last executing test programs: 10m16.432095344s ago: executing program 4 (id=1204): syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xfffffffe, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m16.347894743s ago: executing program 1 (id=1205): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='a', 0x1) 10m16.266997969s ago: executing program 4 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000008000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000001000)={0x0, 0x0}) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000001c0)={0x4000008, 0x0, [{0x0, 0x0, 0xa}, {0xffff, 0x0, 0x7}, {}, {0x56, 0x0, 0x4}, {0x5, 0x0, 0x1000}, {0x9, 0x0, 0x200000ffffffff}, {0x7, 0x0, 0x4}, {0x1, 0x0, 0xfffffffffffffff7}, {0x6, 0x0, 0x7}, {0x1, 0x0, 0x2000008}, {0xfffffe00, 0x0, 0xd}, {0xfffffffe, 0x0, 0x1ff}, {0x5, 0x0, 0x743}, {0x5, 0x0, 0x7fffffffffffffff}, {0x7af6, 0x0, 0x1}, {0x2, 0x0, 0xc65e607}]}) 10m16.195878827s ago: executing program 1 (id=1208): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x3a, {"b80000000148c7000000000048c740080000000048c7401001000000b902000000ba000000010f01c1"}}], 0x3a}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m16.134663144s ago: executing program 4 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0xfd, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 10m15.937561778s ago: executing program 1 (id=1211): mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='200\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='8', 0x1) 10m15.897269286s ago: executing program 4 (id=1212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xf4240) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xf4240) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x1, 0x0, 0x2000000, 0x200000, &(0x7f0000200000/0x200000)=nil}) 10m15.755474604s ago: executing program 1 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100\x00', 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 10m15.513562558s ago: executing program 1 (id=1214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x4000000000, 0x2, 0x17f, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x40000002, 0x0, 0x29, 0x40, 0x5, 0x0, 0x8000000bdb], 0x54000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m14.136800495s ago: executing program 4 (id=1215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m4.091835635s ago: executing program 1 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d06, &(0x7f0000000900)) 10m4.089695019s ago: executing program 4 (id=1221): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441, 0x104) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x1e587f, 0xc9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x10, 0x80002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m3.721180825s ago: executing program 32 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d06, &(0x7f0000000900)) 10m3.715196933s ago: executing program 33 (id=1221): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441, 0x104) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x1e587f, 0xc9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x10, 0x80002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 28.374456683s ago: executing program 3 (id=5273): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 28.23110036s ago: executing program 3 (id=5274): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c9", 0x59}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.996896731s ago: executing program 0 (id=5313): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11", 0x57}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.992702734s ago: executing program 0 (id=5317): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYBLOB="3fc7"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x200040c4) 13.786186094s ago: executing program 0 (id=5321): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map, r1, 0x9, 0x18, 0x0, @void, @value=r0}, 0x20) syz_clone(0x0, 0x0, 0x54, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f00000005c0)={0x20003, 0x0, {[0x5, 0x6, 0x40003, 0xa, 0xfffffffffffffffe, 0x6, 0xffffffff]}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f00000001c0)={0x130002, 0x0, {[0x6, 0x2, 0x9, 0x6, 0xba, 0x5, 0x4, 0x7]}}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r10, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4000, 0x2000, &(0x7f0000000100)="9a"}], 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r11, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xe4}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x67b}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff0001}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb3}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000140)=0x30, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000000640)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x0, 0x5, 0x3, 0x5, "7ecc0e927618d8a23d8c0d45e7d47f234f7cd0c6515eeb991abedd0e789c753e412f150de6e4adc548a8274d7722a830f581fa68320f21b2554361c75fb76b3d0ce4843eb3a1253b750ebfa7943b413b4b5e3ef84b1a482d72ae802a3967fcb3a7f03cd20cfcaef579dc44c1667ab020913771d0ac8d7e9b187c2190429f8163"}) 8.943978179s ago: executing program 0 (id=5338): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x202) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = gettid() sigaltstack(&(0x7f0000000280)={0x0, 0x80000001, 0xffffffffffffffec}, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x202) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) gettid() (async) sigaltstack(&(0x7f0000000280)={0x0, 0x80000001, 0xffffffffffffffec}, 0x0) (async) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000180)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) (async) 7.533595622s ago: executing program 0 (id=5343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) io_setup(0xa, &(0x7f00000000c0)=0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1c4, 0x0, 0x4}]}) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b04, 0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x1003, r3, 0x0}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) close(r2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000009060300000000000000000002000000200007800c00018008000140ac14141c060004401388000008000b40ffffdffd05000100060000000900020073797a0600000000"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000780)=0x60) read$FUSE(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x5) 7.123213931s ago: executing program 6 (id=5346): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="000002000000000000") 6.994162866s ago: executing program 3 (id=5282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) io_setup(0xa, &(0x7f00000000c0)=0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1c4, 0x0, 0x4}]}) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b04, 0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x1003, r4, 0x0}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) close(r3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000009060300000000000000000002000000200007800c00018008000140ac14141c060004401388000008000b40ffffdffd05000100060000000900020073797a0600000000"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000780)=0x60) read$FUSE(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x5) 6.909457273s ago: executing program 6 (id=5347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) 6.178913425s ago: executing program 2 (id=5348): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000600)="dd627047239effff84ae1bb11a0a70f6a172b032da0e9e3b2d5a4addfc1ad63ccbed607f2a90d1310536edc73e44003d40d7660bd84b7543ee53e8d4d456efae21e58591a612b8547183506c7a69a73d8e82386527b6c42cad4d1d99e27c141c725d6115e19737687eab05f60fa8c51b1b7c96800473a203602da33b97b536680d7526453827ee2150cd7871d61c8b485d2e3dde3a32d9b0d564ebd0f0829990238a111436d25078e98ef3411b5e9bb35d40ae1ec8cb06cba6ec9503c17f2c0a674b68dbe0bc116260450b6b15e86e6a93f64ecb0a711b8109c2", &(0x7f0000000700)="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"}}, &(0x7f0000000300)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, 0x0, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000300)={r7, @in={{0x2, 0x4e22, @empty}}, 0x2}, 0x90) 6.103930149s ago: executing program 2 (id=5349): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4, @empty, 0x2}], 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x3, 0x18, "6b63d2e3bd32d329201628c6af7bf95ce35ec206f049e854"}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x11080}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = io_uring_setup(0x5513, &(0x7f0000000100)={0x0, 0x857, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r6, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) 5.862244311s ago: executing program 6 (id=5350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.401649475s ago: executing program 6 (id=5351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089", 0xa6}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 5.083195709s ago: executing program 2 (id=5352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x934}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000001c0)=ANY=[], 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000180)=0x9) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000060000740012800c0001006d6163766c616e0064000280060002000000000008000100010000000a000400000000000000000006000200000000000a000400aaaaaaaaaabb00000600020001000000280005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa00000a0004000180c2000003000008000500", @ANYRES32=r7, @ANYBLOB="0800c2ff", @ANYRES32=r7, @ANYBLOB], 0xa4}}, 0x884) 4.699133026s ago: executing program 2 (id=5353): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x10007) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x1}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000040)={&(0x7f0000000480)=[{0xa279, 0x5a11, 0x0, 0x0}], 0x1}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000056c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040810) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r8 = dup2(r7, r6) ioctl$BLKRRPART(r8, 0x125f, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xc}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000100)={r9, @in6={{0xa, 0x4e21, 0xff40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x33, &(0x7f0000000180)=0x3, 0x4) write$RDMA_USER_CM_CMD_QUERY(r11, 0x0, 0x0) r12 = open(&(0x7f0000000040)='./file1\x00', 0x1811c0, 0x40) ftruncate(r12, 0x200004) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000300)={0x8, 0x208, 0x2, 0xc497, r10}, &(0x7f0000000340)=0x10) 4.273243536s ago: executing program 6 (id=5357): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="000002000000000000") 4.138500503s ago: executing program 5 (id=5359): quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0x88afec5b8c0c8206, 0x0, 0x0, 0x0) 4.045503725s ago: executing program 6 (id=5360): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/135, 0xffffff0a}], 0x1, 0x5, 0x845) 3.93607167s ago: executing program 5 (id=5361): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420d", 0x9a, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089", 0xa6}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680", 0xd1}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.676531994s ago: executing program 5 (id=5362): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5", 0x82}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.499150034s ago: executing program 5 (id=5363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, 0x0, 0x0) mmap$IORING_OFF_PBUF_RING(0x0, 0x9, 0x6, 0x110, 0xffffffffffffffff, 0x823f4b75) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x6, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00'}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r10 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="0400140008001d000200000008002e"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) ioctl$MEDIA_IOC_SETUP_LINK(r10, 0xc0347c03, &(0x7f0000000f00)={{0x80000000, 0x0, 0x3a6c5abe2e6686bc, [0x8, 0x16]}, {0x80000000, 0x0, 0x2, [0x0, 0x2]}, 0x2, [0x100, 0x3]}) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r11, 0xc058565d, &(0x7f0000000200)=@mmap={0x0, 0x2, 0x4, 0x8, 0x7, {}, {0x2, 0x0, 0x3}, 0x0, 0x1, {}, 0xae}) 2.520491481s ago: executing program 5 (id=5364): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x1}]}, 0x38}}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc0884123, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r7, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000340)=0x1) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe8f20000071a400000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 1.205802357s ago: executing program 5 (id=5365): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x9, 0xf, 0x5b}, 0x2c) 1.062930648s ago: executing program 3 (id=5366): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x1418, 0x1, 0x20000000, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) 1.004089168s ago: executing program 0 (id=5367): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg$sock(r1, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000014000000cc33fffd090203000036b0000000000001000000a5e461a8e5f3caa35282cc"]) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) 907.618118ms ago: executing program 2 (id=5368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000240), 0x4) 806.698213ms ago: executing program 2 (id=5369): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) syz_emit_ethernet(0x7e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x15, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000840)={&(0x7f0000000040)={0xa, 0x4e21, 0x9, @remote, 0x3}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000140)="6597", 0x2}], 0x1}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffc4653600}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000400)={0x11, 0x0, r4, 0x0}, 0x14) write(r5, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) pread64(r0, &(0x7f0000000340)=""/127, 0x7f, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="ab4637bd7000fbdbdfcf266189558cc6790000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8008) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000080)="876b5c61d63e5670d914909d12a35eec1842064d2633b6d4df89d14e06a256b91f31cf503fb6f2d025", 0x29}, {&(0x7f0000000440)="2567ef2a142448d6cfa77850d6d87f0239e863c1b8ee3043cf64504871cbe3a09e6374b34d86d201b892ceacc7cfbe5f2afe2d0ba3b36aefa2682cf61bc89e28cbba7404997b2464b7e17068f282229acd03e079fa80cec7ef21fb16d101f60a862444b0bc0190d0d70ac9419169aaa2671234d1f9cced0f0cfca0f0646f87bae54b80c34ef44452e773", 0x8a}, {&(0x7f0000000640)="0f6f08da645ed6c5d4d95e93d191bd6e5546ae408b31ca41351d4842ada9cc078eca2054f82cd724e1a4272ff5ec0ac24b21838100d73ce64dd8ee06179cf5cd8d6565e557551944404f64eb4e4fac93c81ab96c41bed50f9b9c8d7a223fd61c38d70a64c7bae80c5cd4bd0bc72cbcc15448e6fc71b9be7c5a81dd342722ce7a1d23d97b095b01d0388945d3566253370b8f9653cdd41336691df9ea797cbe027ff712f7223a3dcf19113249e235a688f73aa649194787ff28385824d5631c7ec76246462d99c0c88b6b10699e0e716fe0963b583f8ffd49303e43c16e12146bbbfbaf96f9a00554059514a5f3f3c1c114ea8e9dec9fe36d14", 0xf9}, {&(0x7f0000000780)="7d16faa091d2783852034a6caafddc34af820d0517653e58c32bc026fa9017ce8686d4e63db2f75ccaa08d2b0585a79b187722b00b9015019e61449b7c7bf6c38791a19d83a98ddf97cd197f5e09070a58293b9ed9a696cb7c2e167dea9c279fcc1fdeb370231fe0a5be32a1c5fe808a2430f0221b2704f5eb0fad6b3470483cfe9e", 0x82}, {&(0x7f0000000880)="ee950fd31cfb3dd255f98dc5ba8042ed9bab8168ccbf8fc5de6d7d4fcdc65089f91439e7f75c7e93cbf33840e955d2921d0ab5560e537fd5663865ffb7142f59454149a0d266b9ce79780f17a588deda5288ae3657aee411623ab8e2efe449eee2cf23bb0148ec7a740ea712b784e04e5b99120aaced8c26074da673a0ba907f74148ccaf84397d703e354ae7431c33fba9e32ad569dc6900eb5bea518748f28b13341383c2540f4c28038c99d57d6dd47391ba17b5d8ebbd65cb26559098c5badf728356f5a10898b87f36478f511243d8ed85f5b1b0ec3b1f17bd7a5234b0de181fb2953f3ea564930f830898e34f91f64aa", 0xf3}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="7b62adc4e17b2d7b8fe0135242e88c49eb4272333df9598be96ae1f9d128ad60c85129f28b2f78280e", 0x29}], 0x8}}], 0x1, 0x400c050) 746.258803ms ago: executing program 3 (id=5370): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="000002000000000000") 0s ago: executing program 3 (id=5371): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@empty, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x2000, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0x3}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffb}, 0x4ce9b1c9, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@broadcast, 0x4, 0x3c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902550001010000000904"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) kernel console output (not intermixed with test programs): ng dummy_hcd [ 688.682731][T20608] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.4562'. [ 688.716281][T17013] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.753169][T12933] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 688.759844][T17013] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.806041][T17013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.836560][T17013] usb 7-1: Product: syz [ 688.850338][T17013] usb 7-1: Manufacturer: syz [ 688.870949][T17013] usb 7-1: SerialNumber: syz [ 688.975389][T12933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.077065][T12933] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 689.137995][T12933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.190457][T12933] usb 1-1: Product: syz [ 689.202732][T12933] usb 1-1: Manufacturer: syz [ 689.240252][T12933] usb 1-1: SerialNumber: syz [ 691.015946][T17013] usb 1-1: USB disconnect, device number 23 [ 691.047383][ T10] usb 7-1: USB disconnect, device number 14 [ 691.484376][T20640] xt_HMARK: spi-set and port-set can't be combined [ 691.695553][T20642] xt_hashlimit: size too large, truncated to 1048576 [ 693.419488][T20662] netlink: 'syz.2.4579': attribute type 1 has an invalid length. [ 693.427438][T20662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4579'. [ 693.820055][ T5787] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 693.903152][T20669] sd 0:0:1:0: PR command failed: 1026 [ 693.920017][T20669] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 693.938023][T20669] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 694.016722][ T5787] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 694.036585][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.066982][ T5787] usb 4-1: Product: syz [ 694.095040][ T5787] usb 4-1: Manufacturer: syz [ 694.127248][ T5787] usb 4-1: SerialNumber: syz [ 694.134870][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 694.167984][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 694.198166][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 694.222067][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 694.273190][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 694.308054][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 694.354585][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 694.383468][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 694.409116][T12933] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 694.413069][ T5714] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 694.428702][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 694.464284][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 694.501197][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 694.614271][T12933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.647577][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.689258][ T5787] usb 4-1: USB disconnect, device number 23 [ 694.718742][T12933] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.730809][ T5714] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.773699][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.795031][T12933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.820034][T12933] usb 3-1: Product: syz [ 694.820992][ T5714] usb 1-1: Product: syz [ 694.840610][T12933] usb 3-1: Manufacturer: syz [ 694.842310][ T5714] usb 1-1: Manufacturer: syz [ 694.851435][T12933] usb 3-1: SerialNumber: syz [ 694.861973][ T5714] usb 1-1: SerialNumber: syz [ 695.296255][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 695.305783][T12933] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 695.362373][ T10] ath9k_htc: Failed to initialize the device [ 695.419617][ T5787] usb 4-1: ath9k_htc: USB layer deinitialized [ 695.583288][T12934] usb 1-1: USB disconnect, device number 24 [ 695.630618][T12933] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.678154][ T5714] usb 3-1: USB disconnect, device number 27 [ 695.766505][T12933] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.824347][T12933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.867126][T12933] usb 7-1: Product: syz [ 695.893056][ T5787] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 695.904247][T12933] usb 7-1: Manufacturer: syz [ 695.933099][T12933] usb 7-1: SerialNumber: syz [ 696.169435][ T5787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.371343][ T5787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 696.477468][T20695] xt_hashlimit: size too large, truncated to 1048576 [ 696.934778][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.942839][ T5787] usb 4-1: Product: syz [ 696.947000][ T5787] usb 4-1: Manufacturer: syz [ 696.951585][ T5787] usb 4-1: SerialNumber: syz [ 697.245832][T20700] UDC core: g1: couldn't find an available UDC or it's busy [ 698.495942][ T5715] usb 7-1: USB disconnect, device number 15 [ 698.958980][T20708] xt_hashlimit: size too large, truncated to 1048576 [ 699.799171][T20714] __nla_validate_parse: 29 callbacks suppressed [ 699.799183][T20714] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4593'. [ 699.914841][T20723] xt_HMARK: spi-set and port-set can't be combined [ 700.329320][ T5714] usb 4-1: USB disconnect, device number 24 [ 701.284510][ T5714] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 701.945041][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.018447][ T5714] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.048754][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.049114][T20752] FAULT_INJECTION: forcing a failure. [ 702.049114][T20752] name fail_page_alloc, interval 25, probability 100, space 0, times 1 [ 702.075607][ T5714] usb 1-1: Product: syz [ 702.103517][T20751] FAULT_INJECTION: forcing a failure. [ 702.103517][T20751] name fail_page_alloc, interval 25, probability 100, space 0, times 1 [ 702.117174][T20752] CPU: 1 UID: 0 PID: 20752 Comm: syz.5.4607 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.117193][T20752] Tainted: [L]=SOFTLOCKUP [ 702.117197][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 702.117204][T20752] Call Trace: [ 702.117209][T20752] [ 702.117214][T20752] dump_stack_lvl+0x100/0x190 [ 702.117232][T20752] should_fail_ex.cold+0x5/0xa [ 702.117245][T20752] ? prepare_alloc_pages+0x16d/0x5f0 [ 702.117265][T20752] should_fail_alloc_page+0xeb/0x140 [ 702.117281][T20752] prepare_alloc_pages+0x1f0/0x5f0 [ 702.117300][T20752] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 702.117314][T20752] ? is_bpf_text_address+0x8a/0x1a0 [ 702.117330][T20752] ? bpf_ksym_find+0x128/0x1c0 [ 702.117347][T20752] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 702.117361][T20752] ? is_bpf_text_address+0x94/0x1a0 [ 702.117380][T20752] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 702.117397][T20752] ? lock_acquire+0x1b9/0x370 [ 702.117412][T20752] ? find_held_lock+0x2b/0x80 [ 702.117434][T20752] ? page_table_check_set+0x4f7/0x930 [ 702.117449][T20752] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 702.117464][T20752] ? policy_nodemask+0xed/0x4f0 [ 702.117480][T20752] alloc_pages_mpol+0x1fb/0x540 [ 702.117497][T20752] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 702.117512][T20752] ? find_held_lock+0x2b/0x80 [ 702.117530][T20752] ? find_held_lock+0x2b/0x80 [ 702.117547][T20752] ? filemap_map_pages+0x112d/0x1fe0 [ 702.117567][T20752] folio_alloc_mpol_noprof+0x36/0x260 [ 702.117586][T20752] vma_alloc_folio_noprof+0xed/0x1d0 [ 702.117604][T20752] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 702.117621][T20752] ? rcu_read_unlock+0x2d/0xb0 [ 702.117632][T20752] ? rcu_read_unlock+0x2d/0xb0 [ 702.117646][T20752] do_wp_page+0x1ee1/0x4350 [ 702.117671][T20752] ? __pfx_do_wp_page+0x10/0x10 [ 702.117688][T20752] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 702.117709][T20752] __handle_mm_fault+0x1ab6/0x2a00 [ 702.117730][T20752] ? reacquire_held_locks+0xce/0x1e0 [ 702.117745][T20752] ? __pfx___handle_mm_fault+0x10/0x10 [ 702.117766][T20752] ? lock_vma_under_rcu+0x17c/0x590 [ 702.117792][T20752] handle_mm_fault+0x37b/0xa30 [ 702.117813][T20752] do_user_addr_fault+0x5a3/0x12f0 [ 702.117835][T20752] exc_page_fault+0x6f/0xd0 [ 702.117848][T20752] asm_exc_page_fault+0x26/0x30 [ 702.117860][T20752] RIP: 0033:0x7fc1c46517fc [ 702.117870][T20752] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 702.117881][T20752] RSP: 002b:00007fff5b8ab3a8 EFLAGS: 00010246 [ 702.117891][T20752] RAX: 0000000000000000 RBX: ffffffff84d26fb7 RCX: 0000000000000000 [ 702.117898][T20752] RDX: 0000000000000fb7 RSI: ffffffff84d26fb7 RDI: 0000000000000000 [ 702.117904][T20752] RBP: 0000000000000000 R08: 00007fc1c4a10000 R09: 00007fc1c4a12000 [ 702.117911][T20752] R10: 0000000084d26fbb R11: 0000000000000000 R12: 00007fc1c4a26038 [ 702.117918][T20752] R13: 000000000000000a R14: ffffffff84d26963 R15: 00007fc1c5555720 [ 702.117925][T20752] ? security_socket_create+0x93/0x250 [ 702.117941][T20752] ? security_socket_bind+0x207/0x230 [ 702.117958][T20752] ? security_socket_bind+0x207/0x230 [ 702.117975][T20752] [ 702.117990][T20752] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 702.208489][T20751] CPU: 0 UID: 0 PID: 20751 Comm: syz.6.4606 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.208518][T20751] Tainted: [L]=SOFTLOCKUP [ 702.208525][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 702.208536][T20751] Call Trace: [ 702.208542][T20751] [ 702.208550][T20751] dump_stack_lvl+0x100/0x190 [ 702.208574][T20751] should_fail_ex.cold+0x5/0xa [ 702.208592][T20751] ? prepare_alloc_pages+0x16d/0x5f0 [ 702.208618][T20751] should_fail_alloc_page+0xeb/0x140 [ 702.208642][T20751] prepare_alloc_pages+0x1f0/0x5f0 [ 702.208669][T20751] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 702.208691][T20751] ? rcu_is_watching+0x12/0xc0 [ 702.208715][T20751] ? trace_mm_page_alloc+0x164/0x1c0 [ 702.208737][T20751] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 702.208758][T20751] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 702.208779][T20751] ? stack_trace_save+0x8e/0xc0 [ 702.208796][T20751] ? __pfx_stack_trace_save+0x10/0x10 [ 702.208813][T20751] ? stack_depot_save_flags+0x27/0x9d0 [ 702.208835][T20751] ? is_bpf_text_address+0x94/0x1a0 [ 702.208857][T20751] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 702.208878][T20751] ? __kasan_slab_alloc+0x89/0x90 [ 702.208897][T20751] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 702.208916][T20751] ? alloc_vmap_area+0x640/0x2bb0 [ 702.208934][T20751] ? __get_vm_area_node+0x1ca/0x330 [ 702.208954][T20751] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 702.208976][T20751] ? __vmalloc_node_noprof+0xad/0xf0 [ 702.208997][T20751] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 702.209017][T20751] ? kvm_vm_ioctl+0x7d3/0x4180 [ 702.209039][T20751] ? __x64_sys_ioctl+0x18e/0x210 [ 702.209061][T20751] ? do_syscall_64+0x115/0x870 [ 702.209078][T20751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.209103][T20751] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 702.209125][T20751] ? policy_nodemask+0xed/0x4f0 [ 702.209149][T20751] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 702.209187][T20751] __kasan_populate_vmalloc+0xf0/0x210 [ 702.209210][T20751] alloc_vmap_area+0x95d/0x2bb0 [ 702.209237][T20751] ? kasan_save_track+0x14/0x30 [ 702.209256][T20751] ? __kasan_kmalloc+0xaa/0xb0 [ 702.209274][T20751] ? __pfx_alloc_vmap_area+0x10/0x10 [ 702.209295][T20751] ? __get_vm_area_node+0x101/0x330 [ 702.209319][T20751] __get_vm_area_node+0x1ca/0x330 [ 702.209347][T20751] __vmalloc_node_range_noprof+0x228/0x1630 [ 702.209372][T20751] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 702.209399][T20751] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 702.209420][T20751] ? vmx_vcpu_reset+0x240/0x32a0 [ 702.209441][T20751] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 702.209460][T20751] ? vmx_update_fb_clear_dis+0xb1/0x1b0 [ 702.209479][T20751] ? vmx_vcpu_pi_put+0x20a/0x2c0 [ 702.209503][T20751] ? vmx_vcpu_put+0xbf/0x860 [ 702.209521][T20751] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 702.209544][T20751] ? kvm_find_user_return_msr+0xb5/0xf0 [ 702.209565][T20751] ? vmx_setup_uret_msrs+0x591/0x8b0 [ 702.209590][T20751] ? vmx_update_exception_bitmap+0x230/0x5c0 [ 702.209606][T20751] ? kvm_calc_cpu_role.isra.0+0x26c/0x330 [ 702.209632][T20751] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 702.209652][T20751] __vmalloc_node_noprof+0xad/0xf0 [ 702.209674][T20751] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 702.209697][T20751] kvm_dirty_ring_alloc+0x25/0x1a0 [ 702.209720][T20751] kvm_vm_ioctl+0x7d3/0x4180 [ 702.209742][T20751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.209768][T20751] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 702.209806][T20751] ? kasan_quarantine_put+0x104/0x240 [ 702.209824][T20751] ? lockdep_hardirqs_on+0x78/0x100 [ 702.209843][T20751] ? find_held_lock+0x2b/0x80 [ 702.209866][T20751] ? tomoyo_path_number_perm+0x28f/0x580 [ 702.209889][T20751] ? tomoyo_path_number_perm+0x28f/0x580 [ 702.209915][T20751] ? tomoyo_path_number_perm+0x188/0x580 [ 702.209938][T20751] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 702.209962][T20751] ? __pfx_futex_wait+0x10/0x10 [ 702.209984][T20751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 702.210004][T20751] ? do_vfs_ioctl+0x226/0x13e0 [ 702.210027][T20751] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 702.210050][T20751] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 702.210081][T20751] ? __fget_files+0x215/0x3d0 [ 702.210096][T20751] ? hook_file_ioctl_common+0x140/0x440 [ 702.210120][T20751] ? selinux_file_ioctl+0x13b/0x290 [ 702.210143][T20751] ? selinux_file_ioctl+0xb6/0x290 [ 702.210173][T20751] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 702.210198][T20751] __x64_sys_ioctl+0x18e/0x210 [ 702.210223][T20751] do_syscall_64+0x115/0x870 [ 702.210240][T20751] ? clear_bhb_loop+0x40/0x90 [ 702.210260][T20751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.210279][T20751] RIP: 0033:0x7f886779de99 [ 702.210295][T20751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.210310][T20751] RSP: 002b:00007f88685a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 702.210327][T20751] RAX: ffffffffffffffda RBX: 00007f8867a25fa0 RCX: 00007f886779de99 [ 702.210337][T20751] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 702.210347][T20751] RBP: 00007f8867833eaf R08: 0000000000000000 R09: 0000000000000000 [ 702.210357][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.210367][T20751] R13: 00007f8867a26038 R14: 00007f8867a25fa0 R15: 00007ffe8fec8a48 [ 702.210389][T20751] [ 702.213248][T20751] warn_alloc: 2 callbacks suppressed [ 702.213259][T20751] syz.6.4606: vmalloc error: size 1048576, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 702.240482][ T5714] usb 1-1: Manufacturer: syz [ 703.023781][T20751] ,cpuset=/,mems_allowed=0-1 [ 703.028580][T20751] CPU: 1 UID: 0 PID: 20751 Comm: syz.6.4606 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.028603][T20751] Tainted: [L]=SOFTLOCKUP [ 703.028607][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 703.028615][T20751] Call Trace: [ 703.028619][T20751] [ 703.028624][T20751] dump_stack_lvl+0x100/0x190 [ 703.028641][T20751] warn_alloc.cold+0x94/0xa8 [ 703.028660][T20751] ? __pfx_warn_alloc+0x10/0x10 [ 703.028672][T20751] ? lockdep_hardirqs_on+0x78/0x100 [ 703.028687][T20751] ? __get_vm_area_node+0x2cd/0x330 [ 703.028706][T20751] ? __get_vm_area_node+0x208/0x330 [ 703.028724][T20751] __vmalloc_node_range_noprof+0xccd/0x1630 [ 703.028746][T20751] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 703.028762][T20751] ? vmx_vcpu_reset+0x240/0x32a0 [ 703.028778][T20751] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 703.028792][T20751] ? vmx_update_fb_clear_dis+0xb1/0x1b0 [ 703.028806][T20751] ? vmx_vcpu_pi_put+0x20a/0x2c0 [ 703.028824][T20751] ? vmx_vcpu_put+0xbf/0x860 [ 703.028835][T20751] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 703.028852][T20751] ? kvm_find_user_return_msr+0xb5/0xf0 [ 703.028868][T20751] ? vmx_setup_uret_msrs+0x591/0x8b0 [ 703.028886][T20751] ? vmx_update_exception_bitmap+0x230/0x5c0 [ 703.028898][T20751] ? kvm_calc_cpu_role.isra.0+0x26c/0x330 [ 703.028917][T20751] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 703.028932][T20751] __vmalloc_node_noprof+0xad/0xf0 [ 703.028949][T20751] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 703.028965][T20751] kvm_dirty_ring_alloc+0x25/0x1a0 [ 703.028982][T20751] kvm_vm_ioctl+0x7d3/0x4180 [ 703.028999][T20751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.029016][T20751] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 703.029043][T20751] ? kasan_quarantine_put+0x104/0x240 [ 703.029056][T20751] ? lockdep_hardirqs_on+0x78/0x100 [ 703.029070][T20751] ? find_held_lock+0x2b/0x80 [ 703.029087][T20751] ? tomoyo_path_number_perm+0x28f/0x580 [ 703.029104][T20751] ? tomoyo_path_number_perm+0x28f/0x580 [ 703.029123][T20751] ? tomoyo_path_number_perm+0x188/0x580 [ 703.029141][T20751] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 703.029158][T20751] ? __pfx_futex_wait+0x10/0x10 [ 703.029173][T20751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 703.029188][T20751] ? do_vfs_ioctl+0x226/0x13e0 [ 703.029205][T20751] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 703.029222][T20751] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 703.029245][T20751] ? __fget_files+0x215/0x3d0 [ 703.029257][T20751] ? hook_file_ioctl_common+0x140/0x440 [ 703.029273][T20751] ? selinux_file_ioctl+0x13b/0x290 [ 703.029291][T20751] ? selinux_file_ioctl+0xb6/0x290 [ 703.029309][T20751] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 703.029327][T20751] __x64_sys_ioctl+0x18e/0x210 [ 703.029345][T20751] do_syscall_64+0x115/0x870 [ 703.029358][T20751] ? clear_bhb_loop+0x40/0x90 [ 703.029372][T20751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.029384][T20751] RIP: 0033:0x7f886779de99 [ 703.029394][T20751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.029405][T20751] RSP: 002b:00007f88685a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.029416][T20751] RAX: ffffffffffffffda RBX: 00007f8867a25fa0 RCX: 00007f886779de99 [ 703.029423][T20751] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 703.029430][T20751] RBP: 00007f8867833eaf R08: 0000000000000000 R09: 0000000000000000 [ 703.029436][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.029443][T20751] R13: 00007f8867a26038 R14: 00007f8867a25fa0 R15: 00007ffe8fec8a48 [ 703.029457][T20751] [ 703.029461][T20751] Mem-Info: [ 703.428294][ T5714] usb 1-1: SerialNumber: syz [ 703.541485][T20751] active_anon:16335 inactive_anon:0 isolated_anon:0 [ 703.541485][T20751] active_file:164 inactive_file:62502 isolated_file:0 [ 703.541485][T20751] unevictable:768 dirty:245 writeback:0 [ 703.541485][T20751] slab_reclaimable:12519 slab_unreclaimable:101206 [ 703.541485][T20751] mapped:34116 shmem:4142 pagetables:6039 [ 703.541485][T20751] sec_pagetables:0 bounce:0 [ 703.541485][T20751] kernel_misc_reclaimable:0 [ 703.541485][T20751] free:1204286 free_pcp:11330 free_cma:0 [ 703.589930][T20756] UDC core: g1: couldn't find an available UDC or it's busy [ 703.654807][T20751] Node 0 active_anon:65316kB inactive_anon:0kB active_file:656kB inactive_file:249804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128272kB dirty:980kB writeback:0kB shmem:15032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:12288kB kernel_stack:12424kB pagetables:23840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 703.946119][T20763] xt_hashlimit: size too large, truncated to 1048576 [ 704.073721][T20751] Node 1 active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 704.434683][T20751] Node 0 DMA free:11228kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 704.546583][T20751] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 704.556707][T20751] Node 0 DMA32 free:883480kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67568kB inactive_anon:0kB active_file:656kB inactive_file:249804kB unevictable:1536kB writepending:1084kB zspages:0kB present:3129332kB managed:2532172kB mlocked:0kB bounce:0kB free_pcp:47716kB local_pcp:20668kB free_cma:0kB [ 704.682026][T20751] lowmem_reserve[]: 0 0 0 0 0 [ 704.687321][T20751] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 704.720661][T20751] lowmem_reserve[]: 0 0 0 0 0 [ 704.726634][T20751] Node 1 Normal free:3911760kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4320kB local_pcp:2272kB free_cma:0kB [ 704.758976][T20751] lowmem_reserve[]: 0 0 0 0 0 [ 704.765717][T20751] Node 0 DMA: 5*4kB (U) 7*8kB (U) 5*16kB (U) 6*32kB (U) 6*64kB (U) 4*128kB (U) 3*256kB (U) 4*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 11228kB [ 704.798943][T20751] Node 0 DMA32: 1693*4kB (UM) 872*8kB (UME) 333*16kB (UME) 510*32kB (UME) 638*64kB (UME) 1646*128kB (UME) 959*256kB (UME) 424*512kB (UME) 127*1024kB (UME) 8*2048kB (UM) 0*4096kB = 895940kB [ 704.842052][T20751] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 704.868457][T20751] Node 1 Normal: 30*4kB (UM) 37*8kB (UME) 41*16kB (UME) 37*32kB (UME) 30*64kB (UME) 26*128kB (UME) 25*256kB (UME) 23*512kB (UM) 15*1024kB (UME) 6*2048kB (UME) 942*4096kB (UM) = 3911760kB [ 704.912483][T20751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 704.934679][T20751] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 704.955257][T20751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 704.972275][T20777] random: crng reseeded on system resumption [ 704.978460][T20751] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 704.995400][T20751] 63974 total pagecache pages [ 705.000324][T20751] 0 pages in swap cache [ 705.004562][T20751] Free swap = 124996kB [ 705.008986][T20751] Total swap = 124996kB [ 705.013312][T20751] 2097051 pages RAM [ 705.017672][T20751] 0 pages HighMem/MovableOnly [ 705.033272][T20751] 432299 pages reserved [ 705.037584][T20751] 0 pages cma reserved [ 705.668271][ T5714] usb 1-1: can't set config #1, error -71 [ 705.681087][ T5714] usb 1-1: USB disconnect, device number 25 [ 705.996926][T20802] xt_hashlimit: size too large, truncated to 1048576 [ 706.788871][T20817] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4628'. [ 708.346889][T20854] xt_hashlimit: size too large, truncated to 1048576 [ 709.086618][ T5714] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 709.269761][ T5714] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 709.293719][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.313781][ T5714] usb 6-1: Product: syz [ 709.332364][ T5714] usb 6-1: Manufacturer: syz [ 709.348269][ T5714] usb 6-1: SerialNumber: syz [ 709.388415][T17013] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 709.639595][ T804] usb 6-1: USB disconnect, device number 11 [ 709.821493][T20889] xt_HMARK: spi-set and port-set can't be combined [ 710.490798][T17013] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 710.625967][T17013] ath9k_htc: Failed to initialize the device [ 710.769665][ T804] usb 6-1: ath9k_htc: USB layer deinitialized [ 712.040541][ T5787] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 712.070951][ T804] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 712.156704][T20941] xt_hashlimit: size too large, truncated to 1048576 [ 712.697340][ T5787] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 712.733110][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.782799][ T5787] usb 1-1: Product: syz [ 712.878291][ T804] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.880339][ T5787] usb 1-1: Manufacturer: syz [ 712.938218][ T804] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.964556][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.991572][ T804] usb 6-1: Product: syz [ 712.993723][ T5787] usb 1-1: SerialNumber: syz [ 713.015876][ T804] usb 6-1: Manufacturer: syz [ 713.033143][ T804] usb 6-1: SerialNumber: syz [ 713.066549][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 719.570654][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 719.577585][ T10] ath9k_htc: Failed to initialize the device [ 719.700534][ T5787] usb 1-1: USB disconnect, device number 26 [ 719.719689][ T5787] usb 1-1: ath9k_htc: USB layer deinitialized [ 720.619307][ T804] usb 6-1: USB disconnect, device number 12 [ 720.838093][T20984] xt_HMARK: spi-set and port-set can't be combined [ 720.892140][T20982] md: could not open device unknown-block(0,0). [ 720.903867][T20982] md: md_import_device returned -6 [ 721.127143][T20993] xt_hashlimit: size too large, truncated to 1048576 [ 722.028827][T21004] syzkaller0: entered promiscuous mode [ 722.063376][T21004] syzkaller0: entered allmulticast mode [ 722.106220][T20999] nvme_fabrics: missing parameter 'transport=%s' [ 722.120817][T20999] nvme_fabrics: missing parameter 'nqn=%s' [ 724.243572][T21051] xt_HMARK: spi-set and port-set can't be combined [ 724.704948][T21062] scsi_dev_info_list_add_str: bad dev info string 'vendor' '' '' [ 725.549047][T21066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4705'. [ 725.862544][T21083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4710'. [ 725.886064][T21086] syzkaller0: entered promiscuous mode [ 725.908887][T21086] syzkaller0: entered allmulticast mode [ 727.047298][T21099] scsi_dev_info_list_add_str: bad dev info string 'vendor' '' '' [ 727.298502][T21105] xt_hashlimit: size too large, truncated to 1048576 [ 728.662410][T21123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4723'. [ 728.809381][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 728.979655][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 729.023864][ T10] usb 6-1: config 0 has an invalid interface number: 153 but max is 0 [ 729.049971][ T10] usb 6-1: config 0 has no interface number 0 [ 729.056211][ T10] usb 6-1: config 0 interface 153 has no altsetting 0 [ 729.066070][ T10] usb 6-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 729.109395][ T10] usb 6-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 729.133094][ T10] usb 6-1: Product: syz [ 729.160177][ T10] usb 6-1: Manufacturer: syz [ 729.179500][ T10] usb 6-1: SerialNumber: syz [ 729.218963][ T10] usb 6-1: config 0 descriptor?? [ 729.278519][ T804] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 729.330234][T21143] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.4730'. [ 729.461175][ T804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.470266][ T10] sierra 6-1:0.153: Sierra USB modem converter detected [ 729.516410][ T10] usb 6-1: USB disconnect, device number 13 [ 729.525874][ T804] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 729.564581][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.573502][ T804] usb 1-1: Product: syz [ 729.581543][ T804] usb 1-1: Manufacturer: syz [ 729.587844][ T10] sierra 6-1:0.153: device disconnected [ 729.608285][ T804] usb 1-1: SerialNumber: syz [ 730.063125][T21162] xt_hashlimit: size too large, truncated to 1048576 [ 730.694095][T21161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4737'. [ 730.912069][T21170] UDC core: g1: couldn't find an available UDC or it's busy [ 731.572420][T21176] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 731.753753][T21182] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.4744'. [ 732.014892][ T10] usb 1-1: USB disconnect, device number 27 [ 732.051381][T21193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4747'. [ 732.180021][T21197] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4749'. [ 732.438140][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 732.588231][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 732.600711][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 732.617157][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.638013][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 732.673281][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 732.696085][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.721485][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 732.744634][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.862071][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 732.874566][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 732.899387][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 732.909949][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 732.920793][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 732.931412][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 732.977833][T21210] FAULT_INJECTION: forcing a failure. [ 732.977833][T21210] name fail_page_alloc, interval 25, probability 100, space 0, times 1 [ 733.008263][T21210] CPU: 1 UID: 0 PID: 21210 Comm: syz.3.4754 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.008295][T21210] Tainted: [L]=SOFTLOCKUP [ 733.008302][T21210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 733.008313][T21210] Call Trace: [ 733.008320][T21210] [ 733.008329][T21210] dump_stack_lvl+0x100/0x190 [ 733.008359][T21210] should_fail_ex.cold+0x5/0xa [ 733.008380][T21210] ? prepare_alloc_pages+0x16d/0x5f0 [ 733.008408][T21210] should_fail_alloc_page+0xeb/0x140 [ 733.008436][T21210] prepare_alloc_pages+0x1f0/0x5f0 [ 733.008463][T21210] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 733.008489][T21210] ? rcu_is_watching+0x12/0xc0 [ 733.008518][T21210] ? trace_mm_page_alloc+0x164/0x1c0 [ 733.008544][T21210] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 733.008568][T21210] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 733.008592][T21210] ? stack_trace_save+0x8e/0xc0 [ 733.008613][T21210] ? __pfx_stack_trace_save+0x10/0x10 [ 733.008633][T21210] ? stack_depot_save_flags+0x27/0x9d0 [ 733.008661][T21210] ? is_bpf_text_address+0x94/0x1a0 [ 733.008686][T21210] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 733.008710][T21210] ? __kasan_slab_alloc+0x89/0x90 [ 733.008733][T21210] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 733.008755][T21210] ? alloc_vmap_area+0x182f/0x2bb0 [ 733.008777][T21210] ? __get_vm_area_node+0x1ca/0x330 [ 733.008800][T21210] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 733.008828][T21210] ? __vmalloc_node_noprof+0xad/0xf0 [ 733.008853][T21210] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 733.008877][T21210] ? kvm_vm_ioctl+0x7d3/0x4180 [ 733.008903][T21210] ? __x64_sys_ioctl+0x18e/0x210 [ 733.008929][T21210] ? do_syscall_64+0x115/0x870 [ 733.008956][T21210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.008984][T21210] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 733.009011][T21210] ? policy_nodemask+0xed/0x4f0 [ 733.009039][T21210] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 733.009074][T21210] __kasan_populate_vmalloc+0xf0/0x210 [ 733.009100][T21210] alloc_vmap_area+0x95d/0x2bb0 [ 733.009130][T21210] ? kasan_save_track+0x14/0x30 [ 733.009150][T21210] ? __kasan_kmalloc+0xaa/0xb0 [ 733.009171][T21210] ? __pfx_alloc_vmap_area+0x10/0x10 [ 733.009194][T21210] ? kvm_find_cpuid_entry2+0x1c7/0x290 [ 733.009215][T21210] ? __get_vm_area_node+0x101/0x330 [ 733.009244][T21210] __get_vm_area_node+0x1ca/0x330 [ 733.009272][T21210] __vmalloc_node_range_noprof+0x228/0x1630 [ 733.009300][T21210] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 733.009325][T21210] ? kvm_vcpu_reset+0x6d3/0x1b00 [ 733.009347][T21210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 733.009370][T21210] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 733.009394][T21210] ? vmx_update_fb_clear_dis+0xb1/0x1b0 [ 733.009417][T21210] ? vmx_vcpu_pi_put+0x20a/0x2c0 [ 733.009444][T21210] ? vmx_vcpu_put+0xbf/0x860 [ 733.009465][T21210] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 733.009490][T21210] ? kvm_find_user_return_msr+0xb5/0xf0 [ 733.009516][T21210] ? vmx_setup_uret_msrs+0x591/0x8b0 [ 733.009543][T21210] ? vmx_update_exception_bitmap+0x230/0x5c0 [ 733.009560][T21210] ? kvm_calc_cpu_role.isra.0+0x26c/0x330 [ 733.009589][T21210] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 733.009612][T21210] __vmalloc_node_noprof+0xad/0xf0 [ 733.009637][T21210] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 733.009660][T21210] kvm_dirty_ring_alloc+0x25/0x1a0 [ 733.009685][T21210] kvm_vm_ioctl+0x7d3/0x4180 [ 733.009711][T21210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.009738][T21210] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 733.009781][T21210] ? kasan_quarantine_put+0x104/0x240 [ 733.009801][T21210] ? lockdep_hardirqs_on+0x78/0x100 [ 733.009820][T21210] ? find_held_lock+0x2b/0x80 [ 733.009849][T21210] ? tomoyo_path_number_perm+0x28f/0x580 [ 733.009876][T21210] ? tomoyo_path_number_perm+0x28f/0x580 [ 733.009905][T21210] ? tomoyo_path_number_perm+0x188/0x580 [ 733.009932][T21210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 733.009966][T21210] ? __pfx_futex_wait+0x10/0x10 [ 733.009992][T21210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 733.010016][T21210] ? do_vfs_ioctl+0x226/0x13e0 [ 733.010043][T21210] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 733.010067][T21210] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 733.010104][T21210] ? __fget_files+0x215/0x3d0 [ 733.010122][T21210] ? hook_file_ioctl_common+0x140/0x440 [ 733.010149][T21210] ? selinux_file_ioctl+0x13b/0x290 [ 733.010174][T21210] ? selinux_file_ioctl+0xb6/0x290 [ 733.010201][T21210] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 733.010230][T21210] __x64_sys_ioctl+0x18e/0x210 [ 733.010259][T21210] do_syscall_64+0x115/0x870 [ 733.010278][T21210] ? clear_bhb_loop+0x40/0x90 [ 733.010300][T21210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.010319][T21210] RIP: 0033:0x7feb3bd9de99 [ 733.010336][T21210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.010354][T21210] RSP: 002b:00007feb3ccba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.010372][T21210] RAX: ffffffffffffffda RBX: 00007feb3c025fa0 RCX: 00007feb3bd9de99 [ 733.010384][T21210] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 733.010395][T21210] RBP: 00007feb3be33eaf R08: 0000000000000000 R09: 0000000000000000 [ 733.010405][T21210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.010416][T21210] R13: 00007feb3c026038 R14: 00007feb3c025fa0 R15: 00007ffe8f3889c8 [ 733.010440][T21210] [ 733.014924][T21210] syz.3.4754: vmalloc error: size 1048576, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 733.565355][T21210] CPU: 0 UID: 0 PID: 21210 Comm: syz.3.4754 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.565376][T21210] Tainted: [L]=SOFTLOCKUP [ 733.565381][T21210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 733.565388][T21210] Call Trace: [ 733.565392][T21210] [ 733.565397][T21210] dump_stack_lvl+0x100/0x190 [ 733.565415][T21210] warn_alloc.cold+0x94/0xa8 [ 733.565430][T21210] ? __pfx_warn_alloc+0x10/0x10 [ 733.565446][T21210] ? lockdep_hardirqs_on+0x78/0x100 [ 733.565461][T21210] ? __get_vm_area_node+0x2cd/0x330 [ 733.565481][T21210] ? __get_vm_area_node+0x208/0x330 [ 733.565499][T21210] __vmalloc_node_range_noprof+0xccd/0x1630 [ 733.565518][T21210] ? kvm_vcpu_reset+0x6d3/0x1b00 [ 733.565535][T21210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 733.565551][T21210] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 733.565568][T21210] ? vmx_update_fb_clear_dis+0xb1/0x1b0 [ 733.565583][T21210] ? vmx_vcpu_pi_put+0x20a/0x2c0 [ 733.565600][T21210] ? vmx_vcpu_put+0xbf/0x860 [ 733.565612][T21210] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 733.565629][T21210] ? kvm_find_user_return_msr+0xb5/0xf0 [ 733.565644][T21210] ? vmx_setup_uret_msrs+0x591/0x8b0 [ 733.565663][T21210] ? vmx_update_exception_bitmap+0x230/0x5c0 [ 733.565674][T21210] ? kvm_calc_cpu_role.isra.0+0x26c/0x330 [ 733.565693][T21210] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 733.565708][T21210] __vmalloc_node_noprof+0xad/0xf0 [ 733.565725][T21210] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 733.565742][T21210] kvm_dirty_ring_alloc+0x25/0x1a0 [ 733.565758][T21210] kvm_vm_ioctl+0x7d3/0x4180 [ 733.565775][T21210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.565793][T21210] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 733.565820][T21210] ? kasan_quarantine_put+0x104/0x240 [ 733.565833][T21210] ? lockdep_hardirqs_on+0x78/0x100 [ 733.565846][T21210] ? find_held_lock+0x2b/0x80 [ 733.565864][T21210] ? tomoyo_path_number_perm+0x28f/0x580 [ 733.565881][T21210] ? tomoyo_path_number_perm+0x28f/0x580 [ 733.565900][T21210] ? tomoyo_path_number_perm+0x188/0x580 [ 733.565917][T21210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 733.565935][T21210] ? __pfx_futex_wait+0x10/0x10 [ 733.565952][T21210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 733.565966][T21210] ? do_vfs_ioctl+0x226/0x13e0 [ 733.565984][T21210] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 733.566001][T21210] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 733.566024][T21210] ? __fget_files+0x215/0x3d0 [ 733.566035][T21210] ? hook_file_ioctl_common+0x140/0x440 [ 733.566052][T21210] ? selinux_file_ioctl+0x13b/0x290 [ 733.566070][T21210] ? selinux_file_ioctl+0xb6/0x290 [ 733.566088][T21210] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 733.566106][T21210] __x64_sys_ioctl+0x18e/0x210 [ 733.566124][T21210] do_syscall_64+0x115/0x870 [ 733.566137][T21210] ? clear_bhb_loop+0x40/0x90 [ 733.566151][T21210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.566163][T21210] RIP: 0033:0x7feb3bd9de99 [ 733.566174][T21210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.566185][T21210] RSP: 002b:00007feb3ccba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.566197][T21210] RAX: ffffffffffffffda RBX: 00007feb3c025fa0 RCX: 00007feb3bd9de99 [ 733.566205][T21210] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 733.566212][T21210] RBP: 00007feb3be33eaf R08: 0000000000000000 R09: 0000000000000000 [ 733.566218][T21210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.566225][T21210] R13: 00007feb3c026038 R14: 00007feb3c025fa0 R15: 00007ffe8f3889c8 [ 733.566240][T21210] [ 733.566254][T21210] Mem-Info: [ 733.942043][T21210] active_anon:14535 inactive_anon:0 isolated_anon:0 [ 733.942043][T21210] active_file:164 inactive_file:62512 isolated_file:0 [ 733.942043][T21210] unevictable:768 dirty:233 writeback:0 [ 733.942043][T21210] slab_reclaimable:12633 slab_unreclaimable:99089 [ 733.942043][T21210] mapped:31317 shmem:1293 pagetables:6091 [ 733.942043][T21210] sec_pagetables:0 bounce:0 [ 733.942043][T21210] kernel_misc_reclaimable:0 [ 733.942043][T21210] free:1186120 free_pcp:32522 free_cma:0 [ 734.063645][T21210] Node 0 active_anon:53816kB inactive_anon:0kB active_file:656kB inactive_file:249844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116976kB dirty:932kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:12288kB kernel_stack:12296kB pagetables:23948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 734.134003][T21210] Node 1 active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 734.169848][T21210] Node 0 DMA free:11228kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 734.234519][T21210] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 734.240388][T21210] Node 0 DMA32 free:834920kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56060kB inactive_anon:0kB active_file:656kB inactive_file:249844kB unevictable:1536kB writepending:932kB zspages:0kB present:3129332kB managed:2532172kB mlocked:0kB bounce:0kB free_pcp:114364kB local_pcp:69504kB free_cma:0kB [ 734.306849][T21210] lowmem_reserve[]: 0 0 0 0 0 [ 734.313552][T21210] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.346841][T21210] lowmem_reserve[]: 0 0 0 0 0 [ 734.351860][T21210] Node 1 Normal free:3911760kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4320kB local_pcp:2272kB free_cma:0kB [ 734.384398][T21210] lowmem_reserve[]: 0 0 0 0 0 [ 734.389468][T21210] Node 0 DMA: 5*4kB (U) 7*8kB (U) 5*16kB (U) 6*32kB (U) 6*64kB (U) 4*128kB (U) 3*256kB (U) 4*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 11228kB [ 734.427979][T21210] Node 0 DMA32: 3719*4kB (UME) 1141*8kB (UM) 574*16kB (UME) 588*32kB (UME) 685*64kB (UME) 1144*128kB (UME) 931*256kB (UME) 419*512kB (UME) 127*1024kB (UME) 4*2048kB (UM) 0*4096kB = 833380kB [ 734.450705][T21210] Node 0 [ 734.457937][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 734.480300][T21210] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 734.502833][T21210] Node 1 Normal: 30*4kB (UM) 37*8kB (UME) 41*16kB (UME) 37*32kB (UME) 30*64kB (UME) 26*128kB (UME) 25*256kB (UME) 23*512kB (UM) 15*1024kB (UME) 6*2048kB (UME) 942*4096kB (UM) = 3911760kB [ 734.523272][T21210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 734.537792][T21210] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 734.547281][T21210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 734.556889][T21210] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 734.567050][T21210] 63965 total pagecache pages [ 734.588828][T21210] 0 pages in swap cache [ 734.597888][T21210] Free swap = 124996kB [ 734.607758][T21210] Total swap = 124996kB [ 734.618118][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 734.624467][T21210] 2097051 pages RAM [ 734.634173][ T24] usb 6-1: config 0 has an invalid interface number: 153 but max is 0 [ 734.648793][T21210] 0 pages HighMem/MovableOnly [ 734.651956][ T24] usb 6-1: config 0 has no interface number 0 [ 734.659845][T21210] 432299 pages reserved [ 734.664063][T21210] 0 pages cma reserved [ 734.679901][ T24] usb 6-1: config 0 interface 153 has no altsetting 0 [ 734.698123][ T24] usb 6-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 734.725190][ T24] usb 6-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 734.744462][ T24] usb 6-1: Product: syz [ 734.762626][ T24] usb 6-1: Manufacturer: syz [ 734.776419][ T24] usb 6-1: SerialNumber: syz [ 734.814503][ T24] usb 6-1: config 0 descriptor?? [ 735.047017][ T24] sierra 6-1:0.153: Sierra USB modem converter detected [ 735.148150][T21251] xt_hashlimit: size too large, truncated to 1048576 [ 736.074603][ T24] usb 6-1: USB disconnect, device number 14 [ 736.547623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 736.641670][ T24] sierra 6-1:0.153: device disconnected [ 737.261246][T21256] random: crng reseeded on system resumption [ 738.401187][T21197] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 738.471707][ T24] usb 7-1: USB disconnect, device number 16 [ 738.485365][T21284] xt_hashlimit: size too large, truncated to 1048576 [ 738.950886][T21295] scsi_dev_info_list_add_str: bad dev info string 'vendor' '' '' [ 739.825243][T21301] xt_hashlimit: size too large, truncated to 1048576 [ 740.877185][T21332] __nla_validate_parse: 33 callbacks suppressed [ 740.877202][T21332] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4789'. [ 741.078773][T21329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4785'. [ 741.167152][T17013] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 741.327131][T17013] usb 6-1: Using ep0 maxpacket: 8 [ 741.343498][T17013] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 741.368203][T17013] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.404741][T17013] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.448976][T17013] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.487213][T17013] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.530134][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.536504][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.551431][T17013] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 741.591478][T17013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.920413][T21340] scsi_dev_info_list_add_str: bad dev info string 'vendor' '' '' [ 743.314626][T21354] xt_hashlimit: size too large, truncated to 1048576 [ 745.676178][T21366] fuse: Bad value for 'fd' [ 745.728887][T21363] random: crng reseeded on system resumption [ 745.743550][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4798'. [ 745.948731][T21373] xt_HMARK: spi-set and port-set can't be combined [ 747.233802][T21387] xt_hashlimit: size too large, truncated to 1048576 [ 747.345264][T21332] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 747.759691][T12933] usb 6-1: USB disconnect, device number 15 [ 747.773800][T21385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4804'. [ 748.202437][T21400] xt_hashlimit: size too large, truncated to 1048576 [ 750.317446][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 750.344769][T21412] fuse: Bad value for 'fd' [ 750.623050][T21418] xt_hashlimit: size too large, truncated to 1048576 [ 751.882441][T21427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4813'. [ 751.938033][T21430] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 752.305835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 752.545811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 752.805772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 753.996995][T21444] xt_HMARK: spi-set and port-set can't be combined [ 754.515248][T21448] xt_HMARK: spi-set and port-set can't be combined [ 754.890212][ T24] usb 3-1: device descriptor read/all, error -71 [ 754.991874][T21457] fuse: Bad value for 'fd' [ 756.897518][T21484] xt_hashlimit: size too large, truncated to 1048576 [ 758.311180][T21499] xt_HMARK: spi-set and port-set can't be combined [ 758.924432][T21514] fuse: Bad value for 'user_id' [ 758.958236][T21514] fuse: Bad value for 'user_id' [ 759.910769][T21512] random: crng reseeded on system resumption [ 763.310124][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 763.321266][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 763.329188][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 763.338365][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 763.345958][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 763.387155][T21579] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4860'. [ 763.617644][T21590] xt_HMARK: spi-set and port-set can't be combined [ 764.664497][T17013] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 764.866519][T17013] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 764.883625][T17013] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 764.893151][T17013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.904344][T17013] usb 1-1: Product: syz [ 764.908569][T17013] usb 1-1: Manufacturer: syz [ 764.913882][T17013] usb 1-1: SerialNumber: syz [ 765.136547][T21618] xt_HMARK: spi-set and port-set can't be combined [ 765.394397][ T4928] Bluetooth: hci5: command tx timeout [ 765.540355][T21623] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4869'. [ 765.665396][ T12] bridge_slave_1: left allmulticast mode [ 765.698699][ T12] bridge_slave_1: left promiscuous mode [ 765.745803][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.797034][ T12] bridge_slave_0: left allmulticast mode [ 765.823551][ T12] bridge_slave_0: left promiscuous mode [ 765.852008][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.905223][T17013] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 766.144311][T17013] usb 7-1: Using ep0 maxpacket: 8 [ 766.155691][T17013] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 766.176842][ T10] usb 1-1: USB disconnect, device number 28 [ 766.180027][T17013] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 766.205019][T17013] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 766.247760][T17013] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 766.280649][T21644] xt_hashlimit: size too large, truncated to 1048576 [ 766.718677][ T30] audit: type=1400 audit(1785192833.820:923): avc: denied { write } for pid=21624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.725906][T17013] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.882304][T17013] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 766.982975][T17013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.077338][ T30] audit: type=1400 audit(1785192834.180:924): avc: denied { write } for pid=21648 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.145926][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.221661][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.272057][T17013] usb 7-1: usb_control_msg returned -32 [ 767.287779][ T12] bond0 (unregistering): Released all slaves [ 767.303211][T17013] usbtmc 7-1:16.0: can't read capabilities [ 767.424561][T21634] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4872'. [ 767.466422][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 767.525569][T21653] Bluetooth: hci5: command tx timeout [ 767.692208][T21581] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.735439][T21581] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.772879][T21581] bridge_slave_0: entered allmulticast mode [ 767.815021][T21581] bridge_slave_0: entered promiscuous mode [ 767.921447][T21581] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.961467][T21581] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.003239][T21581] bridge_slave_1: entered allmulticast mode [ 768.037528][T21581] bridge_slave_1: entered promiscuous mode [ 768.151537][T21626] usbtmc 7-1:16.0: usb_bulk_msg returned -71 [ 768.222227][ T12] hsr_slave_0: left promiscuous mode [ 768.242568][ T12] hsr_slave_1: left promiscuous mode [ 768.269110][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.283020][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.439704][T12933] usb 7-1: USB disconnect, device number 17 [ 768.608777][ T30] audit: type=1400 audit(1785192835.700:925): avc: denied { write } for pid=21664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.823566][ T30] audit: type=1400 audit(1785192835.920:926): avc: denied { write } for pid=21680 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.890643][ T12] team0 (unregistering): Port device team_slave_1 removed [ 768.963236][ T12] team0 (unregistering): Port device team_slave_0 removed [ 769.204760][T21653] Bluetooth: hci4: command 0x0406 tx timeout [ 769.210850][T21653] Bluetooth: hci1: command 0x0406 tx timeout [ 769.261687][T21581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.319199][T21581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.416428][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 770.121556][T21581] team0: Port device team_slave_0 added [ 770.121665][ T4928] Bluetooth: hci5: command tx timeout [ 770.149484][T21581] team0: Port device team_slave_1 added [ 770.263760][T21581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.363300][T21581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.397477][T21581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.477954][T21581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.511738][T21581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.650681][T21581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.814830][T21581] hsr_slave_0: entered promiscuous mode [ 770.836876][T21581] hsr_slave_1: entered promiscuous mode [ 770.861305][T21581] debugfs: 'hsr0' already exists in 'hsr' [ 770.888627][T21581] Cannot create hsr debugfs directory [ 771.093018][ T30] audit: type=1400 audit(1785192838.191:927): avc: denied { write } for pid=21697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.319448][ T30] audit: type=1400 audit(1785192838.421:928): avc: denied { write } for pid=21717 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.538554][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 772.617222][ T4928] Bluetooth: hci5: command tx timeout [ 773.703205][T21737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4885'. [ 775.511517][ T30] audit: type=1400 audit(1785192842.611:929): avc: denied { write } for pid=21739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.769885][ T30] audit: type=1400 audit(1785192843.861:930): avc: denied { write } for pid=21764 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.993028][T21790] xt_hashlimit: size too large, truncated to 1048576 [ 779.275736][T21807] xt_hashlimit: size too large, truncated to 1048576 [ 779.841957][ T30] audit: type=1400 audit(1785192846.942:931): avc: denied { write } for pid=21771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.189166][ T30] audit: type=1400 audit(1785192847.292:932): avc: denied { write } for pid=21811 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.230532][T21581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 780.261451][T21581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 780.292802][T21581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 780.330872][T21581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 780.381605][T21581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 780.426838][T21581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 780.448426][T21581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 780.621055][T21581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 780.738360][T21834] xt_HMARK: spi-set and port-set can't be combined [ 783.898657][ T30] audit: type=1400 audit(1785192851.002:933): avc: denied { write } for pid=21819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.970742][T21581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.152840][T21581] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.197027][ T30] audit: type=1400 audit(1785192851.272:934): avc: denied { write } for pid=21849 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.284475][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.291547][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.351604][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.358720][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.842892][ T4928] Bluetooth: hci3: command 0x0406 tx timeout [ 785.947894][ T30] audit: type=1400 audit(1785192853.052:935): avc: denied { write } for pid=21854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 786.216005][T21888] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4910'. [ 786.225061][ T30] audit: type=1400 audit(1785192853.322:936): avc: denied { write } for pid=21891 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 786.585530][T21581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.702500][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4908'. [ 787.069380][ T30] audit: type=1400 audit(1785192854.172:937): avc: denied { write } for pid=21897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.314753][ T30] audit: type=1400 audit(1785192854.412:938): avc: denied { write } for pid=21917 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.352905][T21581] veth0_vlan: entered promiscuous mode [ 787.420396][T21581] veth1_vlan: entered promiscuous mode [ 788.201965][T21581] veth0_macvtap: entered promiscuous mode [ 788.214219][T21581] veth1_macvtap: entered promiscuous mode [ 788.278992][T21581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.328343][T21581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.464627][ T7068] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.576957][ T7068] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.611687][ T7068] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.146301][ T7068] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.233673][T15825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.323506][T15825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.556820][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.593001][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.624582][T21946] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4921'. [ 791.789279][T21965] kvm: pic: level sensitive irq not supported [ 791.796540][T21966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4920'. [ 793.563183][ T4928] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 793.650856][T21986] nvme_fabrics: missing parameter 'transport=%s' [ 793.800721][T21986] nvme_fabrics: missing parameter 'nqn=%s' [ 795.096220][T22003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4933'. [ 795.125650][T22008] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4935'. [ 795.451005][ T804] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 795.631054][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 795.969052][ T804] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 795.979768][ T804] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 795.994937][ T804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.015662][ T804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 796.025833][ T804] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.050891][ T804] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 796.063264][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.282818][ T804] usb 6-1: usb_control_msg returned -32 [ 796.307238][ T804] usbtmc 6-1:16.0: can't read capabilities [ 797.761427][T22044] binder: BINDER_SET_CONTEXT_MGR already set [ 797.769056][T22044] binder: 22043:22044 ioctl 4018620d 200000004a80 returned -16 [ 797.784513][T22044] binder: 22043:22044 ioctl c0306201 0 returned -14 [ 798.245336][ T4928] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 798.256432][T12933] usb 6-1: USB disconnect, device number 16 [ 798.371984][T22054] nvme_fabrics: missing parameter 'transport=%s' [ 798.383612][ T804] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 798.427677][T22054] nvme_fabrics: missing parameter 'nqn=%s' [ 798.469825][T22064] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4952'. [ 798.729497][ T804] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.303611][ T804] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.313104][ T804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.364489][ T804] usb 7-1: Product: syz [ 800.081644][ T804] usb 7-1: Manufacturer: syz [ 800.559453][ T804] usb 7-1: SerialNumber: syz [ 800.715340][T22086] binder: 22085:22086 ioctl c0306201 0 returned -14 [ 800.808730][T22088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4959'. [ 801.272421][T12934] usb 7-1: USB disconnect, device number 18 [ 801.427381][T22102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4964'. [ 801.447240][T22106] xt_HMARK: spi-set and port-set can't be combined [ 801.464508][T22102] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.486010][T22102] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.493106][T22102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.966074][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 802.972439][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.949482][T22127] binder: BINDER_SET_CONTEXT_MGR already set [ 803.983797][T22127] binder: 22124:22127 ioctl 4018620d 200000004a80 returned -16 [ 804.017794][T22127] binder: 22124:22127 ioctl c0306201 0 returned -14 [ 809.404130][T22177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4986'. [ 809.446179][T22177] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.465174][T22177] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.472284][T22177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.490569][T22183] fuse: Bad value for 'group_id' [ 809.498976][T22183] fuse: Bad value for 'group_id' [ 809.526024][T22182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4979'. [ 809.712798][ T4928] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 809.787293][T22190] nvme_fabrics: missing parameter 'transport=%s' [ 809.802426][T22190] nvme_fabrics: missing parameter 'nqn=%s' [ 814.071463][T22225] fuse: Bad value for 'group_id' [ 814.076459][T22225] fuse: Bad value for 'group_id' [ 814.181297][T22228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5003'. [ 814.208960][T22228] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.216865][T22228] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.224017][T22228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.696959][ T4928] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 816.874050][T22260] nvme_fabrics: missing parameter 'transport=%s' [ 818.150490][T22260] nvme_fabrics: missing parameter 'nqn=%s' [ 819.513661][T22296] xt_HMARK: spi-set and port-set can't be combined [ 822.797375][T22309] xt_HMARK: spi-set and port-set can't be combined [ 823.736813][T22332] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5034'. [ 824.147366][T12933] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 824.310971][T12933] usb 3-1: Using ep0 maxpacket: 8 [ 824.368653][T12933] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 824.482359][T12933] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 824.659522][T12933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 824.691754][T12933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 824.726641][T12933] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 824.893923][T12933] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 824.917671][T12933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.107323][T22355] xt_HMARK: spi-set and port-set can't be combined [ 826.251602][T12933] usb 3-1: USB disconnect, device number 30 [ 826.937551][T22369] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5046'. [ 826.946844][T22374] fuse: Invalid rootmode [ 826.967639][T22369] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.975627][T22369] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.982795][T22369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.688996][T22383] xt_HMARK: spi-set and port-set can't be combined [ 830.413374][T22400] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5056'. [ 831.095625][ T5722] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 831.389438][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 831.516396][ T5722] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 831.549379][ T5722] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.585291][ T5722] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 831.607518][ T5722] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 831.628052][ T5722] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.648993][ T5722] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 831.675039][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.901287][ T5722] usb 1-1: usb_control_msg returned -32 [ 831.918801][ T5722] usbtmc 1-1:16.0: can't read capabilities [ 832.316875][T22405] usbtmc 1-1:16.0: usb_bulk_msg returned -71 [ 833.159505][ T5722] usb 1-1: USB disconnect, device number 29 [ 833.621647][T22438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5065'. [ 835.251964][T22472] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5078'. [ 835.404710][T22479] binder: 22478:22479 ioctl c0306201 0 returned -14 [ 835.526522][ T5714] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 835.706488][ T5714] usb 6-1: Using ep0 maxpacket: 8 [ 835.713517][ T5714] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 835.722126][ T5714] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 835.732484][ T5714] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 835.742586][ T5714] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 835.752701][ T5714] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.768439][ T5714] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 835.777812][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.826496][ T5722] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 836.001120][ T5722] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.021992][ T5714] usb 6-1: usb_control_msg returned -32 [ 836.040551][ T5722] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 836.049673][ T5714] usbtmc 6-1:16.0: can't read capabilities [ 836.079707][ T5722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.112046][ T5722] usb 7-1: Product: syz [ 836.119440][ T5722] usb 7-1: Manufacturer: syz [ 836.128339][ T5722] usb 7-1: SerialNumber: syz [ 836.464723][T22492] usbtmc 6-1:16.0: usb_bulk_msg returned -71 [ 836.554451][ T5787] usb 7-1: USB disconnect, device number 19 [ 836.698932][T22499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5085'. [ 836.737085][T12934] usb 6-1: USB disconnect, device number 17 [ 837.855125][T22521] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5093'. [ 838.556198][ T5787] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 838.788352][ T5787] usb 1-1: Using ep0 maxpacket: 8 [ 838.811288][ T5787] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 838.830624][ T5787] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 838.850225][ T5787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 838.884313][ T5787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 838.936156][ T5787] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.977972][ T5787] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 838.988307][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.220038][ T5787] usb 1-1: usb_control_msg returned -32 [ 839.236961][ T5787] usbtmc 1-1:16.0: can't read capabilities [ 839.456104][T12934] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 839.592779][T22562] usbtmc 1-1:16.0: usb_bulk_msg returned -71 [ 839.654411][T12934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.679024][T12934] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.689324][T12934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.698376][T12934] usb 4-1: Product: syz [ 839.702593][T12934] usb 4-1: Manufacturer: syz [ 839.707402][T12934] usb 4-1: SerialNumber: syz [ 839.793683][T12934] usb 1-1: USB disconnect, device number 30 [ 840.122110][ T5787] usb 4-1: USB disconnect, device number 25 [ 841.444378][T22600] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.5120'. [ 843.059847][T22622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5127'. [ 843.092891][T22622] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.123717][T22622] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.130903][T22622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.423151][T22618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5124'. [ 844.523581][T22647] fuse: Bad value for 'fd' [ 844.743366][T22654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5139'. [ 844.757419][T22654] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.772013][T22654] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.779131][T22654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.507877][T22671] zero sized request [ 845.578370][T22674] xt_hashlimit: size too large, truncated to 1048576 [ 846.687910][T22683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5146'. [ 846.768617][T22689] xt_hashlimit: size too large, truncated to 1048576 [ 847.878534][T22703] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5152'. [ 848.165137][ T5722] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 848.335154][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 848.382781][ T5722] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 848.445308][ T5722] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 848.532443][ T5722] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 848.640449][ T5722] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 848.741143][ T5722] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.827740][ T5722] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 848.881379][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.262541][ T5722] usb 1-1: usb_control_msg returned -32 [ 849.269782][ T5722] usbtmc 1-1:16.0: can't read capabilities [ 849.654792][T22723] usbtmc 1-1:16.0: usb_bulk_msg returned -71 [ 850.069717][ T5722] usb 1-1: USB disconnect, device number 31 [ 851.464328][T22765] xt_hashlimit: size too large, truncated to 1048576 [ 852.434161][T22777] UDC core: g1: couldn't find an available UDC or it's busy [ 853.407024][T22771] binder: BINDER_SET_CONTEXT_MGR already set [ 853.648621][T22771] binder: 22770:22771 ioctl 4018620d 200000004a80 returned -16 [ 854.982756][ T5714] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 855.686921][ T5714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 855.725344][ T5714] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.741457][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.784111][ T5714] usb 4-1: Product: syz [ 855.796294][ T5714] usb 4-1: Manufacturer: syz [ 855.816506][ T5714] usb 4-1: SerialNumber: syz [ 857.517277][T22824] UDC core: g1: couldn't find an available UDC or it's busy [ 859.554075][ T5714] usb 4-1: USB disconnect, device number 26 [ 860.015523][ T5619] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 861.303549][T22865] xt_hashlimit: size too large, truncated to 1048576 [ 861.990811][ T5619] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.518829][ T5619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 862.528041][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.540192][ T5619] usb 3-1: Product: syz [ 862.544394][ T5619] usb 3-1: Manufacturer: syz [ 862.548986][ T5619] usb 3-1: SerialNumber: syz [ 862.749971][ T5619] usb 3-1: USB disconnect, device number 31 [ 862.958242][T22887] binder: 22885:22887 ioctl c0306201 0 returned -14 [ 864.395345][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.401702][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.605961][T22919] xt_hashlimit: size too large, truncated to 1048576 [ 866.383289][T12934] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 866.939317][T12934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.041908][T12934] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.055414][T12934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.064166][T12934] usb 4-1: Product: syz [ 868.068344][T12934] usb 4-1: Manufacturer: syz [ 868.072962][T12934] usb 4-1: SerialNumber: syz [ 869.285947][ T5787] usb 4-1: USB disconnect, device number 27 [ 870.049061][T22967] xt_hashlimit: size too large, truncated to 1048576 [ 870.763546][T22973] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5229'. [ 871.060664][T22984] xt_hashlimit: size too large, truncated to 1048576 [ 872.149135][T22995] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5235'. [ 873.237527][T23007] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5237'. [ 875.487616][T23032] xt_hashlimit: size too large, truncated to 1048576 [ 875.964093][T23029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5244'. [ 876.135057][T23029] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.145256][T23029] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.152396][T23029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.212053][ T804] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 882.728664][ T804] usb 4-1: device descriptor read/all, error -110 [ 882.803249][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 882.937993][T23077] binder: 23075:23077 ioctl c0306201 0 returned -14 [ 882.951658][ T804] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 883.027719][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.122281][ T804] usb 4-1: device descriptor read/64, error -32 [ 883.146162][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.209810][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.243249][ T804] usb usb4-port1: attempt power cycle [ 883.284753][ T10] usb 7-1: Product: syz [ 883.320651][ T10] usb 7-1: Manufacturer: syz [ 883.358882][ T10] usb 7-1: SerialNumber: syz [ 883.611197][ T5787] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 883.837369][ T5787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.912641][ T5787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.987756][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.039356][ T5787] usb 3-1: Product: syz [ 884.111202][ T5787] usb 3-1: Manufacturer: syz [ 884.136743][ T5787] usb 3-1: SerialNumber: syz [ 884.183954][ T24] usb 7-1: USB disconnect, device number 20 [ 884.246451][T23101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5263'. [ 885.042437][ T804] usb 3-1: USB disconnect, device number 32 [ 885.151085][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 885.384183][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.485059][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 885.572074][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.647299][ T10] usb 1-1: Product: syz [ 885.770926][ T10] usb 1-1: Manufacturer: syz [ 885.790107][ T10] usb 1-1: SerialNumber: syz [ 886.954364][ T4928] Bluetooth: hci5: command 0x0406 tx timeout [ 887.532905][ T10] usb 1-1: USB disconnect, device number 32 [ 891.591114][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 891.855761][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.888434][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 892.937261][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.982783][ T24] usb 6-1: Product: syz [ 893.007217][ T24] usb 6-1: Manufacturer: syz [ 893.030191][ T24] usb 6-1: SerialNumber: syz [ 893.259505][ T4928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 893.279521][ T4928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 893.292836][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 893.309590][ T4928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 893.330375][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 894.338773][ T5619] usb 6-1: USB disconnect, device number 18 [ 895.429924][ T5614] Bluetooth: hci2: command tx timeout [ 896.027135][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.859018][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.014485][T23221] FAULT_INJECTION: forcing a failure. [ 897.014485][T23221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.052781][T23221] CPU: 1 UID: 0 PID: 23221 Comm: syz.5.5298 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.052811][T23221] Tainted: [L]=SOFTLOCKUP [ 897.052818][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 897.052829][T23221] Call Trace: [ 897.052835][T23221] [ 897.052842][T23221] dump_stack_lvl+0x100/0x190 [ 897.052869][T23221] should_fail_ex.cold+0x5/0xa [ 897.052892][T23221] _copy_from_iter+0x1f4/0x1690 [ 897.052920][T23221] ? __asan_memset+0x23/0x50 [ 897.052939][T23221] ? __pfx__copy_from_iter+0x10/0x10 [ 897.052962][T23221] ? __pfx___alloc_skb+0x10/0x10 [ 897.052993][T23221] netlink_sendmsg+0x808/0xda0 [ 897.053017][T23221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.053037][T23221] ? selinux_socket_sendmsg+0x198/0x2f0 [ 897.053067][T23221] sock_write_iter+0x53a/0x5b0 [ 897.053093][T23221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.053111][T23221] ? __pfx_sock_write_iter+0x10/0x10 [ 897.053145][T23221] ? __pfx___file_has_perm+0x10/0x10 [ 897.053174][T23221] do_iter_readv_writev+0x6f7/0x930 [ 897.053203][T23221] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 897.053227][T23221] ? selinux_file_permission+0x8f/0x6d0 [ 897.053270][T23221] ? bpf_lsm_file_permission+0x9/0x10 [ 897.053297][T23221] ? security_file_permission+0x76/0x210 [ 897.053315][T23221] ? rw_verify_area+0xce/0x6d0 [ 897.053340][T23221] vfs_writev+0x360/0xdd0 [ 897.053370][T23221] ? __pfx_vfs_writev+0x10/0x10 [ 897.053397][T23221] ? rcu_read_lock_any_held+0x6a/0xa0 [ 897.053429][T23221] ? __fget_files+0x21f/0x3d0 [ 897.053454][T23221] ? do_writev+0x28a/0x340 [ 897.053478][T23221] do_writev+0x28a/0x340 [ 897.053504][T23221] ? __pfx_do_writev+0x10/0x10 [ 897.053536][T23221] do_syscall_64+0x115/0x870 [ 897.053556][T23221] ? clear_bhb_loop+0x40/0x90 [ 897.053578][T23221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.053597][T23221] RIP: 0033:0x7fc1c479de99 [ 897.053613][T23221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.053630][T23221] RSP: 002b:00007fc1c5732028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 897.053649][T23221] RAX: ffffffffffffffda RBX: 00007fc1c4a25fa0 RCX: 00007fc1c479de99 [ 897.053660][T23221] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 897.053671][T23221] RBP: 00007fc1c5732090 R08: 0000000000000000 R09: 0000000000000000 [ 897.053682][T23221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.053693][T23221] R13: 00007fc1c4a26038 R14: 00007fc1c4a25fa0 R15: 00007fff5b8ab368 [ 897.053718][T23221] [ 897.402233][T23225] fuse: Bad value for 'fd' [ 897.430869][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.516680][ T5614] Bluetooth: hci2: command tx timeout [ 897.605700][ T30] audit: type=1400 audit(1785192964.715:939): avc: denied { write } for pid=23230 comm="syz.5.5301" name="functions" dev="configfs" ino=9707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 897.645178][ T30] audit: type=1400 audit(1785192964.755:940): avc: denied { add_name } for pid=23230 comm="syz.5.5301" name="eem.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 897.684529][ T30] audit: type=1400 audit(1785192964.755:941): avc: denied { read } for pid=23230 comm="syz.5.5301" name="host_addr" dev="configfs" ino=234569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 897.738189][ T30] audit: type=1800 audit(1785192964.755:942): pid=23231 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5301" name="host_addr" dev="configfs" ino=234569 res=0 errno=0 [ 897.761242][ T30] audit: type=1400 audit(1785192964.755:943): avc: denied { ioctl } for pid=23230 comm="syz.5.5301" path="/171/config/usb_gadget/g1/functions/eem.usb0/host_addr" dev="configfs" ino=234569 ioctlcmd=0x534f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 897.794671][ T30] audit: type=1400 audit(1785192964.785:944): avc: denied { mounton } for pid=23230 comm="syz.5.5301" path="/171/config" dev="configfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 897.854463][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.132722][ T5614] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 898.212726][T23248] FAULT_INJECTION: forcing a failure. [ 898.212726][T23248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.227933][T23248] CPU: 1 UID: 0 PID: 23248 Comm: syz.6.5305 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.227961][T23248] Tainted: [L]=SOFTLOCKUP [ 898.227967][T23248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 898.227977][T23248] Call Trace: [ 898.227983][T23248] [ 898.227993][T23248] dump_stack_lvl+0x100/0x190 [ 898.228019][T23248] should_fail_ex.cold+0x5/0xa [ 898.228043][T23248] _copy_from_user+0x2e/0xd0 [ 898.228069][T23248] copy_msghdr_from_user+0x9f/0x4c0 [ 898.228098][T23248] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 898.228139][T23248] ___sys_sendmsg+0x106/0x1e0 [ 898.228168][T23248] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.228193][T23248] ? __lock_acquire+0x49f/0x1a40 [ 898.228216][T23248] ? get_pid_task+0x106/0x250 [ 898.228271][T23248] __sys_sendmsg+0x160/0x210 [ 898.228294][T23248] ? __pfx___sys_sendmsg+0x10/0x10 [ 898.228330][T23248] do_syscall_64+0x115/0x870 [ 898.228351][T23248] ? clear_bhb_loop+0x40/0x90 [ 898.228373][T23248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.228392][T23248] RIP: 0033:0x7f886779de99 [ 898.228407][T23248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.228424][T23248] RSP: 002b:00007f88685a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.228442][T23248] RAX: ffffffffffffffda RBX: 00007f8867a25fa0 RCX: 00007f886779de99 [ 898.228454][T23248] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 898.228465][T23248] RBP: 00007f88685a2090 R08: 0000000000000000 R09: 0000000000000000 [ 898.228476][T23248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.228486][T23248] R13: 00007f8867a26038 R14: 00007f8867a25fa0 R15: 00007ffe8fec8a48 [ 898.228509][T23248] [ 898.419842][T23251] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5304'. [ 898.503463][ T48] bridge_slave_1: left allmulticast mode [ 898.522496][ T48] bridge_slave_1: left promiscuous mode [ 898.591645][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.657215][ T48] bridge_slave_0: left allmulticast mode [ 898.700388][ T48] bridge_slave_0: left promiscuous mode [ 898.729666][ T5714] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 898.750086][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.899801][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 898.925920][ T5714] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 898.949167][ T5714] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 898.968173][ T5714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 898.991122][ T5714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 899.008196][ T5714] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.030962][ T5714] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 899.047062][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.312249][ T30] audit: type=1400 audit(1785192966.425:945): avc: denied { write } for pid=23256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 899.441585][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.468644][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.498843][ T48] bond0 (unregistering): Released all slaves [ 899.508503][ T30] audit: type=1400 audit(1785192966.625:946): avc: denied { write } for pid=23278 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 899.582235][T23169] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.590002][ T5614] Bluetooth: hci2: command tx timeout [ 899.617826][T23169] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.626688][T23169] bridge_slave_0: entered allmulticast mode [ 899.648517][T23169] bridge_slave_0: entered promiscuous mode [ 899.838179][ T30] audit: type=1326 audit(1785192966.945:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23264 comm="syz.6.5308" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f886779de99 code=0x0 [ 899.944541][T23283] ip6t_srh: unknown srh invflags 4000 [ 900.312169][T23169] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.331525][T23169] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.353390][T23169] bridge_slave_1: entered allmulticast mode [ 900.370546][T23169] bridge_slave_1: entered promiscuous mode [ 900.385241][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 900.443977][T23169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.635137][T23169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.698980][T23291] FAULT_INJECTION: forcing a failure. [ 900.698980][T23291] name failslab, interval 1, probability 10, space 0, times 100 [ 900.739183][T23291] CPU: 0 UID: 0 PID: 23291 Comm: syz.5.5314 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.739212][T23291] Tainted: [L]=SOFTLOCKUP [ 900.739218][T23291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 900.739228][T23291] Call Trace: [ 900.739237][T23291] [ 900.739244][T23291] dump_stack_lvl+0x100/0x190 [ 900.739272][T23291] should_fail_ex.cold+0x5/0xa [ 900.739295][T23291] should_failslab+0xc2/0x120 [ 900.739318][T23291] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 900.739340][T23291] ? __alloc_skb+0x5b7/0x710 [ 900.739361][T23291] ? __alloc_skb+0x140/0x710 [ 900.739388][T23291] __alloc_skb+0x140/0x710 [ 900.739406][T23291] ? __alloc_skb+0x5b7/0x710 [ 900.739424][T23291] ? __pfx___alloc_skb+0x10/0x10 [ 900.739452][T23291] netlink_alloc_large_skb+0x69/0x150 [ 900.739472][T23291] netlink_sendmsg+0x680/0xda0 [ 900.739494][T23291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.739514][T23291] ? selinux_socket_sendmsg+0x198/0x2f0 [ 900.739544][T23291] ____sys_sendmsg+0xa4d/0xbe0 [ 900.739569][T23291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.739589][T23291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 900.739625][T23291] ___sys_sendmsg+0x190/0x1e0 [ 900.739654][T23291] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.739679][T23291] ? __lock_acquire+0x49f/0x1a40 [ 900.739701][T23291] ? get_pid_task+0x106/0x250 [ 900.739761][T23291] __sys_sendmsg+0x160/0x210 [ 900.739784][T23291] ? __pfx___sys_sendmsg+0x10/0x10 [ 900.739819][T23291] do_syscall_64+0x115/0x870 [ 900.739839][T23291] ? clear_bhb_loop+0x40/0x90 [ 900.739861][T23291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.739879][T23291] RIP: 0033:0x7fc1c479de99 [ 900.739896][T23291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.739912][T23291] RSP: 002b:00007fc1c5732028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.739929][T23291] RAX: ffffffffffffffda RBX: 00007fc1c4a25fa0 RCX: 00007fc1c479de99 [ 900.739941][T23291] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 900.739951][T23291] RBP: 00007fc1c5732090 R08: 0000000000000000 R09: 0000000000000000 [ 900.739962][T23291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.739972][T23291] R13: 00007fc1c4a26038 R14: 00007fc1c4a25fa0 R15: 00007fff5b8ab368 [ 900.739994][T23291] [ 901.234324][T23169] team0: Port device team_slave_0 added [ 901.298449][ T48] hsr_slave_0: left promiscuous mode [ 901.319337][ T48] hsr_slave_1: left promiscuous mode [ 901.326517][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.336058][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.344979][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.352811][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.377927][ T48] veth1_macvtap: left promiscuous mode [ 901.390841][ T48] veth0_macvtap: left promiscuous mode [ 901.404767][ T48] veth1_vlan: left promiscuous mode [ 901.415571][ T48] veth0_vlan: left promiscuous mode [ 901.679504][ T5614] Bluetooth: hci2: command tx timeout [ 901.846061][ T30] audit: type=1400 audit(1785192968.955:948): avc: denied { write } for pid=23293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.958163][ T48] team0 (unregistering): Port device team_slave_1 removed [ 902.021032][ T48] team0 (unregistering): Port device team_slave_0 removed [ 902.503102][T23169] team0: Port device team_slave_1 added [ 902.656276][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 902.667939][T23169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.685734][T23169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.808522][T23169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.821212][T23169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.828179][T23169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.855458][T23169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.986649][T23169] hsr_slave_0: entered promiscuous mode [ 903.002378][T23169] hsr_slave_1: entered promiscuous mode [ 903.008440][T23334] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5324'. [ 903.019410][T23169] debugfs: 'hsr0' already exists in 'hsr' [ 903.025262][T23169] Cannot create hsr debugfs directory [ 903.310288][ T5714] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 903.500422][ T5714] usb 7-1: Using ep0 maxpacket: 8 [ 903.508750][ T5714] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 903.531063][ T5714] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 903.541796][ T5714] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 903.562881][ T5714] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 903.590466][ T5714] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 903.620317][ T5714] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 903.639832][ T5714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.684654][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 903.684680][ T30] audit: type=1400 audit(1785192970.795:950): avc: denied { write } for pid=23337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.866598][ T30] audit: type=1400 audit(1785192970.975:951): avc: denied { write } for pid=23357 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 904.039156][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 904.202450][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 904.220150][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 904.252147][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.302347][T23169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 904.331523][T23169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.368577][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 904.988663][T23251] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 905.001172][T23169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 905.024713][ T10] pvrusb2: ********** [ 905.032646][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 905.052275][ T5787] usb 7-1: USB disconnect, device number 21 [ 905.075230][ T10] pvrusb2: Important functionality might not be entirely working. [ 905.115747][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 905.215985][ T10] pvrusb2: ********** [ 905.226999][T23169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 905.284453][ T2363] pvrusb2: Invalid write control endpoint [ 905.291040][T23169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 905.340337][ T5787] usb 3-1: USB disconnect, device number 33 [ 905.424335][T23169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.465962][T23169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 905.512468][T23378] FAULT_INJECTION: forcing a failure. [ 905.512468][T23378] name failslab, interval 1, probability 10, space 0, times 98 [ 905.555110][T23169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.563205][T23327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5321'. [ 905.583727][T23378] CPU: 0 UID: 0 PID: 23378 Comm: syz.2.5330 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.583755][T23378] Tainted: [L]=SOFTLOCKUP [ 905.583761][T23378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 905.583771][T23378] Call Trace: [ 905.583778][T23378] [ 905.583785][T23378] dump_stack_lvl+0x100/0x190 [ 905.583812][T23378] should_fail_ex.cold+0x5/0xa [ 905.583836][T23378] should_failslab+0xc2/0x120 [ 905.583860][T23378] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 905.583883][T23378] ? __alloc_skb+0x5b7/0x710 [ 905.583903][T23378] ? __alloc_skb+0x140/0x710 [ 905.583926][T23378] __alloc_skb+0x140/0x710 [ 905.583944][T23378] ? __alloc_skb+0x5b7/0x710 [ 905.583964][T23378] ? __pfx___alloc_skb+0x10/0x10 [ 905.583991][T23378] netlink_alloc_large_skb+0x69/0x150 [ 905.584012][T23378] netlink_sendmsg+0x680/0xda0 [ 905.584034][T23378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.584055][T23378] ? selinux_socket_sendmsg+0x198/0x2f0 [ 905.584085][T23378] ____sys_sendmsg+0xa4d/0xbe0 [ 905.584111][T23378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.584131][T23378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.584170][T23378] ___sys_sendmsg+0x190/0x1e0 [ 905.584206][T23378] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.584232][T23378] ? __lock_acquire+0x49f/0x1a40 [ 905.584256][T23378] ? get_pid_task+0x106/0x250 [ 905.584312][T23378] __sys_sendmsg+0x160/0x210 [ 905.584336][T23378] ? __pfx___sys_sendmsg+0x10/0x10 [ 905.584372][T23378] do_syscall_64+0x115/0x870 [ 905.584392][T23378] ? clear_bhb_loop+0x40/0x90 [ 905.584415][T23378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.584434][T23378] RIP: 0033:0x7f826559de99 [ 905.584450][T23378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.584467][T23378] RSP: 002b:00007f8266419028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.584485][T23378] RAX: ffffffffffffffda RBX: 00007f8265825fa0 RCX: 00007f826559de99 [ 905.584497][T23378] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 905.584508][T23378] RBP: 00007f8266419090 R08: 0000000000000000 R09: 0000000000000000 [ 905.584519][T23378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.584529][T23378] R13: 00007f8265826038 R14: 00007f8265825fa0 R15: 00007fffa2580218 [ 905.584555][T23378] [ 905.606632][ T2363] pvrusb2: Invalid write control endpoint [ 905.754918][T23342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=23342 comm=syz.0.5321 [ 905.836361][T23387] FAULT_INJECTION: forcing a failure. [ 905.836361][T23387] name failslab, interval 1, probability 10, space 0, times 97 [ 905.908763][T23387] CPU: 1 UID: 0 PID: 23387 Comm: syz.2.5331 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.908793][T23387] Tainted: [L]=SOFTLOCKUP [ 905.908800][T23387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 905.908811][T23387] Call Trace: [ 905.908817][T23387] [ 905.908825][T23387] dump_stack_lvl+0x100/0x190 [ 905.908852][T23387] should_fail_ex.cold+0x5/0xa [ 905.908875][T23387] should_failslab+0xc2/0x120 [ 905.908900][T23387] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 905.908921][T23387] ? __alloc_skb+0x5b7/0x710 [ 905.908941][T23387] ? __alloc_skb+0x140/0x710 [ 905.908964][T23387] __alloc_skb+0x140/0x710 [ 905.908983][T23387] ? __alloc_skb+0x5b7/0x710 [ 905.909001][T23387] ? __pfx___alloc_skb+0x10/0x10 [ 905.909028][T23387] netlink_alloc_large_skb+0x69/0x150 [ 905.909048][T23387] netlink_sendmsg+0x680/0xda0 [ 905.909069][T23387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.909089][T23387] ? selinux_socket_sendmsg+0x198/0x2f0 [ 905.909119][T23387] ____sys_sendmsg+0xa4d/0xbe0 [ 905.909142][T23387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.909161][T23387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.909203][T23387] ___sys_sendmsg+0x190/0x1e0 [ 905.909231][T23387] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.909255][T23387] ? __lock_acquire+0x49f/0x1a40 [ 905.909276][T23387] ? get_pid_task+0x106/0x250 [ 905.909328][T23387] __sys_sendmsg+0x160/0x210 [ 905.909351][T23387] ? __pfx___sys_sendmsg+0x10/0x10 [ 905.909385][T23387] do_syscall_64+0x115/0x870 [ 905.909404][T23387] ? clear_bhb_loop+0x40/0x90 [ 905.909424][T23387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.909442][T23387] RIP: 0033:0x7f826559de99 [ 905.909458][T23387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.909474][T23387] RSP: 002b:00007f8266419028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.909491][T23387] RAX: ffffffffffffffda RBX: 00007f8265825fa0 RCX: 00007f826559de99 [ 905.909501][T23387] RDX: 000000000000c0d4 RSI: 0000200000000000 RDI: 0000000000000003 [ 905.909510][T23387] RBP: 00007f8266419090 R08: 0000000000000000 R09: 0000000000000000 [ 905.909520][T23387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.909530][T23387] R13: 00007f8265826038 R14: 00007f8265825fa0 R15: 00007fffa2580218 [ 905.909552][T23387] [ 906.160888][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 906.173694][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 906.181342][T23169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.185263][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 906.195285][T23169] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.209096][ T2363] pvrusb2: Device being rendered inoperable [ 906.227570][T18349] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.234766][T18349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.246797][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 906.274290][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 906.306259][T18349] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.313465][T18349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.417803][ T2363] pvrusb2: Attached sub-driver cx25840 [ 906.425895][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 906.437167][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 907.079438][ T30] audit: type=1400 audit(1785192974.186:952): avc: denied { write } for pid=23364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 907.200317][ T5722] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 907.337087][ T30] audit: type=1400 audit(1785192974.446:953): avc: denied { write } for pid=23409 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 907.392132][ T5722] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.410853][ T9] usb 1-1: USB disconnect, device number 33 [ 907.424900][ T5722] usb 7-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 907.464470][ T5722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.545499][ T5722] usb 7-1: config 0 descriptor?? [ 907.824521][T23428] FAULT_INJECTION: forcing a failure. [ 907.824521][T23428] name failslab, interval 1, probability 10, space 0, times 96 [ 907.893282][T23428] CPU: 1 UID: 0 PID: 23428 Comm: syz.2.5339 Tainted: G L syzkaller #0 PREEMPT(full) [ 907.893312][T23428] Tainted: [L]=SOFTLOCKUP [ 907.893319][T23428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 907.893329][T23428] Call Trace: [ 907.893335][T23428] [ 907.893342][T23428] dump_stack_lvl+0x100/0x190 [ 907.893369][T23428] should_fail_ex.cold+0x5/0xa [ 907.893395][T23428] should_failslab+0xc2/0x120 [ 907.893420][T23428] __kmalloc_noprof+0xfc/0x820 [ 907.893440][T23428] ? __pfx_dynamic_dname+0x10/0x10 [ 907.893467][T23428] ? tomoyo_encode2+0xfb/0x3c0 [ 907.893490][T23428] tomoyo_encode2+0xfb/0x3c0 [ 907.893511][T23428] tomoyo_encode+0x29/0x50 [ 907.893527][T23428] tomoyo_realpath_from_path+0x18c/0x690 [ 907.893552][T23428] tomoyo_path_number_perm+0x23c/0x580 [ 907.893576][T23428] ? tomoyo_path_number_perm+0x22e/0x580 [ 907.893602][T23428] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 907.893653][T23428] ? find_held_lock+0x2b/0x80 [ 907.893685][T23428] ? __fget_files+0x215/0x3d0 [ 907.893703][T23428] ? hook_file_ioctl_common+0x140/0x440 [ 907.893723][T23428] ? __fget_files+0x215/0x3d0 [ 907.893745][T23428] ? __fget_files+0x21f/0x3d0 [ 907.893768][T23428] security_file_ioctl+0xd3/0x230 [ 907.893795][T23428] __x64_sys_ioctl+0xb7/0x210 [ 907.893823][T23428] do_syscall_64+0x115/0x870 [ 907.893842][T23428] ? clear_bhb_loop+0x40/0x90 [ 907.893863][T23428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.893880][T23428] RIP: 0033:0x7f826559de99 [ 907.893895][T23428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.893911][T23428] RSP: 002b:00007f8266419028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.893929][T23428] RAX: ffffffffffffffda RBX: 00007f8265825fa0 RCX: 00007f826559de99 [ 907.893941][T23428] RDX: 0000200000000180 RSI: 0000000000008982 RDI: 0000000000000003 [ 907.893952][T23428] RBP: 00007f8266419090 R08: 0000000000000000 R09: 0000000000000000 [ 907.893963][T23428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.893973][T23428] R13: 00007f8265826038 R14: 00007f8265825fa0 R15: 00007fffa2580218 [ 907.893997][T23428] [ 907.894029][T23428] ERROR: Out of memory at tomoyo_realpath_from_path. [ 908.087074][T23169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.128652][ T5722] usb 7-1: string descriptor 0 read error: -71 [ 908.136004][ T5722] cypress_m8 7-1:0.0: DeLorme Earthmate USB converter detected [ 908.175404][ T5722] earthmate ttyUSB0: required endpoint is missing [ 908.223967][ T5722] usb 7-1: USB disconnect, device number 22 [ 908.263826][ T5722] cypress_m8 7-1:0.0: device disconnected [ 908.325794][T23169] veth0_vlan: entered promiscuous mode [ 908.363955][T23169] veth1_vlan: entered promiscuous mode [ 908.449340][T23169] veth0_macvtap: entered promiscuous mode [ 908.545387][T23169] veth1_macvtap: entered promiscuous mode [ 908.618172][ T30] audit: type=1400 audit(1785192975.726:954): avc: denied { write } for pid=23425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 908.667422][T23169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.714705][T23169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.764319][T18349] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.815715][T18349] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.842012][ T30] audit: type=1400 audit(1785192975.956:955): avc: denied { mounton } for pid=23444 comm="syz.6.5341" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 908.867319][T23445] tmpfs: Bad value for 'mpol' [ 908.883472][T18349] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.951198][T18349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.989793][ T30] audit: type=1400 audit(1785192976.096:956): avc: denied { write } for pid=23447 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.033696][T23454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5343'. [ 909.207989][T23072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.230368][T23072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.290908][T18349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.318744][ T5722] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 909.318846][T18349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.443429][T23468] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 909.488436][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 909.507468][ T5722] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 909.532214][ T5722] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 909.570301][T23473] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5282'. [ 909.579376][ T5722] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 909.615586][ T5722] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 909.645585][ T5722] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.668321][ T5722] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 909.692410][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.807686][ T30] audit: type=1400 audit(1785192976.916:957): avc: denied { write } for pid=23458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.865910][ T30] audit: type=1400 audit(1785192976.976:958): avc: denied { read } for pid=23475 comm="syz.6.5347" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 909.898504][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 909.907774][ T30] audit: type=1400 audit(1785192976.976:959): avc: denied { open } for pid=23475 comm="syz.6.5347" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 909.983943][ T30] audit: type=1400 audit(1785192977.096:960): avc: denied { write } for pid=23481 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.060290][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 910.074239][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 910.091266][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 910.115034][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 910.138131][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 910.164457][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 910.188340][ T5722] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 910.199113][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 910.221144][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.327389][ T30] audit: type=1400 audit(1785192977.436:961): avc: denied { write } for pid=23484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.381342][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.394987][ T5722] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 910.413065][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.427821][ T5722] usb 6-1: config 0 descriptor?? [ 910.436368][ T30] audit: type=1400 audit(1785192977.546:962): avc: denied { write } for pid=23498 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 911.110539][ T5722] usbhid 6-1:0.0: can't add hid device: -71 [ 911.138185][ T5722] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 911.157854][ T5722] usb 6-1: USB disconnect, device number 19 [ 911.414692][T23516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5351'. [ 911.838103][ T5722] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 912.038153][ T804] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 912.105191][ T30] audit: type=1400 audit(1785192979.216:963): avc: denied { setopt } for pid=23524 comm="syz.5.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 912.126485][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5355'. [ 912.143298][T23525] syz.5.5355(23525): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 912.191245][ T5722] usb 6-1: device not accepting address 20, error -71 [ 912.220087][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 912.228274][ T804] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 912.231121][T23527] FAULT_INJECTION: forcing a failure. [ 912.231121][T23527] name failslab, interval 1, probability 10, space 0, times 95 [ 912.249391][T23527] CPU: 0 UID: 0 PID: 23527 Comm: syz.5.5356 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.249421][T23527] Tainted: [L]=SOFTLOCKUP [ 912.249428][T23527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 912.249437][T23527] Call Trace: [ 912.249444][T23527] [ 912.249450][T23527] dump_stack_lvl+0x100/0x190 [ 912.249476][T23527] should_fail_ex.cold+0x5/0xa [ 912.249498][T23527] should_failslab+0xc2/0x120 [ 912.249521][T23527] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 912.249543][T23527] ? __alloc_skb+0x5b7/0x710 [ 912.249562][T23527] ? __alloc_skb+0x140/0x710 [ 912.249585][T23527] __alloc_skb+0x140/0x710 [ 912.249603][T23527] ? __alloc_skb+0x5b7/0x710 [ 912.249621][T23527] ? __pfx___alloc_skb+0x10/0x10 [ 912.249646][T23527] netlink_alloc_large_skb+0x69/0x150 [ 912.249667][T23527] netlink_sendmsg+0x680/0xda0 [ 912.249694][T23527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.249714][T23527] ? selinux_socket_sendmsg+0x198/0x2f0 [ 912.249744][T23527] ____sys_sendmsg+0xa4d/0xbe0 [ 912.249769][T23527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.249789][T23527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.249828][T23527] ___sys_sendmsg+0x190/0x1e0 [ 912.249858][T23527] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.249883][T23527] ? __lock_acquire+0x49f/0x1a40 [ 912.249905][T23527] ? get_pid_task+0x106/0x250 [ 912.249959][T23527] __sys_sendmsg+0x160/0x210 [ 912.249982][T23527] ? __pfx___sys_sendmsg+0x10/0x10 [ 912.250017][T23527] do_syscall_64+0x115/0x870 [ 912.250036][T23527] ? clear_bhb_loop+0x40/0x90 [ 912.250058][T23527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.250076][T23527] RIP: 0033:0x7fc1c479de99 [ 912.250092][T23527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.250107][T23527] RSP: 002b:00007fc1c5732028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.250124][T23527] RAX: ffffffffffffffda RBX: 00007fc1c4a25fa0 RCX: 00007fc1c479de99 [ 912.250136][T23527] RDX: 0000000000004010 RSI: 0000200000000700 RDI: 0000000000000003 [ 912.250146][T23527] RBP: 00007fc1c5732090 R08: 0000000000000000 R09: 0000000000000000 [ 912.250156][T23527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.250166][T23527] R13: 00007fc1c4a26038 R14: 00007fc1c4a25fa0 R15: 00007fff5b8ab368 [ 912.250189][T23527] [ 912.252558][ T804] usb 3-1: config 0 has no interface number 0 [ 912.331868][T23531] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 912.361540][ T804] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.516380][ T804] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 912.525796][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.535397][ T804] usb 3-1: Product: syz [ 912.539646][ T804] usb 3-1: Manufacturer: syz [ 912.544237][ T804] usb 3-1: SerialNumber: syz [ 912.574398][ T804] usb 3-1: config 0 descriptor?? [ 912.592859][ T804] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 912.613057][ T804] em28xx 3-1:0.132: Video interface 132 found: [ 912.994698][ T804] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 913.754082][ T30] audit: type=1400 audit(1785192980.866:964): avc: denied { write } for pid=23520 comm="syz.2.5353" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 915.200813][T23454] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 915.215547][ T804] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 915.249848][ T804] em28xx 3-1:0.132: board has no eeprom [ 915.253930][T23521] em28xx 3-1:0.132: failed to trigger read from i2c address 0xf2 (error=-5) [ 915.312611][ T804] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 915.325473][ T804] em28xx 3-1:0.132: analog set to bulk mode. [ 915.331601][ T5722] em28xx 3-1:0.132: Registering V4L2 extension [ 915.350918][ T804] usb 3-1: USB disconnect, device number 34 [ 915.364659][ T804] em28xx 3-1:0.132: Disconnecting em28xx [ 915.389161][ T24] usb 4-1: USB disconnect, device number 31 [ 915.446612][ T5714] usb 1-1: USB disconnect, device number 34 [ 915.622874][ T5722] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 915.655476][ T5722] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 915.684319][ T5722] em28xx 3-1:0.132: No AC97 audio processor [ 915.734715][ T5722] usb 3-1: Decoder not found [ 915.751196][ T5722] em28xx 3-1:0.132: failed to create media graph [ 915.772586][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 915.772597][ T30] audit: type=1400 audit(1785192982.887:967): avc: denied { accept } for pid=23568 comm="syz.2.5369" lport=55401 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 915.890949][ T5722] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 915.904658][ T5722] em28xx 3-1:0.132: Remote control support is not available for this card. [ 915.909671][T23571] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 915.913297][ T804] em28xx 3-1:0.132: Closing input extension [ 915.957748][ T30] audit: type=1400 audit(1785192982.917:968): avc: denied { write } for pid=23568 comm="syz.2.5369" lport=55401 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 916.539729][ T30] audit: type=1400 audit(1785192983.627:969): avc: denied { connect } for pid=23561 comm="syz.0.5367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 920.716456][ T804] em28xx 3-1:0.132: Freeing device [ 1051.323044][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1051.330014][ C0] rcu: 1-...!: (1 GPs behind) idle=c314/1/0x4000000000000000 softirq=151827/151829 fqs=0 [ 1051.340736][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19495/1:b..l P23544/1:b..l [ 1051.349951][ C0] rcu: (detected by 0, t=10502 jiffies, g=150865, q=1172 ncpus=2) [ 1051.357828][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1051.357853][ C1] NMI backtrace for cpu 1 [ 1051.357867][ C1] CPU: 1 UID: 0 PID: 18349 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 1051.357887][ C1] Tainted: [L]=SOFTLOCKUP [ 1051.357892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1051.357902][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1051.357923][ C1] RIP: 0010:__lock_acquire+0x1c8/0x1a40 [ 1051.357942][ C1] Code: 09 f8 09 d0 8b 94 24 c0 00 00 00 44 09 c8 c1 e2 14 09 d0 8b 94 24 b0 00 00 00 c1 e2 15 09 d0 8b 53 20 81 e2 ff 1f 00 00 09 d0 <89> 43 20 8b 84 24 b8 00 00 00 89 43 24 4c 89 e0 25 ff 1f 00 00 48 [ 1051.357956][ C1] RSP: 0018:ffffc90000a08d48 EFLAGS: 00000006 [ 1051.357967][ C1] RAX: 00000000000c4071 RBX: ffff888076e38c68 RCX: 0000000000000000 [ 1051.357977][ C1] RDX: 0000000000000071 RSI: ffff888076e38c40 RDI: ffff8880b8528418 [ 1051.357987][ C1] RBP: ffff888076e38000 R08: 0000000000000001 R09: 0000000000080000 [ 1051.357997][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000071 [ 1051.358006][ C1] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000 [ 1051.358015][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 1051.358030][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1051.358040][ C1] CR2: 0000200000030000 CR3: 000000000e994000 CR4: 00000000003526f0 [ 1051.358050][ C1] Call Trace: [ 1051.358055][ C1] [ 1051.358064][ C1] ? find_held_lock+0x2b/0x80 [ 1051.358084][ C1] ? advance_sched+0x76b/0xd20 [ 1051.358102][ C1] ? advance_sched+0x76b/0xd20 [ 1051.358119][ C1] lock_acquire+0x1b9/0x370 [ 1051.358136][ C1] ? __hrtimer_run_queues+0x1b7/0x9c0 [ 1051.358158][ C1] _raw_spin_lock_irq+0x36/0x50 [ 1051.358180][ C1] ? __hrtimer_run_queues+0x1b7/0x9c0 [ 1051.358199][ C1] __hrtimer_run_queues+0x1b7/0x9c0 [ 1051.358221][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1051.358239][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1051.358261][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1051.358277][ C1] [ 1051.358281][ C1] [ 1051.358287][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1051.358303][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 1051.358320][ C1] Code: 05 fb 4d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 81 3c 0f 0f 82 ac 02 00 00 8b 35 4e b5 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 4d 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 1051.358333][ C1] RSP: 0018:ffffc900043af0b0 EFLAGS: 00000206 [ 1051.358345][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1051.358355][ C1] RDX: 0000000000000000 RSI: ffffffff8e17fc5f RDI: ffffffff8c401580 [ 1051.358365][ C1] RBP: ffffffff8ebe8180 R08: 000000004154fefc R09: 0000000000000007 [ 1051.358374][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1051.358383][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1051.358397][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1051.358411][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1051.358426][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1051.358443][ C1] unwind_next_frame+0xd1/0x2090 [ 1051.358456][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1051.358470][ C1] ? refill_objects+0xe3/0x410 [ 1051.358486][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1051.358501][ C1] arch_stack_walk+0x94/0xf0 [ 1051.358523][ C1] ? refill_objects+0xe3/0x410 [ 1051.358538][ C1] stack_trace_save+0x8e/0xc0 [ 1051.358552][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1051.358569][ C1] save_stack+0x162/0x1e0 [ 1051.358585][ C1] ? __pfx_save_stack+0x10/0x10 [ 1051.358600][ C1] ? post_alloc_hook+0xfd/0x120 [ 1051.358620][ C1] ? get_page_from_freelist+0xf48/0x3530 [ 1051.358639][ C1] ? __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1051.358654][ C1] ? new_slab+0xa2/0x640 [ 1051.358666][ C1] ? refill_objects+0xe3/0x410 [ 1051.358681][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1051.358699][ C1] __set_page_owner+0x8c/0x540 [ 1051.358717][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1051.358734][ C1] ? bad_range+0x257/0x3f0 [ 1051.358750][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1051.358764][ C1] ? get_page_from_freelist+0xf25/0x3530 [ 1051.358780][ C1] post_alloc_hook+0xfd/0x120 [ 1051.358801][ C1] get_page_from_freelist+0xf48/0x3530 [ 1051.358817][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1051.358836][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1051.358852][ C1] ? prepare_alloc_pages+0x1f0/0x5f0 [ 1051.358871][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1051.358888][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1051.358904][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1051.358921][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1051.358941][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1051.358958][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1051.358979][ C1] ? mark_held_locks+0x40/0x70 [ 1051.358996][ C1] ? __refill_objects_node+0x369/0xaa0 [ 1051.359009][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1051.359028][ C1] ? __kmalloc_node_track_caller_noprof+0x17c/0x830 [ 1051.359049][ C1] new_slab+0xa2/0x640 [ 1051.359062][ C1] refill_objects+0xe3/0x410 [ 1051.359078][ C1] __pcs_replace_empty_main+0x376/0x680 [ 1051.359101][ C1] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 1051.359118][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1051.359135][ C1] ? __alloc_skb+0x185/0x710 [ 1051.359152][ C1] kmalloc_reserve+0xe8/0x350 [ 1051.359173][ C1] __alloc_skb+0x185/0x710 [ 1051.359187][ C1] ? __alloc_skb+0x5b7/0x710 [ 1051.359201][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1051.359216][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1051.359234][ C1] ? __pfx___might_resched+0x10/0x10 [ 1051.359252][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 1051.359272][ C1] process_one_work+0xa23/0x1940 [ 1051.359290][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1051.359307][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1051.359325][ C1] worker_thread+0x5ef/0xe50 [ 1051.359341][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1051.359356][ C1] ? kthread+0x13a/0x450 [ 1051.359369][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1051.359384][ C1] kthread+0x370/0x450 [ 1051.359397][ C1] ? __pfx_kthread+0x10/0x10 [ 1051.359410][ C1] ret_from_fork+0x72b/0xd50 [ 1051.359428][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1051.359447][ C1] ? __switch_to+0x800/0x10f0 [ 1051.359462][ C1] ? __pfx_kthread+0x10/0x10 [ 1051.359475][ C1] ret_from_fork_asm+0x1a/0x30 [ 1051.359498][ C1] [ 1051.359848][ C0] task:syz.6.5360 state:R running task stack:23448 pid:23544 tgid:23544 ppid:19473 task_flags:0x40064c flags:0x00080003 [ 1051.990306][ C0] Call Trace: [ 1051.993569][ C0] [ 1051.996489][ C0] __schedule+0x125c/0x6730 [ 1052.000999][ C0] ? __pfx___schedule+0x10/0x10 [ 1052.005839][ C0] ? rcu_is_watching+0x12/0xc0 [ 1052.010602][ C0] preempt_schedule_irq+0x50/0x90 [ 1052.015614][ C0] irqentry_exit+0x205/0xa00 [ 1052.020199][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1052.026170][ C0] RIP: 0010:__orc_find+0xa2/0xf0 [ 1052.031093][ C0] Code: 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f <48> 8d 04 50 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 f5 05 [ 1052.050688][ C0] RSP: 0018:ffffc9000406eef0 EFLAGS: 00000206 [ 1052.056740][ C0] RAX: ffffffff91d5db5e RBX: ffffffff9146fd7c RCX: dffffc0000000000 [ 1052.064697][ C0] RDX: 000000000000001b RSI: 0000000000000000 RDI: ffffffff9146fd58 [ 1052.072654][ C0] RBP: ffffffff9146fd80 R08: ffffffff91d5db9a R09: 0000000000000007 [ 1052.080611][ C0] R10: 0000000000000200 R11: 0000000000019693 R12: ffffffff9146fd7c [ 1052.088569][ C0] R13: ffffffff829693d6 R14: ffffffff9146fd58 R15: 0000000000000009 [ 1052.096529][ C0] ? dput.part.0+0xd6/0x240 [ 1052.101039][ C0] ? dput.part.0+0xd6/0x240 [ 1052.105535][ C0] unwind_next_frame+0x2ec/0x2090 [ 1052.110548][ C0] ? dput.part.0+0xd7/0x240 [ 1052.115049][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1052.121192][ C0] arch_stack_walk+0x94/0xf0 [ 1052.125784][ C0] ? dput.part.0+0xd7/0x240 [ 1052.130284][ C0] stack_trace_save+0x8e/0xc0 [ 1052.134949][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1052.140317][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1052.145245][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1052.150431][ C0] save_stack+0x162/0x1e0 [ 1052.154751][ C0] ? __pfx_save_stack+0x10/0x10 [ 1052.159592][ C0] ? free_unref_folios+0xa44/0x1710 [ 1052.164777][ C0] ? folios_put_refs+0x585/0xaa0 [ 1052.169710][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 1052.174807][ C0] ? shmem_evict_inode+0x3a5/0xbe0 [ 1052.179905][ C0] ? evict+0x3c2/0xad0 [ 1052.183964][ C0] ? iput.part.0+0x989/0x1050 [ 1052.188629][ C0] ? iput+0x35/0x40 [ 1052.192428][ C0] ? dentry_unlink_inode+0x284/0x470 [ 1052.197702][ C0] ? dentry_kill+0x25d/0xc20 [ 1052.202283][ C0] ? dput.part.0+0xd7/0x240 [ 1052.206782][ C0] ? page_ext_put+0x3e/0xd0 [ 1052.211280][ C0] __reset_page_owner+0x84/0x190 [ 1052.216212][ C0] free_unref_folios+0xa44/0x1710 [ 1052.221238][ C0] folios_put_refs+0x585/0xaa0 [ 1052.226003][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1052.231288][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1052.237609][ C0] shmem_undo_range+0x5e5/0x1570 [ 1052.242541][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1052.247926][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1052.252876][ C0] ? find_held_lock+0x2b/0x80 [ 1052.257549][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1052.262738][ C0] ? percpu_counter_add_batch+0xb9/0x230 [ 1052.268370][ C0] shmem_evict_inode+0x3a5/0xbe0 [ 1052.273301][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 1052.279018][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1052.284468][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1052.290532][ C0] ? find_held_lock+0x2b/0x80 [ 1052.295204][ C0] ? evict+0x37e/0xad0 [ 1052.299263][ C0] ? evict+0x37e/0xad0 [ 1052.303329][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1052.308777][ C0] evict+0x3c2/0xad0 [ 1052.312669][ C0] ? __pfx_evict+0x10/0x10 [ 1052.317080][ C0] ? iput.part.0+0x981/0x1050 [ 1052.321760][ C0] iput.part.0+0x989/0x1050 [ 1052.326261][ C0] iput+0x35/0x40 [ 1052.329888][ C0] dentry_unlink_inode+0x284/0x470 [ 1052.334993][ C0] dentry_kill+0x25d/0xc20 [ 1052.339405][ C0] dput.part.0+0xd7/0x240 [ 1052.343732][ C0] dput+0x1f/0x30 [ 1052.347360][ C0] __fput+0x519/0xb50 [ 1052.351338][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1052.356527][ C0] task_work_run+0x150/0x240 [ 1052.361109][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1052.366215][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1052.371412][ C0] do_exit+0x951/0x2ae0 [ 1052.375571][ C0] ? __pfx_do_exit+0x10/0x10 [ 1052.380154][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1052.386139][ C0] do_group_exit+0xd5/0x2a0 [ 1052.390631][ C0] get_signal+0x1ec7/0x21e0 [ 1052.395142][ C0] ? __pfx_get_signal+0x10/0x10 [ 1052.399995][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1052.405532][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1052.411690][ C0] irqentry_exit+0x402/0xa00 [ 1052.416275][ C0] asm_exc_page_fault+0x26/0x30 [ 1052.421114][ C0] RIP: 0033:0x7f886779dea1 [ 1052.425518][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1052.431573][ C0] RAX: 0000000000000000 RBX: 00007f8867a26090 RCX: 00007f886779de99 [ 1052.439528][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1052.447485][ C0] RBP: 00007f8867833eaf R08: 0000000000000000 R09: 0000000000000000 [ 1052.455440][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1052.463395][ C0] R13: 00007f8867a26128 R14: 00007f8867a26090 R15: 00007ffe8fec8a48 [ 1052.471365][ C0] [ 1052.474369][ C0] task:syz-executor state:R running task stack:25176 pid:19495 tgid:19495 ppid:5594 task_flags:0x40050c flags:0x00080002 [ 1052.487844][ C0] Call Trace: [ 1052.491106][ C0] [ 1052.494029][ C0] __schedule+0x125c/0x6730 [ 1052.498534][ C0] ? __pfx___schedule+0x10/0x10 [ 1052.503377][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1052.508740][ C0] preempt_schedule_common+0x42/0xc0 [ 1052.514013][ C0] preempt_schedule_thunk+0x16/0x40 [ 1052.519203][ C0] _raw_spin_unlock+0x3e/0x50 [ 1052.523875][ C0] __zap_vma_range+0x16f7/0x4a30 [ 1052.528826][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1052.534107][ C0] ? find_held_lock+0x2b/0x80 [ 1052.538791][ C0] unmap_vmas+0x299/0x5f0 [ 1052.543117][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1052.547968][ C0] ? mas_next_slot+0x10a3/0x1960 [ 1052.552911][ C0] exit_mmap+0x1ef/0xa00 [ 1052.557152][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1052.561944][ C0] __mmput+0x12a/0x410 [ 1052.566006][ C0] mmput+0x67/0x80 [ 1052.569722][ C0] do_exit+0x8b1/0x2ae0 [ 1052.573878][ C0] ? __pfx_do_exit+0x10/0x10 [ 1052.578463][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1052.583483][ C0] ? find_held_lock+0x2b/0x80 [ 1052.588154][ C0] ? get_signal+0x7e0/0x21e0 [ 1052.592738][ C0] do_group_exit+0xd5/0x2a0 [ 1052.597233][ C0] get_signal+0x1ec7/0x21e0 [ 1052.601728][ C0] ? kernel_wait4+0x1d6/0x280 [ 1052.606395][ C0] ? __pfx_kernel_wait4+0x10/0x10 [ 1052.611411][ C0] ? __pfx_child_wait_callback+0x10/0x10 [ 1052.617041][ C0] ? __pfx_get_signal+0x10/0x10 [ 1052.621891][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1052.627425][ C0] ? __pfx___do_sys_wait4+0x10/0x10 [ 1052.632613][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1052.638767][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 1052.644132][ C0] ? rcu_is_watching+0x12/0xc0 [ 1052.648893][ C0] do_syscall_64+0x666/0x870 [ 1052.653475][ C0] ? clear_bhb_loop+0x40/0x90 [ 1052.658144][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.664023][ C0] RIP: 0033:0x7f38b2959017 [ 1052.668426][ C0] RSP: 002b:00007ffc0737a4b0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1052.676824][ C0] RAX: fffffffffffffe00 RBX: 000055558ae97500 RCX: 00007f38b2959017 [ 1052.684780][ C0] RDX: 0000000040000000 RSI: 00007ffc0737a50c RDI: ffffffffffffffff [ 1052.692739][ C0] RBP: 00007ffc0737a50c R08: 0000000000000000 R09: 0000000000000000 [ 1052.700695][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1052.708651][ C0] R13: 0000000000000003 R14: 00007ffc0737a768 R15: 0000000000000000 [ 1052.716619][ C0] [ 1052.719626][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g150865 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1052.730888][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1052.740840][ C0] rcu: RCU grace-period kthread stack dump: [ 1052.746709][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1052.760183][ C0] Call Trace: [ 1052.763445][ C0] [ 1052.766368][ C0] __schedule+0x125c/0x6730 [ 1052.770872][ C0] ? __pfx___schedule+0x10/0x10 [ 1052.775707][ C0] ? find_held_lock+0x2b/0x80 [ 1052.780378][ C0] ? schedule+0x225/0x2c0 [ 1052.784699][ C0] schedule+0xdd/0x2c0 [ 1052.788754][ C0] schedule_timeout+0x127/0x280 [ 1052.793602][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1052.798971][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1052.804249][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1052.810042][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1052.815495][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1052.820253][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1052.825529][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1052.830461][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1052.835649][ C0] ? rcu_is_watching+0x12/0xc0 [ 1052.840410][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1052.846206][ C0] rcu_gp_kthread+0x179/0x230 [ 1052.850872][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1052.856061][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1052.861857][ C0] ? __kthread_parkme+0x18c/0x230 [ 1052.866877][ C0] ? kthread+0x13a/0x450 [ 1052.871105][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1052.876296][ C0] kthread+0x370/0x450 [ 1052.880353][ C0] ? __pfx_kthread+0x10/0x10 [ 1052.884931][ C0] ret_from_fork+0x72b/0xd50 [ 1052.889515][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1052.894619][ C0] ? __switch_to+0x800/0x10f0 [ 1052.899285][ C0] ? __pfx_kthread+0x10/0x10 [ 1052.903866][ C0] ret_from_fork_asm+0x1a/0x30 [ 1052.908636][ C0] [ 1052.911642][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1052.917952][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.928696][ C0] Tainted: [L]=SOFTLOCKUP [ 1052.933005][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1052.943046][ C0] Workqueue: events fb_deferred_io_work [ 1052.948583][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x70 [ 1052.954725][ C0] Code: 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 e5 df 59 12 48 8b 34 24 65 48 8b 15 c1 df 59 12 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc [ 1052.974318][ C0] RSP: 0018:ffffc900000f7588 EFLAGS: 00000202 [ 1052.980370][ C0] RAX: 0000000000000003 RBX: 0000000000000001 RCX: ffffffff81fdc702 [ 1052.988328][ C0] RDX: ffff88801eaa2540 RSI: ffffffff81fdc6dc RDI: ffff88801eaa2540 [ 1052.996285][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 1053.004242][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1053.012196][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 1053.020155][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1053.029073][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1053.035643][ C0] CR2: 0000200000031000 CR3: 0000000032753000 CR4: 00000000003526f0 [ 1053.043604][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1053.051558][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1053.059514][ C0] Call Trace: [ 1053.062777][ C0] [ 1053.065692][ C0] smp_call_function_many_cond+0x58c/0x1870 [ 1053.071579][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1053.076940][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1053.082142][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1053.088466][ C0] ? lock_acquire+0x1b9/0x370 [ 1053.093136][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1053.098327][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1053.103691][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1053.108793][ C0] flush_tlb_mm_range+0x45f/0x16f0 [ 1053.113896][ C0] ? page_table_check_clear+0x480/0x8f0 [ 1053.119435][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 1053.125404][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1053.130944][ C0] ? find_held_lock+0x2b/0x80 [ 1053.135619][ C0] ptep_clear_flush+0x148/0x170 [ 1053.140462][ C0] page_vma_mkclean_one.constprop.0+0x3a2/0x7b0 [ 1053.146702][ C0] ? __pfx_page_vma_mkclean_one.constprop.0+0x10/0x10 [ 1053.153457][ C0] ? kfree_skbmem+0x19a/0x210 [ 1053.158144][ C0] mapping_wrprotect_range_one+0x130/0x1d0 [ 1053.163945][ C0] ? __pfx_mapping_wrprotect_range_one+0x10/0x10 [ 1053.170272][ C0] ? __pfx___might_resched+0x10/0x10 [ 1053.175552][ C0] __rmap_walk_file+0x383/0x680 [ 1053.180404][ C0] mapping_wrprotect_range+0x109/0x170 [ 1053.185854][ C0] ? __pfx_mapping_wrprotect_range+0x10/0x10 [ 1053.191835][ C0] ? __pfx_mapping_wrprotect_range_one+0x10/0x10 [ 1053.198158][ C0] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 1053.203788][ C0] fb_deferred_io_work+0x159/0x4a0 [ 1053.208892][ C0] process_one_work+0xa23/0x1940 [ 1053.213831][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1053.219196][ C0] ? __pfx_fb_deferred_io_work+0x10/0x10 [ 1053.224820][ C0] worker_thread+0x5ef/0xe50 [ 1053.229410][ C0] ? kthread+0x13a/0x450 [ 1053.233638][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1053.238738][ C0] kthread+0x370/0x450 [ 1053.242793][ C0] ? __pfx_kthread+0x10/0x10 [ 1053.247369][ C0] ret_from_fork+0x72b/0xd50 [ 1053.251955][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.257059][ C0] ? __switch_to+0x800/0x10f0 [ 1053.261725][ C0] ? __pfx_kthread+0x10/0x10 [ 1053.266303][ C0] ret_from_fork_asm+0x1a/0x30 [ 1053.271073][ C0]