aa888f648ca3597b04e394fb96ddb13f92ef87d5779e63a6fab36f7e0181dd67ec887da4d546f754583da4748ac24ef90e6c3a8b7edaba70faf742d4526f9a0fda9e58d78c164ebb9667e8a909cf0f8abb8d35bb0a9e9ee9690b1d4325a17ec5dd430890e3c8e7e77d6235c757fcf6e210b0c4859b0940ecf6da659971e2f63c23da1fd2c1749568b5bdd7f4de1d3f72d544b2c219d", 0xbe}, {&(0x7f0000000440)="e5f24092f2a9c2adc859c570279a0199685295c3bf164f8ccda8684cd5363a32f8cbf6c7d334c38d8d7e6eac70dd902cacfdc0c77f085e4d020e47057e3abc350286018ea2f4175832e773f4e55c8129b079e7000ec51aa5a1dfb9aace1bb6357b31fe2e7ea5cba8c3bcabd350b0b5354c700db25080e742fa2e5ac412e60a96179a3452fa8856f9485aa298eab6f2026ca92df059247a6f1f03b858c879e26867067fb5a5b3894fba4c019201a821884557c17ac3ed46edee93e358ed488fca7f78", 0xc2}, {&(0x7f0000000540)="7b9f6cfe6022dc78030872cfa55755ad4c13f3473ec0874148d21f32ed31065f9b47ad2caf9bdd75922ae7fe91f464a4abd3748f5a42106908eb9eece874b2e1e6b90590186ea6ef30ab53c4eea6d7e329edd6072e8240452a7dccb79ded81e5f91b1fd7281ecb539fdbb2fb53faeb14a0fe4a58792ecb5cd8c302ac4dfa6751579846c5d08f34ba0b4855d3a5dad5b6c442803952fcf59828c23c887d1a37ce40bf26ef0ab7fcd8e598971fd136b4b1e57f442c73442bf73a4ac55138169d14b26960ae", 0xc4}, {&(0x7f0000000640)="edfe25a7fafa83fe9c63b4d5f4782c6972a88d53223c040e7aedc0be64525682d3e81c96f87984b6c9d7800b9535e6c1e65c1255ffc1a530cdae37ef75e5dbad8d85f8de04cf3253f8d874cd657bb89cc2b373b3a9c686707284cadb7a228c14f6b78d55f97936dd2b4f2b2d71d56689891ca2da5b2bd61a5d44a97c591dd3047554c2521d767911a3da9171d8ebc9178fdec73c05982101eed086c107913cbecec3a154f013126d50541b272b1f82cf5f616e495855eb191a78623ceb56a546", 0xc0}, {&(0x7f0000000140)="1fe02c9adb3a4885ed91f2f22cb55dce2e471338cd7e78710bdaffc2249099c22a8e1e40d94e1ecc8dce58568d3212189163169809e975730cc29a1fb4098766f6c312ff96a672ff6c6ef6d2e7faaa34282dfc8926f3b4bbe6bc686c12c5f4d23dcc09", 0x63}, {&(0x7f0000000700)="9593619e1dfd249d8a1d97c7f6a8035b958044c8400836719b925ec50c74f6b1b5f0321ecfa9ee94971b107939212ddb4fd1bd270813a352b4b5df5dd6b6df94edf3eadf337a548ed91ff45c792fdb91b59ee57972676831aba5e8321da69a08a43197103d75c04c041f41cb02933e8d42468fd2fbc7421b975096e25cedce4d02c3ce00c7187e07a0e3d341211a7208970247d6c7fdf7628a496dda4db98fc4eeecf2962e660e4fff514f0854df7cc2f44d15060098e25d61b1921deeeb1cf66b4f79395c3f084e0d6679c77c9f26d26a3da3", 0xd3}], 0x8) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000d80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x840}, 0x810) writev(r7, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="59a255d6cfe24001675916a4863da256d0166792a6458deda001fb301d82efd94dfe7e7f8cff1a2505d731e4a60a597503794c57a9bf09b1ae4bd0dafcf3cf50354fd834867738d6a12896cf2ef5b317b424cceff87aa1c42a7caf86a40f437854c1576f373dc0df9ead85d29d1182cc690092807bbe25659c9dbb40498542e831fccd28c79b3b052e5569fa376da558a7aa459ef0da97b2bd3116493756f11e8d61e5c626dc326a87dba55fdbd8d6a0e971dfa052b6b56192a21135c4639abd731820ca332cd904368c651b3d92e1c338379f8df3d0d63c8506e5e8cdfb709513ad650ea3e630e2302eba87af2c2ddc09f8967c2375a88458014e10c7eacd346df4906c793f8e8b480f1bf0428131eec8ed32d4555663ff692d6adfd1b27c7a0755b7d89ec63d75b31691cb67adc97e26b0837836678c12540d59617803cddb90d6d2db3d3c32c0253c5e0e7d07cb6472b15fd1507c960bb02aa2360c9e86c9654888d9993f671ef8e49caf8826f1354e85ab0e62255305cbca4ab5adc5814465d1b91abc52a991df8df0145d733fef5afd0faf039cc3fdde412db14ac94576c242383d763f9d11e3c5dbae374fad8383ba1a6c8d269663f2fe6b30387670f37e20f6ca82ae1997d91a3925980f27a54bb50a519d39de222ac38cb6e64590ecf33356056a004fd7fb6018c8430e59b75663a5a9face400f00c2cb099d9b5ddb124008c3434ff8531f034b171e058ea789904ed9be7154d2288301d4c2551682823f00fdf3aedf910df3f0d508ced2258390a148b4ccb69afbeafcbadf01fd2820749c455b60e0db3452ecce66c90d1ffdb5bdb071ccee320a85b4cf3363672406c8882eb3917efe65c7cf2974aff556dfcdda2e1f262d0720f314b93277003e33cd05370d7d4a58dcfcaef1c0063b85beb12962d9c60457ddb068ec082dc3753f333296273c73642674115ca6fde0f99a8f3131b71804c78e924b7fbd7ac80145da2952aa4e06341178d10941bb43d9f411a17289a713b535945b82abdbf758a118ded1edd93e0d7893bec4248b9e389639d147e001b20c0811aa4f1e342ce7193c2acb852d38c7eaa622a7e1743b474cf1e05b7af9b08af63139107ab8c201c0aa5b810697758b5e8d9f3f67a3184eb922ccf3cecaeb6598f2dbbed07963e5d2e99e452fe5aee6c9b571ace60dde0620b7f0bfba03e539dd8263b4b833fd7a138d2137f0ff5836422675f65164522f12399ddd851790e72bcfa7a0dcf129fcac97a679f55c9ce11db1bf7c67fbf627efb6453b9f9a909e66365e27f48de1cb5c908d669f0c8629933bbfe5f4d39136269e058213bd47238fc8ab1dfa2cc746422369cb711f37fcab2b42d3a5afaf1787f0e98c77fd53d1ff5b2e7ecfc3ffa8abad2c5dc43239f34325a9b8f6ebca5256b1c8e16eb0d61d4ea544088d6902617acf7648877d1396d2e3c0e19fcbb8afa133a8b7f21c902bc655d65a1e5268ba6843bb6209939089a52f57d120a25d0db6cbfcf9bbe5baa04feb448584f8900c81102836f31da1e6c6b0ba1ecc2930ba487892991370f4afa995be0f4743e9f046297b340eb257053d299981b946db870b6266e0a845d280ba44fb384c67e7d56e1236908c65a89dda1ba4af6fae16ac8d4de05b45abf697cb1a6b9e7e6524169b8cfca09c7f75c4f15204c4f101acdf811a41fe338d3e91ae470bf2495cf897feafcdb81391bbacea5ef21fccef83a7141d5288f19e2657efc0e5754aa5eee3e48c28f609c25530cdae4cee840a48bd5ad4100523c88a16a3ab12b1e5b96009868848f01de115fd916002ea066d639df0ac012e618b44a1291d627e5c67cdfe8acb855206f851a1a4975f1815612b5ccc09b5450a1c49c51e00b202ad18faff26959de9d2faf232330daf68112330274553580838a62aa9f870ffd953f81149f6724418c64c38df55cb3ca084838b35e12784f52dbf3c4e367639133a7c479b3266e46d781ed1310e598363dc64b5a1f73a06045b77ca4190b6d97529d393e9952c920f40f492c04c3dc651ac5c6c44ce8c4bb6a481b952475406bdf8ef7bc06ca35132fe8bc481b8243e5c579b8b0ad09b8d52cfa479e77c91ffce11f6ec2f3eba9647e58d7f4409af3d4c7140ccde9a2ac7c7909960bc662cd5407c66d6a54ee83bb011aaf21d526290078476f087a88b0b5bae6504a4c63d7dfd17cdb4a5c05a77724d9988f0cd6cf0072d0b7f54ee7357fd4f5aca50fdd2152edb150ad709f8667977430f8cebc7b8a8ed776a51b1ef770b99a91741d878163cd21384abf7bb9cdf864b3dfc8cb8529ea50ca8b27d9f2a37345778fe352c265bf2ec3ef3789d8a8d88be49e17e8d475ab59889fe662e5f9f5232bf201c52de085b6c7137b11f71fa22fc5e91f14bd4a69f5a8ddc6228c5a68035a33b550b4d0d95954cb36d49c15a69fc86f67be0d6c003d3768722d383fa77d00c7ec5b35d8bc33e70fa1d072c19b77842540221416f7d28a2797c1e15dcf3dc254b5f754dbbb29557686a96ca6447065d520e6bf0c642294658bf90e76f3d503ba0655d54d9637c0eef3675441fed6a11ef03b85d49ed9a74c8c312e2681174f078b1b2e13bad1cee64e1176a60bfa58a97fe4ac19a3823d365ac1afe8a420259b338fe799e624e81f1daf9e094ecafa6a9a1db621caa35b07557f8eafe6bcbed6619ee37af06720a337d02f1313086f91c9594443cbd1e480afc2ee294aad18467e23090f572b098b0940417329a4465f22dcbbbef2b8c94b68b0a28a9a04ca55702f025289fb0a4844fa6408cf2b814f90691acd19120cb2edaf13eef1aa64abc6cb5f4103c4b6ea8ee0740fb1948011ad8481639ef79df6835230c879182b9d30adc966a42101138a60e2e56d0859c728925c7fa181ed925f5b64c6fe50059a4a61528e8b5bee9b3fb11c2e5fb02d2f3c5a4baab75ef87df8bc3c814c466518d8103876e40d9c9b382595ac7f690b9fa27eeff527c7afa888ea9defbf92061f1c4d48b3d010fc9224de7ca1034341fac15c905fe1552d52a7de5558efaf1546ce61fd87aea5edb71cfce6a3897f3bbbad20af665ba85c7f8a7d5ff418bfad6f7eeabc21f51c7f5520363a85ad7ba5e6f2f9bd97e6cdd024aa00b0fb1dbb1863e6b43078d03af378b7228e9aff5dd49320f548fca344863212379dd75e46ab64a252ced9ebdcf1443cb647fc7ad6387c84ab40faaa9c64ad5d74da7922ed8691d6db65071a661b19188a61e2e84f013ab1ede8236c4cfec74616cb4af8b74c0f17ed6335c9065d1476fb611b56b6cf7d4857dd52cbb2c450c867f0b3ab6078097a7222f7ee9e6e9a4e6b7dd808d07ba54afc2720496e25346d298354da31cdc186f74aab1e7d3e2651f590d26025772705cb49acd66476788b23456086170d5850a69a3687b23420c9fc10542f90be157244468c5145f269e83b2377bac876b6d6cb345a481a9eaa80f1235bfe71692d541b045fb43242ca26c02edea5c316d976da9393bcceecfdc4480a0fc60815b2719cd60b2c3b4258e835d26547ae24462214703963d3e7be12315ab0dfbdd874cde6968aabc05da1072adf82a9931cb6af9dba9825b4276ded9ee8041d793cb97e929a67cfe3a173d9bb04fbf7b2947159c440622e768533c1ba1f8a767a06dc7832aa8c57d5b93ac38ada62b5bb629638a7a8e11772ad53313c77a2483b72258e0be5b1ff8c94e1ec8f33f6e0247dac431462db415a81bf95401ee06d3408e653d366fc2d0c1f9d81b6bc8f3275bfc1985849d508b50fa6399741a510a33649a29c41418570203cdd067d6caa84b99625aacb3a89ede13a9f8de792e0c6582925c6b06c21e7b327851ee0e2fdf490756a9cded460b0c467a893712221f7bdd826073a74e8ea2184cc2990f9aeeb4ed4246f1484b109e25f45dee95bd48369d166d17acbe1c043723b623563608d2d575f7a188ba71b258dd741a07d0e4f7a1fb05d259165f5d8c17e9e9a05bf35dd136dbf1b6a92c35c58a65855f459cc45b576a2b0e3b6a4a8a77b6f817dd121eeb92f370c86594919f5f10b874538fe37f7317992437d7c100ac81ba5aa9fdecd58f0f30300280a95bd6c4e722c35f16f2f9a3b47cf184021c7c6509b07a7a93310c3c7193ff28a208698f2c21345f1e2f82975bb0597cd15c81e2a5afd0598bca0bbd5943fefe41a7ea85ade763d1639f4824cdb1498bf224e5422e2b1d4ae97ef107061dee9601e151d15e15108652b9640a449b548e7394f9aee0407393f501e7ec04dc2372d0aeb80ec8db08a5cf0c1286afb65daa373ca9a6946a4245b3a30acab3bc2d6806ac4735ebe23e4d9aa716253d9dcbdf9e54c5e062046302528f0fa43e0e26052e3ad09789e501dd4e85ea043ba3795d51c449e78bdada27e1277d9e6ec14b79e52bae8c610612ba996acafb5c1a856b6fa2110c09e20d855a4d784fc11c80794ea0da9a01fc323dc883beb8b6ad2e3c98e7f68714a69deda62c8e3daad6635ad73e371e5eb1171be75bb436e436105bbb4e411635587dea8882bafc256c288451056f485dca32887be3aac918783bc84d5f70ddc41ceaaaac28d18e5181c6f2a7eb79e63034ff5dd84ebc2776c9eeaf8fd9fcbd9a523d6b836b3fe8a89427a488d62e6ec8324aa6f7902aac011c3326769e7e20e49284533e3167bf3958553bbee1358720c377a8c745ff76d175daa99b7efe35431bc28754f051e41383a8d82518defcf28424dfdfd4ef824c8d9dc81e7bfc69a623d3b6cb91ccdc4c87b318834621377c482210c5f894954a2dde4fb008e1d1e2980fe58f0f616b84168c38c34c162b14dac7052655534ba8d77cdd066689c33b5def900ffe5eb06f5fd96301224c7ce759436249fd97ba4ce540ade44ef430353bc336067a4e25fe49cba2fa1a5ff98b88e7616afc9a54215d44ea84fd862aa306c71e5d0bf3dbfa1bf9e523232457ff887b019da6cc850a4305c80f24518397abae928fe58a2dba76f190b7f96929deceb15c9b06029a990111f80009b8d31d998bd571034d84ef001b75cd60232c074864e7f38756347083e44860a32363b33e0d6026b84c0693bf0bdc8aec505d4b53a21441b8fb967f67121c6d1fc6be3c66171ae0c7c0f35e6f006e77d689c545afc9a3c2de187c93a932eb552cedb6a1be8dd5b4cfc348517895e4fcf73ecdb421e5a98ca6359e0950f52a8d892c783077dc199436fa925acfdcaa18d6fd13a93c3b3e16f9029a53e9bd2a284a09d756c181248ac69b057c975f26d992da553748f65da0d075aa3f84b53a440c2769dc990e42afe34b5b70a1d7938a5e988826d5438fa21cc4a989285791cc1aaa39fe9d75212d2be4765c6e9ddd064742af34afc696ee441b6e64cbd1addef90f9e815cb93ade55022807c28663fd7052159e4f2107b91ccd66fd2ac868d43e3de748f2f2100fc415a7b536758c34d98a5498b29ce6aee2e0c3d0816e9bb687a9eaaf88bf258081a1a42ba70c9af29b8d8ff1870c0faa0b74c2109295760cf6f66d57c90208d4299d51d4e8e4f0cc8ab30d791866551bb34594bd2c223063fb2d81e976a93a9ade8b4822b1281b426b851ffd5557bbed84b94620f898fa261440a4367df206d0e2d64e21070141704a82852079d1461c1f5be6335ae70f2fbb64bdee462d856c023cfac0cbbc79875a383b43a39f3498022ff433ec7fddf91322d3e61666528e01cc3309628c59b3189691934100bf1ec5e5305c9d1c822cfb7878ebf8e5cd103c691ab82f6dccc83ef3", 0x1000}], 0x2) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r8, 0x8926, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r9, 0x0, 0x0, 0x60, 0x0, 0x0) r11 = socket(0xa, 0x2, 0x0) r12 = dup(r11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000280), &(0x7f0000000080)=r12}, 0x20) r13 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r13, &(0x7f0000000a40), 0x239, 0x2100, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x58}}, 0x0) 757.034575ms ago: executing program 3 (id=704): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = gettid() r7 = getpid() rt_tgsigqueueinfo(r7, r6, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x2663}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 716.558836ms ago: executing program 2 (id=705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x19) 613.606731ms ago: executing program 2 (id=706): socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$audio1(0xffffffffffffff9c, 0x0, 0x161a02, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r4, &(0x7f0000000100)=""/54, 0x36) write$dsp(r3, &(0x7f00000001c0), 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) read$dsp(r4, &(0x7f0000000680)=""/113, 0xd5) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x2}}, 0x14}}, 0x4008000) syz_open_dev$radio(&(0x7f0000000040), 0xffffffffffffffff, 0x2) r5 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r8 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x4, 0x2, 0xffffffff}, &(0x7f00000000c0), &(0x7f00000003c0)) writev(r7, &(0x7f0000001800)=[{&(0x7f00000001c0)='*', 0x1}], 0x1) io_uring_enter(r8, 0x567, 0x0, 0x8, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, 0x0, 0x0) 561.154871ms ago: executing program 4 (id=707): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r7, &(0x7f0000000740)=""/384, 0x200008c0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x2663}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 412.984907ms ago: executing program 1 (id=708): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x7f, 0x100) r1 = epoll_create1(0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = socket$inet6(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setrlimit(0x3, &(0x7f0000000040)={0xe8, 0x7fffffff}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x7, 0x0, 0xfffffffe, 0x3fffe, 0xfffffffd, 0xfefffffc}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}, 0xd}, @in6={0xa, 0x4e23, 0x401, @mcast2, 0xb}], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="45d465ae569cc7ba438376d5ba28afb76c01d07bc93a008bde7b3ee78186f030b990439eefeccf2c88fc40de13d1fc15bba929c65e64acce0554a4a84c5a5d", @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES8=r3, @ANYRES32, @ANYRES64=r1, @ANYRES16=r0, @ANYRESHEX], 0x48) 0s ago: executing program 3 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0x6}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0']) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r2, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r4, {0xf}}, 0x18) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe909393fe089393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') kernel console output (not intermixed with test programs): 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.668465][ T6588] R13: 00007fee2e3b6128 R14: 00007fee2e3b6090 R15: 00007fff2c3f6a98 [ 121.668491][ T6588] [ 121.668524][ T6588] Mem-Info: [ 121.978582][ T6588] active_anon:8644 inactive_anon:0 isolated_anon:0 [ 121.978582][ T6588] active_file:4201 inactive_file:52137 isolated_file:0 [ 121.978582][ T6588] unevictable:1560 dirty:408 writeback:0 [ 121.978582][ T6588] slab_reclaimable:11480 slab_unreclaimable:94618 [ 121.978582][ T6588] mapped:31444 shmem:2481 pagetables:1218 [ 121.978582][ T6588] sec_pagetables:0 bounce:0 [ 121.978582][ T6588] kernel_misc_reclaimable:0 [ 121.978582][ T6588] free:1304442 free_pcp:16131 free_cma:0 [ 122.033802][ T6588] Node 0 active_anon:34576kB inactive_anon:0kB active_file:16804kB inactive_file:208348kB unevictable:4704kB isolated(anon):0kB isolated(file):0kB mapped:125776kB dirty:1632kB writeback:0kB shmem:8388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12164kB pagetables:4732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 122.072859][ T6588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 122.109489][ T6588] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.145054][ T6588] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 122.152228][ T6588] Node 0 DMA32 free:1308364kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34560kB inactive_anon:0kB active_file:16804kB inactive_file:207024kB unevictable:4704kB writepending:1632kB present:3129332kB managed:2539404kB mlocked:3248kB bounce:0kB free_pcp:43896kB local_pcp:26980kB free_cma:0kB [ 122.191525][ T6588] lowmem_reserve[]: 0 0 1 1 1 [ 122.198376][ T6588] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 122.234013][ T6588] lowmem_reserve[]: 0 0 0 0 0 [ 122.239927][ T6588] Node 1 Normal free:3894036kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20480kB local_pcp:12864kB free_cma:0kB [ 122.277760][ T6588] lowmem_reserve[]: 0 0 0 0 0 [ 122.283583][ T6588] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 122.303294][ T6588] Node 0 DMA32: 614*4kB (UME) 688*8kB (UME) 420*16kB (UM) 455*32kB (UME) 154*64kB (UME) 94*128kB (UM) 67*256kB (UM) 26*512kB (UM) 10*1024kB (UME) 8*2048kB (UM) 293*4096kB (M) = 1308344kB [ 122.327159][ T6588] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 122.342427][ T6588] Node 1 Normal: 207*4kB (UE) 57*8kB (UME) 39*16kB (UME) 61*32kB (UME) 22*64kB (UME) 5*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3894036kB [ 122.364937][ T6588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.376567][ T6588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.451757][ T6588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.596934][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 122.605496][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16998, setting to 1024 [ 122.619197][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.637924][ T6588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.671608][ T5911] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 122.685924][ T6588] 60718 total pagecache pages [ 122.735944][ T6588] 0 pages in swap cache [ 122.740973][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.752331][ T5911] usb 5-1: config 0 descriptor?? [ 123.010775][ T6588] Free swap = 124996kB [ 123.020912][ T6588] Total swap = 124996kB [ 123.025876][ T6588] 2097051 pages RAM [ 123.030931][ T6588] 0 pages HighMem/MovableOnly [ 123.042740][ T6588] 430238 pages reserved [ 123.053719][ T6588] 0 pages cma reserved [ 123.240439][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.287771][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.322759][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.358326][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.484238][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.500973][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.717559][ T6610] serio: Serial port ptm0 [ 124.846686][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 125.147848][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.172714][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 125.237045][ T2150] vhci_hcd: vhci_device speed not set [ 125.417390][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 125.466868][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.488728][ T5911] usb 5-1: USB disconnect, device number 10 [ 125.524335][ T6611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.616841][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 126.616853][ T30] audit: type=1400 audit(1755259258.488:435): avc: denied { read } for pid=6626 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.777160][ T30] audit: type=1326 audit(1755259258.648:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.0.172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad8878ebe9 code=0x0 [ 127.002362][ T6634] process 'syz.4.175' launched '/dev/fd/6' with NULL argv: empty string added [ 127.023504][ T30] audit: type=1400 audit(1755259258.868:437): avc: denied { execute } for pid=6630 comm="syz.4.175" dev="tmpfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.091984][ T30] audit: type=1400 audit(1755259258.888:438): avc: denied { execute_no_trans } for pid=6630 comm="syz.4.175" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.168438][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.452537][ T30] audit: type=1400 audit(1755259259.318:439): avc: denied { read write } for pid=6630 comm="syz.4.175" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.986955][ T30] audit: type=1400 audit(1755259259.348:440): avc: denied { open } for pid=6630 comm="syz.4.175" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 128.188023][ T30] audit: type=1400 audit(1755259259.508:441): avc: denied { read write } for pid=6640 comm="syz.1.174" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 128.258198][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.179'. [ 128.369123][ T6653] vivid-004: disconnect [ 128.409126][ T30] audit: type=1400 audit(1755259259.508:442): avc: denied { open } for pid=6640 comm="syz.1.174" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 128.410246][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.439108][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.486546][ T30] audit: type=1400 audit(1755259259.578:443): avc: denied { ioctl } for pid=6640 comm="syz.1.174" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11390 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.492202][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.526761][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.613393][ T30] audit: type=1400 audit(1755259259.628:444): avc: denied { create } for pid=6640 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 128.772823][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.784076][ T6667] PKCS7: Unknown OID: [5] (bad) [ 128.789958][ T6667] PKCS7: Only support pkcs7_signedData type [ 128.801948][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.927047][ T6668] befs: (nbd1): No write support. Marking filesystem read-only [ 128.938461][ T6668] syz.1.182: attempt to access beyond end of device [ 128.938461][ T6668] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 128.983272][ T5925] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 129.097289][ T6649] vivid-004: reconnect [ 129.219904][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 129.231948][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16998, setting to 1024 [ 129.250479][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.268197][ T5925] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 129.280271][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.546975][ T5925] usb 5-1: config 0 descriptor?? [ 130.023485][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.189848][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.418774][ T6692] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 130.434048][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.436549][ T2150] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 130.445400][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.462205][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.471298][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.626497][ T2150] usb 2-1: Using ep0 maxpacket: 8 [ 130.636131][ T2150] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.653526][ T2150] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 130.680690][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 130.703228][ T2150] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.760231][ T2150] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 130.771460][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.793288][ T2150] usb 2-1: SerialNumber: syz [ 131.099797][ T2150] usb 2-1: config 0 descriptor?? [ 131.128418][ T2150] hso 2-1:0.0: Can't find BULK IN endpoint [ 131.163604][ T5925] usbhid 5-1:0.0: can't add hid device: -71 [ 131.173894][ T5925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 131.214584][ T5925] usb 5-1: USB disconnect, device number 11 [ 131.370644][ T6678] netlink: 61 bytes leftover after parsing attributes in process `syz.1.186'. [ 131.401179][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.521998][ T6706] loop6: detected capacity change from 0 to 524287999 [ 131.538547][ T6706] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.549157][ T6706] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.560747][ T6706] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.571217][ T6706] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.581611][ T6706] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.592842][ T6706] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.603457][ T6706] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.615227][ T6706] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.625262][ T6706] ldm_validate_partition_table(): Disk read failed. [ 131.634394][ T6706] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.644741][ T6706] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.656238][ T6706] Dev loop6: unable to read RDB block 0 [ 131.666913][ T6706] loop6: unable to read partition table [ 131.675496][ T6706] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 131.803089][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.804718][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 131.804730][ T30] audit: type=1400 audit(1755259263.378:459): avc: denied { append } for pid=6702 comm="syz.2.193" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.869399][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.885819][ T30] audit: type=1400 audit(1755259263.658:460): avc: denied { create } for pid=6697 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 131.909455][ T30] audit: type=1400 audit(1755259263.658:461): avc: denied { setopt } for pid=6697 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 131.922482][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.988389][ T5925] usb 2-1: USB disconnect, device number 8 [ 132.009154][ T6712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'. [ 132.021601][ T6712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'. [ 132.361523][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.369122][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.417684][ T30] audit: type=1400 audit(1755259264.278:462): avc: denied { read write } for pid=6714 comm="syz.3.197" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.554765][ T30] audit: type=1400 audit(1755259264.278:463): avc: denied { open } for pid=6714 comm="syz.3.197" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.711254][ T30] audit: type=1400 audit(1755259264.518:464): avc: denied { ioctl } for pid=6724 comm="syz.0.199" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.888388][ T6730] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 133.010559][ T30] audit: type=1400 audit(1755259264.878:465): avc: denied { ioctl } for pid=6727 comm="syz.1.200" path="socket:[11558]" dev="sockfs" ino=11558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.203102][ T6730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.097764][ T5911] IPVS: starting estimator thread 0... [ 134.237134][ T6746] IPVS: using max 43 ests per chain, 103200 per kthread [ 134.386535][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.419911][ T30] audit: type=1400 audit(1755259266.288:466): avc: denied { getopt } for pid=6741 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.526615][ T5911] usb 3-1: device descriptor read/64, error -71 [ 135.142467][ T30] audit: type=1400 audit(1755259266.288:467): avc: denied { ioctl } for pid=6741 comm="syz.0.203" path="socket:[11190]" dev="sockfs" ino=11190 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.227636][ T30] audit: type=1400 audit(1755259267.088:468): avc: denied { read write } for pid=6758 comm="syz.1.208" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 135.237114][ T5911] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.418630][ T5911] usb 3-1: device descriptor read/64, error -71 [ 135.528363][ T5911] usb usb3-port1: attempt power cycle [ 135.756733][ T44] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 135.966692][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 136.138802][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.166564][ T5911] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.175739][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.187900][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.205064][ T44] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 136.216713][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.230604][ T5911] usb 3-1: device descriptor read/8, error -71 [ 136.272645][ T44] usb 5-1: config 0 descriptor?? [ 136.297173][ T6772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.486531][ T5911] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.493270][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.511448][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.511451][ T5911] usb 3-1: device descriptor read/8, error -71 [ 136.656714][ T5911] usb usb3-port1: unable to enumerate USB device [ 136.728784][ T44] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 136.739079][ T44] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 136.748505][ T44] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 136.758030][ T44] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 136.768018][ T44] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 136.779159][ T44] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 136.788830][ T44] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 136.798859][ T44] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 136.808396][ T44] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 136.818059][ T44] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 136.875776][ T44] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 137.082807][ T6744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.119019][ T44] usb 5-1: USB disconnect, device number 12 [ 137.178559][ T6777] fido_id[6777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 137.467212][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.497037][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.534314][ T6785] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 137.545849][ T6785] netlink: 34 bytes leftover after parsing attributes in process `syz.3.217'. [ 137.557929][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 137.588136][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 137.588169][ T30] audit: type=1400 audit(1755259269.438:476): avc: denied { setopt } for pid=6784 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.723765][ T30] audit: type=1400 audit(1755259269.588:477): avc: denied { block_suspend } for pid=6786 comm="syz.0.218" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.818036][ T6789] netlink: 'syz.4.219': attribute type 3 has an invalid length. [ 137.839386][ T6789] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.219'. [ 137.966321][ T30] audit: type=1400 audit(1755259269.828:478): avc: denied { create } for pid=6790 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.004771][ T6792] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.125341][ T30] audit: type=1400 audit(1755259269.898:479): avc: denied { write } for pid=6790 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.233319][ T30] audit: type=1400 audit(1755259270.088:480): avc: denied { write } for pid=6790 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.542430][ T30] audit: type=1400 audit(1755259270.368:481): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 139.726884][ T30] audit: type=1400 audit(1755259271.528:482): avc: denied { create } for pid=6794 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.773039][ T30] audit: type=1400 audit(1755259271.638:483): avc: denied { write } for pid=6805 comm="syz.4.223" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.922380][ T30] audit: type=1400 audit(1755259271.638:484): avc: denied { open } for pid=6805 comm="syz.4.223" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.001384][ T30] audit: type=1400 audit(1755259271.678:485): avc: denied { ioctl } for pid=6805 comm="syz.4.223" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 141.159444][ T6812] pim6reg9: entered allmulticast mode [ 142.086982][ T2150] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.198399][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.232'. [ 142.250143][ T2150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.292615][ T2150] usb 5-1: config 0 has no interfaces? [ 142.333187][ T2150] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 142.369429][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.406473][ T2150] usb 5-1: Product: syz [ 142.411584][ T2150] usb 5-1: Manufacturer: syz [ 142.426518][ T2150] usb 5-1: SerialNumber: syz [ 142.440151][ T6839] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.234' sets config #1 [ 142.443703][ T2150] usb 5-1: config 0 descriptor?? [ 142.522438][ T6843] dlm: no local IP address has been set [ 142.537922][ T6843] dlm: cannot start dlm midcomms -107 [ 142.729453][ T6848] [U] 1WT`8H$09\ [ 142.735801][ T6848] [U] ;2}ugVĥ#O9ե>-Sݢp [ 142.744265][ T6848] [U] 4XZ^Y)ഴmc. opOW [ 142.753135][ T6848] [U] %Z [ 142.756973][ T6848] [U] 8`}[Tj#Z~3µݥI~D%8@7j|{9dce+Ok?%6 [ 142.935284][ T6842] [U] p>BЍZ% [ 143.545724][ T6859] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 143.555419][ T6859] netlink: 216 bytes leftover after parsing attributes in process `syz.1.241'. [ 143.603465][ T6855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.973181][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 143.973193][ T30] audit: type=1400 audit(1755259275.838:496): avc: denied { ioctl } for pid=6873 comm="syz.0.244" path="socket:[11947]" dev="sockfs" ino=11947 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.167472][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 144.181208][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 144.331328][ T30] audit: type=1400 audit(1755259276.188:497): avc: denied { ioctl } for pid=6884 comm="syz.1.248" path="socket:[11970]" dev="sockfs" ino=11970 ioctlcmd=0x3b71 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.346521][ T6885] 9pnet_fd: Insufficient options for proto=fd [ 144.375848][ T6887] FAULT_INJECTION: forcing a failure. [ 144.375848][ T6887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.405794][ T6887] CPU: 1 UID: 0 PID: 6887 Comm: syz.0.249 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 144.405820][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.405831][ T6887] Call Trace: [ 144.405837][ T6887] [ 144.405844][ T6887] dump_stack_lvl+0x16c/0x1f0 [ 144.405867][ T6887] should_fail_ex+0x512/0x640 [ 144.405899][ T6887] _copy_from_user+0x2e/0xd0 [ 144.405922][ T6887] core_sys_select+0x2c8/0xc10 [ 144.405947][ T6887] ? __pfx_core_sys_select+0x10/0x10 [ 144.405990][ T6887] ? set_user_sigmask+0x21b/0x2b0 [ 144.406012][ T6887] ? __pfx_set_user_sigmask+0x10/0x10 [ 144.406037][ T6887] do_pselect.constprop.0+0x19f/0x1e0 [ 144.406058][ T6887] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 144.406086][ T6887] __x64_sys_pselect6+0x182/0x240 [ 144.406107][ T6887] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 144.406134][ T6887] do_syscall_64+0xcd/0x4c0 [ 144.406154][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.406172][ T6887] RIP: 0033:0x7fad8878ebe9 [ 144.406186][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.406203][ T6887] RSP: 002b:00007fad895d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 144.406220][ T6887] RAX: ffffffffffffffda RBX: 00007fad889b5fa0 RCX: 00007fad8878ebe9 [ 144.406232][ T6887] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000040 [ 144.406242][ T6887] RBP: 00007fad895d2090 R08: 0000000000000000 R09: 0000000000000000 [ 144.406253][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.406262][ T6887] R13: 00007fad889b6038 R14: 00007fad889b5fa0 R15: 00007fff795bf518 [ 144.406286][ T6887] [ 144.437630][ T30] audit: type=1400 audit(1755259276.198:498): avc: denied { read } for pid=6884 comm="syz.1.248" dev="sockfs" ino=11970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.445374][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 144.733212][ T5911] usb 5-1: USB disconnect, device number 13 [ 144.874530][ T6902] PKCS7: Unknown OID: [5] (bad) [ 145.363111][ T6902] PKCS7: Only support pkcs7_signedData type [ 145.780745][ T6906] befs: (nbd4): No write support. Marking filesystem read-only [ 145.796735][ T6906] syz.4.253: attempt to access beyond end of device [ 145.796735][ T6906] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 146.192832][ T6915] netlink: 'syz.4.257': attribute type 3 has an invalid length. [ 146.307027][ T6921] FAULT_INJECTION: forcing a failure. [ 146.307027][ T6921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.326137][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.4.258 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 146.326165][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.326176][ T6921] Call Trace: [ 146.326182][ T6921] [ 146.326189][ T6921] dump_stack_lvl+0x16c/0x1f0 [ 146.326213][ T6921] should_fail_ex+0x512/0x640 [ 146.326236][ T6921] _copy_from_user+0x2e/0xd0 [ 146.326260][ T6921] copy_msghdr_from_user+0x98/0x160 [ 146.326278][ T6921] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 146.326308][ T6921] ___sys_sendmsg+0xfe/0x1d0 [ 146.326328][ T6921] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.326368][ T6921] ? __mutex_unlock_slowpath+0x100/0x800 [ 146.326395][ T6921] __sys_sendmsg+0x16d/0x220 [ 146.326417][ T6921] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.326449][ T6921] do_syscall_64+0xcd/0x4c0 [ 146.326470][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.326488][ T6921] RIP: 0033:0x7f8a8558ebe9 [ 146.326503][ T6921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.326519][ T6921] RSP: 002b:00007f8a86474038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.326536][ T6921] RAX: ffffffffffffffda RBX: 00007f8a857b5fa0 RCX: 00007f8a8558ebe9 [ 146.326547][ T6921] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 146.326557][ T6921] RBP: 00007f8a86474090 R08: 0000000000000000 R09: 0000000000000000 [ 146.326567][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.326577][ T6921] R13: 00007f8a857b6038 R14: 00007f8a857b5fa0 R15: 00007ffe08aa0328 [ 146.326601][ T6921] [ 146.558471][ T6923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.260'. [ 146.574635][ T30] audit: type=1400 audit(1755259278.438:499): avc: denied { create } for pid=6922 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 146.783873][ T30] audit: type=1400 audit(1755259278.648:500): avc: denied { write } for pid=6924 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.321489][ T6913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.683324][ T6933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.459377][ T5925] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 148.748245][ T5925] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 148.791652][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.839402][ T5925] usb 2-1: config 0 has no interface number 0 [ 149.115953][ T5925] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 149.148593][ T5925] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 149.191628][ T5925] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 149.203980][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.455398][ T5925] usb 2-1: Product: syz [ 149.460799][ T6965] PKCS7: Unknown OID: [5] (bad) [ 149.466838][ T6965] PKCS7: Only support pkcs7_signedData type [ 149.473915][ T5925] usb 2-1: Manufacturer: syz [ 149.556528][ T6966] befs: (nbd4): No write support. Marking filesystem read-only [ 149.566282][ T6966] syz.4.268: attempt to access beyond end of device [ 149.566282][ T6966] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 149.641804][ T5925] usb 2-1: SerialNumber: syz [ 149.829925][ T5925] usb 2-1: config 0 descriptor?? [ 150.160638][ T5925] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 150.162628][ T30] audit: type=1400 audit(1755259281.808:501): avc: denied { setopt } for pid=6970 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.208307][ T5925] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 150.234270][ T5925] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 150.253988][ T6974] FAULT_INJECTION: forcing a failure. [ 150.253988][ T6974] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 150.285805][ T6974] CPU: 0 UID: 0 PID: 6974 Comm: syz.4.272 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 150.285829][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.285838][ T6974] Call Trace: [ 150.285844][ T6974] [ 150.285851][ T6974] dump_stack_lvl+0x16c/0x1f0 [ 150.285873][ T6974] should_fail_ex+0x512/0x640 [ 150.285894][ T6974] should_fail_alloc_page+0xe7/0x130 [ 150.285915][ T6974] prepare_alloc_pages+0x3c2/0x610 [ 150.285942][ T6974] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 150.285958][ T6974] ? arch_stack_walk+0xa6/0x100 [ 150.285988][ T6974] ? stack_trace_save+0x8e/0xc0 [ 150.286009][ T6974] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 150.286025][ T6974] ? rcu_is_watching+0x12/0xc0 [ 150.286059][ T6974] ? kasan_save_track+0x14/0x30 [ 150.286074][ T6974] ? __kasan_slab_alloc+0x89/0x90 [ 150.286091][ T6974] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 150.286106][ T6974] ? __pmd_alloc+0xbf/0x930 [ 150.286127][ T6974] ? __handle_mm_fault+0xa06/0x2a50 [ 150.286150][ T6974] ? handle_mm_fault+0x589/0xd10 [ 150.286172][ T6974] ? do_user_addr_fault+0x7a6/0x1370 [ 150.286188][ T6974] ? exc_page_fault+0x5c/0xb0 [ 150.286202][ T6974] ? asm_exc_page_fault+0x26/0x30 [ 150.286218][ T6974] ? rep_movs_alternative+0xf/0x90 [ 150.286239][ T6974] ? _copy_from_user+0x98/0xd0 [ 150.286259][ T6974] ? do_sock_getsockopt+0x3ca/0x440 [ 150.286279][ T6974] ? __sys_getsockopt+0x12f/0x260 [ 150.286293][ T6974] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.286314][ T6974] ? policy_nodemask+0xea/0x4e0 [ 150.286335][ T6974] alloc_pages_mpol+0x1fb/0x550 [ 150.286356][ T6974] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 150.286383][ T6974] alloc_pages_noprof+0x131/0x390 [ 150.286403][ T6974] pte_alloc_one+0x1c/0x3a0 [ 150.286426][ T6974] __pte_alloc+0x6d/0x3c0 [ 150.286445][ T6974] ? __pfx___pte_alloc+0x10/0x10 [ 150.286466][ T6974] ? do_raw_spin_lock+0x12c/0x2b0 [ 150.286487][ T6974] do_pte_missing+0x285a/0x3ba0 [ 150.286512][ T6974] ? do_raw_spin_unlock+0x172/0x230 [ 150.286532][ T6974] ? _raw_spin_unlock+0x28/0x50 [ 150.286556][ T6974] ? __pmd_alloc+0x3fb/0x930 [ 150.286579][ T6974] __handle_mm_fault+0x152a/0x2a50 [ 150.286603][ T6974] ? mt_find+0x3ef/0xa30 [ 150.286620][ T6974] ? __pfx___handle_mm_fault+0x10/0x10 [ 150.286640][ T6974] ? __pfx_mt_find+0x10/0x10 [ 150.286667][ T6974] ? find_vma+0xbf/0x140 [ 150.286683][ T6974] ? __pfx_find_vma+0x10/0x10 [ 150.286702][ T6974] handle_mm_fault+0x589/0xd10 [ 150.286723][ T6974] ? __bpf_trace_exceptions+0x1/0x40 [ 150.286747][ T6974] do_user_addr_fault+0x7a6/0x1370 [ 150.286764][ T6974] ? rcu_is_watching+0x12/0xc0 [ 150.286783][ T6974] exc_page_fault+0x5c/0xb0 [ 150.286798][ T6974] asm_exc_page_fault+0x26/0x30 [ 150.286811][ T6974] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 150.286831][ T6974] Code: c4 10 e9 54 23 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 150.286845][ T6974] RSP: 0018:ffffc9001baa7d70 EFLAGS: 00050202 [ 150.286857][ T6974] RAX: 0000000000000001 RBX: 0000200000000080 RCX: 0000000000000004 [ 150.286866][ T6974] RDX: fffff52003754fbc RSI: 0000200000000080 RDI: ffffc9001baa7de0 [ 150.286875][ T6974] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52003754fbc [ 150.286884][ T6974] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 150.286892][ T6974] R13: ffffc9001baa7de0 R14: 0000000000000000 R15: 0000000000000000 [ 150.286913][ T6974] _copy_from_user+0x98/0xd0 [ 150.286932][ T6974] do_sock_getsockopt+0x3ca/0x440 [ 150.286950][ T6974] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 150.286967][ T6974] ? __fget_files+0x204/0x3c0 [ 150.286993][ T6974] __sys_getsockopt+0x12f/0x260 [ 150.287011][ T6974] __x64_sys_getsockopt+0xbd/0x160 [ 150.287023][ T6974] ? do_syscall_64+0x91/0x4c0 [ 150.287043][ T6974] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.287056][ T6974] do_syscall_64+0xcd/0x4c0 [ 150.287072][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.287086][ T6974] RIP: 0033:0x7f8a8558ebe9 [ 150.287097][ T6974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.287110][ T6974] RSP: 002b:00007f8a86474038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 150.287122][ T6974] RAX: ffffffffffffffda RBX: 00007f8a857b5fa0 RCX: 00007f8a8558ebe9 [ 150.287131][ T6974] RDX: 000000000000001c RSI: 0000000000000084 RDI: 0000000000000003 [ 150.287140][ T6974] RBP: 00007f8a86474090 R08: 0000200000000080 R09: 0000000000000000 [ 150.287148][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.287157][ T6974] R13: 00007f8a857b6038 R14: 00007f8a857b5fa0 R15: 00007ffe08aa0328 [ 150.287177][ T6974] [ 150.833378][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.853387][ T30] audit: type=1400 audit(1755259281.808:502): avc: denied { bind } for pid=6970 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.876347][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.884344][ T30] audit: type=1400 audit(1755259281.808:503): avc: denied { name_bind } for pid=6970 comm="syz.0.271" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 150.909041][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.916932][ T30] audit: type=1400 audit(1755259281.808:504): avc: denied { node_bind } for pid=6970 comm="syz.0.271" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 150.943174][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.995344][ T30] audit: type=1400 audit(1755259282.858:505): avc: denied { ioctl } for pid=6976 comm="syz.2.273" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.051964][ T30] audit: type=1400 audit(1755259282.858:506): avc: denied { set_context_mgr } for pid=6976 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 151.075547][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.084805][ T30] audit: type=1400 audit(1755259282.908:507): avc: denied { map } for pid=6976 comm="syz.2.273" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.113055][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.120361][ T30] audit: type=1400 audit(1755259282.908:508): avc: denied { call } for pid=6976 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 151.142755][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.150888][ T30] audit: type=1400 audit(1755259282.908:509): avc: denied { ioctl } for pid=6976 comm="syz.2.273" path="socket:[12773]" dev="sockfs" ino=12773 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.180186][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.981182][ T6991] dlm: no local IP address has been set [ 152.006931][ T2150] usb 2-1: USB disconnect, device number 9 [ 152.056585][ T2150] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 152.337691][ T6991] dlm: cannot start dlm midcomms -107 [ 152.374887][ T30] audit: type=1400 audit(1755259284.238:510): avc: denied { ioctl } for pid=6987 comm="syz.3.279" path="socket:[13436]" dev="sockfs" ino=13436 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 152.421249][ T6997] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 152.749100][ T2150] cyberjack 2-1:0.69: device disconnected [ 152.852773][ T6997] netlink: 224 bytes leftover after parsing attributes in process `syz.3.279'. [ 153.225043][ T7009] PKCS7: Unknown OID: [5] (bad) [ 153.230925][ T7009] PKCS7: Only support pkcs7_signedData type [ 153.316743][ T7010] befs: (nbd2): No write support. Marking filesystem read-only [ 153.330305][ T7010] syz.2.283: attempt to access beyond end of device [ 153.330305][ T7010] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 154.865915][ T7031] Bluetooth: MGMT ver 1.23 [ 154.893560][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.903638][ T7031] batadv_slave_0: entered promiscuous mode [ 155.125047][ T7037] netlink: 92 bytes leftover after parsing attributes in process `syz.0.289'. [ 155.142484][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.289'. [ 155.456522][ T7047] syz.3.293 uses obsolete (PF_INET,SOCK_PACKET) [ 156.107882][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 156.123828][ T30] audit: type=1400 audit(1755259287.978:517): avc: denied { create } for pid=7053 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 156.174280][ T30] audit: type=1400 audit(1755259287.988:518): avc: denied { bind } for pid=7053 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 156.425201][ T7063] binder: 7061:7063 ioctl c0306201 0 returned -14 [ 156.958701][ T30] audit: type=1400 audit(1755259288.668:519): avc: denied { listen } for pid=7068 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.428372][ T30] audit: type=1400 audit(1755259289.298:520): avc: denied { ioctl } for pid=7066 comm="syz.2.298" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 157.534387][ T30] audit: type=1400 audit(1755259289.358:521): avc: denied { connect } for pid=7070 comm="syz.3.301" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.558574][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.286531][ T30] audit: type=1400 audit(1755259291.078:522): avc: denied { sqpoll } for pid=7106 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.309357][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.631238][ T30] audit: type=1400 audit(1755259291.498:523): avc: denied { setopt } for pid=7112 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 160.697097][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.709169][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.126587][ T5911] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.996656][ T30] audit: type=1400 audit(1755259293.868:524): avc: denied { bind } for pid=7125 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.158818][ T7129] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.202844][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.499507][ T5911] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 162.553072][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.649394][ T5911] usb 5-1: config 0 descriptor?? [ 163.636683][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.674438][ T30] audit: type=1400 audit(1755259295.538:525): avc: denied { map } for pid=7121 comm="syz.4.314" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.712177][ T7158] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 164.501889][ T30] audit: type=1400 audit(1755259295.538:526): avc: denied { execute } for pid=7121 comm="syz.4.314" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 164.619825][ T30] audit: type=1326 audit(1755259296.488:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.0.326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad8878ebe9 code=0x0 [ 165.232638][ T30] audit: type=1400 audit(1755259296.948:528): avc: denied { ioctl } for pid=7170 comm="syz.1.327" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 165.306537][ T6119] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 165.516567][ T5892] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 165.569913][ T6119] usb 1-1: not running at top speed; connect to a high speed hub [ 165.589049][ T6119] usb 1-1: config 4 has an invalid interface number: 243 but max is 1 [ 165.680126][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.696849][ T5892] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 165.715144][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.737112][ T7185] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.329'. [ 165.775500][ T30] audit: type=1400 audit(1755259297.628:529): avc: denied { ioctl } for pid=7183 comm="syz.1.329" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.816679][ T6119] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 165.818301][ T5892] usb 3-1: config 0 descriptor?? [ 165.865078][ T6119] usb 1-1: config 4 has an invalid interface number: 171 but max is 1 [ 165.912059][ T6119] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 165.926547][ T6119] usb 1-1: config 4 has an invalid interface number: 4 but max is 1 [ 165.936290][ T6119] usb 1-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 165.947780][ T6119] usb 1-1: config 4 has no interface number 0 [ 165.955153][ T6119] usb 1-1: config 4 has no interface number 1 [ 165.962941][ T6119] usb 1-1: config 4 has no interface number 2 [ 165.979298][ T6119] usb 1-1: config 4 interface 243 altsetting 214 endpoint 0x5 has invalid maxpacket 31079, setting to 1023 [ 165.994551][ T6119] usb 1-1: config 4 interface 243 altsetting 214 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 166.009566][ T6119] usb 1-1: config 4 interface 243 altsetting 214 endpoint 0x8 has invalid maxpacket 1024, setting to 1023 [ 166.034838][ T6119] usb 1-1: config 4 interface 243 altsetting 214 endpoint 0xC has invalid maxpacket 616, setting to 64 [ 166.072220][ T6119] usb 1-1: config 4 interface 243 altsetting 214 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 166.091952][ T6119] usb 1-1: config 4 interface 171 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 166.105658][ T6119] usb 1-1: config 4 interface 171 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 166.121791][ T6119] usb 1-1: config 4 interface 171 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 166.139239][ T6119] usb 1-1: config 4 interface 171 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 166.157958][ T6119] usb 1-1: config 4 interface 171 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 166.171354][ T6119] usb 1-1: config 4 interface 171 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 166.186004][ T6119] usb 1-1: config 4 interface 171 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 166.199564][ T6119] usb 1-1: config 4 interface 171 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 166.216465][ T6119] usb 1-1: config 4 interface 171 altsetting 5 has 8 endpoint descriptors, different from the interface descriptor's value: 12 [ 166.234148][ T6119] usb 1-1: too many endpoints for config 4 interface 4 altsetting 57: 44, using maximum allowed: 30 [ 166.247809][ T6119] usb 1-1: config 4 interface 4 altsetting 57 has a duplicate endpoint with address 0xE, skipping [ 166.263434][ T5892] uclogic 0003:5543:0522.0004: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 166.324514][ T6119] usb 1-1: config 4 interface 4 altsetting 57 has an invalid descriptor for endpoint zero, skipping [ 166.369781][ T6119] usb 1-1: config 4 interface 4 altsetting 57 has a duplicate endpoint with address 0x8, skipping [ 166.416508][ T6119] usb 1-1: config 4 interface 4 altsetting 57 has a duplicate endpoint with address 0xE, skipping [ 166.461327][ T6119] usb 1-1: config 4 interface 4 altsetting 57 has 4 endpoint descriptors, different from the interface descriptor's value: 44 [ 166.475420][ T5892] usb 3-1: USB disconnect, device number 8 [ 166.490481][ T7189] fido_id[7189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 166.527364][ T6119] usb 1-1: config 4 interface 243 has no altsetting 0 [ 166.550903][ T6119] usb 1-1: config 4 interface 171 has no altsetting 0 [ 166.572161][ T6119] usb 1-1: config 4 interface 4 has no altsetting 0 [ 166.591315][ T6119] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9312, bcdDevice=70.91 [ 166.616034][ T6119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.637964][ T6119] usb 1-1: Product: syz [ 166.701055][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.711462][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.724186][ T7193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'. [ 166.861463][ T6119] usb 1-1: Manufacturer: syz [ 166.875799][ T6119] usb 1-1: SerialNumber: syz [ 166.901332][ T7172] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.015293][ T5911] usb 5-1: USB disconnect, device number 14 [ 167.168822][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 167.239910][ T7203] FAULT_INJECTION: forcing a failure. [ 167.239910][ T7203] name failslab, interval 1, probability 0, space 0, times 0 [ 167.264689][ T7203] CPU: 0 UID: 0 PID: 7203 Comm: syz.4.333 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 167.264715][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.264725][ T7203] Call Trace: [ 167.264731][ T7203] [ 167.264741][ T7203] dump_stack_lvl+0x16c/0x1f0 [ 167.264763][ T7203] should_fail_ex+0x512/0x640 [ 167.264782][ T7203] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 167.264805][ T7203] should_failslab+0xc2/0x120 [ 167.264825][ T7203] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 167.264843][ T7203] ? kasan_save_stack+0x33/0x60 [ 167.264858][ T7203] ? kasan_save_track+0x14/0x30 [ 167.264874][ T7203] ? __kasan_kmalloc+0x21/0xb0 [ 167.264888][ T7203] ? v9fs_session_init+0xf4/0x1a80 [ 167.264917][ T7203] kstrdup+0x53/0x100 [ 167.264935][ T7203] v9fs_session_init+0xf4/0x1a80 [ 167.264970][ T7203] ? __pfx_v9fs_session_init+0x10/0x10 [ 167.265010][ T7203] v9fs_mount+0xc5/0xa90 [ 167.265026][ T7203] ? __pfx_v9fs_mount+0x10/0x10 [ 167.265044][ T7203] ? cap_capable+0xb3/0x250 [ 167.265065][ T7203] ? __pfx_v9fs_mount+0x10/0x10 [ 167.265082][ T7203] legacy_get_tree+0x10c/0x220 [ 167.265106][ T7203] vfs_get_tree+0x8b/0x340 [ 167.265131][ T7203] path_mount+0x1482/0x1fd0 [ 167.265157][ T7203] ? __pfx_path_mount+0x10/0x10 [ 167.265180][ T7203] ? kmem_cache_free+0x2d1/0x4d0 [ 167.265195][ T7203] ? putname+0x154/0x1a0 [ 167.265220][ T7203] ? putname+0x154/0x1a0 [ 167.265244][ T7203] ? __x64_sys_mount+0x28d/0x310 [ 167.265264][ T7203] __x64_sys_mount+0x28d/0x310 [ 167.265285][ T7203] ? __pfx___x64_sys_mount+0x10/0x10 [ 167.265308][ T7203] ? fd_install+0x244/0x750 [ 167.265330][ T7203] do_syscall_64+0xcd/0x4c0 [ 167.265351][ T7203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.265369][ T7203] RIP: 0033:0x7f8a8558ebe9 [ 167.265384][ T7203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.265401][ T7203] RSP: 002b:00007f8a86474038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.265419][ T7203] RAX: ffffffffffffffda RBX: 00007f8a857b5fa0 RCX: 00007f8a8558ebe9 [ 167.265431][ T7203] RDX: 0000200000004500 RSI: 0000200000000200 RDI: 0000000000000000 [ 167.265442][ T7203] RBP: 00007f8a86474090 R08: 0000200000000280 R09: 0000000000000000 [ 167.265453][ T7203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.265464][ T7203] R13: 00007f8a857b6038 R14: 00007f8a857b5fa0 R15: 00007ffe08aa0328 [ 167.265488][ T7203] [ 168.612448][ T30] audit: type=1400 audit(1755259300.108:530): avc: denied { setopt } for pid=7211 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.891763][ T7209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.368669][ T6119] ftdi_sio 1-1:4.243: FTDI USB Serial Device converter detected [ 169.388006][ T6119] ftdi_sio ttyUSB0: unknown device type: 0x7091 [ 169.407367][ T6119] ftdi_sio 1-1:4.171: FTDI USB Serial Device converter detected [ 169.422348][ T6119] ftdi_sio ttyUSB1: unknown device type: 0x7091 [ 169.484369][ T6119] ftdi_sio 1-1:4.4: FTDI USB Serial Device converter detected [ 169.495387][ T6119] ftdi_sio ttyUSB2: unknown device type: 0x7091 [ 169.525368][ T6119] usb 1-1: USB disconnect, device number 7 [ 169.841763][ T30] audit: type=1400 audit(1755259301.608:531): avc: denied { read } for pid=7226 comm="syz.4.340" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.897991][ T6119] ftdi_sio 1-1:4.243: device disconnected [ 169.942957][ T6119] ftdi_sio 1-1:4.171: device disconnected [ 169.972063][ T6119] ftdi_sio 1-1:4.4: device disconnected [ 169.998812][ T30] audit: type=1400 audit(1755259301.618:532): avc: denied { open } for pid=7226 comm="syz.4.340" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 170.370656][ T30] audit: type=1400 audit(1755259302.148:533): avc: denied { map } for pid=7234 comm="syz.3.342" path="socket:[14008]" dev="sockfs" ino=14008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 170.545408][ T30] audit: type=1400 audit(1755259302.278:534): avc: denied { accept } for pid=7229 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 170.593145][ T7230] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.339' sets config #6 [ 170.604990][ T30] audit: type=1400 audit(1755259302.278:535): avc: denied { ioctl } for pid=7229 comm="syz.0.341" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 170.697245][ T30] audit: type=1400 audit(1755259302.448:536): avc: denied { read write } for pid=7225 comm="syz.1.339" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 170.799968][ T30] audit: type=1400 audit(1755259302.448:537): avc: denied { open } for pid=7225 comm="syz.1.339" path="/60/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 171.187760][ T30] audit: type=1400 audit(1755259302.468:538): avc: denied { mount } for pid=7240 comm="syz.4.343" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 171.944473][ T30] audit: type=1400 audit(1755259303.808:539): avc: denied { read write } for pid=7262 comm="syz.1.349" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 172.364229][ T7270] overlayfs: missing 'workdir' [ 173.787689][ T5851] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 174.057423][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 174.963603][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 174.963619][ T30] audit: type=1400 audit(1755259306.808:541): avc: denied { append } for pid=7305 comm="syz.3.361" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 175.649107][ T30] audit: type=1400 audit(1755259307.328:542): avc: denied { connect } for pid=7319 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 177.021052][ T7337] netlink: 'syz.4.368': attribute type 4 has an invalid length. [ 177.251219][ T7343] netlink: 64 bytes leftover after parsing attributes in process `syz.1.369'. [ 177.349857][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.372187][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.394183][ T30] audit: type=1400 audit(1755259309.258:543): avc: denied { write } for pid=7344 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.537578][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 178.450464][ T7362] dlm: no local IP address has been set [ 178.457297][ T7362] dlm: cannot start dlm midcomms -107 [ 179.213783][ T30] audit: type=1326 audit(1755259311.078:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.0.378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad8878ebe9 code=0x0 [ 179.689192][ T30] audit: type=1400 audit(1755259311.558:545): avc: denied { setopt } for pid=7388 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.668351][ T7400] netlink: 'syz.3.384': attribute type 1 has an invalid length. [ 180.681342][ T7400] netlink: 224 bytes leftover after parsing attributes in process `syz.3.384'. [ 181.365327][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.401223][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.832451][ T7418] tc_dump_action: action bad kind [ 181.886550][ T5892] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 181.927984][ T7414] veth3: entered allmulticast mode [ 182.046557][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 182.147447][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 182.261663][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.274146][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.286239][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 182.485215][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 182.959408][ T30] audit: type=1400 audit(1755259314.458:546): avc: denied { write } for pid=7423 comm="syz.1.392" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 183.088278][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 183.135210][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.277273][ T5892] usb 3-1: config 0 descriptor?? [ 183.338972][ T30] audit: type=1400 audit(1755259315.208:547): avc: denied { read } for pid=7432 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.464035][ T5850] Bluetooth: hci5: urb ffff888029c27500 submission failed (90) [ 183.506105][ T30] audit: type=1400 audit(1755259315.368:548): avc: denied { bind } for pid=7436 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.734346][ T30] audit: type=1400 audit(1755259315.538:549): avc: denied { watch } for pid=7436 comm="syz.0.395" path="/82" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.767572][ T30] audit: type=1400 audit(1755259315.538:550): avc: denied { watch_sb watch_reads } for pid=7436 comm="syz.0.395" path="/82" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.794960][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.899120][ T30] audit: type=1400 audit(1755259315.548:551): avc: denied { mount } for pid=7436 comm="syz.0.395" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 183.924987][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.031904][ T5892] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 184.092672][ T30] audit: type=1400 audit(1755259315.768:552): avc: denied { read write } for pid=7444 comm="syz.4.396" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 184.121893][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.187275][ T5892] usb 2-1: device descriptor read/64, error -71 [ 184.190540][ T30] audit: type=1400 audit(1755259315.768:553): avc: denied { open } for pid=7444 comm="syz.4.396" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 184.223859][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.289886][ T30] audit: type=1400 audit(1755259316.158:554): avc: denied { map } for pid=7450 comm="syz.3.397" path="socket:[15567]" dev="sockfs" ino=15567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 184.318129][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.442333][ T30] audit: type=1400 audit(1755259316.308:555): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 184.467802][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.478013][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.488988][ T5892] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 185.176536][ T5892] usb 2-1: device descriptor read/64, error -71 [ 185.699658][ T5892] usb usb2-port1: attempt power cycle [ 185.716616][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 185.723819][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 185.727632][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 186.094042][ T6119] usb 3-1: USB disconnect, device number 9 [ 186.197537][ T5892] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 186.228644][ T5892] usb 2-1: device descriptor read/8, error -71 [ 186.527342][ T5892] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.792803][ T7474] PKCS7: Unknown OID: [5] (bad) [ 186.799054][ T5892] usb 2-1: device not accepting address 13, error -71 [ 186.820436][ T7474] PKCS7: Only support pkcs7_signedData type [ 186.840286][ T5892] usb usb2-port1: unable to enumerate USB device [ 186.997792][ T7476] befs: (nbd4): No write support. Marking filesystem read-only [ 187.009298][ T7476] syz.4.402: attempt to access beyond end of device [ 187.009298][ T7476] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 187.218552][ T7479] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.404' sets config #6 [ 187.602255][ T7484] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 187.611634][ T7484] netlink: 224 bytes leftover after parsing attributes in process `syz.0.405'. [ 189.031916][ T7508] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 189.041757][ T7508] netlink: 224 bytes leftover after parsing attributes in process `syz.3.414'. [ 189.086740][ T30] audit: type=1400 audit(1755259320.868:556): avc: denied { execute } for pid=7507 comm="syz.2.415" dev="hugetlbfs" ino=15017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 189.159588][ T30] audit: type=1400 audit(1755259320.878:557): avc: denied { execute_no_trans } for pid=7507 comm="syz.2.415" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=15017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 189.869882][ T7519] dlm: no local IP address has been set [ 189.882691][ T7519] dlm: cannot start dlm midcomms -107 [ 190.303090][ T7532] dlm: no local IP address has been set [ 190.322959][ T7532] dlm: cannot start dlm midcomms -107 [ 190.331985][ T7535] dlm: no local IP address has been set [ 190.341569][ T7535] dlm: cannot start dlm midcomms -107 [ 193.803582][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 193.808559][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.828885][ T7580] PKCS7: Unknown OID: [5] (bad) [ 193.855208][ T7580] PKCS7: Only support pkcs7_signedData type [ 194.462437][ T30] audit: type=1400 audit(1755259326.018:558): avc: denied { connect } for pid=7577 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 194.598952][ T7583] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 194.745124][ T7582] befs: (nbd3): No write support. Marking filesystem read-only [ 194.766378][ T7582] syz.3.433: attempt to access beyond end of device [ 194.766378][ T7582] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 195.319800][ T30] audit: type=1400 audit(1755259327.178:559): avc: denied { connect } for pid=7593 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.435921][ T7599] fuse: Bad value for 'fd' [ 195.579046][ T7607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.594075][ T30] audit: type=1400 audit(1755259327.438:560): avc: denied { listen } for pid=7593 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 198.454931][ T30] audit: type=1400 audit(1755259330.318:561): avc: denied { create } for pid=7629 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 198.544621][ T30] audit: type=1400 audit(1755259330.318:562): avc: denied { read } for pid=7629 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 199.088351][ T7646] PKCS7: Unknown OID: [5] (bad) [ 199.094292][ T7646] PKCS7: Only support pkcs7_signedData type [ 199.402670][ T7651] befs: (nbd4): No write support. Marking filesystem read-only [ 199.413734][ T7651] syz.4.449: attempt to access beyond end of device [ 199.413734][ T7651] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 200.698478][ T7669] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 200.707863][ T7669] netlink: 224 bytes leftover after parsing attributes in process `syz.2.457'. [ 201.695461][ T30] audit: type=1400 audit(1755259333.558:563): avc: denied { write } for pid=7657 comm="syz.1.454" path="socket:[16260]" dev="sockfs" ino=16260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 203.330048][ T7705] PKCS7: Unknown OID: [5] (bad) [ 203.341878][ T30] audit: type=1400 audit(1755259335.148:564): avc: denied { mount } for pid=7693 comm="syz.3.466" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 203.376944][ T7705] PKCS7: Only support pkcs7_signedData type [ 203.400129][ T7702] openvswitch: netlink: Message has 4 unknown bytes. [ 203.577457][ T7710] befs: (nbd4): No write support. Marking filesystem read-only [ 203.589115][ T7710] syz.4.467: attempt to access beyond end of device [ 203.589115][ T7710] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 203.601549][ T7712] netlink: 76 bytes leftover after parsing attributes in process `syz.1.470'. [ 203.618800][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 203.896457][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 204.857974][ T5925] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 69, using maximum allowed: 30 [ 204.887373][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 69 [ 204.923507][ T5925] usb 1-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 204.956456][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.983948][ T5925] usb 1-1: config 0 descriptor?? [ 205.408238][ T5925] wacom 0003:056A:0065.0005: item fetching failed at offset 2/5 [ 205.477949][ T5925] wacom 0003:056A:0065.0005: parse failed [ 205.498299][ T5925] wacom 0003:056A:0065.0005: probe with driver wacom failed with error -22 [ 205.740471][ T7733] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 205.749792][ T7733] netlink: 224 bytes leftover after parsing attributes in process `syz.3.478'. [ 205.847104][ T5925] usb 1-1: USB disconnect, device number 8 [ 205.983890][ T7736] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 205.993321][ T7736] netlink: 224 bytes leftover after parsing attributes in process `syz.1.479'. [ 206.372073][ T7742] dlm: no local IP address has been set [ 206.404253][ T7742] dlm: cannot start dlm midcomms -107 [ 206.918595][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.971805][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.990999][ T7754] PKCS7: Unknown OID: [5] (bad) [ 207.040994][ T7754] PKCS7: Only support pkcs7_signedData type [ 207.117195][ T7754] befs: (nbd1): No write support. Marking filesystem read-only [ 207.129435][ T7754] syz.1.484: attempt to access beyond end of device [ 207.129435][ T7754] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 207.330793][ T7745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.391692][ T30] audit: type=1400 audit(1755259339.258:565): avc: denied { search } for pid=5512 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.540870][ T30] audit: type=1400 audit(1755259339.258:566): avc: denied { search } for pid=5512 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.571158][ T30] audit: type=1400 audit(1755259339.258:567): avc: denied { search } for pid=5512 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.772707][ T7767] dlm: no local IP address has been set [ 207.810360][ T7767] dlm: cannot start dlm midcomms -107 [ 207.814682][ T30] audit: type=1400 audit(1755259339.258:568): avc: denied { read } for pid=5512 comm="dhcpcd" name="n101" dev="tmpfs" ino=3893 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.041644][ T30] audit: type=1400 audit(1755259339.258:569): avc: denied { open } for pid=5512 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3893 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.138563][ T30] audit: type=1400 audit(1755259339.258:570): avc: denied { getattr } for pid=5512 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3893 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.239354][ T30] audit: type=1400 audit(1755259339.648:571): avc: denied { ioctl } for pid=7750 comm="syz.0.485" path="socket:[16657]" dev="sockfs" ino=16657 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.445565][ T30] audit: type=1400 audit(1755259339.658:572): avc: denied { write } for pid=7750 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.372928][ T30] audit: type=1400 audit(1755259339.978:573): avc: denied { read open } for pid=7773 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.571082][ T30] audit: type=1400 audit(1755259339.978:574): avc: denied { getattr } for pid=7773 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.437780][ T7816] infiniband syz!: set active [ 211.443500][ T7816] infiniband syz!: added team_slave_0 [ 211.494780][ T7816] RDS/IB: syz!: added [ 211.499893][ T7816] smc: adding ib device syz! with port count 1 [ 211.507427][ T7816] smc: ib device syz! port 1 has pnetid [ 212.421031][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 212.421066][ T30] audit: type=1400 audit(1755259344.288:590): avc: denied { write } for pid=7822 comm="syz.3.502" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 213.056480][ T30] audit: type=1400 audit(1755259344.438:591): avc: denied { setattr } for pid=7822 comm="syz.3.502" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 213.259162][ T30] audit: type=1400 audit(1755259345.008:592): avc: denied { map } for pid=7829 comm="syz.0.503" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.519723][ T30] audit: type=1400 audit(1755259345.008:593): avc: denied { execute } for pid=7829 comm="syz.0.503" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.100390][ T30] audit: type=1400 audit(1755259345.948:594): avc: denied { ioctl } for pid=7856 comm="syz.1.508" path="socket:[17783]" dev="sockfs" ino=17783 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.230049][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 214.245327][ T7863] netlink: 'syz.1.510': attribute type 18 has an invalid length. [ 214.263973][ T7220] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.264072][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 214.318374][ T7220] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.345633][ T7220] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.381721][ T7220] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.406934][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.430080][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.463655][ T7863] netlink: 'syz.1.510': attribute type 18 has an invalid length. [ 214.467990][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.512330][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.602725][ T5168] Bluetooth: hci1: adv larger than maximum supported [ 214.602754][ T5168] Bluetooth: hci1: Malformed LE Event: 0x0d [ 214.680724][ T7876] netlink: 64 bytes leftover after parsing attributes in process `syz.3.509'. [ 215.502722][ T30] audit: type=1400 audit(1755259347.368:595): avc: denied { write } for pid=7880 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.357890][ T7898] netlink: 'syz.2.518': attribute type 1 has an invalid length. [ 216.367200][ T7898] netlink: 224 bytes leftover after parsing attributes in process `syz.2.518'. [ 216.666792][ T5925] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.698788][ T7902] PKCS7: Unknown OID: [5] (bad) [ 216.704958][ T7902] PKCS7: Only support pkcs7_signedData type [ 216.956469][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 216.987503][ T5925] usb 2-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 217.000362][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.085187][ T7905] befs: (nbd2): No write support. Marking filesystem read-only [ 217.095208][ T7905] syz.2.520: attempt to access beyond end of device [ 217.095208][ T7905] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 217.280053][ T5925] usb 2-1: Product: syz [ 217.285238][ T5925] usb 2-1: Manufacturer: syz [ 217.293878][ T5925] usb 2-1: SerialNumber: syz [ 217.367997][ T5925] r8152-cfgselector 2-1: Unknown version 0x0000 [ 217.387628][ T5925] r8152-cfgselector 2-1: config 0 descriptor?? [ 217.731086][ T5914] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 217.736762][ T30] audit: type=1400 audit(1755259349.598:596): avc: denied { load_policy } for pid=7907 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 217.849799][ T7912] netlink: 'syz.4.523': attribute type 1 has an invalid length. [ 217.851063][ T30] audit: type=1400 audit(1755259349.628:597): avc: denied { append } for pid=7910 comm="syz.0.524" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.878313][ T7912] netlink: 224 bytes leftover after parsing attributes in process `syz.4.523'. [ 217.955848][ T7908] SELinux: failed to load policy [ 218.016563][ T5911] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 218.354139][ T5911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 218.361760][ T7923] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 218.375732][ T7923] netlink: 224 bytes leftover after parsing attributes in process `syz.3.527'. [ 218.410467][ T5911] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.646938][ T5911] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 218.688600][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 218.726649][ T5911] usb 1-1: SerialNumber: syz [ 218.790331][ T5911] cdc_ether 1-1:1.0: skipping garbage [ 218.809648][ T5911] usb 1-1: bad CDC descriptors [ 218.834946][ T5911] usb-storage 1-1:1.0: USB Mass Storage device detected [ 220.153037][ T5911] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 220.232884][ T5911] usb 1-1: USB disconnect, device number 9 [ 220.565685][ T7951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.587086][ T30] audit: type=1400 audit(1755259352.428:598): avc: denied { connect } for pid=7951 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.662756][ T30] audit: type=1400 audit(1755259352.458:599): avc: denied { connect } for pid=7961 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 221.275129][ T30] audit: type=1400 audit(1755259353.138:600): avc: denied { create } for pid=7966 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.300143][ T30] audit: type=1400 audit(1755259353.138:601): avc: denied { shutdown } for pid=7966 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.334926][ T30] audit: type=1400 audit(1755259353.138:602): avc: denied { getopt } for pid=7966 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.040278][ T30] audit: type=1400 audit(1755259354.908:603): avc: denied { watch } for pid=7988 comm="syz.2.548" path="/111" dev="tmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 223.112358][ T7993] fuse: Bad value for 'fd' [ 223.755892][ T8002] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 223.816608][ T8002] netlink: 224 bytes leftover after parsing attributes in process `syz.4.550'. [ 223.849068][ T8010] PKCS7: Unknown OID: [5] (bad) [ 223.854885][ T8010] PKCS7: Only support pkcs7_signedData type [ 223.925615][ T8011] befs: (nbd1): No write support. Marking filesystem read-only [ 223.936725][ T8011] syz.1.553: attempt to access beyond end of device [ 223.936725][ T8011] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 224.474113][ T8021] PKCS7: Unknown OID: [5] (bad) [ 224.492953][ T8021] PKCS7: Only support pkcs7_signedData type [ 224.684483][ T8022] befs: (nbd3): No write support. Marking filesystem read-only [ 224.696604][ T8022] syz.3.554: attempt to access beyond end of device [ 224.696604][ T8022] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 224.877692][ T6119] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 225.036473][ T6119] usb 5-1: Using ep0 maxpacket: 32 [ 225.044447][ T6119] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 225.118930][ T8026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=8026 comm=syz.1.557 [ 225.137820][ T6119] usb 5-1: config 0 has no interface number 0 [ 225.162024][ T6119] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.217735][ T6119] usb 5-1: config 0 interface 85 has no altsetting 0 [ 225.249577][ T6119] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 225.287690][ T6119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.303393][ T6119] usb 5-1: Product: syz [ 225.337155][ T6119] usb 5-1: Manufacturer: syz [ 225.359921][ T6119] usb 5-1: SerialNumber: syz [ 225.376330][ T6119] usb 5-1: config 0 descriptor?? [ 225.881137][ T8039] fuse: Bad value for 'fd' [ 225.964535][ T8040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=8040 comm=syz.3.561 [ 225.987652][ T8040] hsr0: entered promiscuous mode [ 225.995809][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 226.007269][ T30] audit: type=1400 audit(1755259357.848:604): avc: denied { bind } for pid=8035 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.045051][ T8040] hsr_slave_0: left promiscuous mode [ 226.054297][ T8040] hsr_slave_1: left promiscuous mode [ 226.844457][ T6119] appletouch 5-1:0.85: Geyser mode initialized. [ 226.863326][ T6119] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input8 [ 227.588980][ T30] audit: type=1400 audit(1755259357.848:605): avc: denied { ioctl } for pid=8035 comm="syz.3.561" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 227.645418][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 228.286608][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 228.502997][ T9] usb 3-1: config 9 has an invalid interface number: 116 but max is 0 [ 228.762600][ T9] usb 3-1: config 9 has an invalid descriptor of length 207, skipping remainder of the config [ 228.775968][ T9] usb 3-1: config 9 has no interface number 0 [ 228.783504][ T9] usb 3-1: config 9 interface 116 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.802593][ T9] usb 3-1: config 9 interface 116 has no altsetting 0 [ 228.812913][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= c.7f [ 228.855328][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.914705][ T9] usb 3-1: Product: syz [ 228.947959][ T9] usb 3-1: Manufacturer: syz [ 228.964436][ T9] usb 3-1: SerialNumber: syz [ 229.051306][ T8064] dlm: no local IP address has been set [ 229.095398][ T8064] dlm: cannot start dlm midcomms -107 [ 229.507039][ T9] usb 3-1: unknown interface protocol 0x50, assuming v1 [ 229.517678][ T9] usb 3-1: 116:2 : does not exist [ 229.546596][ T6119] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 229.627062][ T9] usb 3-1: USB disconnect, device number 10 [ 229.636811][ T5168] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 229.637359][ T5851] Bluetooth: hci5: command 0xfc11 tx timeout [ 229.662019][ T5925] usb 5-1: USB disconnect, device number 15 [ 229.693229][ T7333] udevd[7333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.116/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.718777][ T6119] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 229.758456][ T6119] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 229.779162][ T5925] appletouch 5-1:0.85: input: appletouch disconnected [ 229.791453][ T6119] usb 2-1: can't read configurations, error -61 [ 229.850533][ T30] audit: type=1400 audit(1755259361.718:606): avc: denied { getopt } for pid=8077 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.896144][ T8079] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 229.910962][ T30] audit: type=1400 audit(1755259361.748:607): avc: denied { getopt } for pid=8077 comm="syz.4.575" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.966717][ T6119] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 230.128643][ T6119] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 230.158094][ T6119] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 230.185097][ T6119] usb 2-1: can't read configurations, error -61 [ 230.199823][ T6119] usb usb2-port1: attempt power cycle [ 230.261456][ T30] audit: type=1400 audit(1755259362.128:608): avc: denied { listen } for pid=8097 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 230.306806][ T5925] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 230.379888][ T5914] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 230.512649][ T5925] usb 5-1: config 6 has an invalid interface number: 65 but max is 1 [ 230.530944][ T5925] usb 5-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 230.647710][ T8112] bridge0: port 3(team0) entered blocking state [ 230.655614][ T8112] bridge0: port 3(team0) entered disabled state [ 230.664658][ T8112] team0: entered allmulticast mode [ 230.670839][ T8112] team_slave_0: entered allmulticast mode [ 230.677807][ T8112] team_slave_1: entered allmulticast mode [ 230.694406][ T8112] team0: entered promiscuous mode [ 230.700525][ T8112] team_slave_0: entered promiscuous mode [ 230.708307][ T8112] team_slave_1: entered promiscuous mode [ 230.717567][ T8112] bridge0: port 3(team0) entered blocking state [ 230.725260][ T8112] bridge0: port 3(team0) entered forwarding state [ 231.008579][ T6119] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 231.027077][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 231.047599][ T6119] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 231.049706][ T5914] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 231.057004][ T5925] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 231.074822][ T5914] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 231.082813][ T5925] usb 5-1: config 6 has no interface number 0 [ 231.089276][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.106749][ T5914] usb 3-1: Product: syz [ 231.111779][ T5914] usb 3-1: Manufacturer: syz [ 231.112742][ T6119] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 231.117630][ T5914] usb 3-1: SerialNumber: syz [ 231.144757][ T6119] usb 2-1: can't read configurations, error -61 [ 231.155004][ T8093] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 231.168504][ T8093] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 231.178150][ T5925] usb 5-1: config 6 interface 65 altsetting 10 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 231.200290][ T5925] usb 5-1: config 6 interface 65 altsetting 10 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 231.221555][ T5925] usb 5-1: config 6 interface 65 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 231.280323][ T5925] usb 5-1: config 6 interface 65 altsetting 10 has an endpoint descriptor with address 0x1F, changing to 0xF [ 231.313159][ T5925] usb 5-1: config 6 interface 65 altsetting 10 endpoint 0xF has an invalid bInterval 253, changing to 11 [ 231.338430][ T6119] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 231.362219][ T5925] usb 5-1: config 6 interface 65 altsetting 10 has a duplicate endpoint with address 0xF, skipping [ 231.440120][ T8122] FAULT_INJECTION: forcing a failure. [ 231.440120][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 231.460114][ T8122] CPU: 0 UID: 0 PID: 8122 Comm: syz.0.590 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 231.460141][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.460148][ T8122] Call Trace: [ 231.460152][ T8122] [ 231.460157][ T8122] dump_stack_lvl+0x16c/0x1f0 [ 231.460173][ T8122] should_fail_ex+0x512/0x640 [ 231.460186][ T8122] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 231.460199][ T8122] should_failslab+0xc2/0x120 [ 231.460212][ T8122] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 231.460223][ T8122] ? __might_fault+0xe3/0x190 [ 231.460233][ T8122] ? __might_fault+0x13b/0x190 [ 231.460243][ T8122] ? getname_flags.part.0+0x4c/0x550 [ 231.460263][ T8122] getname_flags.part.0+0x4c/0x550 [ 231.460281][ T8122] getname_flags+0x93/0xf0 [ 231.460293][ T8122] user_path_at+0x24/0x60 [ 231.460305][ T8122] __x64_sys_mount+0x1fc/0x310 [ 231.460320][ T8122] ? __pfx___x64_sys_mount+0x10/0x10 [ 231.460339][ T8122] do_syscall_64+0xcd/0x4c0 [ 231.460352][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.460365][ T8122] RIP: 0033:0x7fad8878ebe9 [ 231.460375][ T8122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.460385][ T8122] RSP: 002b:00007fad895b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 231.460397][ T8122] RAX: ffffffffffffffda RBX: 00007fad889b6090 RCX: 00007fad8878ebe9 [ 231.460404][ T8122] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000200000000240 [ 231.460410][ T8122] RBP: 00007fad895b1090 R08: 0000000000000000 R09: 0000000000000000 [ 231.460417][ T8122] R10: 0000000002208004 R11: 0000000000000246 R12: 0000000000000001 [ 231.460423][ T8122] R13: 00007fad889b6128 R14: 00007fad889b6090 R15: 00007fff795bf518 [ 231.460437][ T8122] [ 231.461242][ T5925] usb 5-1: config 6 interface 65 altsetting 10 has an invalid endpoint descriptor of length 2, skipping [ 231.887485][ T10] libceph: connect (1)[c::]:6789 error -101 [ 231.895157][ T6119] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 231.905270][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 232.052655][ T5925] usb 5-1: config 6 interface 65 altsetting 10 has 6 endpoint descriptors, different from the interface descriptor's value: 11 [ 232.070212][ T8093] ceph: No mds server is up or the cluster is laggy [ 232.080188][ T6119] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 232.120140][ T6119] usb 2-1: can't read configurations, error -61 [ 232.210114][ T6119] usb usb2-port1: unable to enumerate USB device [ 232.242539][ T5925] usb 5-1: config 6 interface 65 has no altsetting 0 [ 232.308097][ T10] libceph: connect (1)[c::]:6789 error -101 [ 232.315447][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 232.439402][ T30] audit: type=1400 audit(1755259364.128:609): avc: denied { map } for pid=8132 comm="syz.1.592" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 232.470683][ T5925] usb 5-1: New USB device found, idVendor=0403, idProduct=7c90, bcdDevice=10.10 [ 232.509170][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.549112][ T5925] usb 5-1: Product: 霋籞₨鐂釶⮈뽹诣뜬ᙛ侦◿웘㰉힧㿶㩆譗⸗淣䴠뤫ʻ⽏祛ﴟ챨ꏄ⚒ꔢ柟俪Ź〙럇Ⴅ䘽衪欦懣萏꙰瘑熎쬙Ӊꉑ뵢᜕欍ᙰ쥴थ㗾⢀ [ 232.582615][ T30] audit: type=1400 audit(1755259364.448:610): avc: denied { bind } for pid=8092 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.627991][ T5925] usb 5-1: Manufacturer: у [ 232.633633][ T5925] usb 5-1: SerialNumber: syz [ 232.706563][ T6119] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 232.850777][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.951456][ T6119] usb 2-1: Using ep0 maxpacket: 16 [ 232.970214][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.979780][ T6119] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 232.983970][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.000632][ T6119] usb 2-1: config 0 has no interface number 0 [ 233.004529][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.008904][ T6119] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.204263][ T6119] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 233.228337][ T6119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.248831][ T8145] binder: 8141:8145 ioctl 8b19 200000000000 returned -22 [ 233.272946][ T5925] ftdi_sio 5-1:6.65: FTDI USB Serial Device converter detected [ 233.285768][ T6119] usb 2-1: Product: syz [ 233.299354][ T5925] ftdi_sio ttyUSB0: unknown device type: 0x1010 [ 233.307172][ T6119] usb 2-1: Manufacturer: syz [ 233.312756][ T6119] usb 2-1: SerialNumber: syz [ 233.337516][ T6119] usb 2-1: config 0 descriptor?? [ 233.352377][ T5925] usb 5-1: USB disconnect, device number 16 [ 233.405419][ T5925] ftdi_sio 5-1:6.65: device disconnected [ 233.595164][ T5911] usb 2-1: USB disconnect, device number 19 [ 233.623142][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.717034][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.023959][ T8146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.050993][ T30] audit: type=1400 audit(1755259365.918:611): avc: denied { name_bind } for pid=8156 comm="syz.4.599" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 234.089071][ T8155] nbd0: detected capacity change from 0 to 1024 [ 234.195303][ T8158] nbd0: detected capacity change from 1024 to 467840 [ 234.416749][ T7333] block nbd0: Send control failed (result -89) [ 234.434608][ T5911] usb 3-1: USB disconnect, device number 11 [ 234.444749][ T8163] FAULT_INJECTION: forcing a failure. [ 234.444749][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 234.460113][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.1.601 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 234.460129][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.460137][ T8163] Call Trace: [ 234.460141][ T8163] [ 234.460145][ T8163] dump_stack_lvl+0x16c/0x1f0 [ 234.460160][ T8163] should_fail_ex+0x512/0x640 [ 234.460175][ T8163] should_failslab+0xc2/0x120 [ 234.460190][ T8163] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 234.460203][ T8163] ? __inet_hash_connect+0x7cb/0x1e30 [ 234.460224][ T8163] __inet_hash_connect+0x7cb/0x1e30 [ 234.460245][ T8163] ? __pfx___inet6_check_established+0x10/0x10 [ 234.460262][ T8163] ? __pfx___inet_hash_connect+0x10/0x10 [ 234.460282][ T8163] ? inet6_hash_connect+0xe2/0x180 [ 234.460297][ T8163] tcp_v6_connect+0x1301/0x2170 [ 234.460312][ T8163] ? stack_trace_save+0x8e/0xc0 [ 234.460331][ T8163] ? __pfx_tcp_v6_connect+0x10/0x10 [ 234.460348][ T8163] ? kasan_save_stack+0x33/0x60 [ 234.460358][ T8163] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 234.460373][ T8163] ? tcp_sendmsg_locked+0x23ff/0x42a0 [ 234.460387][ T8163] ? tcp_sendmsg+0x2e/0x50 [ 234.460400][ T8163] ? inet6_sendmsg+0xb9/0x140 [ 234.460414][ T8163] ? __sys_sendto+0x376/0x520 [ 234.460430][ T8163] ? __x64_sys_sendto+0xe0/0x1c0 [ 234.460454][ T8163] ? __inet_stream_connect+0x917/0xf60 [ 234.460469][ T8163] __inet_stream_connect+0x917/0xf60 [ 234.460487][ T8163] ? __pfx___inet_stream_connect+0x10/0x10 [ 234.460509][ T8163] tcp_sendmsg_fastopen+0x3ed/0x750 [ 234.460527][ T8163] tcp_sendmsg_locked+0x23ff/0x42a0 [ 234.460543][ T8163] ? avc_has_perm+0x144/0x1f0 [ 234.460562][ T8163] ? __lock_acquire+0xb97/0x1ce0 [ 234.460583][ T8163] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 234.460599][ T8163] ? do_raw_spin_lock+0x12c/0x2b0 [ 234.460612][ T8163] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 234.460627][ T8163] ? __local_bh_enable_ip+0xa4/0x120 [ 234.460643][ T8163] tcp_sendmsg+0x2e/0x50 [ 234.460656][ T8163] ? __pfx_tcp_sendmsg+0x10/0x10 [ 234.460671][ T8163] inet6_sendmsg+0xb9/0x140 [ 234.460685][ T8163] __sys_sendto+0x376/0x520 [ 234.460702][ T8163] ? __pfx___sys_sendto+0x10/0x10 [ 234.460729][ T8163] ? ksys_write+0x1ac/0x250 [ 234.460741][ T8163] ? __pfx_ksys_write+0x10/0x10 [ 234.460754][ T8163] __x64_sys_sendto+0xe0/0x1c0 [ 234.460770][ T8163] ? do_syscall_64+0x91/0x4c0 [ 234.460782][ T8163] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.460792][ T8163] do_syscall_64+0xcd/0x4c0 [ 234.460805][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.460816][ T8163] RIP: 0033:0x7fee2e18ebe9 [ 234.460825][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.460837][ T8163] RSP: 002b:00007fee2f0de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 234.460848][ T8163] RAX: ffffffffffffffda RBX: 00007fee2e3b5fa0 RCX: 00007fee2e18ebe9 [ 234.460855][ T8163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 234.460861][ T8163] RBP: 00007fee2f0de090 R08: 00002000000001c0 R09: 000000000000001c [ 234.460868][ T8163] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 234.460874][ T8163] R13: 00007fee2e3b6038 R14: 00007fee2e3b5fa0 R15: 00007fff2c3f6a98 [ 234.460887][ T8163] [ 234.461379][ T7333] block nbd0: Request send failed, requeueing [ 234.893129][ T5168] block nbd0: Receive control failed (result -32) [ 234.906843][ T25] block nbd0: Dead connection, failed to find a fallback [ 234.915739][ T25] block nbd0: shutting down sockets [ 234.922467][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.936723][ T25] buffer_io_error: 7 callbacks suppressed [ 234.936739][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 234.953211][ T7333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.964374][ T7333] Buffer I/O error on dev nbd0, logical block 0, async page read [ 234.973944][ T7333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.985280][ T7333] Buffer I/O error on dev nbd0, logical block 0, async page read [ 234.994702][ T7333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.005695][ T7333] Buffer I/O error on dev nbd0, logical block 0, async page read [ 235.073618][ T7333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.499917][ T7333] Buffer I/O error on dev nbd0, logical block 0, async page read [ 235.513246][ T7333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.524527][ T7333] Buffer I/O error on dev nbd0, logical block 0, async page read [ 235.534769][ T7333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.546663][ T7333] Buffer I/O error on dev nbd0, logical block 0, async page read [ 235.558112][ T7333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.569218][ T7333] Buffer I/O error on dev nbd0, logical block 0, async page read [ 235.578723][ T7333] ldm_validate_partition_table(): Disk read failed. [ 235.590728][ T7333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.601800][ T7333] Buffer I/O error on dev nbd0, logical block 0, async page read [ 236.057010][ T7333] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.078659][ T8180] PKCS7: Unknown OID: [5] (bad) [ 236.098699][ T8180] PKCS7: Only support pkcs7_signedData type [ 236.110407][ T7333] Buffer I/O error on dev nbd0, logical block 0, async page read [ 236.404771][ T8180] befs: (nbd2): No write support. Marking filesystem read-only [ 236.413950][ T8180] syz.2.605: attempt to access beyond end of device [ 236.413950][ T8180] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 236.461572][ T7333] Dev nbd0: unable to read RDB block 0 [ 236.508165][ T7333] nbd0: unable to read partition table [ 236.547502][ T5217] ldm_validate_partition_table(): Disk read failed. [ 236.565824][ T5217] Dev nbd0: unable to read RDB block 0 [ 236.602326][ T5217] nbd0: unable to read partition table [ 236.697313][ T7333] ldm_validate_partition_table(): Disk read failed. [ 236.734361][ T7333] Dev nbd0: unable to read RDB block 0 [ 237.155067][ T7333] nbd0: unable to read partition table [ 237.173230][ T30] audit: type=1400 audit(1755259368.678:612): avc: denied { mount } for pid=8192 comm="syz.4.609" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 237.207342][ T5911] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 237.273722][ T30] audit: type=1400 audit(1755259369.138:613): avc: denied { create } for pid=8202 comm="syz.0.612" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 237.323005][ T8204] 9pnet_fd: Insufficient options for proto=fd [ 237.376510][ T5911] usb 3-1: device descriptor read/64, error -71 [ 237.432302][ T30] audit: type=1400 audit(1755259369.138:614): avc: denied { connect } for pid=8200 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.486917][ T30] audit: type=1400 audit(1755259369.138:615): avc: denied { write } for pid=8200 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.566588][ T30] audit: type=1400 audit(1755259369.188:616): avc: denied { read } for pid=8200 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.591568][ T30] audit: type=1400 audit(1755259369.458:617): avc: denied { write } for pid=8209 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.646891][ T30] audit: type=1326 audit(1755259369.508:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8878ebe9 code=0x7ffc0000 [ 237.677542][ T5911] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 237.744100][ T30] audit: type=1326 audit(1755259369.508:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8878ebe9 code=0x7ffc0000 [ 237.873347][ T5911] usb 3-1: device descriptor read/64, error -71 [ 237.896280][ T30] audit: type=1326 audit(1755259369.558:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fad8878ebe9 code=0x7ffc0000 [ 237.984859][ T30] audit: type=1326 audit(1755259369.558:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8878ebe9 code=0x7ffc0000 [ 238.009264][ T5911] usb usb3-port1: attempt power cycle [ 238.441070][ T5911] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 238.536570][ T5911] usb 3-1: device descriptor read/8, error -71 [ 238.786679][ T5911] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 239.457975][ T5911] usb 3-1: device descriptor read/8, error -71 [ 239.576646][ T5911] usb usb3-port1: unable to enumerate USB device [ 240.101249][ T8244] fuse: Bad value for 'fd' [ 240.460857][ T8258] afs: Unknown parameter 'GPL' [ 241.831113][ T8251] syzkaller0: entered promiscuous mode [ 241.865048][ T8251] syzkaller0: entered allmulticast mode [ 241.979869][ T8282] dlm: no local IP address has been set [ 242.090178][ T8282] dlm: cannot start dlm midcomms -107 [ 243.640413][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 244.014166][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 244.127810][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.153302][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.169205][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.185041][ T9] usb 3-1: config 0 descriptor?? [ 244.415704][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 244.842752][ T8289] netlink: 830 bytes leftover after parsing attributes in process `syz.2.636'. [ 244.864665][ T8309] FAULT_INJECTION: forcing a failure. [ 244.864665][ T8309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.886257][ T8309] CPU: 0 UID: 0 PID: 8309 Comm: syz.0.639 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 244.886283][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.886294][ T8309] Call Trace: [ 244.886300][ T8309] [ 244.886307][ T8309] dump_stack_lvl+0x16c/0x1f0 [ 244.886332][ T8309] should_fail_ex+0x512/0x640 [ 244.886354][ T8309] _copy_from_user+0x2e/0xd0 [ 244.886378][ T8309] kstrtouint_from_user+0xd6/0x1d0 [ 244.886405][ T8309] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 244.886420][ T8309] ? __lock_acquire+0xb97/0x1ce0 [ 244.886451][ T8309] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 244.886486][ T8309] proc_fail_nth_write+0x83/0x220 [ 244.886506][ T8309] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.886533][ T8309] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.886552][ T8309] vfs_write+0x29d/0x11d0 [ 244.886573][ T8309] ? __pfx___mutex_lock+0x10/0x10 [ 244.886592][ T8309] ? __pfx_vfs_write+0x10/0x10 [ 244.886617][ T8309] ? __fget_files+0x20e/0x3c0 [ 244.886644][ T8309] ksys_write+0x12a/0x250 [ 244.886661][ T8309] ? __pfx_ksys_write+0x10/0x10 [ 244.886685][ T8309] do_syscall_64+0xcd/0x4c0 [ 244.886705][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.886722][ T8309] RIP: 0033:0x7fad8878d69f [ 244.886737][ T8309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 244.886752][ T8309] RSP: 002b:00007fad895d2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 244.886770][ T8309] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad8878d69f [ 244.886781][ T8309] RDX: 0000000000000001 RSI: 00007fad895d20a0 RDI: 0000000000000005 [ 244.886792][ T8309] RBP: 00007fad895d2090 R08: 0000000000000000 R09: 0000000000000000 [ 244.886802][ T8309] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 244.886812][ T8309] R13: 00007fad889b6038 R14: 00007fad889b5fa0 R15: 00007fff795bf518 [ 244.886836][ T8309] [ 245.118346][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.160334][ T8310] fuse: Bad value for 'fd' [ 245.259137][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 245.259153][ T30] audit: type=1400 audit(1755259377.128:665): avc: denied { setopt } for pid=8315 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.385703][ T5911] usb 3-1: USB disconnect, device number 16 [ 245.832194][ T8326] dlm: no local IP address has been set [ 245.940111][ T8326] dlm: cannot start dlm midcomms -107 [ 246.313887][ T30] audit: type=1400 audit(1755259378.178:666): avc: denied { bind } for pid=8325 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.476839][ T8328] netlink: 34 bytes leftover after parsing attributes in process `syz.3.645'. [ 246.529286][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 246.907010][ T5958] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 247.176474][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 247.183374][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'. [ 247.201992][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.224663][ T5958] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 247.249391][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.273933][ T8343] netlink: 'syz.3.652': attribute type 10 has an invalid length. [ 247.279593][ T5958] usb 1-1: config 0 descriptor?? [ 247.357323][ T8348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8348 comm=syz.1.654 [ 247.378788][ T8343] team0: Port device dummy0 added [ 247.466948][ T8349] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 247.556694][ T8353] fuse: Bad value for 'fd' [ 247.597401][ T8348] bond2: (slave bridge1): making interface the new active one [ 247.611427][ T8343] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3095185786 (6190371572 ns) > initial count (5484635560 ns). Using initial count to start timer. [ 247.685582][ T5958] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 247.766978][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.792698][ T8348] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 247.911260][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.922966][ T30] audit: type=1400 audit(1755259379.788:667): avc: denied { ioctl } for pid=8314 comm="syz.0.643" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xc001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 248.037585][ T9] usb 1-1: USB disconnect, device number 10 [ 248.106317][ T8357] Malformed UNC in devname [ 248.106317][ T8357] [ 248.115140][ T8357] CIFS: VFS: Malformed UNC in devname [ 248.413389][ T6119] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 248.806937][ T6119] usb 2-1: Using ep0 maxpacket: 16 [ 248.816799][ T6119] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 248.833455][ T6119] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 248.870452][ T6119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.906642][ T6119] usb 2-1: Product: syz [ 248.921099][ T6119] usb 2-1: Manufacturer: syz [ 248.949867][ T6119] usb 2-1: SerialNumber: syz [ 249.072824][ T8359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.085021][ T8359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.383049][ T8379] dlm: no local IP address has been set [ 249.390715][ T8379] dlm: cannot start dlm midcomms -107 [ 249.515664][ T30] audit: type=1400 audit(1755259381.378:668): avc: denied { write } for pid=8382 comm="syz.4.665" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 249.543793][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.594665][ T8387] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 249.599198][ T30] audit: type=1400 audit(1755259381.458:669): avc: denied { ioctl } for pid=8386 comm="syz.4.666" path="socket:[19343]" dev="sockfs" ino=19343 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.635518][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.643727][ T5958] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 249.699940][ T30] audit: type=1400 audit(1755259381.568:670): avc: denied { read } for pid=8386 comm="syz.4.666" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.729620][ T30] audit: type=1400 audit(1755259381.568:671): avc: denied { open } for pid=8386 comm="syz.4.666" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.757495][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.786472][ T5958] usb 3-1: device descriptor read/64, error -71 [ 250.036583][ T5958] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 250.186479][ T5958] usb 3-1: device descriptor read/64, error -71 [ 250.296817][ T5958] usb usb3-port1: attempt power cycle [ 250.438978][ T8387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.438996][ T8390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.439089][ T8390] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 250.447451][ T8387] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 250.481457][ T8390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.483356][ T8387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.498075][ T8387] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 250.509285][ T8390] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 250.521416][ T8387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.523300][ T8390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.528834][ T8387] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 250.548407][ T8390] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 250.557684][ T8390] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 250.557873][ T8387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.564878][ T8390] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 250.581229][ T8387] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 250.604213][ T8387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 250.611388][ T8387] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 250.690823][ T5958] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 250.749384][ T5958] usb 3-1: device descriptor read/8, error -71 [ 250.836627][ T5925] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 250.904210][ T30] audit: type=1400 audit(1755259382.768:672): avc: denied { write } for pid=8400 comm="syz.4.668" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 250.996863][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 251.004183][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16998, setting to 1024 [ 251.019531][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 251.026487][ T5958] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 251.035166][ T5925] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 251.055262][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.146769][ T5925] usb 1-1: config 0 descriptor?? [ 251.157239][ T8408] futex_wake_op: syz.3.669 tries to shift op by 32; fix this program [ 251.206507][ T5914] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 251.258562][ T5958] usb 3-1: device descriptor read/8, error -71 [ 251.279598][ T8359] ceph: No mds server is up or the cluster is laggy [ 251.417639][ T5958] usb usb3-port1: unable to enumerate USB device [ 251.481336][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 251.512418][ T5914] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 251.577163][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.286083][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.361322][ T5914] usb 5-1: config 0 has no interface number 0 [ 252.477153][ T5958] usb 2-1: USB disconnect, device number 20 [ 252.577094][ T5914] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 252.779265][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.813173][ T5925] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 252.851729][ T5914] usb 5-1: Product: syz [ 253.148517][ T5914] usb 5-1: Manufacturer: syz [ 253.266259][ T5925] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 253.274724][ T5925] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 253.289739][ T5914] usb 5-1: SerialNumber: syz [ 253.321367][ T5914] usb 5-1: config 0 descriptor?? [ 253.363211][ T5914] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 253.410724][ T5914] usb 5-1: No valid video chain found. [ 253.425532][ T5925] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 253.434017][ T5925] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 253.445566][ T5925] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 253.499889][ T5925] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 253.545172][ T5925] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 253.564436][ T6119] usb 5-1: USB disconnect, device number 17 [ 254.565310][ T10] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 254.579084][ T6119] usb 1-1: USB disconnect, device number 11 [ 254.611288][ T10] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 254.639594][ T10] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 254.694805][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 254.718542][ T10] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 255.647046][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.058678][ T8456] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.901708][ T8462] Mount JFS Failure: -22 [ 256.908036][ T8462] jfs_mount failed w/return code = -22 [ 257.252280][ T8487] dummy0: entered promiscuous mode [ 257.390548][ T8487] bond0: entered promiscuous mode [ 257.510446][ T8487] bond_slave_0: entered promiscuous mode [ 257.586678][ T8487] bond_slave_1: entered promiscuous mode [ 257.638464][ T8487] hsr1: entered allmulticast mode [ 257.695937][ T8487] dummy0: entered allmulticast mode [ 257.706308][ T8505] PKCS7: Unknown OID: [5] (bad) [ 257.738848][ T8503] cgroup: none used incorrectly [ 257.765594][ T8505] PKCS7: Only support pkcs7_signedData type [ 257.776471][ T8487] bond0: entered allmulticast mode [ 257.782597][ T8487] bond_slave_0: entered allmulticast mode [ 257.864651][ T8487] bond_slave_1: entered allmulticast mode [ 257.871540][ T8506] befs: (nbd3): No write support. Marking filesystem read-only [ 257.871665][ T8506] syz.3.686: attempt to access beyond end of device [ 257.871665][ T8506] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 258.545670][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 258.625636][ T8516] fuse: Unknown parameter '1`cU%?7τLFDsnQ_! /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.036677][ T9] usb 1-1: config 0 descriptor?? [ 263.044161][ T31] task:kworker/1:0 state:D [ 263.045106][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 263.058342][ T31] stack:22616 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 263.070468][ T31] Workqueue: usb_hub_wq hub_event [ 263.076737][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 263.085251][ T31] Call Trace: [ 263.089598][ T31] [ 263.093104][ T31] __schedule+0x1190/0x5de0 [ 263.104178][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 263.107135][ T8582] fuse: Bad value for 'fd' [ 263.115606][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 263.131111][ T31] ? __pfx___schedule+0x10/0x10 [ 263.139262][ T31] ? find_held_lock+0x2b/0x80 [ 263.143552][ T78] usb 1-1: Failed to submit usb control message: -71 [ 263.144872][ T31] ? schedule+0x2d7/0x3a0 [ 263.144907][ T31] schedule+0xe7/0x3a0 [ 263.170662][ T31] schedule_timeout+0x257/0x290 [ 263.186468][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 263.187220][ T78] usb 1-1: unable to send the bmi data to the device: -71 [ 263.192961][ T31] ? mark_held_locks+0x49/0x80 [ 263.209864][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.238689][ T31] __wait_for_common+0x2fc/0x4e0 [ 263.238722][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 263.238753][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 263.238771][ T31] ? __pfx_device_del+0x10/0x10 [ 263.238796][ T31] ? kobject_put+0xab/0x5a0 [ 263.238821][ T31] i2c_del_adapter+0x546/0x6f0 [ 263.238854][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 263.238880][ T31] ? kfree+0x2b4/0x4d0 [ 263.238906][ T31] ? media_device_cleanup+0x53/0x80 [ 263.238933][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 263.238960][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 263.238986][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 263.239022][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 263.239043][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.239062][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 263.239091][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 263.239120][ T31] usb_probe_interface+0x300/0xa40 [ 263.239157][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 263.239183][ T31] really_probe+0x23e/0xa90 [ 263.239206][ T31] __driver_probe_device+0x1de/0x440 [ 263.239229][ T31] driver_probe_device+0x4c/0x1b0 [ 263.239251][ T31] __device_attach_driver+0x1df/0x310 [ 263.239273][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 263.239292][ T31] bus_for_each_drv+0x156/0x1e0 [ 263.239320][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 263.239348][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.239366][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 263.239396][ T31] __device_attach+0x1e4/0x4b0 [ 263.239417][ T31] ? __pfx___device_attach+0x10/0x10 [ 263.239438][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 263.239465][ T31] bus_probe_device+0x17f/0x1c0 [ 263.239497][ T31] device_add+0x1148/0x1aa0 [ 263.239523][ T31] ? __pfx_device_add+0x10/0x10 [ 263.239547][ T31] ? usb_cache_string+0xf2/0x150 [ 263.239575][ T31] usb_set_configuration+0x1187/0x1e20 [ 263.239614][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 263.239634][ T31] usb_generic_driver_probe+0xb1/0x110 [ 263.239654][ T31] usb_probe_device+0xef/0x3e0 [ 263.239676][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 263.239700][ T31] really_probe+0x23e/0xa90 [ 263.239723][ T31] __driver_probe_device+0x1de/0x440 [ 263.239743][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 263.239770][ T31] driver_probe_device+0x4c/0x1b0 [ 263.239792][ T31] __device_attach_driver+0x1df/0x310 [ 263.239814][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 263.239833][ T31] bus_for_each_drv+0x156/0x1e0 [ 263.239861][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 263.239889][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.239908][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 263.239939][ T31] __device_attach+0x1e4/0x4b0 [ 263.239960][ T31] ? __pfx___device_attach+0x10/0x10 [ 263.239987][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 263.240012][ T31] bus_probe_device+0x17f/0x1c0 [ 263.240043][ T31] device_add+0x1148/0x1aa0 [ 263.240070][ T31] ? __pfx_device_add+0x10/0x10 [ 263.240092][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 263.240115][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 263.240151][ T31] usb_new_device+0xd07/0x1a60 [ 263.240178][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 263.240198][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 263.240222][ T31] ? mark_held_locks+0x49/0x80 [ 263.240253][ T31] hub_event+0x2f34/0x4fe0 [ 263.240301][ T31] ? __pfx_hub_event+0x10/0x10 [ 263.240322][ T31] ? interval_tree_iter_first+0x70/0x250 [ 263.240358][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.240384][ T31] process_one_work+0x9cc/0x1b70 [ 263.240414][ T31] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 263.240436][ T31] ? __pfx_process_one_work+0x10/0x10 [ 263.240464][ T31] ? assign_work+0x1a0/0x250 [ 263.240487][ T31] worker_thread+0x6c8/0xf10 [ 263.240519][ T31] ? __pfx_worker_thread+0x10/0x10 [ 263.240539][ T31] kthread+0x3c5/0x780 [ 263.240559][ T31] ? __pfx_kthread+0x10/0x10 [ 263.240580][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.240603][ T31] ? __pfx_kthread+0x10/0x10 [ 263.240622][ T31] ret_from_fork+0x5d7/0x6f0 [ 263.240638][ T31] ? __pfx_kthread+0x10/0x10 [ 263.240657][ T31] ret_from_fork_asm+0x1a/0x30 [ 263.240689][ T31] [ 263.329348][ T31] [ 263.329348][ T31] Showing all locks held in the system: [ 263.329364][ T31] 5 locks held by kworker/1:0/24: [ 263.329382][ T31] #0: ffff888140ae2948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 263.329437][ T31] #1: ffffc900001e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 263.329485][ T31] #2: ffff888029b66198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 263.329535][ T31] #3: ffff888032cce198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 263.329582][ T31] #4: ffff88803341d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 263.329629][ T31] 1 lock held by khungtaskd/31: [ 263.329641][ T31] #0: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 263.329690][ T31] 2 locks held by kworker/u8:4/78: [ 263.329721][ T31] 2 locks held by getty/5607: [ 263.329732][ T31] #0: ffff88814ceeb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 263.329788][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 263.329848][ T31] 4 locks held by kworker/u8:15/8490: [ 263.329858][ T31] 1 lock held by syz.2.706/8577: [ 263.329869][ T31] 1 lock held by syz.2.706/8589: [ 263.329882][ T31] [ 263.329886][ T31] ============================================= [ 263.329886][ T31] [ 263.329893][ T31] NMI backtrace for cpu 0 [ 263.329904][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 263.329923][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.329932][ T31] Call Trace: [ 263.329937][ T31] [ 263.329943][ T31] dump_stack_lvl+0x116/0x1f0 [ 263.329960][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 263.329981][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.330003][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 263.330024][ T31] watchdog+0xf0e/0x1260 [ 263.330044][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.330058][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.330073][ T31] ? __kthread_parkme+0x19e/0x250 [ 263.330095][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.330110][ T31] kthread+0x3c5/0x780 [ 263.330124][ T31] ? __pfx_kthread+0x10/0x10 [ 263.330139][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.330157][ T31] ? __pfx_kthread+0x10/0x10 [ 263.330171][ T31] ret_from_fork+0x5d7/0x6f0 [ 263.330184][ T31] ? __pfx_kthread+0x10/0x10 [ 263.330198][ T31] ret_from_fork_asm+0x1a/0x30 [ 263.330225][ T31] [ 263.330233][ T31] Sending NMI from CPU 0 to CPUs 1: [ 263.330253][ C1] NMI backtrace for cpu 1 [ 263.330262][ C1] CPU: 1 UID: 0 PID: 8490 Comm: kworker/u8:15 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 263.330278][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.330287][ C1] Workqueue: events_unbound toggle_allocation_gate [ 263.330302][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 263.330316][ C1] Code: 86 c6 55 00 48 89 df 5b e9 5d 4d 5b 00 be 03 00 00 00 5b e9 32 b3 27 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 c8 ac 1a 12 65 8b 05 d9 ac 1a [ 263.330329][ C1] RSP: 0018:ffffc9000459f880 EFLAGS: 00000083 [ 263.330339][ C1] RAX: 0000000000000000 RBX: ffff88801b86e558 RCX: 0000000000000001 [ 263.330347][ C1] RDX: ffff88802ec40000 RSI: ffffffff822db1e8 RDI: ffff88801b870000 [ 263.330355][ C1] RBP: ffff88801b870000 R08: 0000000000000006 R09: 8000000000000063 [ 263.330363][ C1] R10: 8000000000000063 R11: 0000000000000000 R12: dffffc0000000000 [ 263.330371][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff920008b3f13 [ 263.330379][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 263.330392][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.330403][ C1] CR2: 0000200000004000 CR3: 000000000e380000 CR4: 00000000003526f0 [ 263.330412][ C1] Call Trace: [ 263.330416][ C1] [ 263.330420][ C1] __page_table_check_ptes_set+0x8a/0x420 [ 263.330435][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 263.330448][ C1] ? find_held_lock+0x2b/0x80 [ 263.330463][ C1] ? kmem_cache_alloc_lru_noprof+0x88/0x3b0 [ 263.330477][ C1] ? kmem_cache_alloc_lru_noprof+0x88/0x3b0 [ 263.330490][ C1] __text_poke+0x621/0xb70 [ 263.330504][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 263.330521][ C1] ? __pfx___text_poke+0x10/0x10 [ 263.330535][ C1] ? kmem_cache_alloc_lru_noprof+0x88/0x3b0 [ 263.330550][ C1] smp_text_poke_batch_finish+0x4f1/0xdb0 [ 263.330568][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 263.330585][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 263.330605][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 263.330622][ C1] jump_label_update+0x376/0x550 [ 263.330642][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 263.330661][ C1] static_key_enable+0x1a/0x20 [ 263.330678][ C1] toggle_allocation_gate+0xfa/0x280 [ 263.330691][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 263.330705][ C1] ? rcu_is_watching+0x12/0xc0 [ 263.330721][ C1] process_one_work+0x9cc/0x1b70 [ 263.330736][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 263.330756][ C1] ? __pfx_process_one_work+0x10/0x10 [ 263.330772][ C1] ? assign_work+0x1a0/0x250 [ 263.330785][ C1] worker_thread+0x6c8/0xf10 [ 263.330802][ C1] ? __pfx_worker_thread+0x10/0x10 [ 263.330814][ C1] kthread+0x3c5/0x780 [ 263.330826][ C1] ? __pfx_kthread+0x10/0x10 [ 263.330838][ C1] ? rcu_is_watching+0x12/0xc0 [ 263.330852][ C1] ? __pfx_kthread+0x10/0x10 [ 263.330865][ C1] ret_from_fork+0x5d7/0x6f0 [ 263.330876][ C1] ? __pfx_kthread+0x10/0x10 [ 263.330888][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.330906][ C1] [ 263.331251][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 263.331264][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 263.331285][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.331295][ T31] Call Trace: [ 263.331302][ T31] [ 263.331309][ T31] dump_stack_lvl+0x3d/0x1f0 [ 263.331328][ T31] vpanic+0x6e8/0x7a0 [ 263.331356][ T31] ? __pfx_vpanic+0x10/0x10 [ 263.331386][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.331406][ T31] ? irqentry_exit+0x3b/0x90 [ 263.331424][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.331445][ T31] panic+0xca/0xd0 [ 263.331471][ T31] ? __pfx_panic+0x10/0x10 [ 263.331496][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 263.331516][ T31] ? irq_work_queue+0xce/0x100 [ 263.331537][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.331563][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 263.331583][ T31] ? watchdog+0xd78/0x1260 [ 263.331602][ T31] ? watchdog+0xd6b/0x1260 [ 263.331621][ T31] watchdog+0xd89/0x1260 [ 263.331645][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.331663][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.331682][ T31] ? __kthread_parkme+0x19e/0x250 [ 263.331708][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.331727][ T31] kthread+0x3c5/0x780 [ 263.331745][ T31] ? __pfx_kthread+0x10/0x10 [ 263.331764][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.331786][ T31] ? __pfx_kthread+0x10/0x10 [ 263.331805][ T31] ret_from_fork+0x5d7/0x6f0 [ 263.331820][ T31] ? __pfx_kthread+0x10/0x10 [ 263.331834][ T31] ret_from_fork_asm+0x1a/0x30 [ 263.331861][ T31] [ 263.332049][ T31] Kernel Offset: disabled