last executing test programs: 10.257248516s ago: executing program 0 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf010000}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, 0x0, &(0x7f0000000040)) sendmmsg$inet_sctp(r5, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 10.253559745s ago: executing program 1 (id=723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x110e22fff2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x40, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0002949da0000905040200000000000905880280"], 0x0) 9.258373812s ago: executing program 0 (id=725): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x110e22fff2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x40, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0002949da0000905040200000000000905880280"], 0x0) 6.493921464s ago: executing program 3 (id=732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf010000}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7, 0x40}, 0x8) r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000280)=0x2) socket$qrtr(0x2a, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb013, 0xf40, 0x0, 0x0, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0xff, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x4, 0x3, 0x7, 0xa, 0x5, 0x1, 0x52, 0xc, 0x8, 0x400002, 0x2]}) 5.405502393s ago: executing program 0 (id=734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r6) r7 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="0000ee2d717fb4553ba3890d5fab224b0d4dfa251866e2270609bd8d1a9d08bff36656969610534f9729708c04280e668ea980d3bea9faf2ee4a9402b30f7ea7119965f1fa9881ba1cf345a8d037b17b701b5a4836bd9ccf4f0f0f9d00cb61ad7bb03be9b497ae9c5cbf3d3822ac5113377159e24e6bde"]) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) poll(&(0x7f0000000200)=[{r4, 0x1}, {r8, 0x8}, {0xffffffffffffffff, 0x10}, {r3, 0x200}], 0x4, 0x8a02) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x6, 0x0) 5.403327468s ago: executing program 1 (id=735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f00000000c0)={0x400000000000000, 0xffffffff, 0x0, 0xd, 0x7}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) 5.401896283s ago: executing program 4 (id=736): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x3000400c, 0x0, 0xfffe, 0x2, 0xfffffffe, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000500)={0x10, 0x8, [{0x6, 0x0, 0xfffffffffffffffb}, {0x38b, 0x0, 0x9}, {0x8, 0x0, 0x7}, {0x3ff, 0x0, 0xe}, {0x10001, 0x0, 0x5}, {0x80000000, 0x0, 0x4}, {0x7, 0x0, 0x3}, {0x4, 0x0, 0x1c}, {0x3, 0x0, 0x7fffffffffffffff}, {0x1, 0x0, 0x3}, {0x4}, {0x10000, 0x0, 0xffffffffffffffff}, {0x159, 0x0, 0x2}, {0x8, 0x0, 0x800}, {0x5, 0x0, 0x2}, {0x9, 0x0, 0x2}]}) 5.297077801s ago: executing program 3 (id=737): socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$usbmon(&(0x7f00000000c0), 0xffffffffffffffff, 0x180840) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x6, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 5.292189973s ago: executing program 2 (id=738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0xc000, @remote}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x4c, r6, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 4.230525241s ago: executing program 4 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0xc000, @remote}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x4c, r6, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 4.222827815s ago: executing program 2 (id=740): syz_emit_vhci(0x0, 0x15) 4.18189411s ago: executing program 1 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f00000000c0)={0x400000000000000, 0xffffffff, 0x0, 0xd, 0x7}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r5], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 4.115283705s ago: executing program 2 (id=742): memfd_secret(0x80000) 4.05003566s ago: executing program 3 (id=743): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000200"/44], 0x30}], 0x1, 0x0) 4.042230366s ago: executing program 2 (id=744): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x110e22fff2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x40, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0002949da0000905040200000000000905880280"], 0x0) 3.807360985s ago: executing program 3 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x33a}]}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@iv={0x90, 0x117, 0x2, 0x7b, "2aff84e950b563656b60d5bb6ab24f3f9679941122db790d4737b2334b8854943ce8952cd85f6d298833b1832560c092ce83a9f785d48fe34273b1841f9413cd12c2058e86fcb01f5ebbfe09cf7c7b124095259bb7bd90f7841cae359c2b19a581e5a43d8ea826328439999c7f5e0d197d43c4fadf66c714d9dc3e"}], 0x90}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 2.993128771s ago: executing program 4 (id=746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f00000000c0)={0x400000000000000, 0xffffffff, 0x0, 0xd, 0x7}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r5], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 2.769509663s ago: executing program 1 (id=747): socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x143fc2, 0x1d8) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.244817436s ago: executing program 4 (id=748): prlimit64(0x0, 0xe, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x800000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) close(r3) 2.028432088s ago: executing program 4 (id=749): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000200000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1.91440547s ago: executing program 4 (id=750): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) listen(r0, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200000000a3d800000000"], 0x0) gettid() openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.485084347s ago: executing program 0 (id=751): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x3000400c, 0x0, 0xfffe, 0x2, 0xfffffffe, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000500)={0x10, 0x8, [{0x6, 0x0, 0xfffffffffffffffb}, {0x38b, 0x0, 0x9}, {0x8, 0x0, 0x7}, {0x3ff, 0x0, 0xe}, {0x10001, 0x0, 0x5}, {0x80000000, 0x0, 0x4}, {0x7, 0x0, 0x3}, {0x4, 0x0, 0x1c}, {0x3, 0x0, 0x7fffffffffffffff}, {0x1, 0x0, 0x3}, {0x4}, {0x10000, 0x0, 0xffffffffffffffff}, {0x159, 0x0, 0x2}, {0x8, 0x0, 0x800}, {0x5, 0x0, 0x2}, {0x9, 0x0, 0x2}]}) 1.407532754s ago: executing program 1 (id=752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f00000000c0)={0x400000000000000, 0xffffffff, 0x0, 0xd, 0x7}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) 980.919595ms ago: executing program 3 (id=753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf010000}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, 0x0, &(0x7f0000000040)) sendmmsg$inet_sctp(r5, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 901.184794ms ago: executing program 2 (id=754): socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$usbmon(&(0x7f00000000c0), 0xffffffffffffffff, 0x180840) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x6, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 224.13628ms ago: executing program 0 (id=755): memfd_secret(0x80000) 220.034083ms ago: executing program 1 (id=756): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e", 0x63}, {&(0x7f0000000800)="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", 0x226}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded58ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de3000000000000000000", 0x50}], 0x3}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) keyctl$read(0x2, 0x0, &(0x7f00000003c0)=""/4096, 0x1000) 209.727373ms ago: executing program 0 (id=757): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffbff, 0x42000) 10.784844ms ago: executing program 3 (id=758): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x141}, 0x0, &(0x7f0000000380)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3000e450d4930000002c000000030a010200000000000000000100fffc0900010073797a30000000000900000073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c000180130001006e756d67656e00001c0002800800034000000000080001400000000008000240ffffffff0900010073797a3010b041212e4d9d6669a4ee09692fa9ec6dc32570a747309e2c7d43bb6c6f756a10da"], 0xcc}, 0x1, 0x0, 0x0, 0x20008400}, 0x40010) r6 = socket(0x2b, 0x1, 0x1) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffd4}, 0x1, 0x0, 0x0, 0x8001}, 0x10005) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) close_range(0xffffffffffffffff, r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setns(r4, 0x24020000) 0s ago: executing program 2 (id=759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): re0: entered promiscuous mode [ 85.054504][ T6196] gre0: entered allmulticast mode [ 85.448704][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'. [ 86.592480][ T30] audit: type=1400 audit(1768637122.412:208): avc: denied { create } for pid=6219 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.801871][ T5933] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.810834][ T30] audit: type=1400 audit(1768637122.432:209): avc: denied { write } for pid=6219 comm="syz.3.59" path="socket:[9009]" dev="sockfs" ino=9009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.840629][ T30] audit: type=1400 audit(1768637122.632:210): avc: denied { create } for pid=6219 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.863344][ T30] audit: type=1400 audit(1768637122.662:211): avc: denied { setopt } for pid=6219 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.974406][ T30] audit: type=1400 audit(1768637122.762:212): avc: denied { name_bind } for pid=6219 comm="syz.3.59" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 87.133061][ T30] audit: type=1400 audit(1768637122.762:213): avc: denied { node_bind } for pid=6219 comm="syz.3.59" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 87.295958][ T30] audit: type=1400 audit(1768637122.772:214): avc: denied { unmount } for pid=6219 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.351557][ T5933] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.363187][ T5933] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.373487][ T5933] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.383703][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.623303][ T6206] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.861010][ T5933] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.998888][ T6239] FAULT_INJECTION: forcing a failure. [ 87.998888][ T6239] name failslab, interval 1, probability 0, space 0, times 0 [ 88.017616][ T30] audit: type=1400 audit(1768637123.802:215): avc: denied { ioctl } for pid=6238 comm="syz.4.64" path="socket:[9038]" dev="sockfs" ino=9038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.059118][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 88.073945][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.4.64 Not tainted syzkaller #0 PREEMPT(full) [ 88.073965][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.073974][ T6239] Call Trace: [ 88.073979][ T6239] [ 88.073985][ T6239] dump_stack_lvl+0x16c/0x1f0 [ 88.074011][ T6239] should_fail_ex+0x512/0x640 [ 88.074034][ T6239] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 88.074053][ T6239] should_failslab+0xc2/0x120 [ 88.074075][ T6239] kmem_cache_alloc_node_noprof+0x86/0x800 [ 88.074089][ T6239] ? __alloc_skb+0x156/0x410 [ 88.074110][ T6239] ? __alloc_skb+0x156/0x410 [ 88.074122][ T6239] __alloc_skb+0x156/0x410 [ 88.074135][ T6239] ? __alloc_skb+0x35d/0x410 [ 88.074147][ T6239] ? __pfx___alloc_skb+0x10/0x10 [ 88.074159][ T6239] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 88.074179][ T6239] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 88.074205][ T6239] netlink_alloc_large_skb+0x69/0x140 [ 88.074227][ T6239] netlink_sendmsg+0x698/0xdd0 [ 88.074251][ T6239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.074279][ T6239] ____sys_sendmsg+0xa5d/0xc30 [ 88.074302][ T6239] ? copy_msghdr_from_user+0x10a/0x160 [ 88.074319][ T6239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.074351][ T6239] ___sys_sendmsg+0x134/0x1d0 [ 88.074368][ T6239] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.074412][ T6239] __sys_sendmsg+0x16d/0x220 [ 88.074430][ T6239] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.074461][ T6239] do_syscall_64+0xcd/0xf80 [ 88.074483][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.074499][ T6239] RIP: 0033:0x7fb12eb8f749 [ 88.074511][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.074524][ T6239] RSP: 002b:00007fb12f95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.074539][ T6239] RAX: ffffffffffffffda RBX: 00007fb12ede5fa0 RCX: 00007fb12eb8f749 [ 88.074549][ T6239] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 88.074557][ T6239] RBP: 00007fb12f95b090 R08: 0000000000000000 R09: 0000000000000000 [ 88.074566][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.074574][ T6239] R13: 00007fb12ede6038 R14: 00007fb12ede5fa0 R15: 00007ffcf18c9238 [ 88.074596][ T6239] [ 88.354454][ T6240] lo speed is unknown, defaulting to 1000 [ 88.410299][ T5933] usb 3-1: USB disconnect, device number 3 [ 89.180713][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 89.181693][ T5883] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.352783][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 89.359410][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 89.375508][ T5883] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 89.449669][ T5883] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 89.517874][ T5883] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 89.541809][ T5883] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 89.560183][ T5883] usb 5-1: config 1 interface 0 has no altsetting 0 [ 89.639995][ T5883] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 89.660171][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.680630][ T5883] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 90.077315][ T5883] scsi host1: usb-storage 5-1:1.0 [ 90.485569][ T5810] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 90.495336][ T5810] Bluetooth: hci4: Injecting HCI hardware error event [ 90.506221][ T5810] Bluetooth: hci4: hardware error 0x00 [ 91.620736][ T5965] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 92.088148][ T5965] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 92.260048][ T5816] Bluetooth: hci4: unexpected event for opcode 0x200a [ 92.269349][ T6267] vlan0: entered promiscuous mode [ 92.340248][ T6267] team0: Port device vlan0 added [ 92.900514][ T5810] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 92.905073][ T6263] sddr09: could not read card info [ 92.933079][ T24] usb 5-1: USB disconnect, device number 3 [ 92.980652][ T6098] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 92.987906][ T6098] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 92.994149][ T6098] sd 1:0:0:0: [sdb] Write Protect is off [ 93.004164][ T6098] sd 1:0:0:0: [sdb] Asking for cache data failed [ 93.012043][ T6098] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 93.053551][ T30] audit: type=1400 audit(1768637128.872:216): avc: denied { connect } for pid=6273 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.073372][ T30] audit: type=1400 audit(1768637128.872:217): avc: denied { read } for pid=6273 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.136601][ T6098] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 93.147415][ T30] audit: type=1400 audit(1768637128.932:218): avc: denied { read } for pid=6273 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.189278][ T30] audit: type=1400 audit(1768637128.982:219): avc: denied { write } for pid=6273 comm="syz.1.72" path="socket:[9989]" dev="sockfs" ino=9989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.358273][ T6284] lo speed is unknown, defaulting to 1000 [ 93.454921][ T5829] udevd[5829]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 93.831897][ T6292] lo speed is unknown, defaulting to 1000 [ 93.962109][ T5987] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.089687][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.159906][ T5987] usb 3-1: Using ep0 maxpacket: 32 [ 94.288856][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.389954][ T6286] lo speed is unknown, defaulting to 1000 [ 94.395938][ T6286] lo speed is unknown, defaulting to 1000 [ 94.402437][ T5987] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 94.405704][ T6286] lo speed is unknown, defaulting to 1000 [ 94.420521][ T5987] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 94.420601][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.445692][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.494269][ T6286] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 94.501619][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.521209][ T6286] lo speed is unknown, defaulting to 1000 [ 94.535269][ T6286] lo speed is unknown, defaulting to 1000 [ 94.546241][ T6286] lo speed is unknown, defaulting to 1000 [ 94.559724][ T6294] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.561352][ T6286] lo speed is unknown, defaulting to 1000 [ 94.585042][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.594956][ T5987] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.597510][ T6286] lo speed is unknown, defaulting to 1000 [ 94.649348][ T5987] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 94.685046][ T5987] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 94.694375][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.709065][ T5987] usb 3-1: Product: syz [ 94.720611][ T5987] usb 3-1: Manufacturer: syz [ 94.724587][ T6286] lo speed is unknown, defaulting to 1000 [ 94.734785][ T5987] usb 3-1: SerialNumber: syz [ 94.753425][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 94.771187][ T6286] lo speed is unknown, defaulting to 1000 [ 94.794613][ T5987] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input5 [ 94.885996][ T24] usb 5-1: USB disconnect, device number 4 [ 94.994210][ T5987] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 95.031125][ T5987] (id 0x00) [ 95.479686][ T5987] rc_core: IR keymap rc-imon-pad not found [ 95.485574][ T5987] Registered IR keymap rc-empty [ 95.490797][ T5987] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 95.509740][ T5987] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 95.551646][ T5987] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 95.570877][ T5987] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input6 [ 95.632023][ T5987] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:4> initialized [ 95.662683][ T5987] usb 3-1: USB disconnect, device number 4 [ 95.886007][ T6290] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.75'. [ 95.919730][ T30] audit: type=1400 audit(1768637131.722:220): avc: denied { mounton } for pid=6309 comm="syz.3.79" path="/15/file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.093352][ T30] audit: type=1400 audit(1768637131.912:221): avc: denied { create } for pid=6313 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.194444][ T30] audit: type=1400 audit(1768637131.912:222): avc: denied { setopt } for pid=6313 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.769489][ T30] audit: type=1400 audit(1768637132.582:223): avc: denied { create } for pid=6321 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.857587][ T6320] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 96.917693][ T6320] PKCS7: Only support pkcs7_signedData type [ 96.928763][ T30] audit: type=1400 audit(1768637132.752:224): avc: denied { write } for pid=6321 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.367251][ T6320] lo speed is unknown, defaulting to 1000 [ 97.450996][ T30] audit: type=1400 audit(1768637133.272:225): avc: denied { name_bind } for pid=6332 comm="syz.2.84" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 97.486714][ T6320] lo speed is unknown, defaulting to 1000 [ 98.175795][ T6340] vlan0: entered promiscuous mode [ 98.256618][ T6340] team0: Port device vlan0 added [ 98.319133][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89'. [ 98.599668][ T5987] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.680515][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.90'. [ 98.781901][ T5987] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.799169][ T5987] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.824085][ T5987] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.839788][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.887673][ T6351] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.917207][ T5987] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.959715][ T6004] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.005449][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 99.005461][ T30] audit: type=1400 audit(1768637134.822:229): avc: denied { read } for pid=6363 comm="syz.1.92" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.079696][ T30] audit: type=1400 audit(1768637134.822:230): avc: denied { open } for pid=6363 comm="syz.1.92" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.184341][ T6004] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.214838][ T30] audit: type=1400 audit(1768637134.932:231): avc: denied { ioctl } for pid=6363 comm="syz.1.92" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.250974][ T6004] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.261115][ T6004] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.276464][ T6371] process 'syz.1.94' launched './file1' with NULL argv: empty string added [ 99.285241][ T6004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.295403][ T30] audit: type=1400 audit(1768637134.942:232): avc: denied { ioctl } for pid=6364 comm="syz.3.93" path="socket:[10597]" dev="sockfs" ino=10597 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.303525][ T6357] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.359687][ T30] audit: type=1400 audit(1768637135.092:233): avc: denied { execute } for pid=6370 comm="syz.1.94" name="file1" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.417305][ T6004] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.444627][ T30] audit: type=1400 audit(1768637135.112:234): avc: denied { execute_no_trans } for pid=6370 comm="syz.1.94" path="/20/file1" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.717337][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 100.101002][ T30] audit: type=1400 audit(1768637135.112:235): avc: denied { remount } for pid=6370 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.119805][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 100.169892][ T30] audit: type=1400 audit(1768637135.422:236): avc: denied { read } for pid=6373 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.311259][ T6004] usb 5-1: USB disconnect, device number 5 [ 100.475033][ T5925] usb 3-1: USB disconnect, device number 5 [ 101.238870][ T30] audit: type=1400 audit(1768637137.052:237): avc: denied { create } for pid=6390 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 101.357959][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 101.661336][ T30] audit: type=1400 audit(1768637137.482:238): avc: denied { watch } for pid=6400 comm="syz.1.103" path="/23/file1" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.971410][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 102.264780][ T6414] ptrace attach of ""[6415] was attempted by "./syz-executor exec"[6414] [ 102.670462][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'. [ 103.024981][ T5987] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.351450][ T5987] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 103.449696][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.489022][ T5987] usb 3-1: config 0 has no interface number 0 [ 103.519166][ T5987] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 103.532286][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 103.550000][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.569420][ T5987] usb 3-1: config 0 descriptor?? [ 103.601256][ T5987] qmi_wwan 3-1:0.154: skipping garbage [ 103.626356][ T5987] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 103.643182][ T5987] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 103.813019][ T6416] ptrace attach of ""[6415] was attempted by "./syz-executor exec"[6416] [ 103.813610][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.953533][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.214805][ T6440] lo speed is unknown, defaulting to 1000 [ 104.232582][ T6440] lo speed is unknown, defaulting to 1000 [ 104.716411][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 104.716425][ T30] audit: type=1400 audit(1768637140.532:246): avc: denied { set_context_mgr } for pid=6442 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 105.669638][ T30] audit: type=1400 audit(1768637141.472:247): avc: denied { create } for pid=6454 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.718570][ T24] usb 3-1: USB disconnect, device number 6 [ 105.761349][ T30] audit: type=1400 audit(1768637141.522:248): avc: denied { connect } for pid=6454 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.887561][ T30] audit: type=1400 audit(1768637141.562:249): avc: denied { read } for pid=6454 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.955096][ T30] audit: type=1400 audit(1768637141.612:250): avc: denied { write } for pid=6454 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 106.119694][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 106.342015][ T24] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 106.360205][ T24] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 106.384385][ T24] usb 5-1: config 8 has no interface number 0 [ 106.400891][ T24] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.436950][ T24] usb 5-1: config 8 interface 177 has no altsetting 0 [ 106.461240][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 106.497494][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.523003][ T24] ir_toy 5-1:8.177: required endpoints not found [ 106.849484][ T6469] siw: device registration error -23 [ 106.861485][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.120'. [ 107.243191][ T6456] loop8: detected capacity change from 0 to 8 [ 107.251772][ T6328] Dev loop8: unable to read RDB block 8 [ 107.263590][ T6328] loop8: unable to read partition table [ 107.273703][ T6328] loop8: partition table beyond EOD, truncated [ 107.297078][ T6456] Dev loop8: unable to read RDB block 8 [ 107.303730][ T6456] loop8: unable to read partition table [ 107.649930][ T6456] loop8: partition table beyond EOD, truncated [ 107.692835][ T6456] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 108.069675][ T90] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.240746][ T90] usb 2-1: Using ep0 maxpacket: 8 [ 108.254394][ T90] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 108.349675][ T90] usb 2-1: can't read configurations, error -61 [ 108.499823][ T90] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.624364][ T30] audit: type=1400 audit(1768637144.442:251): avc: denied { setopt } for pid=6500 comm="syz.2.128" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.702053][ T30] audit: type=1400 audit(1768637144.512:252): avc: denied { ioctl } for pid=6500 comm="syz.2.128" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.729812][ T90] usb 2-1: Using ep0 maxpacket: 8 [ 108.758004][ T90] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 108.768927][ T90] usb 2-1: can't read configurations, error -61 [ 108.780853][ T30] audit: type=1400 audit(1768637144.562:253): avc: denied { create } for pid=6493 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.800508][ T90] usb usb2-port1: attempt power cycle [ 108.878096][ T30] audit: type=1400 audit(1768637144.572:254): avc: denied { bind } for pid=6493 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.941133][ T5987] usb 5-1: USB disconnect, device number 6 [ 109.621231][ T6517] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 109.761138][ T6518] Zero length message leads to an empty skb [ 109.779100][ T30] audit: type=1400 audit(1768637145.472:255): avc: denied { mounton } for pid=6507 comm="syz.3.131" path="/30" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 109.792323][ T90] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.887288][ T6522] siw: device registration error -23 [ 109.898084][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.132'. [ 110.331414][ T90] usb 2-1: Using ep0 maxpacket: 8 [ 110.338592][ T90] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 110.346287][ T90] usb 2-1: can't read configurations, error -61 [ 110.458227][ T30] audit: type=1400 audit(1768637145.472:256): avc: denied { mount } for pid=6507 comm="syz.3.131" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 110.498238][ T90] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.506971][ T30] audit: type=1400 audit(1768637145.482:257): avc: denied { relabelto } for pid=6507 comm="syz.3.131" name="30" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 110.525413][ T6530] serio: Serial port ttyS3 [ 110.549697][ T30] audit: type=1400 audit(1768637145.542:258): avc: denied { associate } for pid=6507 comm="syz.3.131" name="30" dev="tmpfs" ino=170 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 110.549745][ T30] audit: type=1400 audit(1768637146.202:259): avc: denied { remove_name } for pid=5815 comm="syz-executor" name="binderfs" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 110.549786][ T30] audit: type=1400 audit(1768637146.202:260): avc: denied { rmdir } for pid=5815 comm="syz-executor" name="30" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 110.799652][ T90] usb 2-1: device descriptor read/8, error -71 [ 110.914083][ T90] usb usb2-port1: unable to enumerate USB device [ 110.920676][ T5876] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 111.077126][ T5876] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 111.085360][ T5876] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 111.096736][ T5876] usb 3-1: config 8 has no interface number 0 [ 111.104424][ T5876] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.117982][ T5876] usb 3-1: config 8 interface 177 has no altsetting 0 [ 111.125177][ T5876] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 111.136538][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.219682][ T90] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.179165][ T5876] ir_toy 3-1:8.177: required endpoints not found [ 112.259424][ T90] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.282180][ T90] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 112.296495][ T90] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.308910][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.327006][ T6536] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 112.348124][ T90] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.377237][ T24] usb 3-1: USB disconnect, device number 7 [ 112.557240][ T90] usb 2-1: USB disconnect, device number 8 [ 112.802241][ T6551] lo speed is unknown, defaulting to 1000 [ 112.814158][ T6551] lo speed is unknown, defaulting to 1000 [ 116.045631][ T6579] siw: device registration error -23 [ 116.057121][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.145'. [ 116.860786][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'. [ 117.061202][ T30] audit: type=1400 audit(1768637152.882:261): avc: denied { bind } for pid=6587 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.082411][ T6588] Bluetooth: MGMT ver 1.23 [ 117.097880][ T6588] Bluetooth: hci0: unsupported parameter 255 [ 117.104357][ T6588] Bluetooth: hci0: unsupported parameter 255 [ 117.187250][ T30] audit: type=1400 audit(1768637152.902:262): avc: denied { write } for pid=6587 comm="syz.2.149" path="socket:[11153]" dev="sockfs" ino=11153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.212548][ T30] audit: type=1400 audit(1768637152.902:263): avc: denied { write } for pid=6587 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.323208][ T6593] siw: device registration error -23 [ 117.341566][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'. [ 118.059097][ T5925] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.096206][ T6609] syz_tun: entered allmulticast mode [ 118.107963][ T6609] pimreg: entered allmulticast mode [ 118.221872][ T5925] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.229658][ T5876] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 118.240492][ T5925] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.259694][ T5925] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.278063][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.464854][ T6601] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 118.477409][ T5925] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.965092][ T5876] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 118.983023][ T5876] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 119.009972][ T5876] usb 3-1: config 8 has no interface number 0 [ 119.027324][ T5925] usb 5-1: USB disconnect, device number 7 [ 119.044548][ T5876] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.065672][ T5876] usb 3-1: config 8 interface 177 has no altsetting 0 [ 119.072758][ T5876] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 119.084404][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.115185][ T5876] ir_toy 3-1:8.177: required endpoints not found [ 119.524049][ T6604] loop8: detected capacity change from 0 to 8 [ 119.539821][ T6604] Dev loop8: unable to read RDB block 8 [ 119.552249][ T6604] loop8: unable to read partition table [ 119.565273][ T6604] loop8: partition table beyond EOD, truncated [ 119.578677][ T6604] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 119.789190][ T6629] siw: device registration error -23 [ 119.800528][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'. [ 120.400446][ T6641] netlink: 'syz.0.160': attribute type 1 has an invalid length. [ 120.416913][ T6641] tipc: Can't bind to reserved service type 2 [ 120.601953][ T30] audit: type=1400 audit(1768637156.232:264): avc: denied { bind } for pid=6634 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.688115][ T6641] mmap: syz.0.160 (6641) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.841024][ T30] audit: type=1400 audit(1768637156.282:265): avc: denied { setopt } for pid=6634 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.948459][ T5876] usb 3-1: USB disconnect, device number 8 [ 121.711223][ T6651] lo speed is unknown, defaulting to 1000 [ 121.731091][ T6651] lo speed is unknown, defaulting to 1000 [ 122.943452][ T6651] siw: device registration error -23 [ 123.263776][ T6677] loop4: detected capacity change from 0 to 2560 [ 123.293330][ T6678] FAULT_INJECTION: forcing a failure. [ 123.293330][ T6678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.311209][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.1.168 Not tainted syzkaller #0 PREEMPT(full) [ 123.311229][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.311237][ T6678] Call Trace: [ 123.311243][ T6678] [ 123.311248][ T6678] dump_stack_lvl+0x16c/0x1f0 [ 123.311273][ T6678] should_fail_ex+0x512/0x640 [ 123.311300][ T6678] _copy_to_iter+0x463/0x1710 [ 123.311325][ T6678] ? show_fd_locks+0x118/0x170 [ 123.311348][ T6678] ? __pfx_show_fd_locks+0x10/0x10 [ 123.311371][ T6678] ? __pfx__copy_to_iter+0x10/0x10 [ 123.311390][ T6678] ? seq_show+0x336/0x880 [ 123.311407][ T6678] ? fput+0x70/0xf0 [ 123.311420][ T6678] ? __pfx_sock_show_fdinfo+0x10/0x10 [ 123.311438][ T6678] ? seq_show+0x574/0x880 [ 123.311458][ T6678] seq_read_iter+0xd02/0x12d0 [ 123.311489][ T6678] seq_read+0x3a3/0x570 [ 123.311509][ T6678] ? __pfx_seq_read+0x10/0x10 [ 123.311530][ T6678] ? get_pid_task+0xfc/0x250 [ 123.311552][ T6678] ? avc_policy_seqno+0x9/0x20 [ 123.311574][ T6678] ? rw_verify_area+0xcf/0x6c0 [ 123.311592][ T6678] ? __pfx_seq_read+0x10/0x10 [ 123.311610][ T6678] vfs_read+0x1e4/0xcf0 [ 123.311634][ T6678] ? __pfx_vfs_read+0x10/0x10 [ 123.311651][ T6678] ? find_held_lock+0x2b/0x80 [ 123.311676][ T6678] ? __fget_files+0x204/0x3c0 [ 123.311703][ T6678] ? __fget_files+0x20e/0x3c0 [ 123.311731][ T6678] __x64_sys_pread64+0x1eb/0x250 [ 123.311753][ T6678] ? __pfx___x64_sys_pread64+0x10/0x10 [ 123.311781][ T6678] do_syscall_64+0xcd/0xf80 [ 123.311805][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.311822][ T6678] RIP: 0033:0x7f8b7158f749 [ 123.311835][ T6678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.311849][ T6678] RSP: 002b:00007f8b72411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 123.311865][ T6678] RAX: ffffffffffffffda RBX: 00007f8b717e6180 RCX: 00007f8b7158f749 [ 123.311876][ T6678] RDX: 00000000000000ed RSI: 0000200000000080 RDI: 0000000000000006 [ 123.311885][ T6678] RBP: 00007f8b72411090 R08: 0000000000000000 R09: 0000000000000000 [ 123.311894][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.311903][ T6678] R13: 00007f8b717e6218 R14: 00007f8b717e6180 R15: 00007ffc00c04db8 [ 123.311925][ T6678] [ 123.612761][ T6681] loop4: detected capacity change from 2560 to 524287999 [ 123.634527][ T30] audit: type=1400 audit(1768637159.432:266): avc: denied { setopt } for pid=6676 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.639801][ T6681] Buffer I/O error on dev loop4, logical block 0, async page read [ 123.653959][ T30] audit: type=1400 audit(1768637159.452:267): avc: denied { bind } for pid=6676 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.654001][ T30] audit: type=1400 audit(1768637159.452:268): avc: denied { name_bind } for pid=6676 comm="syz.2.169" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.654036][ T30] audit: type=1400 audit(1768637159.452:269): avc: denied { node_bind } for pid=6676 comm="syz.2.169" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 123.654070][ T30] audit: type=1400 audit(1768637159.452:270): avc: denied { write } for pid=6676 comm="syz.2.169" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.654103][ T30] audit: type=1400 audit(1768637159.452:271): avc: denied { name_connect } for pid=6676 comm="syz.2.169" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.822884][ T30] audit: type=1400 audit(1768637159.642:272): avc: denied { mount } for pid=6683 comm="syz.0.171" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 123.883597][ T6328] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.010543][ T6681] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.032695][ T6681] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.062664][ T6681] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.095542][ T6681] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.133100][ T6681] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.172652][ T6681] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.187077][ T6681] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.217124][ T6681] ldm_validate_partition_table(): Disk read failed. [ 124.231991][ T6681] Buffer I/O error on dev loop4, logical block 0, async page read [ 124.241205][ T6681] Dev loop4: unable to read RDB block 0 [ 124.246932][ T6681] loop4: unable to read partition table [ 124.252795][ T6681] loop_reread_partitions: partition scan of loop4 (žËÞ¼„žØÞÿDrq‰N- Çò!‚Ác×nmè’˜Y¯ [ 124.252795][ T6681] Õ«@–á¿Ñ h‘m”M=K aÊ™) failed (rc=-5) [ 124.298831][ T30] audit: type=1400 audit(1768637160.112:273): avc: denied { create } for pid=6694 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 124.606048][ T6701] syz.4.173 uses obsolete (PF_INET,SOCK_PACKET) [ 124.670616][ T6702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.173'. [ 124.765151][ T30] audit: type=1400 audit(1768637160.492:274): avc: denied { write } for pid=6694 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 124.939934][ T30] audit: type=1400 audit(1768637160.742:275): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 126.596061][ T6721] netlink: 476 bytes leftover after parsing attributes in process `syz.2.179'. [ 126.609203][ T6721] FAULT_INJECTION: forcing a failure. [ 126.609203][ T6721] name failslab, interval 1, probability 0, space 0, times 0 [ 126.621916][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.2.179 Not tainted syzkaller #0 PREEMPT(full) [ 126.621936][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.621945][ T6721] Call Trace: [ 126.621951][ T6721] [ 126.621958][ T6721] dump_stack_lvl+0x16c/0x1f0 [ 126.621985][ T6721] should_fail_ex+0x512/0x640 [ 126.622009][ T6721] ? __kmalloc_cache_noprof+0x5f/0x800 [ 126.622028][ T6721] should_failslab+0xc2/0x120 [ 126.622050][ T6721] __kmalloc_cache_noprof+0x80/0x800 [ 126.622066][ T6721] ? alloc_pipe_info+0x10e/0x590 [ 126.622090][ T6721] ? avc_has_perm+0x144/0x1f0 [ 126.622114][ T6721] ? alloc_pipe_info+0x10e/0x590 [ 126.622137][ T6721] alloc_pipe_info+0x10e/0x590 [ 126.622163][ T6721] splice_direct_to_actor+0x77d/0xa30 [ 126.622188][ T6721] ? __pfx_direct_splice_actor+0x10/0x10 [ 126.622211][ T6721] ? inode_has_perm+0x16d/0x1d0 [ 126.622230][ T6721] ? file_has_perm+0x27b/0x350 [ 126.622247][ T6721] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 126.622271][ T6721] ? __pfx_file_has_perm+0x10/0x10 [ 126.622294][ T6721] do_splice_direct+0x174/0x240 [ 126.622318][ T6721] ? __pfx_do_splice_direct+0x10/0x10 [ 126.622343][ T6721] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 126.622373][ T6721] ? rw_verify_area+0xcf/0x6c0 [ 126.622395][ T6721] do_sendfile+0xb06/0xe50 [ 126.622419][ T6721] ? __pfx_do_sendfile+0x10/0x10 [ 126.622449][ T6721] __x64_sys_sendfile64+0x154/0x220 [ 126.622474][ T6721] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 126.622507][ T6721] do_syscall_64+0xcd/0xf80 [ 126.622532][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.622548][ T6721] RIP: 0033:0x7f67f0b8f749 [ 126.622562][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.622576][ T6721] RSP: 002b:00007f67f1aa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 126.622592][ T6721] RAX: ffffffffffffffda RBX: 00007f67f0de6180 RCX: 00007f67f0b8f749 [ 126.622603][ T6721] RDX: 0000200000001000 RSI: 0000000000000005 RDI: 0000000000000005 [ 126.622612][ T6721] RBP: 00007f67f1aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 126.622622][ T6721] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 126.622631][ T6721] R13: 00007f67f0de6218 R14: 00007f67f0de6180 R15: 00007fffd8bfa6e8 [ 126.622654][ T6721] [ 127.600984][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.182'. [ 127.671895][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.186'. [ 127.785098][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 127.939678][ T5925] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.098112][ T5925] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.116244][ T5925] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.129154][ T5925] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.142251][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.159787][ T6738] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.176620][ T5925] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.200134][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.187'. [ 128.235988][ T6747] netlink: 'syz.4.188': attribute type 1 has an invalid length. [ 128.524096][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 128.887053][ T5925] usb 3-1: USB disconnect, device number 9 [ 129.551367][ T6765] lo speed is unknown, defaulting to 1000 [ 129.612162][ T6765] lo speed is unknown, defaulting to 1000 [ 129.833267][ T30] audit: type=1400 audit(1768637165.602:276): avc: denied { name_bind } for pid=6767 comm="syz.4.193" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 131.203403][ T6777] FAULT_INJECTION: forcing a failure. [ 131.203403][ T6777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.216599][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.4.195 Not tainted syzkaller #0 PREEMPT(full) [ 131.216618][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.216624][ T6777] Call Trace: [ 131.216629][ T6777] [ 131.216633][ T6777] dump_stack_lvl+0x16c/0x1f0 [ 131.216652][ T6777] should_fail_ex+0x512/0x640 [ 131.216670][ T6777] strncpy_from_user+0x3b/0x2e0 [ 131.216690][ T6777] getname_flags.part.0+0x8f/0x550 [ 131.216704][ T6777] getname_flags+0x93/0xf0 [ 131.216719][ T6777] do_sys_openat2+0xb9/0x290 [ 131.216728][ T6777] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.216739][ T6777] ? __fget_files+0x20e/0x3c0 [ 131.216758][ T6777] __x64_sys_openat+0x174/0x210 [ 131.216767][ T6777] ? __pfx___x64_sys_openat+0x10/0x10 [ 131.216777][ T6777] ? ksys_write+0x1ac/0x250 [ 131.216796][ T6777] do_syscall_64+0xcd/0xf80 [ 131.216811][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.216821][ T6777] RIP: 0033:0x7fb12eb8f749 [ 131.216830][ T6777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.216839][ T6777] RSP: 002b:00007fb12cdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.216851][ T6777] RAX: ffffffffffffffda RBX: 00007fb12ede6090 RCX: 00007fb12eb8f749 [ 131.216857][ T6777] RDX: 000000000008a140 RSI: 0000200000000cc0 RDI: ffffffffffffff9c [ 131.216863][ T6777] RBP: 00007fb12cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.216869][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.216874][ T6777] R13: 00007fb12ede6128 R14: 00007fb12ede6090 R15: 00007ffcf18c9238 [ 131.216887][ T6777] [ 131.972005][ T30] audit: type=1400 audit(1768637167.792:277): avc: denied { create } for pid=6779 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.994921][ T6780] capability: warning: `syz.0.197' uses deprecated v2 capabilities in a way that may be insecure [ 132.065520][ T30] audit: type=1400 audit(1768637167.812:278): avc: denied { write } for pid=6779 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.295376][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.309825][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.476444][ T30] audit: type=1400 audit(1768637167.832:279): avc: denied { setopt } for pid=6779 comm="syz.0.197" lport=46798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.495750][ T6791] FAULT_INJECTION: forcing a failure. [ 132.495750][ T6791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.584352][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.2.200 Not tainted syzkaller #0 PREEMPT(full) [ 132.584376][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.584385][ T6791] Call Trace: [ 132.584390][ T6791] [ 132.584397][ T6791] dump_stack_lvl+0x16c/0x1f0 [ 132.584424][ T6791] should_fail_ex+0x512/0x640 [ 132.584453][ T6791] _copy_from_user+0x2e/0xd0 [ 132.584479][ T6791] memdup_user+0x6b/0xe0 [ 132.584497][ T6791] strndup_user+0x78/0xe0 [ 132.584514][ T6791] __x64_sys_mount+0x17f/0x310 [ 132.584531][ T6791] ? __pfx___x64_sys_mount+0x10/0x10 [ 132.584554][ T6791] do_syscall_64+0xcd/0xf80 [ 132.584578][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.584594][ T6791] RIP: 0033:0x7f67f0b8f749 [ 132.584607][ T6791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.584621][ T6791] RSP: 002b:00007f67f1ae7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.584637][ T6791] RAX: ffffffffffffffda RBX: 00007f67f0de5fa0 RCX: 00007f67f0b8f749 [ 132.584647][ T6791] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000180 [ 132.584657][ T6791] RBP: 00007f67f1ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.584667][ T6791] R10: 00000000026540c1 R11: 0000000000000246 R12: 0000000000000001 [ 132.584676][ T6791] R13: 00007f67f0de6038 R14: 00007f67f0de5fa0 R15: 00007fffd8bfa6e8 [ 132.584699][ T6791] [ 132.733354][ T30] audit: type=1400 audit(1768637167.872:280): avc: denied { setopt } for pid=6779 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.793602][ T30] audit: type=1400 audit(1768637168.612:281): avc: denied { ioctl } for pid=6792 comm="syz.3.201" path="socket:[12800]" dev="sockfs" ino=12800 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.499501][ T30] audit: type=1400 audit(1768637169.312:282): avc: denied { map } for pid=6804 comm="syz.0.205" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.506568][ T6805] binder_alloc: 6804: pid 6804 spamming oneway? 1 buffers allocated for a total size of 4096 [ 133.527816][ T30] audit: type=1400 audit(1768637169.312:283): avc: denied { call } for pid=6804 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 133.777258][ T6811] netlink: 44 bytes leftover after parsing attributes in process `syz.2.207'. [ 133.963983][ T30] audit: type=1400 audit(1768637169.782:284): avc: denied { connect } for pid=6804 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.163316][ T30] audit: type=1400 audit(1768637169.952:285): avc: denied { name_bind } for pid=6815 comm="syz.2.208" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 135.137004][ T30] audit: type=1400 audit(1768637170.072:286): avc: denied { read } for pid=6818 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.166992][ T30] audit: type=1400 audit(1768637170.292:287): avc: denied { write } for pid=6818 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.358106][ T6830] lo speed is unknown, defaulting to 1000 [ 135.376761][ T6830] lo speed is unknown, defaulting to 1000 [ 136.822748][ T6845] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 136.902006][ T30] audit: type=1400 audit(1768637172.612:288): avc: denied { sqpoll } for pid=6838 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 138.941929][ T6866] lo speed is unknown, defaulting to 1000 [ 138.949219][ T6866] lo speed is unknown, defaulting to 1000 [ 138.991548][ T30] audit: type=1400 audit(1768637174.812:289): avc: denied { getopt } for pid=6859 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 139.039475][ T6874] netlink: 44 bytes leftover after parsing attributes in process `syz.2.219'. [ 139.261363][ T30] audit: type=1400 audit(1768637175.082:290): avc: denied { map } for pid=6884 comm="syz.2.221" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.284281][ T5869] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 139.569682][ T5869] usb 5-1: device descriptor read/64, error -71 [ 140.079687][ T5869] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 140.158873][ T30] audit: type=1400 audit(1768637175.972:291): avc: denied { ioctl } for pid=6884 comm="syz.2.221" path="socket:[13033]" dev="sockfs" ino=13033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.302177][ T5869] usb 5-1: device descriptor read/64, error -71 [ 140.426842][ T6899] lo speed is unknown, defaulting to 1000 [ 140.450373][ T5869] usb usb5-port1: attempt power cycle [ 140.477079][ T6899] lo speed is unknown, defaulting to 1000 [ 140.789710][ T5869] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 140.810673][ T5869] usb 5-1: device descriptor read/8, error -71 [ 141.049812][ T5869] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 141.064466][ T6912] vxlan0: entered promiscuous mode [ 141.075784][ T6912] vxlan0: entered allmulticast mode [ 141.081483][ T5869] usb 5-1: device descriptor read/8, error -71 [ 141.114267][ T3648] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.127356][ T3648] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.136284][ T3648] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.145109][ T3648] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.189980][ T5869] usb usb5-port1: unable to enumerate USB device [ 144.713779][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'. [ 145.222400][ T6960] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 145.372067][ T30] audit: type=1400 audit(1768637181.052:292): avc: denied { execute } for pid=6955 comm="syz.1.244" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 146.329496][ T30] audit: type=1400 audit(1768637182.142:293): avc: denied { bind } for pid=6969 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.449872][ T30] audit: type=1400 audit(1768637182.172:294): avc: denied { accept } for pid=6969 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.476236][ T30] audit: type=1400 audit(1768637182.172:295): avc: denied { write } for pid=6969 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.517975][ T30] audit: type=1400 audit(1768637182.172:296): avc: denied { read } for pid=6969 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.546303][ T30] audit: type=1400 audit(1768637182.172:297): avc: denied { ioctl } for pid=6969 comm="syz.1.247" path="socket:[13491]" dev="sockfs" ino=13491 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.991189][ T5883] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.469665][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 148.487832][ T5883] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 148.522235][ T5883] usb 2-1: config 0 has no interface number 0 [ 148.593045][ T5883] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 148.611445][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.708606][ T5883] usb 2-1: Product: syz [ 148.715975][ T5883] usb 2-1: Manufacturer: syz [ 148.720874][ T5883] usb 2-1: SerialNumber: syz [ 148.730394][ T6987] FAULT_INJECTION: forcing a failure. [ 148.730394][ T6987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.740072][ T5883] usb 2-1: config 0 descriptor?? [ 148.753489][ T5883] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 148.778313][ T6981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.924004][ T6987] CPU: 0 UID: 0 PID: 6987 Comm: syz.2.252 Not tainted syzkaller #0 PREEMPT(full) [ 148.924025][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.924033][ T6987] Call Trace: [ 148.924038][ T6987] [ 148.924044][ T6987] dump_stack_lvl+0x16c/0x1f0 [ 148.924071][ T6987] should_fail_ex+0x512/0x640 [ 148.924092][ T6987] _copy_to_user+0x32/0xd0 [ 148.924113][ T6987] bpf_prog_test_run_raw_tp+0x53f/0x710 [ 148.924136][ T6987] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 148.924157][ T6987] ? fput+0x70/0xf0 [ 148.924171][ T6987] ? __bpf_prog_get+0x97/0x2a0 [ 148.924188][ T6987] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 148.924202][ T6987] __sys_bpf+0x1035/0x4980 [ 148.924218][ T6987] ? __pfx___sys_bpf+0x10/0x10 [ 148.924231][ T6987] ? find_held_lock+0x2b/0x80 [ 148.924249][ T6987] ? find_held_lock+0x2b/0x80 [ 148.924276][ T6987] ? __mutex_unlock_slowpath+0x161/0x790 [ 148.924311][ T6987] ? fput+0x70/0xf0 [ 148.924324][ T6987] ? ksys_write+0x1ac/0x250 [ 148.924339][ T6987] ? __pfx_ksys_write+0x10/0x10 [ 148.924353][ T6987] __x64_sys_bpf+0x78/0xc0 [ 148.924367][ T6987] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.924381][ T6987] do_syscall_64+0xcd/0xf80 [ 148.924397][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.924413][ T6987] RIP: 0033:0x7f67f0b8f749 [ 148.924426][ T6987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.924439][ T6987] RSP: 002b:00007f67f1ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.924453][ T6987] RAX: ffffffffffffffda RBX: 00007f67f0de5fa0 RCX: 00007f67f0b8f749 [ 148.924462][ T6987] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 148.924470][ T6987] RBP: 00007f67f1ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.924478][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.924483][ T6987] R13: 00007f67f0de6038 R14: 00007f67f0de5fa0 R15: 00007fffd8bfa6e8 [ 148.924497][ T6987] [ 148.958064][ T5883] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 150.135480][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 150.148613][ T5883] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 150.258724][ T5883] usb 2-1: USB disconnect, device number 9 [ 150.297288][ T5883] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 150.622282][ T5883] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 150.845743][ T5883] quatech2 2-1:0.51: device disconnected [ 150.878616][ T7000] netlink: 26 bytes leftover after parsing attributes in process `syz.1.255'. [ 151.836096][ T30] audit: type=1400 audit(1768637187.652:298): avc: denied { nlmsg_tty_audit } for pid=7009 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 152.646957][ T7032] tipc: Enabling of bearer rejected, failed to enable media [ 153.148941][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.267'. [ 153.158128][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.267'. [ 153.420416][ T30] audit: type=1400 audit(1768637188.992:299): avc: denied { create } for pid=7040 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 153.690044][ T30] audit: type=1400 audit(1768637188.992:300): avc: denied { kexec_image_load } for pid=7040 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 154.188501][ T7058] lo speed is unknown, defaulting to 1000 [ 154.225538][ T7058] lo speed is unknown, defaulting to 1000 [ 156.769304][ T7066] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 156.851593][ T7066] PKCS7: Only support pkcs7_signedData type [ 157.006700][ T7066] lo speed is unknown, defaulting to 1000 [ 157.028411][ T7066] lo speed is unknown, defaulting to 1000 [ 157.120674][ T30] audit: type=1400 audit(1768637192.942:301): avc: denied { unlink } for pid=7079 comm="syz.2.275" name="#1" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.166752][ T30] audit: type=1400 audit(1768637192.982:302): avc: denied { mount } for pid=7079 comm="syz.2.275" name="/" dev="overlay" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 157.190041][ T7083] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 158.628406][ T30] audit: type=1400 audit(1768637194.442:303): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 160.378068][ T30] audit: type=1400 audit(1768637195.402:304): avc: denied { write } for pid=7101 comm="syz.2.281" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 160.721292][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.283'. [ 160.831710][ T7114] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 162.952007][ T7139] lo speed is unknown, defaulting to 1000 [ 162.958987][ T7139] lo speed is unknown, defaulting to 1000 [ 163.101278][ T7144] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 163.122263][ T30] audit: type=1400 audit(1768637198.942:305): avc: denied { read write } for pid=7143 comm="syz.1.291" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.177595][ T5883] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 163.217158][ T7149] netem: change failed [ 163.265903][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 163.306035][ T30] audit: type=1400 audit(1768637198.962:306): avc: denied { open } for pid=7143 comm="syz.1.291" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.358361][ T7152] fido_id[7152]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 163.373384][ T30] audit: type=1400 audit(1768637198.962:307): avc: denied { ioctl } for pid=7143 comm="syz.1.291" path="socket:[13981]" dev="sockfs" ino=13981 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.582206][ T7157] FAULT_INJECTION: forcing a failure. [ 163.582206][ T7157] name failslab, interval 1, probability 0, space 0, times 0 [ 163.595050][ T7157] CPU: 0 UID: 0 PID: 7157 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT(full) [ 163.595072][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.595082][ T7157] Call Trace: [ 163.595088][ T7157] [ 163.595094][ T7157] dump_stack_lvl+0x16c/0x1f0 [ 163.595121][ T7157] should_fail_ex+0x512/0x640 [ 163.595145][ T7157] ? fs_reclaim_acquire+0xae/0x150 [ 163.595171][ T7157] should_failslab+0xc2/0x120 [ 163.595193][ T7157] __kmalloc_noprof+0xeb/0x910 [ 163.595219][ T7157] ? tomoyo_encode2+0x100/0x3e0 [ 163.595247][ T7157] ? tomoyo_encode2+0x100/0x3e0 [ 163.595269][ T7157] tomoyo_encode2+0x100/0x3e0 [ 163.595294][ T7157] tomoyo_encode+0x29/0x50 [ 163.595316][ T7157] tomoyo_realpath_from_path+0x18f/0x6e0 [ 163.595347][ T7157] tomoyo_path_number_perm+0x245/0x580 [ 163.595366][ T7157] ? tomoyo_path_number_perm+0x237/0x580 [ 163.595388][ T7157] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.595435][ T7157] ? find_held_lock+0x2b/0x80 [ 163.595459][ T7157] ? hook_file_ioctl_common+0x144/0x410 [ 163.595481][ T7157] ? __fget_files+0x20e/0x3c0 [ 163.595508][ T7157] security_file_ioctl+0x9b/0x240 [ 163.595533][ T7157] __x64_sys_ioctl+0xb7/0x210 [ 163.595554][ T7157] do_syscall_64+0xcd/0xf80 [ 163.595579][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.595596][ T7157] RIP: 0033:0x7fb12eb8f749 [ 163.595609][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.595624][ T7157] RSP: 002b:00007fb12cdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.595640][ T7157] RAX: ffffffffffffffda RBX: 00007fb12ede6090 RCX: 00007fb12eb8f749 [ 163.595651][ T7157] RDX: 00002000000005c0 RSI: 000000004008af03 RDI: 0000000000000003 [ 163.595661][ T7157] RBP: 00007fb12cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.595670][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.595680][ T7157] R13: 00007fb12ede6128 R14: 00007fb12ede6090 R15: 00007ffcf18c9238 [ 163.595704][ T7157] [ 163.595808][ T7157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.371668][ T7166] FAULT_INJECTION: forcing a failure. [ 164.371668][ T7166] name failslab, interval 1, probability 0, space 0, times 0 [ 164.384379][ T7166] CPU: 0 UID: 0 PID: 7166 Comm: syz.4.294 Not tainted syzkaller #0 PREEMPT(full) [ 164.384400][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.384410][ T7166] Call Trace: [ 164.384415][ T7166] [ 164.384422][ T7166] dump_stack_lvl+0x16c/0x1f0 [ 164.384449][ T7166] should_fail_ex+0x512/0x640 [ 164.384473][ T7166] ? fs_reclaim_acquire+0xae/0x150 [ 164.384498][ T7166] should_failslab+0xc2/0x120 [ 164.384520][ T7166] __kmalloc_noprof+0xeb/0x910 [ 164.384546][ T7166] ? tomoyo_encode2+0x100/0x3e0 [ 164.384574][ T7166] ? tomoyo_encode2+0x100/0x3e0 [ 164.384595][ T7166] tomoyo_encode2+0x100/0x3e0 [ 164.384621][ T7166] tomoyo_encode+0x29/0x50 [ 164.384642][ T7166] tomoyo_realpath_from_path+0x18f/0x6e0 [ 164.384673][ T7166] tomoyo_path_number_perm+0x245/0x580 [ 164.384692][ T7166] ? tomoyo_path_number_perm+0x237/0x580 [ 164.384714][ T7166] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.384760][ T7166] ? find_held_lock+0x2b/0x80 [ 164.384785][ T7166] ? hook_file_ioctl_common+0x144/0x410 [ 164.384807][ T7166] ? __fget_files+0x20e/0x3c0 [ 164.384834][ T7166] security_file_ioctl+0x9b/0x240 [ 164.384858][ T7166] __x64_sys_ioctl+0xb7/0x210 [ 164.384879][ T7166] do_syscall_64+0xcd/0xf80 [ 164.384904][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.384920][ T7166] RIP: 0033:0x7fb12eb8f749 [ 164.384934][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.384949][ T7166] RSP: 002b:00007fb12cdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.384965][ T7166] RAX: ffffffffffffffda RBX: 00007fb12ede6180 RCX: 00007fb12eb8f749 [ 164.384976][ T7166] RDX: 0000200000000540 RSI: 00000000c05064a7 RDI: 0000000000000007 [ 164.384986][ T7166] RBP: 00007fb12cdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 164.384995][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.385005][ T7166] R13: 00007fb12ede6218 R14: 00007fb12ede6180 R15: 00007ffcf18c9238 [ 164.385030][ T7166] [ 164.385108][ T7166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.598375][ T5987] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.761780][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.777836][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.806815][ T5987] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 164.829651][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.864108][ T5987] usb 2-1: config 0 descriptor?? [ 164.935365][ T7172] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 164.944485][ T7172] hsr0: entered promiscuous mode [ 164.963868][ T7172] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 164.974914][ T7172] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 164.987681][ T7172] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 165.326512][ T5987] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 165.453718][ T5987] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 165.558800][ T7180] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 166.373773][ T5987] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0003/input/input7 [ 166.843103][ T5987] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 167.073126][ T5987] usb 2-1: USB disconnect, device number 10 [ 167.607294][ T7185] fido_id[7185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 168.031092][ T7199] netlink: 44 bytes leftover after parsing attributes in process `syz.4.303'. [ 168.300166][ T7211] lo speed is unknown, defaulting to 1000 [ 168.307222][ T7211] lo speed is unknown, defaulting to 1000 [ 168.401410][ T5932] IPVS: starting estimator thread 0... [ 169.140546][ T7210] IPVS: using max 77 ests per chain, 184800 per kthread [ 169.623227][ T7224] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 169.682217][ T30] audit: type=1400 audit(1768637205.492:308): avc: denied { connect } for pid=7219 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.074150][ T7235] openvswitch: netlink: IP tunnel TTL not specified. [ 171.236276][ T7237] FAULT_INJECTION: forcing a failure. [ 171.236276][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 171.248936][ T7237] CPU: 1 UID: 0 PID: 7237 Comm: syz.1.310 Not tainted syzkaller #0 PREEMPT(full) [ 171.248959][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.248969][ T7237] Call Trace: [ 171.248974][ T7237] [ 171.248981][ T7237] dump_stack_lvl+0x16c/0x1f0 [ 171.249009][ T7237] should_fail_ex+0x512/0x640 [ 171.249034][ T7237] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 171.249055][ T7237] should_failslab+0xc2/0x120 [ 171.249077][ T7237] kmem_cache_alloc_node_noprof+0x86/0x800 [ 171.249094][ T7237] ? __alloc_skb+0x156/0x410 [ 171.249116][ T7237] ? __alloc_skb+0x156/0x410 [ 171.249131][ T7237] __alloc_skb+0x156/0x410 [ 171.249145][ T7237] ? __alloc_skb+0x35d/0x410 [ 171.249160][ T7237] ? __pfx___alloc_skb+0x10/0x10 [ 171.249175][ T7237] ? netlink_autobind.isra.0+0x158/0x370 [ 171.249204][ T7237] netlink_alloc_large_skb+0x69/0x140 [ 171.249227][ T7237] netlink_sendmsg+0x698/0xdd0 [ 171.249253][ T7237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.249284][ T7237] ____sys_sendmsg+0xa5d/0xc30 [ 171.249307][ T7237] ? copy_msghdr_from_user+0x10a/0x160 [ 171.249326][ T7237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.249359][ T7237] ___sys_sendmsg+0x134/0x1d0 [ 171.249380][ T7237] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.249428][ T7237] __sys_sendmsg+0x16d/0x220 [ 171.249447][ T7237] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.249491][ T7237] do_syscall_64+0xcd/0xf80 [ 171.249515][ T7237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.249533][ T7237] RIP: 0033:0x7f8b7158f749 [ 171.249547][ T7237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.249562][ T7237] RSP: 002b:00007f8b72411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.249582][ T7237] RAX: ffffffffffffffda RBX: 00007f8b717e6180 RCX: 00007f8b7158f749 [ 171.249592][ T7237] RDX: 0000000020044804 RSI: 0000200000000140 RDI: 0000000000000003 [ 171.249602][ T7237] RBP: 00007f8b72411090 R08: 0000000000000000 R09: 0000000000000000 [ 171.249611][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.249620][ T7237] R13: 00007f8b717e6218 R14: 00007f8b717e6180 R15: 00007ffc00c04db8 [ 171.249644][ T7237] [ 171.907346][ T30] audit: type=1400 audit(1768637206.922:309): avc: denied { name_connect } for pid=7230 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 171.952114][ T7239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.311'. [ 172.011018][ T7241] input: syz0 as /devices/virtual/input/input8 [ 172.012223][ T30] audit: type=1400 audit(1768637207.812:310): avc: denied { write } for pid=7240 comm="syz.2.313" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.057275][ T30] audit: type=1400 audit(1768637207.812:311): avc: denied { open } for pid=7240 comm="syz.2.313" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.137428][ T30] audit: type=1400 audit(1768637207.822:312): avc: denied { ioctl } for pid=7240 comm="syz.2.313" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.277945][ T30] audit: type=1400 audit(1768637207.932:313): avc: denied { read } for pid=7240 comm="syz.2.313" name="event4" dev="devtmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.343414][ T30] audit: type=1400 audit(1768637208.162:314): avc: denied { setopt } for pid=7251 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.408701][ T30] audit: type=1400 audit(1768637208.222:315): avc: denied { map } for pid=7251 comm="syz.4.315" path="socket:[14188]" dev="sockfs" ino=14188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.473479][ T30] audit: type=1400 audit(1768637208.222:316): avc: denied { read } for pid=7251 comm="syz.4.315" path="socket:[14188]" dev="sockfs" ino=14188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.266370][ T7268] netlink: 148 bytes leftover after parsing attributes in process `syz.2.317'. [ 175.435837][ T30] audit: type=1400 audit(1768637211.252:317): avc: denied { create } for pid=7294 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 176.825993][ T7310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.833523][ T7310] IPv6: NLM_F_CREATE should be set when creating new route [ 176.840758][ T7310] IPv6: NLM_F_CREATE should be set when creating new route [ 177.688961][ T7325] tipc: Started in network mode [ 177.716513][ T7325] tipc: Node identity 3a7523904c29, cluster identity 4711 [ 177.838134][ T7325] tipc: Enabled bearer , priority 0 [ 177.871872][ T7325] syzkaller0: MTU too low for tipc bearer [ 177.933873][ T7328] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.300242][ T7325] tipc: Disabling bearer [ 178.318600][ T7327] fuse: Bad value for 'fd' [ 178.791684][ T7321] FAULT_INJECTION: forcing a failure. [ 178.791684][ T7321] name failslab, interval 1, probability 0, space 0, times 0 [ 178.838526][ T7321] CPU: 1 UID: 0 PID: 7321 Comm: syz.0.332 Not tainted syzkaller #0 PREEMPT(full) [ 178.838549][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.838559][ T7321] Call Trace: [ 178.838565][ T7321] [ 178.838571][ T7321] dump_stack_lvl+0x16c/0x1f0 [ 178.838598][ T7321] should_fail_ex+0x512/0x640 [ 178.838624][ T7321] ? fs_reclaim_acquire+0xae/0x150 [ 178.838649][ T7321] should_failslab+0xc2/0x120 [ 178.838671][ T7321] __kmalloc_noprof+0xeb/0x910 [ 178.838697][ T7321] ? tomoyo_encode2+0x100/0x3e0 [ 178.838725][ T7321] ? tomoyo_encode2+0x100/0x3e0 [ 178.838747][ T7321] tomoyo_encode2+0x100/0x3e0 [ 178.838779][ T7321] tomoyo_encode+0x29/0x50 [ 178.838801][ T7321] tomoyo_realpath_from_path+0x18f/0x6e0 [ 178.838827][ T7321] ? tomoyo_profile+0x47/0x60 [ 178.838845][ T7321] tomoyo_path_number_perm+0x245/0x580 [ 178.838864][ T7321] ? tomoyo_path_number_perm+0x237/0x580 [ 178.838886][ T7321] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.838909][ T7321] ? find_held_lock+0x2b/0x80 [ 178.838958][ T7321] ? find_held_lock+0x2b/0x80 [ 178.838981][ T7321] ? hook_file_ioctl_common+0x144/0x410 [ 178.839003][ T7321] ? __fget_files+0x20e/0x3c0 [ 178.839030][ T7321] security_file_ioctl+0x9b/0x240 [ 178.839054][ T7321] __x64_sys_ioctl+0xb7/0x210 [ 178.839075][ T7321] do_syscall_64+0xcd/0xf80 [ 178.839099][ T7321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.839116][ T7321] RIP: 0033:0x7f969e78f749 [ 178.839129][ T7321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.839144][ T7321] RSP: 002b:00007f969c9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.839160][ T7321] RAX: ffffffffffffffda RBX: 00007f969e9e6090 RCX: 00007f969e78f749 [ 178.839171][ T7321] RDX: 0000200000000180 RSI: 0000000000005412 RDI: 0000000000000004 [ 178.839181][ T7321] RBP: 00007f969c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.839190][ T7321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.839199][ T7321] R13: 00007f969e9e6128 R14: 00007f969e9e6090 R15: 00007ffdb276aad8 [ 178.839224][ T7321] [ 178.839281][ T7321] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.591244][ T30] audit: type=1400 audit(1768637215.392:318): avc: denied { read write } for pid=7341 comm="syz.1.339" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 179.632821][ T30] audit: type=1400 audit(1768637215.392:319): avc: denied { open } for pid=7341 comm="syz.1.339" path="/68/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 179.734159][ T30] audit: type=1400 audit(1768637215.442:320): avc: denied { write } for pid=7348 comm="syz.2.328" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 180.340830][ T30] audit: type=1400 audit(1768637215.822:321): avc: denied { ioctl } for pid=7348 comm="syz.2.328" path="ipc:[4026532799]" dev="nsfs" ino=4026532799 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 181.528065][ T30] audit: type=1400 audit(1768637217.342:322): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 181.659370][ T30] audit: type=1400 audit(1768637217.472:323): avc: denied { create } for pid=7371 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.451291][ T30] audit: type=1400 audit(1768637218.252:324): avc: denied { setopt } for pid=7385 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.666666][ T7377] xt_l2tp: invalid flags combination: 8 [ 183.862532][ T30] audit: type=1400 audit(1768637219.352:325): avc: denied { lock } for pid=7394 comm="syz.3.352" path="socket:[15574]" dev="sockfs" ino=15574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 184.609338][ T7400] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.616001][ T7400] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 184.623678][ T7400] audit: backlog limit exceeded [ 184.697030][ T30] audit: type=1400 audit(1768637219.412:326): avc: denied { connect } for pid=7394 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.835769][ T30] audit: type=1326 audit(1768637219.412:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7394 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb747fc2005 code=0x7ffc0000 [ 185.099110][ T30] audit: type=1326 audit(1768637219.412:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7394 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb747f8f749 code=0x7ffc0000 [ 185.346953][ T7407] lo speed is unknown, defaulting to 1000 [ 185.355543][ T7407] lo speed is unknown, defaulting to 1000 [ 185.650350][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 185.656765][ T5136] Bluetooth: hci2: command 0x0406 tx timeout [ 185.732994][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 187.368156][ T7427] lo speed is unknown, defaulting to 1000 [ 187.892165][ T7427] lo speed is unknown, defaulting to 1000 [ 187.918871][ T7437] lo speed is unknown, defaulting to 1000 [ 188.067521][ T7437] lo speed is unknown, defaulting to 1000 [ 189.322003][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 189.322018][ T30] audit: type=1400 audit(1768637225.142:397): avc: denied { create } for pid=7452 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.393197][ T30] audit: type=1400 audit(1768637225.202:398): avc: denied { getopt } for pid=7452 comm="syz.2.362" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.269659][ T117] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 190.373567][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'. [ 190.432735][ T117] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.445189][ T117] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.571669][ T117] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.639661][ T5987] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 190.659954][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.713626][ T7458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.223199][ T117] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.305540][ T5987] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.343379][ T5987] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.399402][ T5987] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.499434][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.509816][ T5869] usb 3-1: USB disconnect, device number 10 [ 191.553903][ T7462] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 191.610728][ T5987] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.689873][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 192.896579][ T5869] usb 5-1: USB disconnect, device number 12 [ 193.061457][ T30] audit: type=1400 audit(1768637228.882:399): avc: denied { ioctl } for pid=7463 comm="syz.3.366" path="socket:[15766]" dev="sockfs" ino=15766 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.173578][ T30] audit: type=1400 audit(1768637228.992:400): avc: denied { write } for pid=7463 comm="syz.3.366" path="socket:[15766]" dev="sockfs" ino=15766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.522673][ T7487] lo speed is unknown, defaulting to 1000 [ 193.763274][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.769715][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.842472][ T7487] lo speed is unknown, defaulting to 1000 [ 194.174436][ T30] audit: type=1400 audit(1768637229.942:401): avc: denied { read } for pid=7490 comm="syz.3.372" laddr=fe80::f lport=46042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.890603][ T30] audit: type=1400 audit(1768637230.282:402): avc: denied { write } for pid=7495 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 195.149202][ T30] audit: type=1400 audit(1768637230.962:403): avc: denied { append } for pid=7501 comm="syz.4.376" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 195.165658][ T7500] capability: warning: `syz.3.375' uses 32-bit capabilities (legacy support in use) [ 195.444396][ T30] audit: type=1400 audit(1768637231.142:404): avc: denied { create } for pid=7501 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 196.218431][ T7515] openvswitch: netlink: IP tunnel TTL not specified. [ 196.739641][ T5869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 196.941954][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 196.955947][ T5869] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 196.974488][ T5869] usb 2-1: config 6 has an invalid descriptor of length 178, skipping remainder of the config [ 196.996109][ T5869] usb 2-1: config 6 has no interface number 0 [ 197.043337][ T7525] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 197.065891][ T5869] usb 2-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.131541][ T5869] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 197.141399][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.524969][ T5869] usb 2-1: Product: syz [ 197.530846][ T5869] usb 2-1: Manufacturer: syz [ 197.536789][ T5869] usb 2-1: SerialNumber: syz [ 197.569181][ T5869] hso 2-1:6.2: Failed to find INT IN ep [ 197.767116][ T6005] usb 2-1: USB disconnect, device number 11 [ 197.816906][ T7531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 197.828602][ T7531] bond0: entered promiscuous mode [ 197.835229][ T7531] bond_slave_0: entered promiscuous mode [ 197.849793][ T7531] bond_slave_1: entered promiscuous mode [ 197.867008][ T7531] bond0: left promiscuous mode [ 197.873960][ T7531] bond_slave_0: left promiscuous mode [ 197.884352][ T7532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 197.894048][ T7531] bond_slave_1: left promiscuous mode [ 197.993018][ T7532] bond0: entered promiscuous mode [ 198.090961][ T7532] bond_slave_0: entered promiscuous mode [ 198.096707][ T7532] bond_slave_1: entered promiscuous mode [ 198.187438][ T7532] bond0: left promiscuous mode [ 198.193067][ T7532] bond_slave_0: left promiscuous mode [ 198.198873][ T7532] bond_slave_1: left promiscuous mode [ 198.224585][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 198.328446][ T7540] dummy0: entered allmulticast mode [ 198.334430][ T7540] dummy0: left allmulticast mode [ 198.416800][ T7541] openvswitch: netlink: IP tunnel TTL not specified. [ 198.519880][ T6005] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 199.501095][ T6005] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.530951][ T6005] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 199.559999][ T6005] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.569037][ T6005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.661649][ T7537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.678810][ T6005] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.140091][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 200.143536][ T7552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.390'. [ 200.307084][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'. [ 201.633120][ T5869] usb 3-1: USB disconnect, device number 11 [ 201.942692][ T7568] pim6reg: entered allmulticast mode [ 202.831350][ T7583] openvswitch: netlink: IP tunnel TTL not specified. [ 204.300888][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.403'. [ 204.349836][ T5842] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 204.396547][ T30] audit: type=1400 audit(1768637240.212:405): avc: denied { mount } for pid=7597 comm="syz.4.406" name="/" dev="ramfs" ino=15300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 204.451135][ T30] audit: type=1400 audit(1768637240.242:406): avc: denied { relabelfrom } for pid=7597 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 204.509650][ T30] audit: type=1400 audit(1768637240.242:407): avc: denied { relabelto } for pid=7597 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 204.560036][ T5842] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.579603][ T5842] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 204.589435][ T5842] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.631470][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.930300][ T7582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.971700][ T5842] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 205.047239][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.412'. [ 205.195174][ T5869] usb 3-1: USB disconnect, device number 12 [ 206.740972][ T7634] Illegal XDP return value 4294967294 on prog (id 71) dev N/A, expect packet loss! [ 207.020480][ T7637] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 208.611598][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 209.031699][ T7659] lo speed is unknown, defaulting to 1000 [ 209.039895][ T7659] lo speed is unknown, defaulting to 1000 [ 209.553403][ T7664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.426'. [ 210.369859][ T6005] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 210.452138][ T7682] IPVS: Error connecting to the multicast addr [ 210.477851][ T7682] netlink: 'syz.4.430': attribute type 1 has an invalid length. [ 210.556624][ T7682] gre1: entered promiscuous mode [ 210.565370][ T7682] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 210.575742][ T7682] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 210.592530][ T7682] bond1: (slave gre1): making interface the new active one [ 210.606298][ T7682] bond1: (slave gre1): Enslaving as an active interface with an up link [ 210.616390][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 211.125389][ T6005] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.344984][ T6005] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.356188][ T6005] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.365267][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.376607][ T7679] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 211.388022][ T6005] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.866861][ T6005] usb 2-1: USB disconnect, device number 12 [ 214.492293][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 216.623262][ T7746] netlink: 248 bytes leftover after parsing attributes in process `syz.1.443'. [ 219.395813][ T30] audit: type=1400 audit(1768637255.212:408): avc: denied { create } for pid=7761 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 221.549446][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 223.051925][ T7808] warning: `syz.3.459' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 225.147402][ T5842] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 225.300466][ T7831] openvswitch: netlink: IP tunnel TTL not specified. [ 225.321349][ T7831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7831 comm=syz.1.465 [ 225.679651][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 225.688682][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 225.697755][ T5842] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 225.734734][ T5842] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 225.781731][ T5842] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 225.804699][ T5842] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 225.824832][ T5842] usb 5-1: config 1 interface 0 has no altsetting 0 [ 225.827464][ T30] audit: type=1400 audit(1768637261.632:409): avc: denied { listen } for pid=7813 comm="syz.3.462" lport=50256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.884818][ T5842] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 225.980019][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.997192][ T5842] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 226.019840][ T30] audit: type=1400 audit(1768637261.722:410): avc: denied { accept } for pid=7813 comm="syz.3.462" lport=50256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.751633][ T5842] scsi host1: usb-storage 5-1:1.0 [ 228.012046][ T13] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 228.155817][ T13] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 228.367526][ T7846] sddr09: could not read card info [ 228.367549][ T6968] usb 5-1: USB disconnect, device number 13 [ 228.408214][ T7863] fuse: Bad value for 'fd' [ 228.430451][ T7863] FAULT_INJECTION: forcing a failure. [ 228.430451][ T7863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.461778][ T5974] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 228.468842][ T5974] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 228.487330][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.0.472 Not tainted syzkaller #0 PREEMPT(full) [ 228.487344][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.487350][ T7863] Call Trace: [ 228.487354][ T7863] [ 228.487358][ T7863] dump_stack_lvl+0x16c/0x1f0 [ 228.487377][ T7863] should_fail_ex+0x512/0x640 [ 228.487395][ T7863] _copy_from_user+0x2e/0xd0 [ 228.487416][ T7863] copy_msghdr_from_user+0x98/0x160 [ 228.487429][ T7863] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 228.487446][ T7863] ___sys_sendmsg+0xfe/0x1d0 [ 228.487458][ T7863] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.487484][ T7863] __sys_sendmsg+0x16d/0x220 [ 228.487496][ T7863] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.487515][ T7863] do_syscall_64+0xcd/0xf80 [ 228.487531][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.487541][ T7863] RIP: 0033:0x7f969e78f749 [ 228.487550][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.487560][ T7863] RSP: 002b:00007f969f54b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.487570][ T7863] RAX: ffffffffffffffda RBX: 00007f969e9e5fa0 RCX: 00007f969e78f749 [ 228.487577][ T7863] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000004 [ 228.487583][ T7863] RBP: 00007f969f54b090 R08: 0000000000000000 R09: 0000000000000000 [ 228.487588][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.487594][ T7863] R13: 00007f969e9e6038 R14: 00007f969e9e5fa0 R15: 00007ffdb276aad8 [ 228.487607][ T7863] [ 228.490450][ T5974] sd 1:0:0:0: [sdb] Write Protect is off [ 228.709752][ T5974] sd 1:0:0:0: [sdb] Asking for cache data failed [ 228.716113][ T5974] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 228.811493][ T5974] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 228.975082][ T30] audit: type=1400 audit(1768637264.792:411): avc: denied { connect } for pid=7871 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.061378][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.069394][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.289815][ T5829] udevd[5829]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 229.409458][ T6328] udevd[6328]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 229.689640][ T6968] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 229.763468][ T7868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.806148][ T7868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.850261][ T6968] usb 5-1: Using ep0 maxpacket: 32 [ 229.865184][ T6968] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 229.943614][ T6968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.187585][ T6968] usb 5-1: config 0 descriptor?? [ 230.211705][ T6968] as10x_usb: device has been detected [ 230.217771][ T6968] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 230.275506][ T6968] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 230.401815][ T6968] as10x_usb: error during firmware upload part1 [ 230.419687][ T30] audit: type=1400 audit(1768637266.202:412): avc: denied { firmware_load } for pid=6968 comm="kworker/0:10" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 230.446215][ T6968] Registered device nBox DVB-T Dongle [ 230.492226][ T5974] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.536442][ T5842] usb 5-1: USB disconnect, device number 14 [ 230.556901][ T5974] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.593302][ T5974] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.608763][ T5842] Unregistered device nBox DVB-T Dongle [ 230.693572][ T5974] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.730198][ T30] audit: type=1400 audit(1768637266.552:413): avc: denied { read } for pid=7893 comm="syz.4.481" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.733314][ T5842] as10x_usb: device has been disconnected [ 231.197018][ T30] audit: type=1400 audit(1768637266.582:414): avc: denied { open } for pid=7893 comm="syz.4.481" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 231.422330][ T30] audit: type=1400 audit(1768637266.582:415): avc: denied { ioctl } for pid=7893 comm="syz.4.481" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 232.529781][ T30] audit: type=1400 audit(1768637268.282:416): avc: denied { write } for pid=7901 comm="syz.4.483" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 233.620333][ T7915] syzkaller0: entered promiscuous mode [ 233.629657][ T7915] syzkaller0: entered allmulticast mode [ 233.660392][ T7907] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 234.043614][ T7923] tipc: Started in network mode [ 234.048532][ T7923] tipc: Node identity ee9ebd3a5861, cluster identity 4711 [ 234.080134][ T7923] tipc: Enabled bearer , priority 0 [ 234.186836][ T7911] tipc: Resetting bearer [ 235.066336][ T7911] tipc: Disabling bearer [ 235.375973][ T30] audit: type=1400 audit(1768637271.192:417): avc: denied { mount } for pid=7934 comm="syz.1.490" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 235.377558][ T7938] overlay: Unknown parameter '/' [ 235.847740][ T30] audit: type=1400 audit(1768637271.192:418): avc: denied { mounton } for pid=7934 comm="syz.1.490" path="/98/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 236.343371][ T7936] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 236.353131][ T30] audit: type=1400 audit(1768637272.172:419): avc: denied { read } for pid=7934 comm="syz.1.490" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 236.385688][ T30] audit: type=1400 audit(1768637272.172:420): avc: denied { read } for pid=7934 comm="syz.1.490" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 236.442749][ T30] audit: type=1400 audit(1768637272.172:421): avc: denied { open } for pid=7934 comm="syz.1.490" path="/98/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 236.469664][ T30] audit: type=1400 audit(1768637272.172:422): avc: denied { read } for pid=7934 comm="syz.1.490" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 236.518128][ T30] audit: type=1400 audit(1768637272.192:423): avc: denied { read } for pid=7934 comm="syz.1.490" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 236.544309][ T30] audit: type=1400 audit(1768637272.202:424): avc: denied { open } for pid=7934 comm="syz.1.490" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 236.651524][ T30] audit: type=1400 audit(1768637272.472:425): avc: denied { getopt } for pid=7958 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 236.934615][ T30] audit: type=1400 audit(1768637272.752:426): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 237.013885][ T7969] openvswitch: netlink: IP tunnel TTL not specified. [ 237.029482][ T7969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7969 comm=syz.4.497 [ 237.401000][ T30] audit: type=1400 audit(1768637273.222:427): avc: denied { create } for pid=7967 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 237.582297][ T7980] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 237.771316][ T7983] lo speed is unknown, defaulting to 1000 [ 237.883759][ T7983] lo speed is unknown, defaulting to 1000 [ 238.420352][ T30] audit: type=1400 audit(1768637274.242:428): avc: denied { write } for pid=7967 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.974160][ T7996] syz_tun: entered allmulticast mode [ 238.986553][ T7996] pimreg: entered allmulticast mode [ 239.058256][ T7999] syzkaller0: entered promiscuous mode [ 239.094650][ T7999] syzkaller0: entered allmulticast mode [ 239.135542][ T7995] syz_tun: left allmulticast mode [ 239.184793][ T7999] tipc: Enabled bearer , priority 0 [ 239.272453][ T7998] tipc: Resetting bearer [ 239.336648][ T7998] tipc: Disabling bearer [ 239.419486][ T8002] cgroup: fork rejected by pids controller in /syz3 [ 239.912043][ T8147] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 240.047624][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 241.506939][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 241.506950][ T30] audit: type=1400 audit(1769161565.318:441): avc: denied { create } for pid=8185 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.590327][ T30] audit: type=1400 audit(1769161565.395:442): avc: denied { create } for pid=8185 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 241.615287][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.625440][ T8187] bond0: (slave rose0): Enslaving as an active interface with an up link [ 241.635115][ T30] audit: type=1400 audit(1769161565.395:443): avc: denied { ioctl } for pid=8185 comm="syz.4.520" path="socket:[17989]" dev="sockfs" ino=17989 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 242.007211][ T30] audit: type=1400 audit(1769161565.444:444): avc: denied { ioctl } for pid=8185 comm="syz.4.520" path="socket:[17987]" dev="sockfs" ino=17987 ioctlcmd=0x89f4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.825757][ T30] audit: type=1400 audit(1769161567.560:445): avc: denied { bind } for pid=8200 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 245.325303][ T8233] netlink: 44 bytes leftover after parsing attributes in process `syz.2.529'. [ 245.588129][ T8237] lo speed is unknown, defaulting to 1000 [ 245.607725][ T8237] lo speed is unknown, defaulting to 1000 [ 246.782122][ T5924] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 246.996978][ T5924] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.481342][ T5924] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.527499][ T5924] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.574943][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.617563][ T8262] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 247.635356][ T5924] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.936542][ T8293] lo speed is unknown, defaulting to 1000 [ 247.972307][ T5924] usb 3-1: USB disconnect, device number 13 [ 248.681960][ T8297] udevd[8297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.182482][ T8293] lo speed is unknown, defaulting to 1000 [ 249.188837][ T8307] netlink: 52 bytes leftover after parsing attributes in process `syz.3.538'. [ 249.275865][ T8304] netlink: 52 bytes leftover after parsing attributes in process `syz.3.538'. [ 249.362199][ T8309] netlink: 52 bytes leftover after parsing attributes in process `syz.3.538'. [ 251.981648][ T8333] lo speed is unknown, defaulting to 1000 [ 252.040416][ T8333] lo speed is unknown, defaulting to 1000 [ 253.260026][ T8333] siw: device registration error -23 [ 253.273609][ T30] audit: type=1400 audit(1769161576.815:446): avc: denied { read } for pid=8326 comm="syz.2.544" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 253.298703][ T8365] netlink: 44 bytes leftover after parsing attributes in process `syz.1.554'. [ 253.318363][ T30] audit: type=1400 audit(1769161576.825:447): avc: denied { open } for pid=8326 comm="syz.2.544" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.747604][ T8383] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8383 comm=syz.0.559 [ 255.476957][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.484082][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.582515][ T8388] syz_tun: entered allmulticast mode [ 255.596418][ T8388] pimreg: entered allmulticast mode [ 255.784875][ T8387] syz_tun: left allmulticast mode [ 258.350040][ T8421] netlink: 44 bytes leftover after parsing attributes in process `syz.3.569'. [ 258.758724][ T8430] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8430 comm=syz.2.572 [ 260.464236][ T8447] FAULT_INJECTION: forcing a failure. [ 260.464236][ T8447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.478122][ T8447] CPU: 1 UID: 0 PID: 8447 Comm: syz.2.574 Not tainted syzkaller #0 PREEMPT(full) [ 260.478144][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.478154][ T8447] Call Trace: [ 260.478160][ T8447] [ 260.478166][ T8447] dump_stack_lvl+0x16c/0x1f0 [ 260.478192][ T8447] should_fail_ex+0x512/0x640 [ 260.478220][ T8447] _copy_to_user+0x32/0xd0 [ 260.478243][ T8447] simple_read_from_buffer+0xcb/0x170 [ 260.478266][ T8447] proc_fail_nth_read+0x197/0x240 [ 260.478284][ T8447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.478301][ T8447] ? rw_verify_area+0xcf/0x6c0 [ 260.478319][ T8447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.478336][ T8447] vfs_read+0x1e4/0xcf0 [ 260.478355][ T8447] ? __pfx___mutex_lock+0x10/0x10 [ 260.478380][ T8447] ? __pfx_vfs_read+0x10/0x10 [ 260.478406][ T8447] ? __fget_files+0x20e/0x3c0 [ 260.478436][ T8447] ksys_read+0x12a/0x250 [ 260.478455][ T8447] ? __pfx_ksys_read+0x10/0x10 [ 260.478488][ T8447] do_syscall_64+0xcd/0xf80 [ 260.478513][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.478529][ T8447] RIP: 0033:0x7f67f0b8e15c [ 260.478541][ T8447] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 260.478556][ T8447] RSP: 002b:00007f67f1aa5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.478572][ T8447] RAX: ffffffffffffffda RBX: 00007f67f0de6180 RCX: 00007f67f0b8e15c [ 260.478581][ T8447] RDX: 000000000000000f RSI: 00007f67f1aa50a0 RDI: 0000000000000006 [ 260.478590][ T8447] RBP: 00007f67f1aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 260.478600][ T8447] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000001 [ 260.478608][ T8447] R13: 00007f67f0de6218 R14: 00007f67f0de6180 R15: 00007fffd8bfa6e8 [ 260.478631][ T8447] [ 260.678665][ T8450] syzkaller0: entered promiscuous mode [ 260.684231][ T8450] syzkaller0: entered allmulticast mode [ 260.716962][ T8450] tipc: Enabled bearer , priority 0 [ 260.844868][ T8448] tipc: Resetting bearer [ 260.934464][ T8448] tipc: Disabling bearer [ 262.203872][ T8475] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 263.307311][ T30] audit: type=1400 audit(1769161586.743:448): avc: denied { setopt } for pid=8498 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.558512][ T8502] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 263.878555][ T30] audit: type=1400 audit(1769161586.961:449): avc: denied { accept } for pid=8498 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 263.909623][ T30] audit: type=1400 audit(1769161587.041:450): avc: denied { create } for pid=8498 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.358346][ T30] audit: type=1400 audit(1769161588.659:451): avc: denied { bind } for pid=8518 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 265.538233][ T8521] syzkaller0: entered promiscuous mode [ 265.573299][ T8521] syzkaller0: entered allmulticast mode [ 265.590252][ T30] audit: type=1400 audit(1769161588.669:452): avc: denied { write } for pid=8518 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 265.722322][ T8521] tipc: Enabled bearer , priority 0 [ 265.741330][ T8520] tipc: Resetting bearer [ 265.820059][ T8533] openvswitch: netlink: IP tunnel TTL not specified. [ 266.639743][ T8520] tipc: Disabling bearer [ 266.654785][ T8539] netlink: 44 bytes leftover after parsing attributes in process `syz.4.598'. [ 267.059082][ T30] audit: type=1400 audit(1769161590.467:453): avc: denied { connect } for pid=8541 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.106358][ T30] audit: type=1400 audit(1769161590.487:454): avc: denied { ioctl } for pid=8541 comm="syz.2.599" path="socket:[19696]" dev="sockfs" ino=19696 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.161517][ T30] audit: type=1400 audit(1769161590.497:455): avc: denied { write } for pid=8541 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.251075][ T8553] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 267.749769][ T8558] lo speed is unknown, defaulting to 1000 [ 267.757862][ T8558] lo speed is unknown, defaulting to 1000 [ 268.234274][ T8567] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 268.308534][ T30] audit: type=1400 audit(1769161591.650:456): avc: denied { setopt } for pid=8568 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.701950][ T8582] openvswitch: netlink: IP tunnel TTL not specified. [ 272.319530][ T8616] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8616 comm=syz.0.619 [ 272.717660][ T8627] openvswitch: netlink: IP tunnel TTL not specified. [ 274.918364][ T30] audit: type=1400 audit(1769161598.288:457): avc: denied { bind } for pid=8639 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 275.343844][ T8647] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 275.919273][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 276.414038][ T8670] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 279.007411][ T8686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8686 comm=syz.4.636 [ 279.173433][ T30] audit: type=1400 audit(1769161602.514:458): avc: denied { open } for pid=8688 comm="syz.4.637" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 279.883133][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'. [ 280.124842][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 282.565994][ T8730] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8730 comm=syz.2.648 [ 283.360667][ T8733] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 283.376128][ T8733] PKCS7: Only support pkcs7_signedData type [ 283.573981][ T8739] lo speed is unknown, defaulting to 1000 [ 283.686943][ T8739] lo speed is unknown, defaulting to 1000 [ 283.906451][ T8747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.652'. [ 284.287443][ T6005] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 284.516444][ T5883] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 284.610958][ T5816] Bluetooth: hci3: unexpected event for opcode 0x200a [ 284.740151][ T5883] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 284.749452][ T5883] usb 2-1: config 0 has no interface number 0 [ 284.755892][ T6005] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 284.778470][ T5883] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 284.790708][ T6005] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 284.800888][ T5883] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 284.812205][ T6005] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 284.822014][ T5883] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 128 [ 284.832558][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.887853][ T5883] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 284.933389][ T5883] usb 2-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 284.942448][ T5883] usb 2-1: Product: syz [ 284.946585][ T5883] usb 2-1: Manufacturer: syz [ 284.951554][ T5883] usb 2-1: SerialNumber: syz [ 284.962008][ T8748] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.975337][ T5883] usb 2-1: config 0 descriptor?? [ 284.987593][ T8760] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 285.001910][ T6005] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.012134][ T5883] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 285.380072][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 286.024583][ T6005] usb 5-1: USB disconnect, device number 15 [ 286.450256][ T8789] loop8: detected capacity change from 0 to 8 [ 286.806796][ T8789] Dev loop8: unable to read RDB block 8 [ 286.812499][ T8789] loop8: unable to read partition table [ 286.818369][ T8789] loop8: partition table beyond EOD, truncated [ 286.824588][ T8789] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 287.231205][ T6005] usb 2-1: USB disconnect, device number 13 [ 288.518203][ T5816] Bluetooth: hci3: command 0x0405 tx timeout [ 291.825761][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.679'. [ 292.072323][ T8855] 9p: Bad value for 'rfdno' [ 292.158765][ T5842] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 292.278492][ T8862] syzkaller0: entered promiscuous mode [ 292.288840][ T8862] syzkaller0: entered allmulticast mode [ 292.398776][ T8862] tipc: Started in network mode [ 292.410181][ T5842] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.414007][ T8862] tipc: Node identity 9a8b59c55e06, cluster identity 4711 [ 292.466492][ T5842] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 292.478382][ T8862] tipc: Enabled bearer , priority 0 [ 292.485274][ T5842] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.498253][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.910156][ T8861] tipc: Resetting bearer [ 292.969466][ T8853] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.982431][ T5842] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.999864][ T8861] tipc: Disabling bearer [ 293.433011][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 293.522684][ T90] usb 2-1: USB disconnect, device number 14 [ 293.900666][ T5890] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 294.511310][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 294.518124][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 294.527479][ T5890] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 294.538246][ T5890] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 294.570514][ T5890] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 294.896274][ T8898] binder: BINDER_SET_CONTEXT_MGR already set [ 294.902574][ T8898] binder: 8896:8898 ioctl 4018620d 200000000040 returned -16 [ 295.529852][ T5890] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 295.555779][ T5890] usb 3-1: config 1 interface 0 has no altsetting 0 [ 295.585148][ T5890] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 295.629401][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.741331][ T5890] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 295.940022][ T5890] scsi host1: usb-storage 3-1:1.0 [ 297.025603][ T5810] Bluetooth: hci0: unexpected event for opcode 0x200a [ 297.049600][ T7708] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 297.071061][ T8916] vlan0: entered promiscuous mode [ 297.102360][ T8916] team0: Port device vlan0 added [ 297.357711][ T7708] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 297.577686][ T5842] usb 3-1: USB disconnect, device number 14 [ 297.583875][ T8908] sddr09: could not read card info [ 297.596812][ T7712] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 297.617703][ T7712] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 297.626685][ T7712] sd 1:0:0:0: [sdb] Write Protect is off [ 297.767612][ T7712] sd 1:0:0:0: [sdb] Asking for cache data failed [ 297.773962][ T7712] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 298.367848][ T7712] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 299.913185][ T8769] udevd[8769]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 300.004641][ T8769] udevd[8769]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 300.087731][ T5810] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 303.668730][ T5842] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 303.810427][ T9005] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 303.931395][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 304.195570][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 304.205255][ T5842] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 304.218730][ T5842] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 304.228494][ T5842] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 304.238291][ T5842] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 304.252953][ T5842] usb 5-1: config 1 interface 0 has no altsetting 0 [ 304.265769][ T5842] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 304.285943][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.318349][ T5842] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 304.516919][ T5842] scsi host1: usb-storage 5-1:1.0 [ 305.662099][ T5974] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 306.240124][ T5932] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 306.403313][ T5932] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 306.430193][ T5932] usb 2-1: config 0 has no interface number 0 [ 306.436439][ T5932] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 306.449243][ T5932] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 306.460440][ T5974] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 306.497978][ T5932] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 128 [ 306.514133][ T5932] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 306.532239][ T5932] usb 2-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 306.541064][ T5932] usb 2-1: Product: syz [ 306.596409][ T9016] sddr09: could not read card info [ 306.596484][ T5842] usb 5-1: USB disconnect, device number 16 [ 306.823589][ T5810] Bluetooth: hci3: unexpected event for opcode 0x200a [ 306.832805][ T6214] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 306.852156][ T6214] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 306.904670][ T6214] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 306.985334][ T6214] sd 1:0:0:0: [sdb] Asking for cache data failed [ 306.993258][ T6214] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 307.103771][ T6214] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 307.383186][ T5932] usb 2-1: Manufacturer: syz [ 307.387806][ T5932] usb 2-1: SerialNumber: syz [ 307.401489][ T5932] usb 2-1: config 0 descriptor?? [ 307.410804][ T9035] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 307.432825][ T5932] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 308.036004][ T8752] udevd[8752]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 308.217391][ T8769] udevd[8769]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 309.124701][ T5842] usb 2-1: USB disconnect, device number 15 [ 310.128716][ T9081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.738'. [ 310.781822][ T9096] netlink: 44 bytes leftover after parsing attributes in process `syz.4.739'. [ 312.035802][ T5842] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 312.255179][ T5842] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 312.273093][ T5842] usb 3-1: config 0 has no interface number 0 [ 312.459486][ T5842] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 312.477832][ T5842] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 312.511603][ T5842] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 128 [ 312.552105][ T5842] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 312.575514][ T5842] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 312.588413][ T5842] usb 3-1: Product: syz [ 312.601164][ T5842] usb 3-1: Manufacturer: syz [ 312.612372][ T5842] usb 3-1: SerialNumber: syz [ 312.649703][ T5842] usb 3-1: config 0 descriptor?? [ 312.662566][ T9108] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 312.683677][ T5842] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 313.961279][ T5842] usb 3-1: USB disconnect, device number 15 [ 316.224611][ T9167] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 317.294675][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.302371][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 423.327740][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 423.334684][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5974/1:b..l [ 423.342848][ C1] rcu: (detected by 1, t=10502 jiffies, g=24737, q=517 ncpus=2) [ 423.350527][ C1] task:kworker/u8:16 state:R running task stack:24376 pid:5974 tgid:5974 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 423.364352][ C1] Workqueue: iou_exit io_ring_exit_work [ 423.369882][ C1] Call Trace: [ 423.373128][ C1] [ 423.376041][ C1] ? __schedule+0x10b9/0x6150 [ 423.380688][ C1] __schedule+0x1139/0x6150 [ 423.385167][ C1] ? __pfx___schedule+0x10/0x10 [ 423.389988][ C1] ? mark_held_locks+0x49/0x80 [ 423.394720][ C1] preempt_schedule_irq+0x51/0x90 [ 423.399715][ C1] irqentry_exit+0x1d8/0x8c0 [ 423.404283][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.410228][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 423.415395][ C1] Code: e3 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 52 c1 ee 0e 0f 82 74 02 00 00 8b 35 ea f1 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 e3 18 12 0f 85 ad 02 00 00 48 83 c4 [ 423.434973][ C1] RSP: 0018:ffffc9000490f230 EFLAGS: 00000206 [ 423.441008][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000b6fe40aa [ 423.448947][ C1] RDX: 0000000000000000 RSI: ffffffff8daa966f RDI: ffffffff8bf2b580 [ 423.456886][ C1] RBP: 0000000000000002 R08: 000000006612d0ab R09: 00000000b6612d0a [ 423.464824][ C1] R10: 0000000000000002 R11: ffff88802d05d4b0 R12: 0000000000000000 [ 423.472761][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.480714][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 423.485893][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 423.492015][ C1] unwind_next_frame+0xd1/0x20b0 [ 423.496922][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 423.502001][ C1] ? worker_thread+0x6c8/0xf10 [ 423.506733][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 423.512867][ C1] arch_stack_walk+0x94/0x100 [ 423.517516][ C1] ? worker_thread+0x6c8/0xf10 [ 423.522251][ C1] stack_trace_save+0x8e/0xc0 [ 423.526895][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 423.532238][ C1] kasan_save_stack+0x33/0x60 [ 423.536881][ C1] ? kasan_save_stack+0x33/0x60 [ 423.541697][ C1] ? kasan_save_track+0x14/0x30 [ 423.546513][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 423.551503][ C1] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 423.557100][ C1] ? kmem_alloc_batch+0x49/0x170 [ 423.562011][ C1] ? debug_objects_fill_pool+0x413/0x660 [ 423.567610][ C1] ? debug_object_activate+0x10b/0x4c0 [ 423.573047][ C1] ? __call_rcu_common.constprop.0+0x35/0xa10 [ 423.579085][ C1] ? kmem_cache_free+0x171/0x770 [ 423.583987][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 423.589327][ C1] ? io_ring_exit_work+0x33c/0x1170 [ 423.594501][ C1] ? process_one_work+0x9ba/0x1b20 [ 423.599580][ C1] ? worker_thread+0x6c8/0xf10 [ 423.604326][ C1] kasan_save_track+0x14/0x30 [ 423.608970][ C1] __kasan_slab_alloc+0x89/0x90 [ 423.613791][ C1] kmem_cache_alloc_noprof+0x25e/0x770 [ 423.619221][ C1] ? kmem_alloc_batch+0x49/0x170 [ 423.624129][ C1] ? kmem_alloc_batch+0x49/0x170 [ 423.629034][ C1] kmem_alloc_batch+0x49/0x170 [ 423.633769][ C1] debug_objects_fill_pool+0x413/0x660 [ 423.639194][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 423.644103][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 423.650052][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 423.656179][ C1] debug_object_activate+0x10b/0x4c0 [ 423.661433][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 423.667212][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 423.673334][ C1] __call_rcu_common.constprop.0+0x35/0xa10 [ 423.679207][ C1] kmem_cache_free+0x171/0x770 [ 423.683937][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 423.689283][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 423.694629][ C1] __io_req_caches_free+0x19e/0x5c0 [ 423.699799][ C1] io_ring_exit_work+0x33c/0x1170 [ 423.704798][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 423.710228][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 423.715398][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 423.721175][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 423.726782][ C1] ? rcu_is_watching+0x12/0xc0 [ 423.731514][ C1] process_one_work+0x9ba/0x1b20 [ 423.736423][ C1] ? __pfx_process_one_work+0x10/0x10 [ 423.741765][ C1] ? assign_work+0x1a0/0x250 [ 423.746323][ C1] worker_thread+0x6c8/0xf10 [ 423.750883][ C1] ? __kthread_parkme+0x19e/0x250 [ 423.755875][ C1] ? __pfx_worker_thread+0x10/0x10 [ 423.760953][ C1] kthread+0x3c5/0x780 [ 423.764990][ C1] ? __pfx_kthread+0x10/0x10 [ 423.769547][ C1] ? rcu_is_watching+0x12/0xc0 [ 423.774275][ C1] ? __pfx_kthread+0x10/0x10 [ 423.778832][ C1] ret_from_fork+0x983/0xb10 [ 423.783393][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 423.788469][ C1] ? rcu_is_watching+0x12/0xc0 [ 423.793197][ C1] ? __switch_to+0x7af/0x10d0 [ 423.797843][ C1] ? __pfx_kthread+0x10/0x10 [ 423.802401][ C1] ret_from_fork_asm+0x1a/0x30 [ 423.807142][ C1] [ 423.810129][ C1] rcu: rcu_preempt kthread starved for 10547 jiffies! g24737 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 423.821287][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 423.831221][ C1] rcu: RCU grace-period kthread stack dump: [ 423.837071][ C1] task:rcu_preempt state:R running task stack:28656 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 423.850502][ C1] Call Trace: [ 423.853748][ C1] [ 423.856647][ C1] ? __schedule+0x10b9/0x6150 [ 423.861292][ C1] __schedule+0x1139/0x6150 [ 423.865769][ C1] ? __pfx___schedule+0x10/0x10 [ 423.870585][ C1] ? find_held_lock+0x2b/0x80 [ 423.875233][ C1] ? schedule+0x2d7/0x3a0 [ 423.879531][ C1] schedule+0xe7/0x3a0 [ 423.883570][ C1] schedule_timeout+0x123/0x290 [ 423.888388][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 423.893726][ C1] ? __pfx_process_timeout+0x10/0x10 [ 423.898981][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 423.904754][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 423.910183][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 423.914915][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 423.920168][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 423.925333][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 423.930237][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 423.935058][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 423.940842][ C1] rcu_gp_kthread+0x26d/0x380 [ 423.945488][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 423.950654][ C1] ? rcu_is_watching+0x12/0xc0 [ 423.955385][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 423.960551][ C1] ? __kthread_parkme+0x19e/0x250 [ 423.965541][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 423.970705][ C1] kthread+0x3c5/0x780 [ 423.974743][ C1] ? __pfx_kthread+0x10/0x10 [ 423.979301][ C1] ? rcu_is_watching+0x12/0xc0 [ 423.984030][ C1] ? __pfx_kthread+0x10/0x10 [ 423.988589][ C1] ret_from_fork+0x983/0xb10 [ 423.993148][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 423.998225][ C1] ? __switch_to+0x7af/0x10d0 [ 424.002868][ C1] ? __pfx_kthread+0x10/0x10 [ 424.007425][ C1] ret_from_fork_asm+0x1a/0x30 [ 424.012164][ C1] [ 424.015151][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 424.021441][ C1] Sending NMI from CPU 1 to CPUs 0: [ 424.026617][ C0] NMI backtrace for cpu 0 [ 424.026628][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 424.026642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.026648][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 424.026665][ C0] Code: 26 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 99 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 424.026676][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 424.026687][ C0] RAX: 0000000001443017 RBX: 0000000000000000 RCX: ffffffff8b78c6d9 [ 424.026694][ C0] RDX: 0000000000000000 RSI: ffffffff8dacf6fe RDI: ffffffff8bf2b580 [ 424.026702][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 424.026710][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 424.026718][ C0] R13: ffffffff8e097b40 R14: ffffffff9088cdd0 R15: 0000000000000000 [ 424.026726][ C0] FS: 0000000000000000(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000 [ 424.026738][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.026746][ C0] CR2: 0000001b2fff5ff8 CR3: 0000000075a40000 CR4: 00000000003526f0 [ 424.026754][ C0] Call Trace: [ 424.026758][ C0] [ 424.026762][ C0] default_idle+0x13/0x20 [ 424.026773][ C0] default_idle_call+0x6c/0xb0 [ 424.026783][ C0] do_idle+0x38d/0x510 [ 424.026801][ C0] ? __pfx_do_idle+0x10/0x10 [ 424.026820][ C0] cpu_startup_entry+0x4f/0x60 [ 424.026837][ C0] rest_init+0x16b/0x2b0 [ 424.026848][ C0] ? acpi_subsystem_init+0x133/0x180 [ 424.026863][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 424.026878][ C0] start_kernel+0x3ef/0x4d0 [ 424.026891][ C0] x86_64_start_reservations+0x18/0x30 [ 424.026904][ C0] x86_64_start_kernel+0x130/0x190 [ 424.026917][ C0] common_startup_64+0x13e/0x148 [ 424.026936][ C0]