last executing test programs:

11.191756919s ago: executing program 2 (id=3378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40002, 0x2, {0xd, @sliced={0x1, [0x7fff, 0x4bd, 0x8, 0x100, 0x6, 0x8, 0x8, 0x5, 0x8, 0x9, 0x5, 0x8, 0xad8f, 0x8, 0x1, 0xfff, 0x40, 0xff, 0x1ff, 0x1, 0x8, 0x40, 0x8, 0x0, 0x2, 0x5, 0x3, 0x0, 0x8004, 0xe, 0x0, 0x4, 0x4, 0xfc00, 0x2, 0xfff9, 0x5, 0xfff, 0x4f25, 0x2d9, 0x3, 0x9, 0x4, 0x7, 0x5, 0x7ff, 0xb, 0x8000], 0x1ff}}})
syz_emit_ethernet(0x82, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2e, 0x0, [{0x0, 0x12, "5e000000ff000000b9371c2f82000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x11, "9606053d0006ff00800000b61af93a"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}]}}}}}}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x16, 0x40000002, 0x200173, &(0x7f0000000740)="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"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000640)=""/147, 0x93}], 0x1, 0x0, 0xfff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x89b1, &(0x7f0000000000)={'vlan1\x00', @local})
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/fscaps', 0x402000, 0x10e)
name_to_handle_at(r9, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@isofs_parent={0x14, 0x2, {0x8000, 0x3, 0x5, 0x7, 0x1}}, &(0x7f0000000440), 0x1400)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="8603000003000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

8.588508306s ago: executing program 2 (id=3385):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x100104)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000cc0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r2, 0x407, 0xfffffffffffffffc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/fscaps', 0x80001, 0xd1)
r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fc000c0002000100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090)
pread64(r5, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004)

8.49241029s ago: executing program 4 (id=3387):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80044d76, &(0x7f0000000000)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x74)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5)
getpid()
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0)
io_uring_enter(r5, 0x80002219, 0x7721, 0x16, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setitimer(0x2, 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0xb, 0x100000, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)

7.764687413s ago: executing program 1 (id=3390):
syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e24, 0x0, @mcast2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r1, 0x29, 0x3, 0x5, 0x8, 0x18, @private2, @remote, 0x8, 0x700, 0x8, 0x943e}})

7.601584551s ago: executing program 2 (id=3391):
set_robust_list(&(0x7f0000000040)={0x0, 0x5829}, 0x18)
syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
socket(0x10, 0x40000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142)
ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000240)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12, 0xc, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x0, 0x61, 0x61]}}, &(0x7f0000000580)=""/104, 0x2a, 0x68, 0x1, 0xe}, 0x28)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r3, 0x0, 0x86)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r4, r3, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x1, 0xf4)
getsockopt$inet6_int(r5, 0x29, 0x46, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, r10, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "f92b8e6ff49809d743028f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008810}, 0x24004085)
syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x10}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(r6, 0x48df, 0x0, 0x62, 0x0, 0x0)

7.512736557s ago: executing program 1 (id=3393):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x141842, 0x8)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r0)
pipe2$9p(&(0x7f0000000080), 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4)
prlimit64(0x0, 0xd, &(0x7f0000000280)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000440)=""/223, 0xdf}], 0x2, &(0x7f0000000580)=""/4096, 0x1000}, 0x3}], 0x1, 0x12122, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x6, &(0x7f00000001c0)=[{0x6, 0x3, 0x0, 0x7fff8000}, {0x1, 0xa5, 0x3, 0x2c}, {0x4, 0x9, 0x24, 0x5a5a}, {0x2, 0x50, 0x3a, 0xe2}, {0x6, 0x4, 0x8, 0x36}, {0x3, 0x7f, 0x77, 0xaf}]})
close_range(r4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f00000015c0)=0x1)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x2010, r4, 0x81373000)

7.035175788s ago: executing program 4 (id=3394):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x2, 0x0}, @empty, 0x1}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402)
writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}})
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}})
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x120, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x85, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd29, 0x70bd2c, 0x70bd26, 0x4}}]}, 0x120}}, 0x0)

5.780749732s ago: executing program 3 (id=3397):
r0 = epoll_create1(0x80000)
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xfcffffff, &(0x7f0000000180), 0x8)

5.499064994s ago: executing program 1 (id=3399):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x18, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000280)={0x9, "9a21b1ebf5d1199e86ee3bdf3990be42dc41c7db57b1633e07fbafea2bbb0d57", 0x2, 0x9, 0x3, 0xc000c, 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x60}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x15}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="54010000100010009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94)

5.305563719s ago: executing program 2 (id=3400):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000580)=0xfffffffd, 0x4)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x614002, 0x0, 0x10}, 0x18)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = memfd_secret(0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r5, &(0x7f00000000c0), 0x10)
sendto$l2tp(r5, &(0x7f0000000280)="e578", 0x2, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
recvfrom$l2tp(r5, 0x0, 0x0, 0x40000062, 0x0, 0x0)
ftruncate(r4, 0xb7a)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1f}})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000100)=0x4)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000740)={"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"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

5.256794777s ago: executing program 1 (id=3401):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a"], 0x3c}}, 0x0)

4.652259361s ago: executing program 1 (id=3402):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000157000/0x2000)=nil, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8)
sendto$inet6(r3, &(0x7f0000000040)='H', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)

4.557998852s ago: executing program 3 (id=3403):
close(0xffffffffffffffff)
r0 = dup(0xffffffffffffffff)
ioctl$TCXONC(r0, 0x540a, 0x1)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x190820}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2c, 0x200, 0x70bd29, 0x25dfdbfd, {0x9}, [@typed={0x8, 0x4a, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x24000000)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc000}, 0xc091)

4.368420853s ago: executing program 3 (id=3404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/fscaps', 0x80001, 0xd1)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0xd00)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090)
pread64(r4, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004)

4.320168042s ago: executing program 2 (id=3405):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0xc0200)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x0)
sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253)
r11 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x204a80)
ioctl$NBD_DO_IT(r11, 0xab03)
ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0xfffffff8, 0x0, 0x6, 0xb}})

3.432618001s ago: executing program 4 (id=3406):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a"], 0x3c}}, 0x0) (fail_nth: 9)

3.239571238s ago: executing program 3 (id=3407):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80800)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000140)={0x9cd0})
r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', '', [{0x20, '\xb0#\xf2\x99.\f<@\x8eX\x92\xcek\x12uT\xc7N\x90\xb1\xdfU\r?S\x1f\x8c\x9b\xfd\x8bS\xfc\xdd\x80~\x9f\xdc?x\xe3\xd5\xb9\xfel\xdb\xbb<\x04\xe6nV\xb4z\xf7\xb0QqE\xb2P\xd9*\xd4\x00\xcb\x03\xac\xeb\x025\x17\x83\x98\xb8.\x86\xe9\x1eW\x1a\x1c\xec\xdbM\xf1\xde\x7f\x80Qr3\xfc\xdf\x96i\b\xef\x15\'ak\xaa\xac.\xfe\x92\xb4\x14\xf7^\xac'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}, {0x20, 'cgroup.subtree_control\x00'}, {}, {0x20, '#! '}, {0x20, '#!$'}, {0x20, '\\/.[-$,'}, {0x20, '^('}]}, 0xc2)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x3, 0x0, {0x3, 0x2, 0x0, '--'}}, 0x23)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=<r5=>0xffffffffffffffff)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0})
openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0)
syz_open_pts(r2, 0x410600)
r6 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x5)
lseek(r6, 0xfffffffffffffff8, 0x3)

3.187090515s ago: executing program 3 (id=3408):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f00000000c0), 0xf000, 0x0)

2.948770366s ago: executing program 4 (id=3409):
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
sync_file_range(r1, 0x399d8e40, 0x45, 0x2)
write$P9_RSTATu(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/530, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x21e)

2.51268408s ago: executing program 0 (id=3410):
syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0180c2000002000d00000000190000008c"], 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002100))
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBDIACR(r1, 0x4b4a, 0xfffffffffffffffe)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x8)

2.50901766s ago: executing program 2 (id=3411):
unshare(0x6a040000)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x6, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1)
sched_setattr(0x0, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)})
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbmon(&(0x7f0000002200), 0x4, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x0, 0x303, 0x80000000, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1)
fcntl$setstatus(r5, 0x4, 0x0)

2.452385888s ago: executing program 4 (id=3412):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) (async)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8086}, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@dev, @empty, <r4=>0x0}, &(0x7f0000000440)=0xc)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1ff, 0x7, 0x400, 0xdf8, 0x10, r4})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_open_dev$dri(0x0, 0x0, 0x0) (async)
syz_open_dev$dri(0x0, 0x0, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt(r5, 0x3a, 0x24, 0x0, 0x0) (async)
getsockopt(r5, 0x3a, 0x24, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tcp_congestion(0xffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'geneve1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'geneve1\x00'})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000001000200000034000480300001800b0001007461726765740000200002800a000100415544495400e6ff040003000000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000001000200000034000480300001800b0001007461726765740000200002800a000100415544495400e6ff040003000000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0)
r7 = syz_pidfd_open(0x0, 0x0)
setns(r7, 0x24020000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2.221603521s ago: executing program 4 (id=3413):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001000000090000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000fd0000f6ff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000910000009100000006000000000000000600000d0000000001000000040000000e0000000200000005000000020000000e00000005000000030000000100000002000000030000000700000000000008010000000f0000000200000f01000000010000005900000000040000010000000900000000010000aa040000000000001205000000050008519998096074cc9722e1fced000000000c030000000f0000000000000c05"], &(0x7f0000001940)=""/4096, 0xb2, 0x1000, 0x1, 0xbf, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x2, 0x2, 0xb, 0xa, 0x30, 0x4}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xab, &(0x7f00000000c0)=""/171, 0x40f00, 0x40, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x5, 0x4}, {0x5, 0x4, 0x1, 0x5}, {0x0, 0x4, 0x10, 0x7}, {0x4, 0x5, 0x1, 0xa}, {0x3, 0x5, 0x8, 0x4}, {0x3, 0x3, 0xd, 0x3}, {0x1, 0x2, 0xc, 0xb}], 0x10, 0x7f}, 0x94)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x44, 0x1e, 0x109, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x8, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x44}, 0x1, 0x2b1e}, 0x0)
dup(0xffffffffffffffff)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x3}})
process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1)
ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000040))
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000306010100000000000000000200000a0500010007000000dd519b36a5cc42e1603129da644bdd6b58646e036dc95761793c14af0ab5ca4d36a53f2851466b2d5d0b19aadb8ee453875d320e71f57beca672d5812dcd6280ff99729622e59d22fbcce7d0fb070e789cba91684c1906e076f7fa963a2c052a22d7f34d98273991b73f356b2fcdc252352238bf0dad7d043d49c9"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406161154d0000000000010902240001000020040904000001030006000921000000012205000905"], 0x0)

1.572634697s ago: executing program 0 (id=3414):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="314d9d512a3b07026ea7030000009408349ab60daa3d4e1d1c10", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'xfrm0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r1, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf4f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
open_tree(0xffffffffffffffff, 0x0, 0x49d1e2a8abba1430)

1.184696701s ago: executing program 0 (id=3415):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
r2 = accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {<r3=>0xee01}}, './file0\x00'})
fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x1, 0x7}, {0x1, 0x1}], r3}, 0x18, 0x2)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc42, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1.18139312s ago: executing program 1 (id=3416):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x2, 0x0}, @empty, 0x1}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402)
writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}})
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}})
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x120, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x85, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd29, 0x70bd2c, 0x70bd26, 0x4}}]}, 0x120}}, 0x0)

1.108892132s ago: executing program 0 (id=3417):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00')
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x597}}, 0x30)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0)

1.020072201s ago: executing program 0 (id=3418):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0xc)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x2, 0x0, 0x3)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
r7 = eventfd2(0xff, 0x80801)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x0, r7})
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000000)="c32143e6b379400800e4d4063842e07d92")
socket(0x80000000000000a, 0x2, 0x0)
r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$chown(0x4, r8, 0xffffffffffffffff, 0xee01)

524.434µs ago: executing program 0 (id=3419):
r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000340)={0x0, 0xc4fc, 0x3000, 0x10003, 0x19a}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0))
setresuid(0x0, 0xee01, 0x0)
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4, 0x25, 0x0, @void}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0)
r7 = epoll_create1(0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x1000004}, 0x1c)
connect$inet6(r8, &(0x7f0000000300)={0xa, 0xce23, 0x6, @empty}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000800)=ANY=[@ANYRESHEX=r5], 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa0000019})
finit_module(0xffffffffffffffff, 0x0, 0x3)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000007c0)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x6, 0x0, 0xb0b0b0b0})
ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0)
r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x0)
fchdir(r10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r11 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r11, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)="0802", 0x2}, {&(0x7f0000000140)="400000000000c947e5a11deaa3db17ac6c1c19c1b0f8cb10d001f747f309879df07528dbdb1ca95fb58eff43709415a3240f57cfcda9a47505839c9958cdc8eda456cf6656fb12983828b9d245071140faf2dabb606f7391fd2a3b0b4b4140e1fdd76c29e240657a6fb72062a28047bf6cabc49bcc11f3c2d08af80d6544789a59d87bb662d54f221135314c15734bed08da74ad52618675c6ce236ddc11ebfc64fadc8edc0cfcff8bcab2f5e9e83933514db3ce3598c2b724665a7a", 0xbc}], 0x2, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x40}, 0x4008800)
mkdir(&(0x7f0000000580)='./file0\x00', 0xb6)
sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0xfff)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000240)={0x45, 0x2}, 0x10)
sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b80000000201020800000000000000000200000514000480100002800c0003400000000000007fff0800084000000007300001800c00028005000100840000000c00028005000100840000001400018008000100ffffffff08000200ac1e010108000840000065c53c0001800c00028005000100840000002c0037d214000300ff0100000000000000000000000000011400040000000000000000000000000000000000140005800f000100746674702d32303030300000"], 0xb8}}, 0x10)

0s ago: executing program 3 (id=3420):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000003c00), 0x0, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000004140)=0x14)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
r3 = memfd_secret(0x0)
io_uring_enter(r3, 0x1c77, 0xff24, 0x17, &(0x7f0000004180)={[0x5]}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
r6 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
sendmmsg(r6, &(0x7f0000004040)=[{{&(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="b6b01f0856820e5ea9995be9aa6d677bea96cca801268daa1a03e2b2cd22d0c401f1d84eb9dc4f531c7ee1daf0f6032d7977c488ef4e29bd1258359067577a74af2cae8ed65639f74b819683c01e148fa08fc61ea8c2f8f34f36998f1fcc342ee3fa38ddf7d958bfbcd5799b1a0fcaf013128a6d9c6ad947cd01670dca95a581f8e802b133d1e08ea95d8594a5d80cf3ddaae6e7496e01e09ac538492a9dec70550cc4dc6e924fcd39bc8a456cc3b143", 0xb0}, {&(0x7f00000004c0)="94194aeae945783ae8437ce466a8aa7ad530ec7f4eaeb7e1ce98cc4ecd4f41e076d40d6f60e7f70fc9b2ebad2ba15f2c8ae90d5def732ac230d0e6e7bdf18eee7607e45a14973c8f872e8dd48f5e8cc954fc4f8acfbd04f30e775f7409c1abf20e6f2ff6deb1e9650c9f9678efebe9b313e1445051b28453e434eb2d32cf1087c90986078f9f392623481bf242c2ff49b45266570d197b676b479aab30ea62a439cdd1c47d9be55bf79ca2608bd5fce62cd749753b845574198773", 0xbb}, {&(0x7f0000000080)="5b6c974b2969a493ceec995f0552d426acc98663f78b8b6a0160ee9fa729eb7365999f33feb1f7", 0x27}, {&(0x7f0000000580)="b7de838e51dd5edb1a4767e569055b7184b2a127631ff0fb0621bee38c5ff0552d867a5f32609333ea6d078466d95a8857260bc5bf39ca784b4a3151d6ed1b320dc7107cad88faff86a34a80601c803597675b787867f5105ffe113a8867871415c5d9f25eaa6f568e3146afce35624f539031075ecda19752398b843073feaf680a1f", 0x83}, {&(0x7f0000000140)="19960b79f87283f2b37648368003d8a06ada6272b92f4b9915231c2d5ca882", 0x1f}, {&(0x7f0000000640)="5d571b8ffec91bb1ada8fd6b5d1650fb50575b18599d388c4cd52a4a62e00a6bfbbcdb2f6d16f7ce0664041e4a22a2a5e75265f38f3f6607423c5737617500a925739a7d862274a9dd906232cc4ceb34b8d48db49de4a091c8451a1bd81721f470f56df6fc79c90344d5f3132ee1a37c83dd405a34a09feb9150e6d00a5d57cdf2e07a7ea061d98b703c516b7245eb01d055464f5167416852edcb8cbea83c7cac1c2bbffb3473afd8e5d3035a576fe248f5a42a1a2554c9603553ccce842cd17ff14ddf7344f2cd80d9761d1ccd650470d81b2ff546704a92cf7498af094777c73fb8da32e754cc473558ed46f4ff8f6b19e95959", 0xf5}, {&(0x7f0000000240)="2834e3aca438cdf4c36fcfa9a3755b45f303141a99107de6fd41b12f273a59a2df3a7c8dcaeadfa5f89fe12ad65d904604ac4a340b0dd318da2ab3bae1577c046d9cdcf30934d5b5872ca2b6a514934b3c2d69890672fcc9b3ac7b2a1cbf4997f1f983a4f5cb959f871f2b9bce184b0cd862f04a063bbc5bc241b9ea", 0x7c}, {&(0x7f0000000740)="c1a0e6367ee92bc7cf54cc527bde8914b97205b16af865caee181c491f116f4d72eb768f26911f0e7264c7e0d2ba52c82f07fa16b6ff2441dbb0aacd23f37cb82b8e5c7425e0b8338a2aafda0e307697d97b025cb6ebbe8032f23dd5d93f649a1f54fb38a97daf005071785c81094fcec8709e9534d17a8192c1f8918fc74d1a619458b1067641f38532b6994975d9b199e384ac5c149a482cf3d5aa58102a8a710bcdf573c409670b1743f07f658989ac331141db5a6b8132de8323129ed40df95124a2fc5324a4df92d29c37ac94cdc43aee9fb4", 0xd5}], 0x8, &(0x7f0000000b80)=[{0x108, 0x1a, 0x2, "3871f640ee64e1ba46c7e5f6e237853806a598e103ac532a10a6b7189e71270189b0dc25a40480a08bd1af22b9bfe2ba449156f5c93c12e0f80ff062b399cf4186182b034da95b727c53c747f27c7eb65ae490742216eece2118b2d01da0c99cbd7ffc00816fa3078435b6676a0a0faecf61292a62d26714428c73126dbb763b18f00a5ca666abee69b1d0a6b8c7aee94ab721b53c2b53dc0df62eaeecb88cc43bfdf347685b0b5ee5243c7bd7e0b36fcaa311ce37507be1406bc71e41b51e9c02f80a4a81ea12402a0dd7e43272e5c6d5d41c7ba7a9f1e4a1e24872965e56faf2a1542ea911e9f052b410f87c2cf6b2ad11f6f8"}, {0x1010, 0xff, 0x7, "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"}], 0x1118}}, {{&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0xfffffff5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x1}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000003c0)="1db7dc256b9996c77358c0d546f6ab62", 0x10}, {&(0x7f0000000940)="67c25800af3e100499992f0f97432a5327f24aa26b", 0x15}, {&(0x7f0000000980)="7ba976fbf4a786afb155d1d85239ffe3050d697ffabe1d6ee70d59bce658c80e1a94a08055860b4454a3801ce5ad919bcd3a026ea4845448ff9f4bb3e0808efeba9081fc1f60f8dadabac08e07e8dd813b94c1ae3ab9a892f290a9", 0x5b}], 0x3, &(0x7f0000002080)=[{0xa0, 0x10f, 0x0, "e7244d132953efb53c830c69d417421edf008d1754fde32b37ed726ce01f5b7d071ac86102a41bfcb15c22aa5534fc7ca0ba49e505208a5a5f5ada39ee782618c92342e04a5aac21753127e04411605eabd8ea770d26c5dff43ac8687e1fbe1f054e5513c8b609048635d3eed95f7ef961822a756779bf4ca20a73107a750d204bef106fde895b2fd4e596a50a"}, {0x30, 0x88, 0x8, "08cfb293a66076da56d98e77f59f74e768645054cafab1233c16da"}, {0x1010, 0x103, 0x200, "9d3ba1d10fe52208df7a289c500889555d03de2197ab678a008e82c8697fc9db92dedbb36af86b45efa0ac24c8c9a71c2a8bcb44274665118a8bfefafe03cec722a626770474f99f30d01af7091f03c57449d9c767d1fdb039399654c36491d1ae917b3853e3c73076521b7f6b9a0cbffb5b646c54f5705221d0aed36699d841bf750784d1dc003bfcd915308134a28eee61bb5d3a7764466a695a4df9ecd3fe6fcbea5e8aa92eeaf28c17164b86a1eac5e60a7466176caf35ebf1dcb21d315d1c179042fa472df2527ce37060bb64cbe2dcdbd608c55b14cbe673aa2e388422c94e4992f04ab1f71ad16f98f5bc643ebf62f7e357e7301f0403d9610db3865ae231acd5d8c55db68922fc23c1def57d2d109462a656dbcd6a14243e04126189059c13e2ba31db762143b9d5ef5bc96b468570372e146e663996275bd61e9b7f6f638aaf4a35afe50b48a96ce20b5c8bad7b6e3492981479f5b6db5e4baca020ab21da7594a1d36b54be8ddf5362af44b12f2079f3e465c44fd74bf65a255b9ac7e339e5a7e8b61e8dda7840c6f64377d66bff1ad2f6ddb1d54034a318a681b5b74150719abe83cd1b81ac782dfa7aea526dae1596771b9aca12e8951e664e02ec69020725c33916046ae76d7c6c6717623da2eaa2552266e0cba2fc3a83fd45163d89fd4b39ec3b58dc47d1560722fb30ef1328872b1219753a8f8f9e44117807766cfc698cba1ff86382d2c38fddfcc25cf0f877e3386e31fe301c6eb0ef655bb66cc3378bec81d817545442419587c7a134408110aaf77ff1f54c7c4fd1a4c22013e72cce8855cf9de67b26d0cfbfbc853e5b2ec9aeb52b53e41cc7c971f9c64f4c7d1ab4a1f4f41d532b67d402fd2489437220fc2bd4fad686f75e1c3d42238de28b715e295464fcfb13bf014186269328602c0df941aa8bd5774395be661dfce3048ecc950d81ef373dc21c6cf6ff9109b842976fbd06b1d66fddbecb297bcea502f95ea791ece691532f2a26495d50d656fc96165ae7b23e4d0755ad268d69c274c6a2901e40f6fc2430dc11eca6d19ac474b08057a4b22a40be290591c61a4e9ed2b51505a58d51db153f2ed75f11ead213d53bf00aea4034f0f4ecfa14529fea40a4d58bea156f90d8d37bd241378d748992a0b7684bc1828cc6645fd51134258b3208c5c8ee89eb09e18e9007b9036acf5ded8c58a8fff42fad2ab1f0685a16208b8037d82776a5fabd469f0a5ab2f2d4f5810b09185b573dc85e0799376cfea3fb724d17b3ac7652288883c893c4119fdfc563eb8b57d1315b81b0eab0427295dcf3058a53f8b8839f206ce18b31759ca3468ac45c4e82ea633d1718d9069e5a1502c37b949029d18c037d599c4798e65f22f76938dcec788bc5ed2d97367d3fb3b5a3355ff304444bcc84928c84946aa354665e749915cbb191c92df7423582f77d9bd9512b573a391358fe752fe516ed4fe0178d226f4163411b41621910964dec405bf258bda0570c4f37b63d413f630bb6568d11a913d518910fca34d9ae76cdf994af1d1789afc2944ee939bb519e4b7eff587d282f1a5a950674b66df6897de6f0da7ac2830ca9ed0ee061d2f958f9b1360844e555ea22a156761ee97ec07759235d6d9e99d25026a9ce78ed0e4ef2f13e0dff29c624cd4aa4db7bf1df28359400d2067ea2001a3d36280c703b43911e586e6fbf81f599e7bb2d094b2a3e973aa81887b657ec6061a15b4c279a85eafc9a028bef460fcf260a3c27b9f70fb386f3644b9cedba11eb8055f7638a39f45f2f0bd7369a03b1e9807690126100b1d55696b25c3137a8915a37b085ccf1b5844dafc1081506638f27a4772943be7f3bc6a9e1529968ad9f6b17b916a6aca8d3f299405f124e7e99b9f92a03e4d0814bad53b2418525c2be63aa8ea8892ecd72acbef0dc418f4088ae9d880c7066a3f10b513393675ef2b9a7f147c942327a88d0300f6bb77007bd40adcba276cfe3e4c6a5991db8d1bc63d8e3eaa77b1e78dfa5e4e0fa64fd312637ddf403201613bbe0c8f9090a54b4d504a7464a4fcdb48d3d00c6362bccb20ba6913e2cfbbb7b6a46cf136a7cc794a3416e20de41ac4aa152046fc57eb6f4fa980d59f0220cd301af4678de17cf9397bace4dc699bd729f114b367df86f6bfb9cc3c78d3f7d3e7eb227c35ad6bb6f9375b2ec2db6a78a7632a4199cbf6e4ec06a61d50a9bceb53019ddd993951983bc2b6f3c5d8865b5e874a3955add5e55db36a294f8ca5b4fdd33e69e84abded210253d8e94a73837e0c046687ef317eeefb6a6df11a006c9a6c4d7152b1655e83ffdde839ef9bf46ba7e2ec075f7a979331cc101dd162f72d57a28eeafc3c3bf3e747dee0b0582863a71d84eacf3d063cc2d0dbc981d49170c8fc3fc6aa92692800f719845a16b9413135ef0282364eabb4aba153dd4ccb3a468b8c24a42d5bac0ec07633884f46db1738bb468559f68ea1a60579f9eb8066dfec0a20997cfdc9dc911fb673e15fe110faf6f3e02e519377336bf2deece52737118c9d87e12aca223a83303d0d19c97ed22e7445070a22bc17efd166b4ee2338eba5a708920cfef1bb788709085cb4f32a4cd1fa264408df85328346d3ceca94dc0408314ee4ad6302e051f31bfbb7ee90a1c38885cc75386b650f094590e8d7772a29ab59ba84927662bab03558b165585e02b3179e510e47507c65c79fb0d635f805adda549e54ad5d7a889be03656ebb8800fe415c78389e81d3db87ce338d241ad4d1b58fc676bbb546c7ebbbc4ca7f9f3efaeaaf411e987d08ac455da06547f15886161e92ad918458704e5584d578237aba4992fa6db7a9da0868d834560ca86c39110241ce0507d3bd1798ab51deba0706c9f5147bbe151b7e52d1deda08b97993b7ba1edfba800ffaa35c8f73384ef5a5301e533362d42fbf4c3be266008d640ce514e499e15d3ec2b5ef3537fe7fd9277e1b68fd75a7ab7d63867b95ab82e4ef35fcfa5c451ac2f1dfdbfdf5833d38f280eae699f8bb459c703e6ea6ad65f3f3f7f03d0572e306971fcf4032900f6208045c13abfd70c67ab886a4f42f187544b535117f21d28f2c12616fb1f9ba5eb933808087dfcda203d99c374b0c3f33dfd05282b6c733280b13678e7af6a20debc0a5466d56cc564d9191809be0abb593e22aad1fa13677c7f3ffdbce25bde80200493a53ae6f9b87e223d0adc428e63d7a8807775cc2af5d8ea24a0ca5b99b3d9cde304e8a9e251cd523276e4e48642e994a05851304b7871366e43ccb31dcde7e7304d8f4f754dbae48c547368291ca5ff10a5a969b59232cfeaf6d1b68e20375cf2e44f181fbf7c922edf5da0717a8031be47af9dde6c07b75962b05ea85c9086c6f311c73099143534c16be5cbc4b9f220e8ecdfb8c1639072b908df2b5649623b1bb02894f5479535efa8d019982d8f478ca336d004b4607b849c14ebada84422e64a8553fcc18bbaf2ff17cce4d030ab1ae8dfeff61bf5886416845c890a724d83906b7c88219a0de011d9058a9930accac9902d0abd8a8e7057c0bdc2e78f20e22276793f0c201633b4e809a8d4be593102b56f95a8b48928b35c526289af2c1a5f92f9e362bc2306f26798b50cd6355eb04d06510d899eea70e8c424eddda689d031bb0fce4b3cb2c2e24b8f3fd1020965c4c67a330331e3d6bb03dda5d595fc10471a3c1fc6154bb1587a2f405b69e334bc43e128f7474ccb0e10ee19e1796a38f145b38915a4f9fe47f7d3c84264c29b12b6eacedd2c78465b401ed69f2557063fcbbd9521b6e2b1ef1fe9b787abc9318414c0544ae8b5d796628179d41f1ed72deeb64d2c19d64cca63ef0d67f9e737e6a461fa715b0326d296e4f37eaa4a96ad29b6f9f2dfe33a75c39bf80e4294b1d0d4fe8525ad26f107f985c06a7b6c91d5f7c88317c9c161ef150916489722ff4b793a55232b25df6ac39ce0ecc6d73ddce5ad2f6c2939fcb69a4f77a1da888d9213bb29dba3c261134644cf513d1abb85a1ef6a25835ce52c31f25788bf90ad47be3a4fcc081f1e91626b83c3764ce05f7d44ac701e0e26552eeb76364d1bb84b3ce3264476efa75b1c53fd2350529d171e11436b7e3c2151410a72ba39daaa7479c6e9f76971bd1c15dfbaf88ff402106071cf5b21afe07f67e61de734dec0cbd20e8d70189899400f4736aa6beae141438152731a46564910f2c3282bbeaca589f67d969eda34e5170465d46b0bae787fb8973f42c6f8e29740e72457971a5f6e9d477cabe8b255dc0d0e232a02cd46c61c93bb0545f70a90171517e71e9371eabc390eac65e65d8ccd5d492ee1a843483ac610161a4d9c5f93dd9bf7bfa71dd2f192b7d04fce593f94c1b5256af40a1a455527cbb59b66adef857c1c06aad8806f69e8a5eb1da2ff2981887ad2171676ba6a560fcd07184a4729ed0478f25fe515f92598c15a78c7a88aa240acaeb23e9f9f494b69573000192a227210afa3681b9ae245ff14f5863ed819340a1c6584381216aa3c53f89b45b0bcf1e5b8d88a9385013f085ae44d1dcbb3d35515daf7e1c492bbd9f1136f4fa2909d90a725327c88a9cfe54477372ae44c9254aff269131c12909d122cb8df46da97062e65534e95b3a7991239016dd00c8b6dc6e60d03bf0e6f6dc7d24f8384a9fc6b96e2071a578c60ecdc699c09fb2426ce4c822827e852e4e9204a3c9a25573066c84ca542ac21234cecd481431277d68e5cd0d4dce4729b1ab581e527a30459e73bc908af6af25ecccd84fc7e4a00d8bddc92a1138733ba17ca32bc156228ab7a2d8050cbed858bdf27cab53b23e0b43255e80d1482125f9577f4c83f4a552ade3ec26d587b430bac8c9d84cf7a573d3da65182d2412e4f3b2b56f7ddc797b9d151ca9fd4042a35c8cdb6542f093709e245361d3703930f656d79cfb34408cf9b9052ce1e364b7263350d675c72f2f32ab7b53685e806d5f1369571b9d51e173cd919c9530a85844da9380c73c7d6dea9168ed72299c76388087a2f1f4514db4c29a8e49a73d796f8add719763df094ddbcea63599d71c2c725fd6c5f3216d2d373c68895ce772d19de375ea26e8062eedf38054c71eee81c3f742568677a0ef0edcb6e1c49906b5d70918ee35add07273e01e59c6a703855c76dac0186211f6c2fb75eda122399906556f0095e810a43bd75cb16ebf39fc97b776e92c71b905b5038d99fdc62622deea78989f47fb02ee85907b280470897132a7d1a4b965dd80636b0ecbae7096cee1a7079663269d0f7c8850a3a03f73ce107fd8e0c1da00c323a5c065cac5469de25125a5594a57e4ddef25d5771a4c9a33526918ef513a2ce2fd0d1782df5fae6bcc459d3192833a26d51eb69b4b1e836447dbd30c9bc9771a1225c23c8cfbe7c4597eac32869f127218ab92d2fb1881c0d26bc16cb913c02ff56fbf36d67173e6d1840abd47b82d5dcd9a4b85f044f369716958d0596814432769b001977fa5530e20564e2d7d5d6facf2d1aa8fe232fb015139d5738ae09352c4d28cb5d14cf63779725bcef6bfe57ef372cf71cb9eaa1e125509ef7d29062b867480f308cadfcca810aada9fd2c2505ce12777d27afd3df3c8e4e56fbe7e10862a4df03c62c0f98c71b14443a7ab74a381064fec39f9a2fd2a201ac97515894628fb5e31f07a633217ec04005e44f4eee28bc31cc5ea6545cbf8072e440ab376da0632e2167280490e8cc22b9f440f211ffb7691151de9a8be18cfa79fe32315605af7d7f9e9a6386e43abc0"}, {0x98, 0x112, 0x0, "c08dbf392b3fa43e54fb0f4af92f685836999bf09e648f139753ef2d95e9daca016ed6ec31154acaf2fd42a3cacad77330aee6c5baead101b55105263a180747450271a403f017ebb853304a1a1abfa492653042234f5887c9ec9cefb8283023bc2b9adf890632286fdbdae5a00eae139545fb5c37dc70a95bf2a56201b6000d36521fb1"}, {0x60, 0x10d, 0x3, "db93eb73a09956584fdcd8d62d2ed24db33c8011ef83a7073f1c9916c6bba05641a9f938e63bc556a0d2c7f70662f8f5e9676390a3d1f1ba03ebddf2b409ada1073e82048cc7faf6b4d586db7a4a"}, {0xa0, 0x10e, 0xfffffff9, "0a53dad08f924472bc257f0be5b6de242733c6b69fcdc6e879c287f949436fe3c199524c2339d0c524a966e70a91101d93642a7329979362bbc14f89ec2acb468c20afd6ce8d4355a7109e9f686f6b3b1fe8a9988ec14e2e1e4f04ba828e3204e326788d922121dd60c6f235f743156330964b262b639cdb910f53d1e956e37e4df6892272612c0e01a7c6e8e298"}, {0x88, 0x110, 0x8, "207ded1554c44b1f98130bf43de2a70a0e2d8da14c2ff658287b75c085ca0f49dde52549132337eca1a1aa63e3ff1f43ebb6f36cbd7967edbd0f0be537863f005fbb4f41d5b8ee5dcc583b78f96ac2d5b60f733a7d70c47c5447bf192bdb279e45314be97236b974c45bb1286a87f2640e4ab5d648b812"}, {0x28, 0x116, 0x9, "ba509f26af2bf4ad6e5cc214d1bd404cabd973fe4a"}, {0xd0, 0x115, 0x5, "2b6a745eef38d51bd00a3e30a50cad06e305d0dc4b18ca0f55ae3fab4c5fa2613e4fceb76e100f4f5e3549039066bb38d557bd476542ab0bf166856bc075f4a59dee852b6137e854b72ca6951f5acbf4112bab44704ee5f716a1e6b7b75b3bf70f707eb21af7e28156fd055e2b950008a8ce64b3d03e964dd5e918312e55eaef4f119f31a43d47e2117babc0db9f8ab3dc4215686d627bbeb58d3d9a1c0b3042ff1650d3f5c4ab8f5c98eaf18646355296a4b6ab79b22998b8befe"}, {0xe8, 0x84, 0x6, "66ec4d20693da6f67ab6bb8ab9d1e540ca86964d9a89e0fbb73a2fe52039397d4ff72e8719748f8176bd75374ea18b657c50fdbba574beba0abb24a3dc4fab65b84e8d91ca64868ab2483d3d30f73b59e5edaaa1ab8588c149216c4a080844468fa7d462307ecf3d91d25f86bd5bb46d4d34368325ebe8d1564e35fa5d50078bd5256da544b3a8a5913a194f03d68fbd71557cb8e19fd02cb3bd86b561b4986f3b947218c578b444fab1e307ae10e721853201690096932079c41f57ad88e64103427a734e77ab5350324ab541469775baa078"}], 0x14e0}}, {{&(0x7f0000000a40)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x2, 0x2, {0xa, 0x4e23, 0x4d4, @mcast2, 0x10001}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000ac0)="c89629c37005c394a0b002e50877b72737f7fd6c", 0x14}, {&(0x7f0000001cc0)="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", 0xfb}, {&(0x7f0000001dc0)="fbb9a0d6b618704884366cb574911977105cfb3c36ac83bb5e75994e288586f14c130cc1e73209296cec92db5595971e934deb7a623dea340877550b13f7d90a186ddb473f6e5934f8a9a74c9033d0a74ae39250f0395c9ff48706c4f7c79314077f05", 0x63}, {&(0x7f0000001e40)="c3feb397fd88199da20a75b33a78317f37079fbb19c781a8ac7632e18a957bffbcabb63e2fd10b80d38efe4604aa94ca8490580ead1a9f27af56e747e2ad8e8ad3cd2c6757b7239bd47d4811adf8c71c80c34e5ab47994a15fca5b6145d40fcb2b", 0x61}, {&(0x7f0000001ec0)="c73944ef1e75ef7621eefc06e3c0e21661bde3503b62bc1a46d7b3509a9e5c4f977e3eea949f0f3b7a13ac1b788e8b8185f6236f4832c4b5c54dd13540095915252d324a7b7cde177ccfeab5d6c1294eecac65248d62914247c13b69172fe309c7af48dda0a1afa1e3907bf1a2cdfc2e98558e9116b8da0c4b8424de92b4f31d3fec35d768dfceac0d8b4a2477d1eb1fe19f4afd13eba370c96adee8ec42dca9c59ac3a2dd538b24b08cc633a517d8cfeef5a587c61fe9e7e7518ffe9b613b41906aaa110a5fc6c05013afe471cf05684582a6fb90873b2ffd05", 0xda}, {&(0x7f0000003580)="dd0e0291e52c3d72b925d062b90a10ed6c0f0f0d379f23556314e3f281c9156dae4c4c78d79a588b0317c0e50836d594bea74a60bf4c89ccf92f9002a72cfcb71d0bcc36b92fa96523beab4c1c3d3248cb73ee86498265e37051aab18f089b44669cc0617eaf5c90902894ef01ba7a049e18b1ba441ff47c6be76a5eeb446f037a0a21ba88a3cd2fc4a1bae5af395593655d61b21e246d29bbc516c518c7063aa9dfa4db5d4a702381c8e597e94f74972f60c4adb3443a3a63986e83c3a4ba6dfb0858d5553164", 0xc7}, {&(0x7f0000001fc0)="9eadff1761a44ab775f7ee1f4994296798e697becf5d12046bab438a3da65a6dd5614a8e7932a4d8914da461841b22cca207908109196978adb4d5b676a3db6bcd80ee3ee684bb64", 0x48}], 0x7, &(0x7f0000003700)=[{0xe0, 0xff, 0x7, "0fa1040d9726d4412ecb174e5b2301001c0c696513f97f47cebde5a2566007f2804afcd71b6c3f2018cb3f333b9671b08d0f2bb9e7d6e1deff4d6ba158dba611007432caa5a9e557e22c81fea278ab895e93c05139f6200f27ebf26e68ffcce5942979e0ebff343e6a6be109585af2272fe5906bdf9ed9de30ecdee89299ffd4f3f0b4f4e0f109b80c39f6402a71334094c62a659afecd93a3e7368e32681e907ef04586f1e0fdbfb6187a153e6d797a7b964af4043b7abec606678f5fe9692e9188547e253fccbfeb44cb4b28"}, {0xe8, 0x112, 0x6, "a1f68067b8598628212e26c1187e837bc963e9cfda2e51b5f9db0589594cffd3ca62464b34385ed72b2861652aaf8a2b8a13dd9fe8b7cd52c0e5e871f2023dae9b6017b2fea0ea229d61584efacfbe0b8aa6957d36b5064578c286b24159c167cfa753fa3d38c47b398d9b12bd9e13135497241dcd5a63eb947e0f843f0244cd3bbaf70f74806c8e1938aadf3828d44eac123eacd8769fd460a43c73da9f3889003799fce4b08457aa453bb1c7250e473f02ee972a04d0cb479f67df3b3e6257ec285ee3a8cf330c78a631878ce44a5b5d24cc7c"}, {0xe0, 0x115, 0x1, "11d57a2b9e83d80082dd7cf585b8057da709a98268c14c3f993efd93eeea079c49adf57bb15a9063f068c4097dfe1cfa0baaf722bf66fea2a8fbbf518eeb6fcbc2bdb52dfb57529ed20c22f4e35d5eaf7d6448eeaae4f9344fbf7c75dfd75c18cfd4bfb47a758580759dafd2e9531c358d7a54f6cdec14482f6355413aea9c9e304326ad733785c6370f5fe23b33671710380aaa12217a2c77aafff4f2b1d9454ad366cecf4f24ec7531fa35821c1b66d686fb06d2456a98826dab25a110f332a81c1d69f8e002387e92"}, {0xe0, 0x104, 0x5, "76cd377b2235e5b971f4999d07ed478c6d90f006aae1ccbcd23285e524b93918aa5d86217bbc6b0b6783c18205598248163ae4255cd3774ca8778effff4f40e50da7dc33f3aa0c6185f197a357863995605053e63e6d32ee48e3caf8a502ba2e71f185029730fd8a33e2981bc79f4ddf594d9867c13979b09714dc50c98274cea71196c0174d87b93fd8629a293c2b4f553944e29d7e5004ca5dfc9ce58ec00480c69ee709d63a09138614560a2e70d55d86469b7150927c0352681f19faa6107c4d66d77b30ea646b948067"}], 0x388}}, {{&(0x7f0000003ac0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000000b00)="591472e613b9d0e655bb20cf04749bdfb23d33c2b2e72e96097ef754db5de2", 0x1f}, {&(0x7f0000003b40)="aefff5c6b405fcf65cc380cc2e92acb15b846caa3bea54f13f5fdb411234cab25f7431281fdef3af94f516eba0ac95d1b16cc1f4eeb184f9bd77b3bf8217c6880086d9e2f158618b9def48134d17a6ea9688282d8b5424b2860c99cd83222c4f922b18121ac1b80f0fd62f12c0c7e27624c31a5b7fdd864ae468105397dfed2543ad12518012189d93420d7144560aa3d3be9310a279de219b123feed1fa464ada09715f10298e50cde0b7072f", 0xad}, {&(0x7f0000003c00)}, {&(0x7f0000003c40)="3b5c29ef9630a22067721d2addce27a268ceeb39e39e25cec1ca44fecb33c84536ef7aaa987f18b238b6352f38318961", 0x30}, {&(0x7f0000003c80)="7c8eee080035c3a9acd46968b400ce1915b9106109ef103910f564e035ea6cf4ce18ddd98f0fc5fa7d89b858121741e07da7f651b532a574", 0x38}, {&(0x7f0000003cc0)="2a54bcce276085eb74e1f85d780a50ad66467693b76060", 0x17}], 0x6, &(0x7f0000003d80)=[{0x40, 0x11, 0xda, "164f6818c74ec8f61f2accfda61a6c7b967057603cacea1e933123f6b81e91ff057e43decb536846e689abd576993b3c"}, {0x68, 0x116, 0x353, "40a43a59c2311188e196df3c6629baba2db405c2aaf5c8ff09e7ad91dd691fe36488b74b53895b23b9caa04804097b62e413c1be4e58149aa04a48bf4ee1a97ed4c4ea280fe1393543c2e7ac519cceb3fe8f0286"}, {0x90, 0x6, 0x41a, "d21829e984e31035531abef835092757db4253c9f81c864a19b4da443ec63b466a8a664b8c655b5730530b9c755c83514470ff034145248f2ce458230a4e59711ae41f7a56abd29309e5b2665a980dc3bf66969cce1b5617b68d7d37c11f175de872812f602e320691108774a102923800a6286a2bc5fb349f76"}, {0x70, 0xff, 0x9, "f1248ecf599c7a189ecd32a372823e655984f1ff1d1ba55bbad4f4548cebd16a9006de5e69147ea8ba61c906c49ef7d076f193a0a81edfc33f0bac128e3fa3b1f2081516afd243190596aa38893a3e58ec57df45e61a33741d1b"}, {0x78, 0x0, 0x0, "83c16d83683d295b5a0ece902034d01531e82a5a64ee4fc5162c96c979c8aafd2e0841f98a93c1f859f3b33b2973b40a7b9ef5c869941a51e62c103381ff4c076a1ab62b757a22643500bb086cf3d779820d22333fdd2b6e8a270e24d2030f688df7"}, {0xa0, 0x111, 0xcb, "6208c241163cc8148c46404e559f9c03df00c38af6e5ebc1ee3072a183e2384f3f6c17877567aa8c6f8706198302fa3a8af5b2282ffd3136d49129be59281023ca03acd9b3a46d5a9b5a03f86eb34751e1690a6dc90ba23167acb5ec478c01b7e5b1b31b03990d5b59f136dbed5fe93d405c96c749abc0e625188e25b0fa122eb5003543046610bdb53c388fb98237"}], 0x2c0}}], 0x4, 0x804)
listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

 T5817] Bluetooth: hci5: command 0x1003 tx timeout
[ 1322.880082][ T1110] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1323.050252][T18567] 9pnet_fd: Insufficient options for proto=fd
[ 1323.419207][T18583] netlink: 'syz.4.2909': attribute type 1 has an invalid length.
[ 1323.427048][T18583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2909'.
[ 1324.924700][T10731] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1324.930955][T18574] Bluetooth: hci6: command 0x1003 tx timeout
[ 1325.798178][T18604] 8021q: adding VLAN 0 to HW filter on device 
[ 1326.245590][T18604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1329.805075][ T3521] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1331.897701][T18574] Bluetooth: hci5: command 0x1003 tx timeout
[ 1331.907640][T10731] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1332.018560][ T3521] Bluetooth: hci6: Frame reassembly failed (-90)
[ 1332.331169][T18670] 8021q: adding VLAN 0 to HW filter on device 
[ 1332.801335][T18670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1333.239159][T18678] netlink: 'syz.2.2929': attribute type 1 has an invalid length.
[ 1334.155096][T18574] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1334.936681][T18688] bond21: (slave vxcan5): The slave device specified does not support setting the MAC address
[ 1334.988423][T18688] bond21: (slave vxcan5): Error -95 calling set_mac_address
[ 1335.023830][T18697] Invalid ELF header magic: != ELF
[ 1335.055722][T18697] 9pnet_fd: Insufficient options for proto=fd
[ 1335.901415][T18707] netlink: 'syz.0.2934': attribute type 1 has an invalid length.
[ 1336.481029][T18710] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1336.499505][T18710] bond18: (slave vxcan3): Error -95 calling set_mac_address
[ 1337.660943][   T60] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1337.991226][T18719] 8021q: adding VLAN 0 to HW filter on device 
[ 1338.455776][T18719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1339.740398][T18574] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1340.283565][T11656] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1341.572933][T18751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1342.834554][T18770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1342.931102][T10731] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1343.729899][ T1098] Bluetooth: hci5: Frame reassembly failed (-90)
[ 1344.335574][T18786] 9pnet_fd: Insufficient options for proto=fd
[ 1345.481038][T18574] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1345.603622][T11656] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1345.793387][T14130] Bluetooth: hci5: command 0x1003 tx timeout
[ 1345.966278][T11656] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1346.219512][T18800] netlink: 'syz.4.2953': attribute type 1 has an invalid length.
[ 1346.296701][T18800] bond25: (slave vxcan7): The slave device specified does not support setting the MAC address
[ 1346.308205][T18800] bond25: (slave vxcan7): Error -95 calling set_mac_address
[ 1347.637035][T10731] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1348.456172][T18832] autofs: Unknown parameter '„'
[ 1349.487500][T18846] Invalid ELF header magic: != ELF
[ 1349.495363][T18846] 9pnet_fd: Insufficient options for proto=fd
[ 1351.599173][T18867] Invalid ELF header magic: != ELF
[ 1351.635795][T18867] 9pnet_fd: Insufficient options for proto=fd
[ 1354.627298][T18904] ALSA: mixer_oss: invalid OSS volume ''
[ 1356.479431][T18917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1359.014843][T18953] ALSA: mixer_oss: invalid OSS volume ''
[ 1359.057861][T18953] syz.2.2982 (18953): drop_caches: 2
[ 1361.152527][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.158830][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1368.722801][T19036] ALSA: mixer_oss: invalid OSS volume ''
[ 1369.002619][T19036] syz.1.2999 (19036): drop_caches: 2
[ 1371.767375][T19068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1372.029760][T19075] Invalid ELF header magic: != ELF
[ 1372.083303][T19078] ALSA: mixer_oss: invalid OSS volume ''
[ 1372.129579][T19075] 9pnet_fd: Insufficient options for proto=fd
[ 1373.468619][T19092] netlink: 'syz.2.3012': attribute type 1 has an invalid length.
[ 1373.511403][T19092] bond22: (slave vxcan5): The slave device specified does not support setting the MAC address
[ 1373.549123][T19092] bond22: (slave vxcan5): Error -95 calling set_mac_address
[ 1374.219876][T19104] ALSA: mixer_oss: invalid OSS volume ''
[ 1374.302980][T19104] syz.0.3013 (19104): drop_caches: 2
[ 1374.390346][ T3521] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1375.338246][T19108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1376.431086][T10731] Bluetooth: hci5: command 0x1003 tx timeout
[ 1376.432222][T18574] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1377.101541][T19139] netlink: 'syz.2.3021': attribute type 1 has an invalid length.
[ 1377.294470][T19139] bond23: (slave vxcan5): The slave device specified does not support setting the MAC address
[ 1377.352720][T19139] bond23: (slave vxcan5): Error -95 calling set_mac_address
[ 1379.441088][   T60] Bluetooth: hci5: Frame reassembly failed (-90)
[ 1380.954427][T19187] ALSA: mixer_oss: invalid OSS volume ''
[ 1381.493302][T18574] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1381.500883][T10731] Bluetooth: hci5: command 0x1003 tx timeout
[ 1382.207336][T19196] netlink: 'syz.4.3030': attribute type 1 has an invalid length.
[ 1382.308838][T19196] bond26: (slave vxcan7): The slave device specified does not support setting the MAC address
[ 1382.332389][T19196] bond26: (slave vxcan7): Error -95 calling set_mac_address
[ 1385.061367][T14516] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1385.471927][T14516] usb 3-1: Using ep0 maxpacket: 8
[ 1385.484436][T14516] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1385.681908][T14516] usb 3-1: config 179 has no interface number 0
[ 1385.688723][T14516] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1385.701126][T14516] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1385.717411][T14516] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1385.730918][T14516] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1385.747526][T14516] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1385.809946][T14516] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1385.831091][T14516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1385.861247][T19223] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1386.086750][ T5801] usb 3-1: USB disconnect, device number 25
[ 1386.086779][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1386.102062][    C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[ 1388.843241][T19265] FAULT_INJECTION: forcing a failure.
[ 1388.843241][T19265] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 1388.877306][T19265] CPU: 0 UID: 0 PID: 19265 Comm: syz.2.3043 Not tainted syzkaller #0 PREEMPT(full) 
[ 1388.877330][T19265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1388.877340][T19265] Call Trace:
[ 1388.877345][T19265]  <TASK>
[ 1388.877350][T19265]  dump_stack_lvl+0x16c/0x1f0
[ 1388.877370][T19265]  should_fail_ex+0x512/0x640
[ 1388.877386][T19265]  should_fail_alloc_page+0xe7/0x130
[ 1388.877399][T19265]  prepare_alloc_pages+0x3c2/0x610
[ 1388.877418][T19265]  __alloc_frozen_pages_noprof+0x18b/0x2470
[ 1388.877436][T19265]  ? __lock_acquire+0xb8a/0x1c90
[ 1388.877457][T19265]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1388.877474][T19265]  ? lock_acquire+0x179/0x350
[ 1388.877483][T19265]  ? find_held_lock+0x2b/0x80
[ 1388.877497][T19265]  ? mark_held_locks+0x49/0x80
[ 1388.877512][T19265]  ? finish_task_switch.isra.0+0x221/0xc10
[ 1388.877524][T19265]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1388.877540][T19265]  ? finish_task_switch.isra.0+0x221/0xc10
[ 1388.877552][T19265]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1388.877566][T19265]  ? policy_nodemask+0xea/0x4e0
[ 1388.877579][T19265]  alloc_pages_mpol+0x1fb/0x550
[ 1388.877591][T19265]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1388.877607][T19265]  ? __lock_acquire+0xb8a/0x1c90
[ 1388.877624][T19265]  folio_alloc_mpol_noprof+0x36/0x2f0
[ 1388.877638][T19265]  alloc_migration_target_by_mpol+0x246/0x500
[ 1388.877656][T19265]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[ 1388.877679][T19265]  ? __pfx___might_resched+0x10/0x10
[ 1388.877699][T19265]  ? mtree_range_walk+0x718/0xc00
[ 1388.877717][T19265]  migrate_pages_batch+0x3bc/0x3bb0
[ 1388.877730][T19265]  ? mt_find+0x670/0xa20
[ 1388.877739][T19265]  ? walk_pgd_range+0x1135/0x1f50
[ 1388.877754][T19265]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[ 1388.877773][T19265]  ? __pfx_migrate_pages_batch+0x10/0x10
[ 1388.877789][T19265]  ? __pfx_walk_pgd_range+0x10/0x10
[ 1388.877806][T19265]  migrate_pages_sync+0x12d/0x8a0
[ 1388.877820][T19265]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[ 1388.877836][T19265]  ? queue_pages_test_walk+0x279/0x410
[ 1388.877849][T19265]  ? __pfx_migrate_pages_sync+0x10/0x10
[ 1388.877862][T19265]  ? walk_page_test+0x9b/0x180
[ 1388.877882][T19265]  migrate_pages+0x1b5f/0x23a0
[ 1388.877896][T19265]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[ 1388.877914][T19265]  ? __pfx_migrate_pages+0x10/0x10
[ 1388.877927][T19265]  ? mas_next_slot+0x12d3/0x1cb0
[ 1388.877949][T19265]  ? find_held_lock+0x2b/0x80
[ 1388.877974][T19265]  ? up_write+0x1b2/0x520
[ 1388.877992][T19265]  do_mbind+0x6e2/0xf20
[ 1388.878009][T19265]  ? __pfx_do_mbind+0x10/0x10
[ 1388.878021][T19265]  ? find_held_lock+0x2b/0x80
[ 1388.878041][T19265]  ? __pfx_get_nodes+0x10/0x10
[ 1388.878051][T19265]  ? __fget_files+0x20e/0x3c0
[ 1388.878064][T19265]  kernel_mbind+0x1e3/0x1f0
[ 1388.878078][T19265]  ? __pfx_kernel_mbind+0x10/0x10
[ 1388.878096][T19265]  do_syscall_64+0xcd/0xfa0
[ 1388.878112][T19265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1388.878122][T19265] RIP: 0033:0x7f0ff478efc9
[ 1388.878131][T19265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1388.878141][T19265] RSP: 002b:00007f0ff561d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1388.878151][T19265] RAX: ffffffffffffffda RBX: 00007f0ff49e6090 RCX: 00007f0ff478efc9
[ 1388.878158][T19265] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000
[ 1388.878166][T19265] RBP: 00007f0ff561d090 R08: 0000000000000000 R09: 0000000000000002
[ 1388.878172][T19265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1388.878177][T19265] R13: 00007f0ff49e6128 R14: 00007f0ff49e6090 R15: 00007ffe727e3b68
[ 1388.878191][T19265]  </TASK>
[ 1390.665216][T19291] Invalid ELF header magic: != ELF
[ 1390.676307][T19291] 9pnet_fd: Insufficient options for proto=fd
[ 1391.576249][T19295] FAULT_INJECTION: forcing a failure.
[ 1391.576249][T19295] name failslab, interval 1, probability 0, space 0, times 1
[ 1391.652121][T19295] CPU: 1 UID: 0 PID: 19295 Comm: syz.2.3050 Not tainted syzkaller #0 PREEMPT(full) 
[ 1391.652146][T19295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1391.652156][T19295] Call Trace:
[ 1391.652162][T19295]  <TASK>
[ 1391.652169][T19295]  dump_stack_lvl+0x16c/0x1f0
[ 1391.652200][T19295]  should_fail_ex+0x512/0x640
[ 1391.652219][T19295]  ? fs_reclaim_acquire+0xae/0x150
[ 1391.652241][T19295]  should_failslab+0xc2/0x120
[ 1391.652260][T19295]  __kmalloc_noprof+0xdd/0x880
[ 1391.652284][T19295]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1391.652309][T19295]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1391.652328][T19295]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1391.652350][T19295]  ? tomoyo_profile+0x47/0x60
[ 1391.652374][T19295]  tomoyo_path_number_perm+0x245/0x580
[ 1391.652400][T19295]  ? tomoyo_path_number_perm+0x237/0x580
[ 1391.652429][T19295]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1391.652457][T19295]  ? find_held_lock+0x2b/0x80
[ 1391.652500][T19295]  ? find_held_lock+0x2b/0x80
[ 1391.652520][T19295]  ? hook_file_ioctl_common+0x145/0x410
[ 1391.652547][T19295]  ? __fget_files+0x20e/0x3c0
[ 1391.652569][T19295]  security_file_ioctl+0x9b/0x240
[ 1391.652589][T19295]  __x64_sys_ioctl+0xb7/0x210
[ 1391.652612][T19295]  do_syscall_64+0xcd/0xfa0
[ 1391.652636][T19295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1391.652653][T19295] RIP: 0033:0x7f0ff478efc9
[ 1391.652667][T19295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1391.652683][T19295] RSP: 002b:00007f0ff563e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1391.652699][T19295] RAX: ffffffffffffffda RBX: 00007f0ff49e5fa0 RCX: 00007f0ff478efc9
[ 1391.652710][T19295] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
[ 1391.652719][T19295] RBP: 00007f0ff563e090 R08: 0000000000000000 R09: 0000000000000000
[ 1391.652729][T19295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1391.652738][T19295] R13: 00007f0ff49e6038 R14: 00007f0ff49e5fa0 R15: 00007ffe727e3b68
[ 1391.652762][T19295]  </TASK>
[ 1391.652769][T19295] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1392.162962][T19297] FAULT_INJECTION: forcing a failure.
[ 1392.162962][T19297] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1392.203712][T19297] CPU: 1 UID: 0 PID: 19297 Comm: syz.1.3051 Not tainted syzkaller #0 PREEMPT(full) 
[ 1392.203735][T19297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1392.203744][T19297] Call Trace:
[ 1392.203749][T19297]  <TASK>
[ 1392.203756][T19297]  dump_stack_lvl+0x16c/0x1f0
[ 1392.203785][T19297]  should_fail_ex+0x512/0x640
[ 1392.203808][T19297]  _copy_from_user+0x2e/0xd0
[ 1392.203828][T19297]  __sys_bpf+0x248/0x4980
[ 1392.203856][T19297]  ? __pfx___sys_bpf+0x10/0x10
[ 1392.203879][T19297]  ? find_held_lock+0x2b/0x80
[ 1392.203905][T19297]  ? find_held_lock+0x2b/0x80
[ 1392.203931][T19297]  ? __mutex_unlock_slowpath+0x161/0x7b0
[ 1392.203970][T19297]  ? fput+0x9b/0xd0
[ 1392.203989][T19297]  ? ksys_write+0x1ac/0x250
[ 1392.204004][T19297]  ? __pfx_ksys_write+0x10/0x10
[ 1392.204023][T19297]  __x64_sys_bpf+0x78/0xc0
[ 1392.204046][T19297]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1392.204070][T19297]  do_syscall_64+0xcd/0xfa0
[ 1392.204094][T19297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1392.204111][T19297] RIP: 0033:0x7feb7e18efc9
[ 1392.204125][T19297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1392.204141][T19297] RSP: 002b:00007feb7f0b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1392.204158][T19297] RAX: ffffffffffffffda RBX: 00007feb7e3e5fa0 RCX: 00007feb7e18efc9
[ 1392.204173][T19297] RDX: 0000000000000014 RSI: 0000200000000180 RDI: 000000000000001c
[ 1392.204183][T19297] RBP: 00007feb7f0b1090 R08: 0000000000000000 R09: 0000000000000000
[ 1392.204193][T19297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1392.204203][T19297] R13: 00007feb7e3e6038 R14: 00007feb7e3e5fa0 R15: 00007fff73b24728
[ 1392.204228][T19297]  </TASK>
[ 1392.910910][ T9470] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1393.050851][T14516] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1393.072987][ T9470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1393.084438][ T9470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1393.095012][ T9470] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1393.111049][ T9470] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1393.124794][ T9470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1393.135520][ T9470] usb 5-1: config 0 descriptor??
[ 1393.200921][T14516] usb 3-1: Using ep0 maxpacket: 16
[ 1393.207506][T14516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1393.218613][T14516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1393.233896][T14516] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1393.244526][T14516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1393.256009][T14516] usb 3-1: config 0 descriptor??
[ 1393.459080][T19301] ALSA: mixer_oss: invalid OSS volume ''
[ 1393.511821][   T30] audit: type=1400 audit(1761389473.337:241): avc:  denied  { map } for  pid=19312 comm="syz.0.3056" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1393.603616][ T9470] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[ 1393.622794][T19315] FAULT_INJECTION: forcing a failure.
[ 1393.622794][T19315] name failslab, interval 1, probability 0, space 0, times 0
[ 1393.635918][ T9470] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[ 1393.635965][ T9470] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[ 1393.635987][ T9470] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[ 1393.636009][ T9470] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[ 1393.636031][ T9470] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[ 1393.660986][T19315] CPU: 1 UID: 0 PID: 19315 Comm: syz.3.3057 Not tainted syzkaller #0 PREEMPT(full) 
[ 1393.661007][T19315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1393.661016][T19315] Call Trace:
[ 1393.661021][T19315]  <TASK>
[ 1393.661027][T19315]  dump_stack_lvl+0x16c/0x1f0
[ 1393.661067][T19315]  should_fail_ex+0x512/0x640
[ 1393.661085][T19315]  ? fs_reclaim_acquire+0xae/0x150
[ 1393.661103][T19315]  should_failslab+0xc2/0x120
[ 1393.661121][T19315]  __kmalloc_noprof+0xdd/0x880
[ 1393.661141][T19315]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1393.661163][T19315]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1393.661178][T19315]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1393.661197][T19315]  ? tomoyo_profile+0x47/0x60
[ 1393.661217][T19315]  tomoyo_path_number_perm+0x245/0x580
[ 1393.661238][T19315]  ? tomoyo_path_number_perm+0x237/0x580
[ 1393.661262][T19315]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1393.661285][T19315]  ? find_held_lock+0x2b/0x80
[ 1393.661322][T19315]  ? find_held_lock+0x2b/0x80
[ 1393.661339][T19315]  ? hook_file_ioctl_common+0x145/0x410
[ 1393.661363][T19315]  ? __fget_files+0x20e/0x3c0
[ 1393.661382][T19315]  security_file_ioctl+0x9b/0x240
[ 1393.661399][T19315]  __x64_sys_ioctl+0xb7/0x210
[ 1393.661420][T19315]  do_syscall_64+0xcd/0xfa0
[ 1393.661443][T19315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1393.661458][T19315] RIP: 0033:0x7fb95458efc9
[ 1393.661470][T19315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1393.661484][T19315] RSP: 002b:00007fb9527ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1393.661498][T19315] RAX: ffffffffffffffda RBX: 00007fb9547e5fa0 RCX: 00007fb95458efc9
[ 1393.661508][T19315] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003
[ 1393.661517][T19315] RBP: 00007fb9527ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1393.661526][T19315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1393.661534][T19315] R13: 00007fb9547e6038 R14: 00007fb9547e5fa0 R15: 00007ffefba38038
[ 1393.661556][T19315]  </TASK>
[ 1393.661561][T19315] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1393.716551][ T9470] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[ 1393.901199][T14516] HID 045e:07da: Invalid code 65791 type 1
[ 1393.907395][   T30] audit: type=1400 audit(1761389473.727:242): avc:  denied  { setopt } for  pid=19304 comm="syz.4.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1393.912156][T14516] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0014/input/input5
[ 1394.029720][   T30] audit: type=1400 audit(1761389473.727:243): avc:  denied  { ioctl } for  pid=19304 comm="syz.4.3054" path="socket:[70837]" dev="sockfs" ino=70837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1394.067865][T19311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1394.652615][ T9470] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[ 1394.662275][T14516] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 1394.678657][ T9470] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[ 1394.688940][T19311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1394.706272][   T30] audit: type=1400 audit(1761389474.477:244): avc:  denied  { read } for  pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=3052 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1394.733890][   T30] audit: type=1400 audit(1761389474.477:245): avc:  denied  { open } for  pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3052 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1394.757257][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1394.773659][ T9470] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[ 1395.097227][   T30] audit: type=1400 audit(1761389474.557:246): avc:  denied  { ioctl } for  pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3052 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1395.122637][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1395.659451][   T30] audit: type=1400 audit(1761389474.617:247): avc:  denied  { ioctl } for  pid=19323 comm="syz.3.3060" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=70400 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1395.687469][   T30] audit: type=1400 audit(1761389475.057:248): avc:  denied  { getopt } for  pid=19309 comm="syz.2.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1395.707693][ T9470] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1395.724257][ T9470] usb 5-1: USB disconnect, device number 15
[ 1395.794007][T19335] fido_id[19335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1395.861503][T19311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1395.880112][T19311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1395.992544][   T30] audit: type=1400 audit(1761389475.817:249): avc:  denied  { ioctl } for  pid=19339 comm="syz.0.3064" path="socket:[70442]" dev="sockfs" ino=70442 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1396.093470][T14516] usb 3-1: USB disconnect, device number 26
[ 1396.384104][T19356] FAULT_INJECTION: forcing a failure.
[ 1396.384104][T19356] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1396.397324][T19356] CPU: 1 UID: 0 PID: 19356 Comm: syz.3.3067 Not tainted syzkaller #0 PREEMPT(full) 
[ 1396.397347][T19356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1396.397357][T19356] Call Trace:
[ 1396.397363][T19356]  <TASK>
[ 1396.397370][T19356]  dump_stack_lvl+0x16c/0x1f0
[ 1396.397401][T19356]  should_fail_ex+0x512/0x640
[ 1396.397425][T19356]  _copy_from_user+0x2e/0xd0
[ 1396.397447][T19356]  copy_from_sockptr_offset.constprop.0+0x153/0x1a0
[ 1396.397469][T19356]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[ 1396.397497][T19356]  ip_mcast_join_leave+0xee/0x1f0
[ 1396.397516][T19356]  ? __pfx_ip_mcast_join_leave+0x10/0x10
[ 1396.397549][T19356]  ? preempt_schedule_thunk+0x16/0x30
[ 1396.397584][T19356]  do_ip_setsockopt+0x189f/0x3240
[ 1396.397606][T19356]  ? __pfx_do_ip_setsockopt+0x10/0x10
[ 1396.397624][T19356]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1396.397663][T19356]  ip_setsockopt+0x59/0xf0
[ 1396.397684][T19356]  udp_setsockopt+0x7d/0xd0
[ 1396.397700][T19356]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1396.397729][T19356]  do_sock_setsockopt+0xf3/0x1d0
[ 1396.397757][T19356]  __sys_setsockopt+0x1a0/0x230
[ 1396.397783][T19356]  __x64_sys_setsockopt+0xbd/0x160
[ 1396.397803][T19356]  ? do_syscall_64+0x91/0xfa0
[ 1396.397827][T19356]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1396.397851][T19356]  do_syscall_64+0xcd/0xfa0
[ 1396.397877][T19356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1396.397893][T19356] RIP: 0033:0x7fb95458efc9
[ 1396.397907][T19356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1396.397924][T19356] RSP: 002b:00007fb9527ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1396.397939][T19356] RAX: ffffffffffffffda RBX: 00007fb9547e6180 RCX: 00007fb95458efc9
[ 1396.397950][T19356] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000007
[ 1396.397960][T19356] RBP: 00007fb9527ac090 R08: 0000000000000088 R09: 0000000000000000
[ 1396.397969][T19356] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[ 1396.397978][T19356] R13: 00007fb9547e6218 R14: 00007fb9547e6180 R15: 00007ffefba38038
[ 1396.398003][T19356]  </TASK>
[ 1396.610012][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1396.960371][T19367] netlink: 'syz.2.3070': attribute type 1 has an invalid length.
[ 1397.772635][T19371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3072'.
[ 1397.821945][T19374] FAULT_INJECTION: forcing a failure.
[ 1397.821945][T19374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1397.860665][T19372] bond24: (slave vxcan5): The slave device specified does not support setting the MAC address
[ 1397.876798][T19374] CPU: 0 UID: 0 PID: 19374 Comm: syz.4.3073 Not tainted syzkaller #0 PREEMPT(full) 
[ 1397.876824][T19374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1397.876833][T19374] Call Trace:
[ 1397.876838][T19374]  <TASK>
[ 1397.876845][T19374]  dump_stack_lvl+0x16c/0x1f0
[ 1397.876874][T19374]  should_fail_ex+0x512/0x640
[ 1397.876897][T19374]  _copy_to_user+0x32/0xd0
[ 1397.876921][T19374]  simple_read_from_buffer+0xcb/0x170
[ 1397.876949][T19374]  proc_fail_nth_read+0x197/0x240
[ 1397.876969][T19374]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1397.876990][T19374]  ? rw_verify_area+0xcf/0x6c0
[ 1397.877014][T19374]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1397.877033][T19374]  vfs_read+0x1e4/0xcf0
[ 1397.877059][T19374]  ? __pfx___mutex_lock+0x10/0x10
[ 1397.877074][T19374]  ? __pfx_vfs_read+0x10/0x10
[ 1397.877094][T19374]  ? __fget_files+0x20e/0x3c0
[ 1397.877116][T19374]  ksys_read+0x12a/0x250
[ 1397.877129][T19374]  ? __pfx_ksys_read+0x10/0x10
[ 1397.877149][T19374]  do_syscall_64+0xcd/0xfa0
[ 1397.877172][T19374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1397.877187][T19374] RIP: 0033:0x7fcca498d9dc
[ 1397.877199][T19374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1397.877213][T19374] RSP: 002b:00007fcca5912030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1397.877228][T19374] RAX: ffffffffffffffda RBX: 00007fcca4be5fa0 RCX: 00007fcca498d9dc
[ 1397.877238][T19374] RDX: 000000000000000f RSI: 00007fcca59120a0 RDI: 0000000000000004
[ 1397.877246][T19374] RBP: 00007fcca5912090 R08: 0000000000000000 R09: 0000000000000000
[ 1397.877254][T19374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1397.877263][T19374] R13: 00007fcca4be6038 R14: 00007fcca4be5fa0 R15: 00007ffe459f3998
[ 1397.877284][T19374]  </TASK>
[ 1398.075615][T19376] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1398.114658][T19372] bond24: (slave vxcan5): Error -95 calling set_mac_address
[ 1398.400827][ T5801] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1398.418687][T19389] ALSA: mixer_oss: invalid OSS volume ''
[ 1398.449052][T19389] syz.1.3076 (19389): drop_caches: 2
[ 1398.672483][ T5801] usb 1-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[ 1398.682965][ T5801] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1398.770354][ T5801] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[ 1398.792321][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1398.843142][ T5801] usb 1-1: config 0 descriptor??
[ 1399.283046][   T30] audit: type=1400 audit(1761389479.097:250): avc:  denied  { ioctl } for  pid=19377 comm="syz.0.3074" path="socket:[70941]" dev="sockfs" ino=70941 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1399.307798][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1399.320734][ T5801] usb 1-1: string descriptor 0 read error: -71
[ 1399.331500][ T5801] usb 1-1: USB disconnect, device number 24
[ 1399.601758][T19401] FAULT_INJECTION: forcing a failure.
[ 1399.601758][T19401] name failslab, interval 1, probability 0, space 0, times 0
[ 1399.650707][T19401] CPU: 1 UID: 0 PID: 19401 Comm: syz.1.3080 Not tainted syzkaller #0 PREEMPT(full) 
[ 1399.650727][T19401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1399.650733][T19401] Call Trace:
[ 1399.650737][T19401]  <TASK>
[ 1399.650741][T19401]  dump_stack_lvl+0x16c/0x1f0
[ 1399.650767][T19401]  should_fail_ex+0x512/0x640
[ 1399.650786][T19401]  ? fs_reclaim_acquire+0xae/0x150
[ 1399.650807][T19401]  should_failslab+0xc2/0x120
[ 1399.650821][T19401]  __kmalloc_noprof+0xdd/0x880
[ 1399.650835][T19401]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1399.650850][T19401]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1399.650861][T19401]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1399.650874][T19401]  ? tomoyo_profile+0x47/0x60
[ 1399.650888][T19401]  tomoyo_path_number_perm+0x245/0x580
[ 1399.650904][T19401]  ? tomoyo_path_number_perm+0x237/0x580
[ 1399.650921][T19401]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1399.650937][T19401]  ? find_held_lock+0x2b/0x80
[ 1399.650961][T19401]  ? find_held_lock+0x2b/0x80
[ 1399.650973][T19401]  ? hook_file_ioctl_common+0x145/0x410
[ 1399.650995][T19401]  ? __fget_files+0x20e/0x3c0
[ 1399.651008][T19401]  security_file_ioctl+0x9b/0x240
[ 1399.651020][T19401]  __x64_sys_ioctl+0xb7/0x210
[ 1399.651035][T19401]  do_syscall_64+0xcd/0xfa0
[ 1399.651051][T19401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1399.651062][T19401] RIP: 0033:0x7feb7e18efc9
[ 1399.651071][T19401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1399.651081][T19401] RSP: 002b:00007feb7f0b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1399.651091][T19401] RAX: ffffffffffffffda RBX: 00007feb7e3e5fa0 RCX: 00007feb7e18efc9
[ 1399.651097][T19401] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000003
[ 1399.651103][T19401] RBP: 00007feb7f0b1090 R08: 0000000000000000 R09: 0000000000000000
[ 1399.651109][T19401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1399.651115][T19401] R13: 00007feb7e3e6038 R14: 00007feb7e3e5fa0 R15: 00007fff73b24728
[ 1399.651129][T19401]  </TASK>
[ 1399.853233][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1400.072824][T19401] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1400.218988][   T30] audit: type=1400 audit(1761389480.042:251): avc:  denied  { read write } for  pid=19407 comm="syz.1.3081" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 1400.301574][   T30] audit: type=1400 audit(1761389480.072:252): avc:  denied  { open } for  pid=19407 comm="syz.1.3081" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 1402.174163][T19420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1402.308609][   T30] audit: type=1400 audit(1761389482.132:253): avc:  denied  { create } for  pid=19428 comm="syz.4.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1402.920864][   T30] audit: type=1400 audit(1761389482.352:254): avc:  denied  { sqpoll } for  pid=19428 comm="syz.4.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1404.767825][T19468] netlink: 'syz.1.3095': attribute type 1 has an invalid length.
[ 1404.775622][T19468] netlink: 'syz.1.3095': attribute type 2 has an invalid length.
[ 1405.134247][   T30] audit: type=1400 audit(1761389484.642:255): avc:  denied  { create } for  pid=19463 comm="syz.1.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1405.164111][   T30] audit: type=1400 audit(1761389484.642:256): avc:  denied  { ioctl } for  pid=19463 comm="syz.1.3095" path="socket:[71077]" dev="sockfs" ino=71077 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1405.989620][   T30] audit: type=1400 audit(1761389485.812:257): avc:  denied  { read } for  pid=19476 comm="syz.1.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1406.167702][   T30] audit: type=1400 audit(1761389485.992:258): avc:  denied  { getopt } for  pid=19481 comm="syz.1.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1406.947039][   T30] audit: type=1400 audit(1761389486.772:259): avc:  denied  { read write } for  pid=19485 comm="syz.3.3100" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1406.981615][   T30] audit: type=1400 audit(1761389486.802:260): avc:  denied  { open } for  pid=19485 comm="syz.3.3100" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1407.269469][   T30] audit: type=1400 audit(1761389487.092:261): avc:  denied  { unmount } for  pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1407.516378][ T9172] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1407.570869][ T5876] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1408.181531][ T9172] usb 5-1: Using ep0 maxpacket: 32
[ 1408.189918][ T9172] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[ 1408.200957][ T9172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1408.208931][ T9172] usb 5-1: Product: syz
[ 1408.217857][ T9172] usb 5-1: Manufacturer: syz
[ 1408.226415][ T9172] usb 5-1: SerialNumber: syz
[ 1408.241707][ T9172] empeg 5-1:1.0: empeg converter detected
[ 1408.260831][ T5876] usb 4-1: Using ep0 maxpacket: 32
[ 1408.280990][ T5876] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[ 1408.290432][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1408.299602][ T5876] usb 4-1: Product: syz
[ 1408.317960][ T5876] usb 4-1: Manufacturer: syz
[ 1408.326656][ T5876] usb 4-1: SerialNumber: syz
[ 1408.355104][ T5876] empeg 4-1:1.0: empeg converter detected
[ 1408.367649][T19510] FAULT_INJECTION: forcing a failure.
[ 1408.367649][T19510] name failslab, interval 1, probability 0, space 0, times 0
[ 1408.383167][T19510] CPU: 0 UID: 0 PID: 19510 Comm: syz.1.3109 Not tainted syzkaller #0 PREEMPT(full) 
[ 1408.383189][T19510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1408.383199][T19510] Call Trace:
[ 1408.383204][T19510]  <TASK>
[ 1408.383211][T19510]  dump_stack_lvl+0x16c/0x1f0
[ 1408.383238][T19510]  should_fail_ex+0x512/0x640
[ 1408.383255][T19510]  ? __kmalloc_noprof+0xca/0x880
[ 1408.383279][T19510]  should_failslab+0xc2/0x120
[ 1408.383298][T19510]  __kmalloc_noprof+0xdd/0x880
[ 1408.383319][T19510]  ? bpf_test_init.isra.0+0x88/0x130
[ 1408.383341][T19510]  ? bpf_test_init.isra.0+0x88/0x130
[ 1408.383359][T19510]  bpf_test_init.isra.0+0x88/0x130
[ 1408.383378][T19510]  bpf_prog_test_run_skb+0x261/0x2290
[ 1408.383400][T19510]  ? __fget_files+0x204/0x3c0
[ 1408.383419][T19510]  ? __fget_files+0x20e/0x3c0
[ 1408.383433][T19510]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1408.383455][T19510]  ? fput+0x9b/0xd0
[ 1408.383476][T19510]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1408.383498][T19510]  __sys_bpf+0x1035/0x4980
[ 1408.383525][T19510]  ? __pfx___sys_bpf+0x10/0x10
[ 1408.383546][T19510]  ? find_held_lock+0x2b/0x80
[ 1408.383571][T19510]  ? find_held_lock+0x2b/0x80
[ 1408.383596][T19510]  ? __mutex_unlock_slowpath+0x161/0x7b0
[ 1408.383633][T19510]  ? fput+0x9b/0xd0
[ 1408.383652][T19510]  ? ksys_write+0x1ac/0x250
[ 1408.383666][T19510]  ? __pfx_ksys_write+0x10/0x10
[ 1408.383685][T19510]  __x64_sys_bpf+0x78/0xc0
[ 1408.383707][T19510]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1408.383728][T19510]  do_syscall_64+0xcd/0xfa0
[ 1408.383751][T19510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1408.383768][T19510] RIP: 0033:0x7feb7e18efc9
[ 1408.383781][T19510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1408.383795][T19510] RSP: 002b:00007feb7f0b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1408.383811][T19510] RAX: ffffffffffffffda RBX: 00007feb7e3e5fa0 RCX: 00007feb7e18efc9
[ 1408.383821][T19510] RDX: 0000000000000050 RSI: 0000200000000c40 RDI: 000000000000000a
[ 1408.383830][T19510] RBP: 00007feb7f0b1090 R08: 0000000000000000 R09: 0000000000000000
[ 1408.383839][T19510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1408.383856][T19510] R13: 00007feb7e3e6038 R14: 00007feb7e3e5fa0 R15: 00007fff73b24728
[ 1408.383880][T19510]  </TASK>
[ 1408.627918][ T9172] usb 5-1: empeg converter now attached to ttyUSB0
[ 1408.651716][ T5876] usb 4-1: empeg converter now attached to ttyUSB1
[ 1408.868004][T14516] usb 4-1: USB disconnect, device number 25
[ 1408.876062][T14516] empeg ttyUSB1: empeg converter now disconnected from ttyUSB1
[ 1408.894187][T14516] empeg 4-1:1.0: device disconnected
[ 1408.895145][ T5876] usb 5-1: USB disconnect, device number 16
[ 1408.909049][ T5876] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0
[ 1409.523472][T19514] ALSA: mixer_oss: invalid OSS volume ''
[ 1409.543598][ T5876] empeg 5-1:1.0: device disconnected
[ 1409.863732][T19526] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1410.246496][T19538] overlayfs: missing 'lowerdir'
[ 1410.331355][   T30] audit: type=1400 audit(1761389490.152:262): avc:  denied  { map } for  pid=19529 comm="syz.4.3115" path="socket:[71980]" dev="sockfs" ino=71980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1410.641413][T19537] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[ 1410.655347][T19536] netlink: 'syz.1.3118': attribute type 1 has an invalid length.
[ 1410.677309][   T30] audit: type=1400 audit(1761389490.152:263): avc:  denied  { accept } for  pid=19529 comm="syz.4.3115" path="socket:[71980]" dev="sockfs" ino=71980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1410.701579][   T30] audit: type=1400 audit(1761389490.492:264): avc:  denied  { read } for  pid=19532 comm="syz.0.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1410.722785][   T30] audit: type=1400 audit(1761389490.552:265): avc:  denied  { setopt } for  pid=19532 comm="syz.0.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1410.742436][   T30] audit: type=1400 audit(1761389490.572:266): avc:  denied  { getopt } for  pid=19532 comm="syz.0.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1410.806895][   T30] audit: type=1400 audit(1761389490.572:267): avc:  denied  { ioctl } for  pid=19532 comm="syz.0.3117" path="socket:[71984]" dev="sockfs" ino=71984 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1410.833217][T19536] bond21: (slave vxcan7): The slave device specified does not support setting the MAC address
[ 1410.846452][T19536] bond21: (slave vxcan7): Error -95 calling set_mac_address
[ 1411.331495][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'.
[ 1412.024248][T19561] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1412.036689][T19561] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1412.568066][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3125'.
[ 1412.578297][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3125'.
[ 1412.724684][   T30] audit: type=1400 audit(1761389492.546:268): avc:  denied  { create } for  pid=19575 comm="syz.1.3127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1412.782336][   T30] audit: type=1400 audit(1761389492.576:269): avc:  denied  { write } for  pid=19575 comm="syz.1.3127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1413.016696][   T30] audit: type=1326 audit(1761389492.836:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19581 comm="syz.0.3129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe728b8efc9 code=0x0
[ 1413.719348][T19590] fuse: Bad value for 'rootmode'
[ 1413.782496][T19592] netlink: 'syz.2.3131': attribute type 9 has an invalid length.
[ 1413.949771][   T30] audit: type=1400 audit(1761389493.766:271): avc:  denied  { search } for  pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1414.924374][T19616] netlink: 'syz.0.3136': attribute type 1 has an invalid length.
[ 1415.059576][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3138'.
[ 1415.068651][T19625] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3138'.
[ 1415.108026][T19622] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1415.155571][T19622] bond19: (slave vxcan3): Error -95 calling set_mac_address
[ 1415.340970][ T9172] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1415.365799][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 1415.365827][   T30] audit: type=1400 audit(1761389495.186:282): avc:  denied  { add_name } for  pid=19605 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1415.493010][ T9172] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[ 1415.501737][   T30] audit: type=1400 audit(1761389495.226:283): avc:  denied  { create } for  pid=19605 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1415.525354][   T30] audit: type=1400 audit(1761389495.226:284): avc:  denied  { write } for  pid=19605 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan2.link" dev="tmpfs" ino=11034 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1415.670890][ T9172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1415.730878][   T30] audit: type=1400 audit(1761389495.226:285): avc:  denied  { append } for  pid=19605 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" dev="tmpfs" ino=11034 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1415.731196][ T9172] usb 5-1: config 0 has no interface number 0
[ 1415.787923][ T9172] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1415.808657][ T9172] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1415.845299][ T9172] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1415.901627][ T9172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1415.909766][ T9172] usb 5-1: Product: syz
[ 1415.915175][ T9172] usb 5-1: Manufacturer: syz
[ 1415.919881][ T9172] usb 5-1: SerialNumber: syz
[ 1415.930668][ T9172] usb 5-1: config 0 descriptor??
[ 1415.980417][   T30] audit: type=1400 audit(1761389495.796:286): avc:  denied  { remove_name } for  pid=19640 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=11034 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1416.081174][T19643] Invalid ELF header magic: != ELF
[ 1416.859291][   T30] audit: type=1400 audit(1761389495.796:287): avc:  denied  { unlink } for  pid=19640 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=11034 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1416.882941][   T30] audit: type=1400 audit(1761389495.886:288): avc:  denied  { module_load } for  pid=19641 comm="syz.2.3141" path="/601/bus" dev="tmpfs" ino=3197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[ 1417.173214][ T9172] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.117/input/input6
[ 1417.258320][   T30] audit: type=1400 audit(1761389497.076:289): avc:  denied  { read } for  pid=19652 comm="syz.0.3143" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1417.383851][T19658] FAULT_INJECTION: forcing a failure.
[ 1417.383851][T19658] name failslab, interval 1, probability 0, space 0, times 0
[ 1417.392963][   T30] audit: type=1400 audit(1761389497.076:290): avc:  denied  { open } for  pid=19652 comm="syz.0.3143" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1417.493928][   T30] audit: type=1400 audit(1761389497.286:291): avc:  denied  { read write } for  pid=19655 comm="syz.0.3145" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1417.520993][ T9172] usb 5-1: USB disconnect, device number 17
[ 1417.530868][T19658] CPU: 0 UID: 0 PID: 19658 Comm: syz.2.3144 Not tainted syzkaller #0 PREEMPT(full) 
[ 1417.530891][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1417.530900][T19658] Call Trace:
[ 1417.530906][T19658]  <TASK>
[ 1417.530912][T19658]  dump_stack_lvl+0x16c/0x1f0
[ 1417.530942][T19658]  should_fail_ex+0x512/0x640
[ 1417.530962][T19658]  ? fs_reclaim_acquire+0xae/0x150
[ 1417.530984][T19658]  should_failslab+0xc2/0x120
[ 1417.531004][T19658]  __kmalloc_noprof+0xdd/0x880
[ 1417.531033][T19658]  ? tomoyo_encode2+0x100/0x3e0
[ 1417.531057][T19658]  ? tomoyo_encode2+0x100/0x3e0
[ 1417.531073][T19658]  tomoyo_encode2+0x100/0x3e0
[ 1417.531095][T19658]  tomoyo_encode+0x29/0x50
[ 1417.531111][T19658]  tomoyo_realpath_from_path+0x18f/0x6e0
[ 1417.531137][T19658]  tomoyo_path_number_perm+0x245/0x580
[ 1417.531162][T19658]  ? tomoyo_path_number_perm+0x237/0x580
[ 1417.531189][T19658]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1417.531215][T19658]  ? find_held_lock+0x2b/0x80
[ 1417.531258][T19658]  ? find_held_lock+0x2b/0x80
[ 1417.531277][T19658]  ? hook_file_ioctl_common+0x145/0x410
[ 1417.531304][T19658]  ? __fget_files+0x20e/0x3c0
[ 1417.531325][T19658]  security_file_ioctl+0x9b/0x240
[ 1417.531345][T19658]  __x64_sys_ioctl+0xb7/0x210
[ 1417.531371][T19658]  do_syscall_64+0xcd/0xfa0
[ 1417.531397][T19658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1417.531414][T19658] RIP: 0033:0x7f0ff478efc9
[ 1417.531428][T19658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1417.531443][T19658] RSP: 002b:00007f0ff563e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1417.531459][T19658] RAX: ffffffffffffffda RBX: 00007f0ff49e5fa0 RCX: 00007f0ff478efc9
[ 1417.531470][T19658] RDX: 0000200000000400 RSI: 0000000000004b72 RDI: 0000000000000003
[ 1417.531479][T19658] RBP: 00007f0ff563e090 R08: 0000000000000000 R09: 0000000000000000
[ 1417.531489][T19658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1417.531499][T19658] R13: 00007f0ff49e6038 R14: 00007f0ff49e5fa0 R15: 00007ffe727e3b68
[ 1417.531523][T19658]  </TASK>
[ 1417.531538][T19658] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1417.765465][T19665] netlink: 'syz.1.3146': attribute type 1 has an invalid length.
[ 1419.321674][T19695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1419.915982][T19712] autofs: Unknown parameter '„'
[ 1420.950980][ T9470] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1421.274707][ T9470] usb 3-1: Using ep0 maxpacket: 8
[ 1421.310720][ T9470] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1421.319826][ T9470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1421.329204][ T9470] usb 3-1: Product: syz
[ 1421.333658][ T9470] usb 3-1: Manufacturer: syz
[ 1421.405919][ T9470] usb 3-1: SerialNumber: syz
[ 1421.427113][ T9470] usb 3-1: config 0 descriptor??
[ 1421.443744][ T9470] gspca_main: se401-2.14.0 probing 047d:5003
[ 1421.626339][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1421.629558][   T30] audit: type=1400 audit(1761389501.385:299): avc:  denied  { setopt } for  pid=19718 comm="syz.0.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1421.669377][   T30] audit: type=1400 audit(1761389501.435:300): avc:  denied  { write } for  pid=19699 comm="syz.4.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1421.991771][ T9470] usb 3-1: reset high-speed USB device number 27 using dummy_hcd
[ 1422.224087][T19730] FAULT_INJECTION: forcing a failure.
[ 1422.224087][T19730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1422.293491][T19732] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1422.392780][T19730] CPU: 1 UID: 0 PID: 19730 Comm: syz.1.3159 Not tainted syzkaller #0 PREEMPT(full) 
[ 1422.392805][T19730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1422.392815][T19730] Call Trace:
[ 1422.392820][T19730]  <TASK>
[ 1422.392827][T19730]  dump_stack_lvl+0x16c/0x1f0
[ 1422.392858][T19730]  should_fail_ex+0x512/0x640
[ 1422.392881][T19730]  strncpy_from_user+0x3b/0x2e0
[ 1422.392902][T19730]  getname_flags.part.0+0x8f/0x550
[ 1422.392928][T19730]  getname_flags+0x93/0xf0
[ 1422.392944][T19730]  do_sys_openat2+0xb8/0x1d0
[ 1422.392963][T19730]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1422.392982][T19730]  ? find_held_lock+0x2b/0x80
[ 1422.393003][T19730]  ? handle_mm_fault+0x2ab/0xd10
[ 1422.393029][T19730]  __x64_sys_openat+0x174/0x210
[ 1422.393047][T19730]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1422.393067][T19730]  ? do_user_addr_fault+0x843/0x1370
[ 1422.393088][T19730]  do_syscall_64+0xcd/0xfa0
[ 1422.393110][T19730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1422.393125][T19730] RIP: 0033:0x7feb7e18d810
[ 1422.393138][T19730] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[ 1422.393152][T19730] RSP: 002b:00007feb7f0aeef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1422.393166][T19730] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007feb7e18d810
[ 1422.393176][T19730] RDX: 0000000000000002 RSI: 00007feb7e211c6c RDI: 00000000ffffff9c
[ 1422.393184][T19730] RBP: 00007feb7e211c6c R08: 0000000000000000 R09: 0000000000000000
[ 1422.393193][T19730] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 1422.393201][T19730] R13: 0000000000000024 R14: 00002000000008c0 R15: 00007fff73b24728
[ 1422.393224][T19730]  </TASK>
[ 1422.575721][T19732] 8021q: adding VLAN 0 to HW filter on device bond27
[ 1422.587147][T19737] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3160'.
[ 1422.602213][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.602269][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.661383][T19732] bond0: (slave bond27): Enslaving as an active interface with a down link
[ 1422.894908][T19737]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1422.904590][T19737] bond_slave_0: left promiscuous mode
[ 1422.913182][T19737] bond_slave_0: left allmulticast mode
[ 1422.931459][T19737]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1422.944681][T19737] bond_slave_1: left promiscuous mode
[ 1422.950684][T19737] bond_slave_1: left allmulticast mode
[ 1422.967596][T19737]  (unregistering): Released all slaves
[ 1423.813805][ T1110] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1425.127576][T19759] netlink: 'syz.4.3167': attribute type 32 has an invalid length.
[ 1425.147524][   T30] audit: type=1400 audit(1761389504.965:301): avc:  denied  { mounton } for  pid=19758 comm="syz.4.3167" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1425.173830][T19759] ADFS-fs (nbd4): error: unable to read block 3, try 0
[ 1425.325652][   T30] audit: type=1400 audit(1761389505.145:302): avc:  denied  { create } for  pid=19760 comm="syz.2.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1425.327040][T19761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3168'.
[ 1425.621288][   T30] audit: type=1400 audit(1761389505.435:303): avc:  denied  { bind } for  pid=19760 comm="syz.2.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1425.921407][T19767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3170'.
[ 1425.949045][T19768] Illegal XDP return value 715114752 on prog  (id 346) dev N/A, expect packet loss!
[ 1425.964339][   T30] audit: type=1400 audit(1761389505.465:304): avc:  denied  { setopt } for  pid=19760 comm="syz.2.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1425.965837][T18574] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1425.984102][T10731] Bluetooth: hci5: command 0x1003 tx timeout
[ 1426.004917][ T9470] gspca_se401: read req failed req 0x06 error -19
[ 1426.040061][ T9470] usb 3-1: USB disconnect, device number 27
[ 1426.102522][   T30] audit: type=1400 audit(1761389505.845:305): avc:  denied  { write } for  pid=19760 comm="syz.2.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1426.250537][   T30] audit: type=1400 audit(1761389506.065:306): avc:  denied  { open } for  pid=19775 comm="syz.1.3171" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=73792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1426.254098][T19777] openvswitch: netlink: nsh attr 60 is out of range max 3
[ 1426.381511][   T30] audit: type=1400 audit(1761389506.195:307): avc:  denied  { unmount } for  pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1426.390840][T19777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1426.679524][ T5801] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[ 1426.885610][ T5801] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1426.885687][ T5801] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1426.885768][ T5801] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[ 1426.885795][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1426.894067][ T5801] usb 2-1: config 0 descriptor??
[ 1426.937087][ T5801] qmi_wwan 2-1:0.0: bogus CDC Union: master=0, slave=24
[ 1426.937808][ T5801] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22
[ 1426.960164][   T30] audit: type=1326 audit(1761389506.735:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19786 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95458efc9 code=0x7ffc0000
[ 1426.960268][   T30] audit: type=1326 audit(1761389506.735:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19786 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95458efc9 code=0x7ffc0000
[ 1426.960363][   T30] audit: type=1326 audit(1761389506.745:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19786 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb95458efc9 code=0x7ffc0000
[ 1426.960433][   T30] audit: type=1326 audit(1761389506.745:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19786 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95458efc9 code=0x7ffc0000
[ 1426.960525][   T30] audit: type=1326 audit(1761389506.745:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19786 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95458efc9 code=0x7ffc0000
[ 1426.960621][   T30] audit: type=1326 audit(1761389506.745:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19786 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb95458efc9 code=0x7ffc0000
[ 1426.964032][   T30] audit: type=1326 audit(1761389506.755:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19786 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95458efc9 code=0x7ffc0000
[ 1426.964129][   T30] audit: type=1326 audit(1761389506.765:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19786 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95458efc9 code=0x7ffc0000
[ 1426.964221][   T30] audit: type=1326 audit(1761389506.775:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19786 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb95458efc9 code=0x7ffc0000
[ 1427.056254][T19788] syz.3.3173 uses obsolete (PF_INET,SOCK_PACKET)
[ 1427.259634][   T30] audit: type=1326 audit(1761389507.075:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19786 comm="syz.3.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95458efc9 code=0x7ffc0000
[ 1427.426089][T19776] overlay: ./bus is not a directory
[ 1427.857172][ T9470] usb 2-1: USB disconnect, device number 21
[ 1427.902154][T19796] FAULT_INJECTION: forcing a failure.
[ 1427.902154][T19796] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1427.902196][T19796] CPU: 1 UID: 0 PID: 19796 Comm: syz.0.3176 Not tainted syzkaller #0 PREEMPT(full) 
[ 1427.902216][T19796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1427.902225][T19796] Call Trace:
[ 1427.902230][T19796]  <TASK>
[ 1427.902237][T19796]  dump_stack_lvl+0x16c/0x1f0
[ 1427.902267][T19796]  should_fail_ex+0x512/0x640
[ 1427.902289][T19796]  _copy_to_user+0x32/0xd0
[ 1427.902311][T19796]  simple_read_from_buffer+0xcb/0x170
[ 1427.902339][T19796]  proc_fail_nth_read+0x197/0x240
[ 1427.902360][T19796]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1427.902381][T19796]  ? rw_verify_area+0xcf/0x6c0
[ 1427.902405][T19796]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1427.902423][T19796]  vfs_read+0x1e4/0xcf0
[ 1427.902443][T19796]  ? __pfx___mutex_lock+0x10/0x10
[ 1427.902458][T19796]  ? __pfx_vfs_read+0x10/0x10
[ 1427.902480][T19796]  ? __fget_files+0x20e/0x3c0
[ 1427.902504][T19796]  ksys_read+0x12a/0x250
[ 1427.902519][T19796]  ? __pfx_ksys_read+0x10/0x10
[ 1427.902542][T19796]  do_syscall_64+0xcd/0xfa0
[ 1427.902569][T19796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.902586][T19796] RIP: 0033:0x7fe728b8d9dc
[ 1427.902600][T19796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1427.902615][T19796] RSP: 002b:00007fe729a18030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1427.902631][T19796] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8d9dc
[ 1427.902641][T19796] RDX: 000000000000000f RSI: 00007fe729a180a0 RDI: 0000000000000004
[ 1427.902651][T19796] RBP: 00007fe729a18090 R08: 0000000000000000 R09: 0000000000000000
[ 1427.902661][T19796] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[ 1427.902670][T19796] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1427.902694][T19796]  </TASK>
[ 1428.577598][T11656] Bluetooth: hci5: Frame reassembly failed (-90)
[ 1429.099285][T19821] FAULT_INJECTION: forcing a failure.
[ 1429.099285][T19821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1429.181795][T19821] CPU: 1 UID: 0 PID: 19821 Comm: syz.4.3184 Not tainted syzkaller #0 PREEMPT(full) 
[ 1429.181819][T19821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1429.181828][T19821] Call Trace:
[ 1429.181834][T19821]  <TASK>
[ 1429.181841][T19821]  dump_stack_lvl+0x16c/0x1f0
[ 1429.181863][T19821]  should_fail_ex+0x512/0x640
[ 1429.181878][T19821]  _copy_from_user+0x2e/0xd0
[ 1429.181892][T19821]  wext_handle_ioctl+0xc2/0x2a0
[ 1429.181909][T19821]  ? __pfx_wext_handle_ioctl+0x10/0x10
[ 1429.181926][T19821]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1429.181941][T19821]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1429.181956][T19821]  sock_ioctl+0x3a1/0x6b0
[ 1429.181968][T19821]  ? __pfx_sock_ioctl+0x10/0x10
[ 1429.181976][T19821]  ? hook_file_ioctl_common+0x145/0x410
[ 1429.181993][T19821]  ? selinux_file_ioctl+0x180/0x270
[ 1429.182003][T19821]  ? selinux_file_ioctl+0xb4/0x270
[ 1429.182014][T19821]  ? __pfx_sock_ioctl+0x10/0x10
[ 1429.182025][T19821]  __x64_sys_ioctl+0x18e/0x210
[ 1429.182039][T19821]  do_syscall_64+0xcd/0xfa0
[ 1429.182055][T19821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1429.182066][T19821] RIP: 0033:0x7fcca498efc9
[ 1429.182075][T19821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1429.182085][T19821] RSP: 002b:00007fcca5912038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1429.182095][T19821] RAX: ffffffffffffffda RBX: 00007fcca4be5fa0 RCX: 00007fcca498efc9
[ 1429.182101][T19821] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000003
[ 1429.182107][T19821] RBP: 00007fcca5912090 R08: 0000000000000000 R09: 0000000000000000
[ 1429.182113][T19821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1429.182119][T19821] R13: 00007fcca4be6038 R14: 00007fcca4be5fa0 R15: 00007ffe459f3998
[ 1429.182133][T19821]  </TASK>
[ 1429.886680][T19832] syz.4.3186 (19832): drop_caches: 2
[ 1430.025266][T19834] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1430.385191][T19826] ALSA: mixer_oss: invalid OSS volume ''
[ 1430.654462][T10731] Bluetooth: hci5: command 0x1003 tx timeout
[ 1430.664692][T18574] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1432.335008][T19855] netlink: 'syz.0.3193': attribute type 1 has an invalid length.
[ 1432.445575][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1432.445585][   T30] audit: type=1400 audit(1761389512.265:321): avc:  denied  { read } for  pid=19853 comm="syz.0.3193" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1432.475238][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1432.579847][T19855] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1432.618679][   T30] audit: type=1400 audit(1761389512.265:322): avc:  denied  { open } for  pid=19853 comm="syz.0.3193" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1432.642825][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1432.721203][T19858] bond20: (slave gretap2): making interface the new active one
[ 1433.287552][   T30] audit: type=1400 audit(1761389513.085:323): avc:  denied  { ioctl } for  pid=19865 comm="syz.1.3196" path="socket:[73929]" dev="sockfs" ino=73929 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1433.318646][T19874] FAULT_INJECTION: forcing a failure.
[ 1433.318646][T19874] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1433.333227][T19874] CPU: 1 UID: 0 PID: 19874 Comm: syz.3.3197 Not tainted syzkaller #0 PREEMPT(full) 
[ 1433.333249][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1433.333257][T19874] Call Trace:
[ 1433.333263][T19874]  <TASK>
[ 1433.333270][T19874]  dump_stack_lvl+0x16c/0x1f0
[ 1433.333299][T19874]  should_fail_ex+0x512/0x640
[ 1433.333323][T19874]  _copy_from_user+0x2e/0xd0
[ 1433.333345][T19874]  vt_ioctl+0x42e/0x30a0
[ 1433.333362][T19874]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1433.333390][T19874]  ? __pfx_vt_ioctl+0x10/0x10
[ 1433.333414][T19874]  ? tomoyo_path_number_perm+0x18d/0x580
[ 1433.333448][T19874]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1433.333471][T19874]  ? tty_jobctrl_ioctl+0x152/0xe00
[ 1433.333491][T19874]  ? __pfx_vt_ioctl+0x10/0x10
[ 1433.333506][T19874]  tty_ioctl+0x661/0x1680
[ 1433.333530][T19874]  ? __pfx_tty_ioctl+0x10/0x10
[ 1433.333554][T19874]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1433.333582][T19874]  ? hook_file_ioctl_common+0x145/0x410
[ 1433.333612][T19874]  ? selinux_file_ioctl+0x180/0x270
[ 1433.333629][T19874]  ? selinux_file_ioctl+0xb4/0x270
[ 1433.333648][T19874]  ? __pfx_tty_ioctl+0x10/0x10
[ 1433.333673][T19874]  __x64_sys_ioctl+0x18e/0x210
[ 1433.333699][T19874]  do_syscall_64+0xcd/0xfa0
[ 1433.333732][T19874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1433.333749][T19874] RIP: 0033:0x7fb95458efc9
[ 1433.333762][T19874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1433.333778][T19874] RSP: 002b:00007fb9527ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1433.333794][T19874] RAX: ffffffffffffffda RBX: 00007fb9547e5fa0 RCX: 00007fb95458efc9
[ 1433.333804][T19874] RDX: 0000200000000400 RSI: 0000000000004b72 RDI: 0000000000000003
[ 1433.333814][T19874] RBP: 00007fb9527ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1433.333823][T19874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1433.333833][T19874] R13: 00007fb9547e6038 R14: 00007fb9547e5fa0 R15: 00007ffefba38038
[ 1433.333860][T19874]  </TASK>
[ 1433.349098][T19858] bond20: (slave gretap2): Enslaving as an active interface with an up link
[ 1434.246073][T19887] comedi comedi4: bad chanlist[0]=0x00000e72 chan=3698 range length=2
[ 1434.490825][ T5801] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[ 1435.132586][ T5801] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1436.243348][ T5801] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[ 1436.261008][ T5801] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1436.270389][ T5801] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 1436.282135][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 1436.292383][ T5801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 1436.308146][ T5801] usb 3-1: string descriptor 0 read error: -22
[ 1436.317807][ T5801] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 1436.327100][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1436.339907][ T5801] usb 3-1: config 0 descriptor??
[ 1436.345678][T19887] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1436.365449][ T5801] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1436.373277][ T5801] hub 3-1:0.0: probe with driver hub failed with error -5
[ 1436.388662][ T5801] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7
[ 1436.400168][T19904] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1436.569131][   T30] audit: type=1400 audit(1761389516.385:324): avc:  denied  { read } for  pid=19886 comm="syz.2.3199" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1436.606299][T19887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'.
[ 1436.920872][   T30] audit: type=1400 audit(1761389516.385:325): avc:  denied  { open } for  pid=19886 comm="syz.2.3199" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1436.956171][ T5801] usb 3-1: USB disconnect, device number 28
[ 1437.216607][T19911] Invalid ELF header magic: != ELF
[ 1438.437890][   T30] audit: type=1400 audit(1761389518.245:326): avc:  denied  { mount } for  pid=19907 comm="syz.4.3203" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1438.600275][T19928] netlink: 'syz.1.3207': attribute type 1 has an invalid length.
[ 1438.608676][T19928] netlink: 'syz.1.3207': attribute type 2 has an invalid length.
[ 1440.556365][T19945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1440.810002][T19952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1440.919018][   T30] audit: type=1400 audit(1761389520.735:327): avc:  denied  { name_bind } for  pid=19955 comm="syz.3.3213" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1440.977445][   T30] audit: type=1400 audit(1761389520.795:328): avc:  denied  { mount } for  pid=19955 comm="syz.3.3213" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1441.056094][   T30] audit: type=1400 audit(1761389520.795:329): avc:  denied  { unmount } for  pid=19955 comm="syz.3.3213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1441.111124][ T5801] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1441.298754][ T5801] usb 2-1: Using ep0 maxpacket: 16
[ 1441.314863][ T5801] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1441.335737][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1441.359049][ T5801] usb 2-1: Product: syz
[ 1441.370907][ T5801] usb 2-1: Manufacturer: syz
[ 1441.381265][ T5801] usb 2-1: SerialNumber: syz
[ 1441.413683][ T5801] usb 2-1: config 0 descriptor??
[ 1441.421476][   T30] audit: type=1400 audit(1761389521.245:330): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1441.447739][ T5801] visor 2-1:0.0: Sony Clie 3.5 converter detected
[ 1441.626556][T19950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1441.809317][T19950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1441.832195][ T5801] usb 2-1: clie_3_5_startup: get config number failed: -71
[ 1442.288555][ T5801] visor 2-1:0.0: probe with driver visor failed with error -71
[ 1442.303425][ T5801] usb 2-1: USB disconnect, device number 22
[ 1442.750059][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'.
[ 1442.822205][T20007] syz.2.3219 (20007): drop_caches: 2
[ 1443.047096][T20012] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1443.731686][T20029] FAULT_INJECTION: forcing a failure.
[ 1443.731686][T20029] name failslab, interval 1, probability 0, space 0, times 0
[ 1443.753376][T20031] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1443.837124][T20032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3225'.
[ 1443.966227][T20029] CPU: 1 UID: 0 PID: 20029 Comm: syz.0.3226 Not tainted syzkaller #0 PREEMPT(full) 
[ 1443.966254][T20029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1443.966265][T20029] Call Trace:
[ 1443.966271][T20029]  <TASK>
[ 1443.966278][T20029]  dump_stack_lvl+0x16c/0x1f0
[ 1443.966309][T20029]  should_fail_ex+0x512/0x640
[ 1443.966334][T20029]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1443.966363][T20029]  should_failslab+0xc2/0x120
[ 1443.966383][T20029]  __kmalloc_cache_noprof+0x72/0x780
[ 1443.966408][T20029]  ? __pfx___might_resched+0x10/0x10
[ 1443.966429][T20029]  ? ceph_key_preparse+0x10d/0x260
[ 1443.966457][T20029]  ? ceph_key_preparse+0x10d/0x260
[ 1443.966478][T20029]  ? down_read+0x13d/0x480
[ 1443.966494][T20029]  ceph_key_preparse+0x10d/0x260
[ 1443.966517][T20029]  ? __pfx_ceph_key_preparse+0x10/0x10
[ 1443.966544][T20029]  ? __pfx_ceph_key_preparse+0x10/0x10
[ 1443.966568][T20029]  __key_create_or_update+0x458/0xe10
[ 1443.966593][T20029]  ? __pfx___key_create_or_update+0x10/0x10
[ 1443.966614][T20029]  ? lookup_user_key+0x2ce/0x1300
[ 1443.966646][T20029]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[ 1443.966665][T20029]  ? __pfx_keyring_search_iterator+0x10/0x10
[ 1443.966691][T20029]  key_create_or_update+0x42/0x60
[ 1443.966715][T20029]  __do_sys_add_key+0x29d/0x470
[ 1443.966740][T20029]  ? __pfx___do_sys_add_key+0x10/0x10
[ 1443.966762][T20029]  ? ksys_write+0x1ac/0x250
[ 1443.966789][T20029]  do_syscall_64+0xcd/0xfa0
[ 1443.966816][T20029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1443.966832][T20029] RIP: 0033:0x7fe728b8efc9
[ 1443.966847][T20029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1443.966862][T20029] RSP: 002b:00007fe729a18038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1443.966880][T20029] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8efc9
[ 1443.966891][T20029] RDX: 0000200000000bc0 RSI: 0000000000000000 RDI: 0000200000000040
[ 1443.966901][T20029] RBP: 00007fe729a18090 R08: 000000002c40ddfb R09: 0000000000000000
[ 1443.966911][T20029] R10: 000000000000012d R11: 0000000000000246 R12: 0000000000000001
[ 1443.966921][T20029] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1443.966946][T20029]  </TASK>
[ 1444.734675][   T30] audit: type=1400 audit(1761389524.535:331): avc:  denied  { connect } for  pid=20037 comm="syz.2.3229" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1445.255330][   T30] audit: type=1400 audit(1761389525.075:332): avc:  denied  { mounton } for  pid=20042 comm="syz.1.3230" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 1447.069595][ T3521] Bluetooth: hci5: Frame reassembly failed (-90)
[ 1448.284281][   T30] audit: type=1400 audit(1761389528.105:333): avc:  denied  { append } for  pid=20080 comm="syz.2.3237" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1448.500378][   T30] audit: type=1400 audit(1761389528.105:334): avc:  denied  { ioctl } for  pid=20080 comm="syz.2.3237" path="/dev/sg0" dev="devtmpfs" ino=755 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1448.622199][T20088] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3237'.
[ 1448.892528][T20089] bond25: Unable to set up delay as MII monitoring is disabled
[ 1448.940588][T20089] bond25 (unregistering): Released all slaves
[ 1449.075900][T18574] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1449.915106][T20100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1450.468670][T20105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1450.828202][   T30] audit: type=1400 audit(1761389530.645:335): avc:  denied  { read write } for  pid=20118 comm="syz.3.3245" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1450.834655][T20124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=280 sclass=netlink_route_socket pid=20124 comm=syz.2.3246
[ 1450.921074][   T30] audit: type=1400 audit(1761389530.645:336): avc:  denied  { open } for  pid=20118 comm="syz.3.3245" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1450.954277][T20127] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3245'.
[ 1451.024550][T20128] overlayfs: conflicting options: nfs_export=on,index=off
[ 1451.032735][   T30] audit: type=1400 audit(1761389530.775:337): avc:  denied  { create } for  pid=20118 comm="syz.3.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1451.313035][T20127] netlink: 'syz.3.3245': attribute type 21 has an invalid length.
[ 1451.356798][T20127] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3245'.
[ 1451.374817][T20129] batadv1: entered promiscuous mode
[ 1451.381760][T20129] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1451.389591][T20127] netlink: 'syz.3.3245': attribute type 4 has an invalid length.
[ 1451.408890][   T30] audit: type=1400 audit(1761389531.135:338): avc:  denied  { setopt } for  pid=20121 comm="syz.2.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1451.478803][T20127] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3245'.
[ 1451.488978][T20128] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1452.328505][ T8433] Bluetooth: hci5: Frame reassembly failed (-90)
[ 1453.032894][   T30] audit: type=1400 audit(1761389532.855:339): avc:  denied  { associate } for  pid=20161 comm="syz.4.3252" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1453.740386][T20168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1454.080848][T20184] netlink: 'syz.3.3255': attribute type 28 has an invalid length.
[ 1454.119755][T20184] netlink: 'syz.3.3255': attribute type 3 has an invalid length.
[ 1454.132211][T20179] all (unregistering): Released all slaves
[ 1454.140277][T20184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3255'.
[ 1454.161639][T20189] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1454.168774][T20186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3256'.
[ 1454.225272][T20186] netlink: 29 bytes leftover after parsing attributes in process `syz.0.3256'.
[ 1454.245604][T20186] tipc: Invalid UDP bearer configuration
[ 1454.245652][T20186] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1454.351642][T10731] Bluetooth: hci5: command 0x1003 tx timeout
[ 1454.358865][T18574] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1454.458778][ T5876] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1454.466664][ T5801] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1454.732098][ T5801] usb 3-1: device descriptor read/64, error -71
[ 1454.740889][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1454.781665][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1454.803519][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1454.833736][ T5876] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1454.852350][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1454.874789][ T5876] usb 4-1: config 0 descriptor??
[ 1455.021973][ T5801] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1455.062524][ T9470] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1455.229302][ T9470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1455.260479][ T9470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1455.271880][ T5801] usb 3-1: device descriptor read/64, error -71
[ 1455.272544][ T9470] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1455.296962][ T9470] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1455.306431][ T9470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1455.321733][ T9470] usb 2-1: config 0 descriptor??
[ 1455.381025][ T5801] usb usb3-port1: attempt power cycle
[ 1455.382271][T20179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1455.404322][T20179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1455.420059][T20179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1455.447631][T20179] team0: left promiscuous mode
[ 1455.452521][T20179] team_slave_0: left promiscuous mode
[ 1455.458095][T20179] team_slave_1: left promiscuous mode
[ 1455.464608][T20179] team0: left allmulticast mode
[ 1455.469494][T20179] team_slave_0: left allmulticast mode
[ 1455.475623][T20179] team_slave_1: left allmulticast mode
[ 1455.493040][ T5876] usbhid 4-1:0.0: can't add hid device: -71
[ 1455.501337][ T5876] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1455.527509][ T5876] usb 4-1: USB disconnect, device number 26
[ 1455.721362][ T5801] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1455.741347][ T5801] usb 3-1: device descriptor read/8, error -71
[ 1455.742481][ T9470] hid_parser_main: 28 callbacks suppressed
[ 1455.742496][ T9470] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1455.762579][ T9470] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1455.776625][   T30] audit: type=1400 audit(1761389535.585:340): avc:  denied  { create } for  pid=20244 comm="syz.0.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1455.778194][ T9470] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1455.844667][ T9470] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1455.856825][ T9470] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1455.864432][ T9470] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1455.871883][ T9470] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1455.879918][ T9470] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1455.946981][ T9470] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1455.966276][ T9470] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1455.989896][ T9470] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1456.005742][ T9470] usb 2-1: USB disconnect, device number 23
[ 1456.013399][ T5801] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1456.093934][ T5801] usb 3-1: device descriptor read/8, error -71
[ 1456.236049][ T5801] usb usb3-port1: unable to enumerate USB device
[ 1456.249117][T20262] ALSA: mixer_oss: invalid OSS volume ''
[ 1456.275215][T20255] fido_id[20255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1456.349457][T20263] autofs: Unknown parameter '„'
[ 1456.361250][T20263] FAULT_INJECTION: forcing a failure.
[ 1456.361250][T20263] name failslab, interval 1, probability 0, space 0, times 0
[ 1456.374173][T20263] CPU: 1 UID: 0 PID: 20263 Comm: syz.3.3265 Not tainted syzkaller #0 PREEMPT(full) 
[ 1456.374196][T20263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1456.374206][T20263] Call Trace:
[ 1456.374212][T20263]  <TASK>
[ 1456.374218][T20263]  dump_stack_lvl+0x16c/0x1f0
[ 1456.374248][T20263]  should_fail_ex+0x512/0x640
[ 1456.374269][T20263]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1456.374297][T20263]  should_failslab+0xc2/0x120
[ 1456.374317][T20263]  __kmalloc_cache_noprof+0x72/0x780
[ 1456.374342][T20263]  ? snd_pcm_oss_change_params_locked+0x247/0x3a30
[ 1456.374369][T20263]  ? snd_pcm_oss_change_params_locked+0x247/0x3a30
[ 1456.374387][T20263]  snd_pcm_oss_change_params_locked+0x247/0x3a30
[ 1456.374410][T20263]  ? __mutex_lock+0x1c5/0x1060
[ 1456.374426][T20263]  ? rcu_is_watching+0x12/0xc0
[ 1456.374448][T20263]  ? irqentry_exit+0x3b/0x90
[ 1456.374473][T20263]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1456.374497][T20263]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[ 1456.374516][T20263]  ? __pfx___mutex_lock+0x10/0x10
[ 1456.374531][T20263]  ? __lock_acquire+0xb8a/0x1c90
[ 1456.374562][T20263]  ? lock_is_held_type+0x45/0x150
[ 1456.374596][T20263]  snd_pcm_oss_make_ready+0xe6/0x1b0
[ 1456.374615][T20263]  snd_pcm_oss_set_trigger.isra.0+0x32/0x6b0
[ 1456.374638][T20263]  snd_pcm_oss_ioctl+0x1d38/0x37c0
[ 1456.374657][T20263]  ? hook_file_ioctl_common+0x145/0x410
[ 1456.374681][T20263]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 1456.374703][T20263]  ? selinux_file_ioctl+0x180/0x270
[ 1456.374721][T20263]  ? selinux_file_ioctl+0xb4/0x270
[ 1456.374740][T20263]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 1456.374760][T20263]  __x64_sys_ioctl+0x18e/0x210
[ 1456.374786][T20263]  do_syscall_64+0xcd/0xfa0
[ 1456.374813][T20263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1456.374829][T20263] RIP: 0033:0x7fb95458efc9
[ 1456.374843][T20263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1456.374858][T20263] RSP: 002b:00007fb9527ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1456.374875][T20263] RAX: ffffffffffffffda RBX: 00007fb9547e6180 RCX: 00007fb95458efc9
[ 1456.374886][T20263] RDX: 0000200000000100 RSI: 0000000040045010 RDI: 000000000000000c
[ 1456.374896][T20263] RBP: 00007fb9527ac090 R08: 0000000000000000 R09: 0000000000000000
[ 1456.374905][T20263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1456.374915][T20263] R13: 00007fb9547e6218 R14: 00007fb9547e6180 R15: 00007ffefba38038
[ 1456.374940][T20263]  </TASK>
[ 1457.692778][T20273] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1458.380310][T20278] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1458.686872][T20288] netlink: 'syz.2.3273': attribute type 1 has an invalid length.
[ 1459.334939][ T5801] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1459.525523][ T5801] usb 5-1: Using ep0 maxpacket: 16
[ 1459.533645][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1459.545124][ T5801] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1459.554751][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1459.629928][ T9172] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1459.889853][ T5801] usb 5-1: config 0 descriptor??
[ 1459.995434][T20307] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1460.003993][T20307] ipvlan1: entered promiscuous mode
[ 1460.016319][   T30] audit: type=1400 audit(1761389539.835:341): avc:  denied  { bind } for  pid=20306 comm="syz.3.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1460.037890][ T9172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1460.049582][ T9172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1460.060253][ T9172] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1460.073365][ T9172] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1460.083430][ T9172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1460.096187][ T9172] usb 2-1: config 0 descriptor??
[ 1460.132198][T20311] netlink: 'syz.3.3278': attribute type 39 has an invalid length.
[ 1460.322733][ T5801] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[ 1460.457914][   T30] audit: type=1400 audit(1761389540.165:342): avc:  denied  { bind } for  pid=20315 comm="syz.3.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1460.501151][   T30] audit: type=1400 audit(1761389540.165:343): avc:  denied  { map } for  pid=20315 comm="syz.3.3280" path="socket:[75855]" dev="sockfs" ino=75855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1460.549084][   T30] audit: type=1400 audit(1761389540.165:344): avc:  denied  { read accept } for  pid=20315 comm="syz.3.3280" path="socket:[75855]" dev="sockfs" ino=75855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1460.616549][ T9172] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1460.759610][ T5801] usb 5-1: USB disconnect, device number 18
[ 1461.001919][ T5801] usb 2-1: USB disconnect, device number 24
[ 1461.022398][   T30] audit: type=1400 audit(1761389540.795:345): avc:  denied  { append } for  pid=20322 comm="syz.3.3282" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1461.385975][T20329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1461.863132][T20346] ALSA: mixer_oss: invalid OSS volume ''
[ 1461.991429][T20346] syz.3.3289 (20346): drop_caches: 2
[ 1462.100673][   T30] audit: type=1400 audit(1761389541.915:346): avc:  denied  { block_suspend } for  pid=20347 comm="syz.0.3290" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1463.656972][T20370] netlink: 'syz.0.3295': attribute type 3 has an invalid length.
[ 1464.141706][ T1098] Bluetooth: hci5: Frame reassembly failed (-90)
[ 1464.531197][T20380] xt_ipcomp: unknown flags 1D
[ 1465.452078][   T30] audit: type=1400 audit(1761389545.275:347): avc:  denied  { load_policy } for  pid=20383 comm="syz.4.3299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1465.453580][T20388] capability: warning: `syz.1.3301' uses 32-bit capabilities (legacy support in use)
[ 1465.473457][T20384] SELinux: failed to load policy
[ 1465.573577][T20391] netlink: 'syz.1.3302': attribute type 1 has an invalid length.
[ 1466.030390][   T30] audit: type=1400 audit(1761389545.845:348): avc:  denied  { append } for  pid=20383 comm="syz.4.3299" name="comedi1" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1466.030934][T18574] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1466.060539][T10731] Bluetooth: hci5: command 0x1003 tx timeout
[ 1466.238080][   T30] audit: type=1400 audit(1761389546.055:349): avc:  denied  { read append } for  pid=20383 comm="syz.4.3299" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1466.262337][   T30] audit: type=1400 audit(1761389546.055:350): avc:  denied  { open } for  pid=20383 comm="syz.4.3299" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1466.285794][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1466.557763][   T30] audit: type=1400 audit(1761389546.375:351): avc:  denied  { getopt } for  pid=20412 comm="syz.3.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1466.600982][   T30] audit: type=1400 audit(1761389546.375:352): avc:  denied  { getopt } for  pid=20412 comm="syz.3.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1467.482856][T20428] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1467.537881][T20432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3311'.
[ 1468.498430][T20441] input: syz1 as /devices/virtual/input/input8
[ 1468.509283][T20441] autofs: Unknown parameter '„'
[ 1468.522890][   T30] audit: type=1400 audit(1761389548.315:353): avc:  denied  { ioctl } for  pid=20440 comm="syz.4.3313" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1468.879411][T20450] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001
[ 1469.311478][ T5949] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1469.491597][ T5949] usb 5-1: Using ep0 maxpacket: 32
[ 1469.555161][T20456] FAULT_INJECTION: forcing a failure.
[ 1469.555161][T20456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1469.569095][T20456] CPU: 0 UID: 0 PID: 20456 Comm: syz.0.3316 Not tainted syzkaller #0 PREEMPT(full) 
[ 1469.569118][T20456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1469.569128][T20456] Call Trace:
[ 1469.569133][T20456]  <TASK>
[ 1469.569139][T20456]  dump_stack_lvl+0x16c/0x1f0
[ 1469.569168][T20456]  should_fail_ex+0x512/0x640
[ 1469.569183][T20456]  _copy_to_user+0x32/0xd0
[ 1469.569197][T20456]  simple_read_from_buffer+0xcb/0x170
[ 1469.569214][T20456]  proc_fail_nth_read+0x197/0x240
[ 1469.569227][T20456]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1469.569240][T20456]  ? rw_verify_area+0xcf/0x6c0
[ 1469.569254][T20456]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1469.569266][T20456]  vfs_read+0x1e4/0xcf0
[ 1469.569277][T20456]  ? __pfx___mutex_lock+0x10/0x10
[ 1469.569287][T20456]  ? __pfx_vfs_read+0x10/0x10
[ 1469.569300][T20456]  ? __fget_files+0x20e/0x3c0
[ 1469.569309][T20456]  ? __kvm_handle_async_pf+0xa0/0xb0
[ 1469.569329][T20456]  ksys_read+0x12a/0x250
[ 1469.569337][T20456]  ? __pfx_ksys_read+0x10/0x10
[ 1469.569351][T20456]  do_syscall_64+0xcd/0xfa0
[ 1469.569367][T20456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1469.569377][T20456] RIP: 0033:0x7fe728b8d9dc
[ 1469.569387][T20456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1469.569396][T20456] RSP: 002b:00007fe7299f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1469.569407][T20456] RAX: ffffffffffffffda RBX: 00007fe728de6090 RCX: 00007fe728b8d9dc
[ 1469.569414][T20456] RDX: 000000000000000f RSI: 00007fe7299f70a0 RDI: 0000000000000009
[ 1469.569420][T20456] RBP: 00007fe7299f7090 R08: 0000000000000000 R09: 0000000000000000
[ 1469.569426][T20456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1469.569431][T20456] R13: 00007fe728de6128 R14: 00007fe728de6090 R15: 00007ffc4b6dec08
[ 1469.569445][T20456]  </TASK>
[ 1469.754163][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1470.048373][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1470.059824][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1470.070503][ T5949] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1470.079652][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1470.107211][ T5949] usb 5-1: config 0 descriptor??
[ 1470.230845][T14516] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[ 1470.392022][T14516] usb 4-1: config 0 has an invalid interface number: 172 but max is 0
[ 1470.402597][T14516] usb 4-1: config 0 has no interface number 0
[ 1470.527163][T14516] usb 4-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1
[ 1470.539806][T20472] ALSA: mixer_oss: invalid OSS volume ''
[ 1470.550926][T14516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1470.558948][T14516] usb 4-1: Product: syz
[ 1470.563242][T14516] usb 4-1: Manufacturer: syz
[ 1470.568202][T14516] usb 4-1: SerialNumber: syz
[ 1470.577596][T14516] usb 4-1: config 0 descriptor??
[ 1470.586682][T14516] qmi_wwan 4-1:0.172: bogus CDC Union: master=0, slave=0
[ 1470.664420][T20448] Cannot find del_set index 3 as target
[ 1470.674990][ T5949] usbhid 5-1:0.0: can't add hid device: -71
[ 1470.685966][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1470.715379][ T5949] usb 5-1: USB disconnect, device number 19
[ 1470.716672][T20478] syz.1.3322 (20478): drop_caches: 2
[ 1470.874461][   T30] audit: type=1400 audit(1761389550.645:354): avc:  denied  { create } for  pid=20464 comm="syz.3.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1470.910169][   T30] audit: type=1400 audit(1761389550.655:355): avc:  denied  { connect } for  pid=20464 comm="syz.3.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1470.982005][   T30] audit: type=1400 audit(1761389550.765:356): avc:  denied  { read } for  pid=20484 comm="syz.2.3325" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1471.005279][   T30] audit: type=1400 audit(1761389550.765:357): avc:  denied  { open } for  pid=20484 comm="syz.2.3325" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1471.090270][T20486] nfs4: Deprecated parameter 'intr'
[ 1471.095517][T20486] nfs4: Unknown parameter 'smackfsroot'
[ 1471.103397][T14516] qmi_wwan 4-1:0.172: probe with driver qmi_wwan failed with error -22
[ 1471.166425][T14516] usb 4-1: USB disconnect, device number 27
[ 1471.214468][   T30] audit: type=1400 audit(1761389550.925:358): avc:  denied  { connect } for  pid=20484 comm="syz.2.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1471.251451][   T30] audit: type=1400 audit(1761389550.925:359): avc:  denied  { ioctl } for  pid=20484 comm="syz.2.3325" path="socket:[76252]" dev="sockfs" ino=76252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1471.370925][   T30] audit: type=1400 audit(1761389551.185:360): avc:  denied  { watch } for  pid=20491 comm="syz.2.3327" path="pipe:[75477]" dev="pipefs" ino=75477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 1471.483725][   T30] audit: type=1400 audit(1761389551.185:361): avc:  denied  { setattr } for  pid=20491 comm="syz.2.3327" name="" dev="pipefs" ino=75477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 1471.596089][   T30] audit: type=1400 audit(1761389551.405:362): avc:  denied  { read } for  pid=20495 comm="syz.4.3328" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1471.639745][   T30] audit: type=1400 audit(1761389551.405:363): avc:  denied  { open } for  pid=20495 comm="syz.4.3328" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1471.751674][T14516] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1471.897318][T20515] fuse: Unknown parameter 'f;š%$k¯Äßÿ–d'
[ 1471.989263][T14516] usb 4-1: Using ep0 maxpacket: 32
[ 1472.006961][T14516] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[ 1472.016436][T14516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1472.025170][T14516] usb 4-1: Product: syz
[ 1472.029593][T14516] usb 4-1: Manufacturer: syz
[ 1472.034519][T14516] usb 4-1: SerialNumber: syz
[ 1472.046373][T14516] empeg 4-1:1.0: empeg converter detected
[ 1472.566935][T14516] usb 4-1: empeg converter now attached to ttyUSB0
[ 1472.786401][ T5890] usb 4-1: USB disconnect, device number 28
[ 1472.811010][ T5890] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0
[ 1472.819176][ T5890] empeg 4-1:1.0: device disconnected
[ 1473.711085][T18574] Bluetooth: hci0: command 0x0406 tx timeout
[ 1473.711185][T20496] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1474.556261][T20496] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1474.566083][T20496] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1474.572357][T20496] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1474.583271][T20496] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1474.589266][T20496] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1474.596835][T20496] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1474.603147][T20496] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1474.612582][T20496] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1474.618549][T20496] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1474.930574][T20528] tipc: Started in network mode
[ 1474.935573][T20528] tipc: Node identity bae43d7103d9, cluster identity 4711
[ 1474.944172][T20528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1474.955971][T20528] syzkaller0: entered promiscuous mode
[ 1474.961494][T20528] syzkaller0: entered allmulticast mode
[ 1475.259935][T20530] tipc: Resetting bearer <eth:syzkaller0>
[ 1475.284028][T20533] netlink: 'syz.4.3337': attribute type 21 has an invalid length.
[ 1475.292586][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'.
[ 1475.310839][ T5890] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1475.373959][T20539] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1475.543853][T20523] tipc: Resetting bearer <eth:syzkaller0>
[ 1475.549528][T20544] binder: BINDER_SET_CONTEXT_MGR already set
[ 1476.027665][T14516] tipc: Node number set to 3107798385
[ 1476.027916][T18574] Bluetooth: hci0: command 0x0406 tx timeout
[ 1476.035882][T20544] binder: 20537:20544 ioctl 4018620d 2000000002c0 returned -16
[ 1476.050810][ T5890] usb 1-1: Using ep0 maxpacket: 32
[ 1476.065502][T20523] tipc: Disabling bearer <eth:syzkaller0>
[ 1476.180370][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1476.433877][   T30] audit: type=1400 audit(1761389555.955:370): avc:  denied  { listen } for  pid=20540 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1476.457639][   T30] audit: type=1400 audit(1761389555.965:371): avc:  denied  { create } for  pid=20540 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1476.487486][   T30] audit: type=1400 audit(1761389555.965:372): avc:  denied  { setopt } for  pid=20540 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1476.557650][ T5890] usb 1-1: device descriptor read/all, error -71
[ 1476.591170][T18574] Bluetooth: hci1: command 0x0406 tx timeout
[ 1476.597225][T18574] Bluetooth: hci2: command 0x0406 tx timeout
[ 1476.670908][T18574] Bluetooth: hci3: command 0x0406 tx timeout
[ 1476.678142][T10731] Bluetooth: hci4: command 0x0405 tx timeout
[ 1476.863497][   T30] audit: type=1400 audit(1761389556.675:373): avc:  denied  { create } for  pid=20554 comm="syz.3.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1477.272778][   T30] audit: type=1400 audit(1761389556.715:374): avc:  denied  { setopt } for  pid=20554 comm="syz.3.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1477.385298][T20547] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1477.420085][T20582] 8021q: VLANs not supported on lo
[ 1477.423812][ T9172] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[ 1477.428685][   T30] audit: type=1400 audit(1761389557.235:375): avc:  denied  { ioctl } for  pid=20581 comm="syz.3.3349" path="socket:[75741]" dev="sockfs" ino=75741 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1477.560831][T20547] usb 2-1: Using ep0 maxpacket: 32
[ 1477.572505][T20547] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[ 1477.585253][T20547] usb 2-1: config 0 has no interface number 0
[ 1477.614861][T20547] usb 2-1: config 0 interface 12 has no altsetting 0
[ 1477.632776][T20547] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1477.649325][T20547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.674059][ T9172] usb 5-1: not running at top speed; connect to a high speed hub
[ 1477.715665][T20583] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 1477.733214][ T9172] usb 5-1: config 95 has an invalid interface number: 1 but max is 0
[ 1477.733240][ T9172] usb 5-1: config 95 has no interface number 0
[ 1477.733264][ T9172] usb 5-1: config 95 interface 1 has no altsetting 0
[ 1477.734977][ T9172] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[ 1477.735002][ T9172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.735025][ T9172] usb 5-1: Product: syz
[ 1477.735041][ T9172] usb 5-1: Manufacturer: syz
[ 1477.735056][ T9172] usb 5-1: SerialNumber: syz
[ 1477.891822][T20547] usb 2-1: Product: syz
[ 1477.896018][T20547] usb 2-1: Manufacturer: syz
[ 1477.900607][T20547] usb 2-1: SerialNumber: syz
[ 1477.994045][T20547] usb 2-1: config 0 descriptor??
[ 1478.023832][T20559] syzkaller1: entered promiscuous mode
[ 1478.035545][T20559] syzkaller1: entered allmulticast mode
[ 1478.070826][T20559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1478.101956][T20559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1478.144878][T20601] ALSA: mixer_oss: invalid OSS volume ''
[ 1478.352891][T20601] syz.3.3353 (20601): drop_caches: 2
[ 1478.455173][   T30] audit: type=1400 audit(1761389558.265:376): avc:  denied  { create } for  pid=20603 comm="syz.2.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1478.494304][ T9172] usb 5-1: USB disconnect, device number 20
[ 1478.684481][T10731] Bluetooth: hci2: command 0x0406 tx timeout
[ 1478.690522][T10731] Bluetooth: hci1: command 0x0406 tx timeout
[ 1478.751264][T18574] Bluetooth: hci3: command 0x0406 tx timeout
[ 1478.751338][T14130] Bluetooth: hci4: command 0x0405 tx timeout
[ 1478.914698][T20616] FAULT_INJECTION: forcing a failure.
[ 1478.914698][T20616] name failslab, interval 1, probability 0, space 0, times 0
[ 1478.952387][T20616] CPU: 0 UID: 0 PID: 20616 Comm: syz.0.3357 Not tainted syzkaller #0 PREEMPT(full) 
[ 1478.952413][T20616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1478.952424][T20616] Call Trace:
[ 1478.952430][T20616]  <TASK>
[ 1478.952438][T20616]  dump_stack_lvl+0x16c/0x1f0
[ 1478.952469][T20616]  should_fail_ex+0x512/0x640
[ 1478.952489][T20616]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1478.952517][T20616]  should_failslab+0xc2/0x120
[ 1478.952539][T20616]  __kmalloc_cache_noprof+0x72/0x780
[ 1478.952564][T20616]  ? raw_open+0x8b/0x500
[ 1478.952587][T20616]  ? raw_open+0x8b/0x500
[ 1478.952603][T20616]  raw_open+0x8b/0x500
[ 1478.952618][T20616]  ? __pfx_raw_open+0x10/0x10
[ 1478.952635][T20616]  misc_open+0x26d/0x450
[ 1478.952655][T20616]  ? __pfx_misc_open+0x10/0x10
[ 1478.952675][T20616]  chrdev_open+0x234/0x6a0
[ 1478.952696][T20616]  ? __pfx_chrdev_open+0x10/0x10
[ 1478.952717][T20616]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 1478.952742][T20616]  do_dentry_open+0x982/0x1530
[ 1478.952761][T20616]  ? __pfx_chrdev_open+0x10/0x10
[ 1478.952783][T20616]  vfs_open+0x82/0x3f0
[ 1478.952808][T20616]  path_openat+0x1de4/0x2cb0
[ 1478.952836][T20616]  ? __pfx_path_openat+0x10/0x10
[ 1478.952855][T20616]  ? __lock_acquire+0xb8a/0x1c90
[ 1478.952886][T20616]  do_filp_open+0x20b/0x470
[ 1478.952905][T20616]  ? __pfx_do_filp_open+0x10/0x10
[ 1478.952943][T20616]  ? alloc_fd+0x471/0x7d0
[ 1478.952968][T20616]  do_sys_openat2+0x11b/0x1d0
[ 1478.952990][T20616]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1478.953011][T20616]  ? find_held_lock+0x2b/0x80
[ 1478.953038][T20616]  ? handle_mm_fault+0x2ab/0xd10
[ 1478.953068][T20616]  __x64_sys_openat+0x174/0x210
[ 1478.953091][T20616]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1478.953116][T20616]  ? do_user_addr_fault+0x843/0x1370
[ 1478.953142][T20616]  do_syscall_64+0xcd/0xfa0
[ 1478.953169][T20616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1478.953187][T20616] RIP: 0033:0x7fe728b8d810
[ 1478.953203][T20616] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[ 1478.953220][T20616] RSP: 002b:00007fe729a15ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1478.953237][T20616] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe728b8d810
[ 1478.953249][T20616] RDX: 0000000000000002 RSI: 00007fe728c11c6c RDI: 00000000ffffff9c
[ 1478.953259][T20616] RBP: 00007fe728c11c6c R08: 0000000000000000 R09: 0000000000000000
[ 1478.953270][T20616] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 1478.953280][T20616] R13: 0000000000000024 R14: 00002000000008c0 R15: 00007ffc4b6dec08
[ 1478.953306][T20616]  </TASK>
[ 1480.156407][T20624] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1480.173511][T20624] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1480.292241][T20624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3359'.
[ 1480.357089][T20547] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1480.380004][T20547] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[ 1480.431186][T20547] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1480.439984][T20547] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[ 1480.455675][T20547] usb 2-1: USB disconnect, device number 25
[ 1480.529755][T20628] netlink: 'syz.4.3361': attribute type 1 has an invalid length.
[ 1480.545780][T20628] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1480.579841][T20628] ip6erspan0: entered promiscuous mode
[ 1480.587109][T20628] bond28: (slave ip6erspan0): making interface the new active one
[ 1480.595840][T20628] bond28: (slave ip6erspan0): Enslaving as an active interface with an up link
[ 1480.633279][   T30] audit: type=1400 audit(1761389560.455:377): avc:  denied  { checkpoint_restore } for  pid=20629 comm="syz.3.3362" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1480.831155][T10731] Bluetooth: hci4: command 0x0405 tx timeout
[ 1481.160975][T20652] netlink: 'syz.4.3367': attribute type 21 has an invalid length.
[ 1481.168873][T20652] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3367'.
[ 1481.178150][T20652] netlink: 'syz.4.3367': attribute type 5 has an invalid length.
[ 1481.185918][T20652] netlink: 'syz.4.3367': attribute type 6 has an invalid length.
[ 1481.193686][T20652] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3367'.
[ 1481.351120][T20200] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1481.549498][T20655] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1481.684393][T20200] usb 2-1: Using ep0 maxpacket: 16
[ 1481.878406][T20200] usb 2-1: config 0 has an invalid interface number: 202 but max is 1
[ 1481.897405][T20200] usb 2-1: config 0 has no interface number 1
[ 1481.910872][T20200] usb 2-1: config 0 interface 202 has no altsetting 0
[ 1481.927866][T20200] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1481.940441][T20200] usb 2-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=cd.6b
[ 1481.954624][   T30] audit: type=1400 audit(1761389561.765:378): avc:  denied  { map } for  pid=20659 comm="syz.0.3371" path="socket:[76855]" dev="sockfs" ino=76855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1481.977832][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1482.001102][T20200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1482.022021][T20200] usb 2-1: Product: syz
[ 1482.026202][T20200] usb 2-1: Manufacturer: syz
[ 1482.037093][T20200] usb 2-1: SerialNumber: syz
[ 1482.050300][T20200] usb 2-1: config 0 descriptor??
[ 1482.055772][T20661] netlink: 'syz.3.3365': attribute type 1 has an invalid length.
[ 1482.064573][T20661] netlink: 'syz.3.3365': attribute type 2 has an invalid length.
[ 1482.109775][T20673] Invalid ELF header magic: != ELF
[ 1482.124573][T20673] 9pnet_fd: Insufficient options for proto=fd
[ 1482.220220][T20669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3370'.
[ 1482.295291][T20200] imon 2-1:0.202: inconsistent driver matching
[ 1482.314064][T20200] imon 2-1:0.202: unable to register, err -22
[ 1482.326276][T20200] imon 2-1:0.202: probe with driver imon failed with error -22
[ 1482.374853][T20200] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1482.404511][T20200] imon 2-1:0.0: unable to initialize intf0, err -19
[ 1482.425863][T20200] imon:imon_probe: failed to initialize context!
[ 1482.610841][T20200] imon 2-1:0.0: unable to register, err -19
[ 1482.663274][T20200] usb 2-1: USB disconnect, device number 26
[ 1483.242869][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'.
[ 1484.049337][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.061267][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.392698][T20547] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1484.661251][   T30] audit: type=1400 audit(1761389564.425:379): avc:  denied  { connect } for  pid=20698 comm="syz.4.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1484.926001][T20547] usb 4-1: Using ep0 maxpacket: 8
[ 1484.960497][T20547] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[ 1484.968703][   T30] audit: type=1400 audit(1761389564.475:380): avc:  denied  { read } for  pid=20698 comm="syz.4.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1484.988342][T20547] usb 4-1: config 0 has no interface number 0
[ 1485.004348][T20547] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1485.050467][T20547] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1485.276912][T20711] fuse: Unknown parameter 'Éóè­øÌ×ò7ä69l:f«þð+F‹'
[ 1485.348234][T20547] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1485.526010][T20547] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1485.639952][T20547] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1485.665787][T20547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1485.699780][T20547] usb 4-1: config 0 descriptor??
[ 1485.730184][T20547] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1485.804375][T20692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'.
[ 1486.000384][T20200] usb 4-1: USB disconnect, device number 29
[ 1486.167857][T20200] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[ 1486.431511][   T30] audit: type=1400 audit(1761389566.185:381): avc:  denied  { ioctl } for  pid=20712 comm="syz.1.3382" path="socket:[76982]" dev="sockfs" ino=76982 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1486.858769][T20743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3385'.
[ 1487.336798][T20746] syz.4.3387 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1487.481469][   T30] audit: type=1400 audit(1761389567.185:382): avc:  denied  { listen } for  pid=20749 comm="syz.0.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1487.514468][   T30] audit: type=1400 audit(1761389567.335:383): avc:  denied  { accept } for  pid=20749 comm="syz.0.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1487.564260][   T30] audit: type=1400 audit(1761389567.335:384): avc:  denied  { name_bind } for  pid=20748 comm="syz.1.3390" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 1487.630836][T20756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3388'.
[ 1487.643191][T20756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3388'.
[ 1488.300925][T20764] ALSA: mixer_oss: invalid OSS volume ''
[ 1488.450101][T20768] FAULT_INJECTION: forcing a failure.
[ 1488.450101][T20768] name failslab, interval 1, probability 0, space 0, times 0
[ 1488.784446][T20768] CPU: 1 UID: 0 PID: 20768 Comm: syz.3.3395 Not tainted syzkaller #0 PREEMPT(full) 
[ 1488.784471][T20768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1488.784482][T20768] Call Trace:
[ 1488.784488][T20768]  <TASK>
[ 1488.784495][T20768]  dump_stack_lvl+0x16c/0x1f0
[ 1488.784523][T20768]  should_fail_ex+0x512/0x640
[ 1488.784542][T20768]  ? kmem_cache_alloc_lru_noprof+0x66/0x6e0
[ 1488.784571][T20768]  should_failslab+0xc2/0x120
[ 1488.784595][T20768]  kmem_cache_alloc_lru_noprof+0x79/0x6e0
[ 1488.784620][T20768]  ? __d_alloc+0x32/0xae0
[ 1488.784643][T20768]  ? __d_alloc+0x32/0xae0
[ 1488.784659][T20768]  __d_alloc+0x32/0xae0
[ 1488.784681][T20768]  d_alloc_pseudo+0x1c/0xc0
[ 1488.784706][T20768]  alloc_file_pseudo+0xcf/0x230
[ 1488.784730][T20768]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1488.784752][T20768]  ? __pfx_unix_socketpair+0x10/0x10
[ 1488.784777][T20768]  sock_alloc_file+0x50/0x210
[ 1488.784802][T20768]  __sys_socketpair+0x31c/0x5a0
[ 1488.784821][T20768]  ? __pfx___sys_socketpair+0x10/0x10
[ 1488.784836][T20768]  ? fput+0x9b/0xd0
[ 1488.784864][T20768]  __x64_sys_socketpair+0x96/0x100
[ 1488.784880][T20768]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1488.784904][T20768]  do_syscall_64+0xcd/0xfa0
[ 1488.784931][T20768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1488.784948][T20768] RIP: 0033:0x7fb95458efc9
[ 1488.784962][T20768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1488.784977][T20768] RSP: 002b:00007fb9527ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 1488.784994][T20768] RAX: ffffffffffffffda RBX: 00007fb9547e5fa0 RCX: 00007fb95458efc9
[ 1488.785005][T20768] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001
[ 1488.785014][T20768] RBP: 00007fb9527ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1488.785023][T20768] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[ 1488.785032][T20768] R13: 00007fb9547e6038 R14: 00007fb9547e5fa0 R15: 00007ffefba38038
[ 1488.785056][T20768]  </TASK>
[ 1489.980885][T20795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3401'.
[ 1490.811638][T20803] netlink: 'syz.2.3405': attribute type 1 has an invalid length.
[ 1490.916720][T20806] bond27: (slave vxcan7): The slave device specified does not support setting the MAC address
[ 1490.928348][T20806] bond27: (slave vxcan7): Error -95 calling set_mac_address
[ 1491.263967][T20811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3404'.
[ 1491.836822][T20814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3406'.
[ 1491.910900][T20814] FAULT_INJECTION: forcing a failure.
[ 1491.910900][T20814] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1491.955835][T20814] CPU: 1 UID: 0 PID: 20814 Comm: syz.4.3406 Not tainted syzkaller #0 PREEMPT(full) 
[ 1491.955858][T20814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1491.955864][T20814] Call Trace:
[ 1491.955868][T20814]  <TASK>
[ 1491.955872][T20814]  dump_stack_lvl+0x16c/0x1f0
[ 1491.955893][T20814]  should_fail_ex+0x512/0x640
[ 1491.955907][T20814]  _copy_to_user+0x32/0xd0
[ 1491.955922][T20814]  simple_read_from_buffer+0xcb/0x170
[ 1491.955940][T20814]  proc_fail_nth_read+0x197/0x240
[ 1491.955953][T20814]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1491.955966][T20814]  ? rw_verify_area+0xcf/0x6c0
[ 1491.955981][T20814]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1491.955993][T20814]  vfs_read+0x1e4/0xcf0
[ 1491.956004][T20814]  ? __pfx___mutex_lock+0x10/0x10
[ 1491.956014][T20814]  ? __pfx_vfs_read+0x10/0x10
[ 1491.956028][T20814]  ? __fget_files+0x20e/0x3c0
[ 1491.956042][T20814]  ksys_read+0x12a/0x250
[ 1491.956051][T20814]  ? __pfx_ksys_read+0x10/0x10
[ 1491.956065][T20814]  do_syscall_64+0xcd/0xfa0
[ 1491.956081][T20814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1491.956092][T20814] RIP: 0033:0x7fcca498d9dc
[ 1491.956100][T20814] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1491.956110][T20814] RSP: 002b:00007fcca5912030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1491.956121][T20814] RAX: ffffffffffffffda RBX: 00007fcca4be5fa0 RCX: 00007fcca498d9dc
[ 1491.956128][T20814] RDX: 000000000000000f RSI: 00007fcca59120a0 RDI: 0000000000000004
[ 1491.956134][T20814] RBP: 00007fcca5912090 R08: 0000000000000000 R09: 0000000000000000
[ 1491.956140][T20814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1491.956146][T20814] R13: 00007fcca4be6038 R14: 00007fcca4be5fa0 R15: 00007ffe459f3998
[ 1491.956167][T20814]  </TASK>
[ 1492.380899][T19316] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1492.546142][T19316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1492.558349][T19316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1492.621108][T19316] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1492.675130][T19316] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1492.771953][T19316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1492.890347][T19316] usb 4-1: config 0 descriptor??
[ 1493.164280][T20838] netlink: 'syz.4.3413': attribute type 6 has an invalid length.
[ 1493.603772][T20547] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1493.614224][T19316] hid_parser_main: 66 callbacks suppressed
[ 1493.614236][T19316] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1493.865744][T19316] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1493.890819][T19316] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1493.918494][T19316] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1493.928599][T19316] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1493.938701][T19316] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1493.955697][T19316] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1493.964930][T19316] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1493.975004][T19316] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1493.990773][T19316] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1494.020778][T20547] usb 5-1: Using ep0 maxpacket: 16
[ 1494.029465][T20547] usb 5-1: config index 0 descriptor too short (expected 8192, got 36)
[ 1494.040332][T20547] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1494.051904][   T30] audit: type=1400 audit(1761389573.865:385): avc:  denied  { mounton } for  pid=20850 comm="syz.0.3417" path="/proc/2840/task" dev="proc" ino=77212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 1494.085974][T20547] usb 5-1: config 0 has no interfaces?
[ 1494.092782][T19316] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1494.109183][T20547] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1494.132334][T20547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.147867][T19316] usb 4-1: USB disconnect, device number 30
[ 1494.262266][T20547] usb 5-1: config 0 descriptor??
[ 1495.137336][T20834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1495.145891][T20834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1495.175915][T20547] usb 5-1: string descriptor 0 read error: -71
[ 1495.176441][T20853] fido_id[20853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1495.198494][T20547] usb 5-1: USB disconnect, device number 21
[ 1495.313714][T20863] BUG: Bad page state in process syz.0.3419  pfn:2aadf
[ 1495.320594][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802aadf000 pfn:0x2aadf
[ 1495.330682][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1495.337815][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1495.346400][T20863] raw: ffff88802aadf000 3fffffffffffffff 00000000ffffffff 0000000000000000
[ 1495.354970][T20863] page dumped because: page_pool leak
[ 1495.360310][T20863] page_owner tracks the page as allocated
[ 1495.366186][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313646639, free_ts 1495303461185
[ 1495.383543][T20863]  post_alloc_hook+0x1c0/0x230
[ 1495.388291][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1495.393827][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1495.399697][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1495.405237][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1495.411301][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1495.416647][T20863]  page_pool_alloc_frag_netmem+0x219/0x9c0
[ 1495.422438][T20863]  skb_pp_cow_data+0x584/0xff0
[ 1495.427180][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1495.432208][T20863]  do_xdp_generic+0x530/0x1320
[ 1495.436976][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1495.441646][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1495.446559][T20863]  vfs_write+0x7d3/0x11d0
[ 1495.450972][T20863]  ksys_write+0x12a/0x250
[ 1495.455272][T20863]  do_syscall_64+0xcd/0xfa0
[ 1495.459757][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1495.465662][T20863] page last free pid 15 tgid 15 stack trace:
[ 1495.471624][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1495.476799][T20863]  tlb_remove_table_rcu+0x121/0x320
[ 1495.481983][T20863]  rcu_core+0x79c/0x1530
[ 1495.486221][T20863]  handle_softirqs+0x219/0x8e0
[ 1495.490987][T20863]  run_ksoftirqd+0x3a/0x60
[ 1495.495409][T20863]  smpboot_thread_fn+0x3f7/0xae0
[ 1495.500329][T20863]  kthread+0x3c5/0x780
[ 1495.504391][T20863]  ret_from_fork+0x675/0x7d0
[ 1495.508970][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1495.513736][T20863] Modules linked in:
[ 1495.517619][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Not tainted syzkaller #0 PREEMPT(full) 
[ 1495.517633][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1495.517639][T20863] Call Trace:
[ 1495.517645][T20863]  <TASK>
[ 1495.517650][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1495.517667][T20863]  bad_page+0xcf/0x220
[ 1495.517678][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1495.517688][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1495.517699][T20863]  __free_frozen_pages+0x845/0x1160
[ 1495.517713][T20863]  ? mark_held_locks+0x49/0x80
[ 1495.517729][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1495.517741][T20863]  page_frag_free+0x27f/0x2e0
[ 1495.517752][T20863]  __xdp_return+0x3ab/0xab0
[ 1495.517770][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1495.517786][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1495.517796][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1495.517815][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1495.517828][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1495.517851][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1495.517871][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1495.517886][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1495.517905][T20863]  ? find_held_lock+0x2b/0x80
[ 1495.517918][T20863]  ? tun_get+0x191/0x370
[ 1495.517933][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1495.517948][T20863]  vfs_write+0x7d3/0x11d0
[ 1495.517959][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1495.517974][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1495.517983][T20863]  ? find_held_lock+0x2b/0x80
[ 1495.518003][T20863]  ksys_write+0x12a/0x250
[ 1495.518013][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1495.518026][T20863]  do_syscall_64+0xcd/0xfa0
[ 1495.518052][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1495.518070][T20863] RIP: 0033:0x7fe728b8da7f
[ 1495.518085][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1495.518095][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1495.518105][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1495.518112][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1495.518118][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1495.518124][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1495.518131][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1495.518144][T20863]  </TASK>
[ 1495.518149][T20863] Disabling lock debugging due to kernel taint
[ 1495.520780][   T30] audit: type=1400 audit(1761389575.305:386): avc:  denied  { write } for  pid=20862 comm="syz.0.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1495.527505][T20863] BUG: Bad page state in process syz.0.3419  pfn:790e5
[ 1495.787511][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804a4ed600 pfn:0x790e5
[ 1495.797561][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1495.804658][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1495.813229][T20863] raw: ffff88804a4ed600 0000000000000001 00000000ffffffff 0000000000000000
[ 1495.822054][T20863] page dumped because: page_pool leak
[ 1495.827404][T20863] page_owner tracks the page as allocated
[ 1495.833097][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313640094, free_ts 1495303469781
[ 1495.850453][T20863]  post_alloc_hook+0x1c0/0x230
[ 1495.855218][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1495.860756][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1495.866624][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1495.872154][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1495.878191][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1495.883555][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1495.888295][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1495.893303][T20863]  do_xdp_generic+0x530/0x1320
[ 1495.898046][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1495.902709][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1495.907626][T20863]  vfs_write+0x7d3/0x11d0
[ 1495.911949][T20863]  ksys_write+0x12a/0x250
[ 1495.916246][T20863]  do_syscall_64+0xcd/0xfa0
[ 1495.920738][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1495.926625][T20863] page last free pid 15 tgid 15 stack trace:
[ 1495.932622][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1495.937936][T20863]  tlb_remove_table_rcu+0x121/0x320
[ 1495.943139][T20863]  rcu_core+0x79c/0x1530
[ 1495.947362][T20863]  handle_softirqs+0x219/0x8e0
[ 1495.952116][T20863]  run_ksoftirqd+0x3a/0x60
[ 1495.956509][T20863]  smpboot_thread_fn+0x3f7/0xae0
[ 1495.961435][T20863]  kthread+0x3c5/0x780
[ 1495.965483][T20863]  ret_from_fork+0x675/0x7d0
[ 1495.970059][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1495.974807][T20863] Modules linked in:
[ 1495.978677][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1495.978693][T20863] Tainted: [B]=BAD_PAGE
[ 1495.978697][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1495.978703][T20863] Call Trace:
[ 1495.978709][T20863]  <TASK>
[ 1495.978715][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1495.978732][T20863]  bad_page+0xcf/0x220
[ 1495.978743][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1495.978753][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1495.978763][T20863]  __free_frozen_pages+0x845/0x1160
[ 1495.978776][T20863]  ? mark_held_locks+0x49/0x80
[ 1495.978791][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1495.978802][T20863]  page_frag_free+0x27f/0x2e0
[ 1495.978812][T20863]  __xdp_return+0x3ab/0xab0
[ 1495.978829][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1495.978842][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1495.978850][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1495.978865][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1495.978877][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1495.978893][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1495.978910][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1495.978924][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1495.978939][T20863]  ? find_held_lock+0x2b/0x80
[ 1495.978952][T20863]  ? tun_get+0x191/0x370
[ 1495.978965][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1495.978984][T20863]  vfs_write+0x7d3/0x11d0
[ 1495.979001][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1495.979021][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1495.979030][T20863]  ? find_held_lock+0x2b/0x80
[ 1495.979046][T20863]  ksys_write+0x12a/0x250
[ 1495.979055][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1495.979066][T20863]  do_syscall_64+0xcd/0xfa0
[ 1495.979081][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1495.979091][T20863] RIP: 0033:0x7fe728b8da7f
[ 1495.979100][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1495.979110][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1495.979120][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1495.979127][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1495.979133][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1495.979139][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1495.979145][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1495.979155][T20863]  </TASK>
[ 1495.979162][T20863] BUG: Bad page state in process syz.0.3419  pfn:28df1
[ 1496.228088][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x28df1
[ 1496.238128][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1496.245216][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1496.253786][T20863] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 1496.262357][T20863] page dumped because: page_pool leak
[ 1496.267695][T20863] page_owner tracks the page as allocated
[ 1496.273390][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313633182, free_ts 1495303478013
[ 1496.290736][T20863]  post_alloc_hook+0x1c0/0x230
[ 1496.295483][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1496.301015][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1496.306892][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1496.312426][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1496.318465][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1496.323837][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1496.328576][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1496.333603][T20863]  do_xdp_generic+0x530/0x1320
[ 1496.338336][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1496.342996][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1496.347905][T20863]  vfs_write+0x7d3/0x11d0
[ 1496.352211][T20863]  ksys_write+0x12a/0x250
[ 1496.356529][T20863]  do_syscall_64+0xcd/0xfa0
[ 1496.361018][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.366879][T20863] page last free pid 15 tgid 15 stack trace:
[ 1496.372833][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1496.378002][T20863]  tlb_remove_table_rcu+0x121/0x320
[ 1496.383181][T20863]  rcu_core+0x79c/0x1530
[ 1496.387395][T20863]  handle_softirqs+0x219/0x8e0
[ 1496.392137][T20863]  run_ksoftirqd+0x3a/0x60
[ 1496.396524][T20863]  smpboot_thread_fn+0x3f7/0xae0
[ 1496.401442][T20863]  kthread+0x3c5/0x780
[ 1496.405484][T20863]  ret_from_fork+0x675/0x7d0
[ 1496.410043][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1496.414792][T20863] Modules linked in:
[ 1496.418666][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1496.418683][T20863] Tainted: [B]=BAD_PAGE
[ 1496.418687][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1496.418693][T20863] Call Trace:
[ 1496.418698][T20863]  <TASK>
[ 1496.418703][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1496.418723][T20863]  bad_page+0xcf/0x220
[ 1496.418738][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1496.418755][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1496.418771][T20863]  __free_frozen_pages+0x845/0x1160
[ 1496.418784][T20863]  ? mark_held_locks+0x49/0x80
[ 1496.418800][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1496.418810][T20863]  page_frag_free+0x27f/0x2e0
[ 1496.418820][T20863]  __xdp_return+0x3ab/0xab0
[ 1496.418838][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1496.418850][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1496.418859][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1496.418874][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1496.418886][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1496.418902][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1496.418918][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1496.418932][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1496.418947][T20863]  ? find_held_lock+0x2b/0x80
[ 1496.418959][T20863]  ? tun_get+0x191/0x370
[ 1496.418972][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1496.418986][T20863]  vfs_write+0x7d3/0x11d0
[ 1496.418996][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1496.419010][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1496.419018][T20863]  ? find_held_lock+0x2b/0x80
[ 1496.419034][T20863]  ksys_write+0x12a/0x250
[ 1496.419043][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1496.419054][T20863]  do_syscall_64+0xcd/0xfa0
[ 1496.419069][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.419080][T20863] RIP: 0033:0x7fe728b8da7f
[ 1496.419089][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1496.419100][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1496.419110][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1496.419117][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1496.419123][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1496.419129][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1496.419135][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1496.419145][T20863]  </TASK>
[ 1496.419153][T20863] BUG: Bad page state in process syz.0.3419  pfn:79eb5
[ 1496.668209][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x79eb5
[ 1496.677651][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1496.684744][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1496.693320][T20863] raw: 0000000200000000 0000000000000001 00000000ffffffff 0000000000000000
[ 1496.701888][T20863] page dumped because: page_pool leak
[ 1496.707228][T20863] page_owner tracks the page as allocated
[ 1496.712932][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313626684, free_ts 1495303486352
[ 1496.730291][T20863]  post_alloc_hook+0x1c0/0x230
[ 1496.735049][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1496.740574][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1496.746458][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1496.751998][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1496.758040][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1496.763398][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1496.768135][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1496.773146][T20863]  do_xdp_generic+0x530/0x1320
[ 1496.777881][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1496.782560][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1496.787473][T20863]  vfs_write+0x7d3/0x11d0
[ 1496.791797][T20863]  ksys_write+0x12a/0x250
[ 1496.796098][T20863]  do_syscall_64+0xcd/0xfa0
[ 1496.800584][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.806471][T20863] page last free pid 15 tgid 15 stack trace:
[ 1496.812441][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1496.817621][T20863]  tlb_remove_table_rcu+0x121/0x320
[ 1496.822813][T20863]  rcu_core+0x79c/0x1530
[ 1496.827036][T20863]  handle_softirqs+0x219/0x8e0
[ 1496.831795][T20863]  run_ksoftirqd+0x3a/0x60
[ 1496.836193][T20863]  smpboot_thread_fn+0x3f7/0xae0
[ 1496.841130][T20863]  kthread+0x3c5/0x780
[ 1496.845175][T20863]  ret_from_fork+0x675/0x7d0
[ 1496.849744][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1496.854497][T20863] Modules linked in:
[ 1496.858368][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1496.858386][T20863] Tainted: [B]=BAD_PAGE
[ 1496.858390][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1496.858396][T20863] Call Trace:
[ 1496.858402][T20863]  <TASK>
[ 1496.858407][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1496.858424][T20863]  bad_page+0xcf/0x220
[ 1496.858434][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1496.858443][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1496.858453][T20863]  __free_frozen_pages+0x845/0x1160
[ 1496.858472][T20863]  ? mark_held_locks+0x49/0x80
[ 1496.858488][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1496.858498][T20863]  page_frag_free+0x27f/0x2e0
[ 1496.858508][T20863]  __xdp_return+0x3ab/0xab0
[ 1496.858526][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1496.858539][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1496.858547][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1496.858562][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1496.858574][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1496.858590][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1496.858607][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1496.858620][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1496.858636][T20863]  ? find_held_lock+0x2b/0x80
[ 1496.858648][T20863]  ? tun_get+0x191/0x370
[ 1496.858661][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1496.858675][T20863]  vfs_write+0x7d3/0x11d0
[ 1496.858685][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1496.858699][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1496.858708][T20863]  ? find_held_lock+0x2b/0x80
[ 1496.858725][T20863]  ksys_write+0x12a/0x250
[ 1496.858734][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1496.858745][T20863]  do_syscall_64+0xcd/0xfa0
[ 1496.858760][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.858771][T20863] RIP: 0033:0x7fe728b8da7f
[ 1496.858781][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1496.858791][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1496.858801][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1496.858807][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1496.858814][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1496.858820][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1496.858826][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1496.858836][T20863]  </TASK>
[ 1496.858843][T20863] BUG: Bad page state in process syz.0.3419  pfn:77ace
[ 1497.108378][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77ace
[ 1497.118422][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1497.125864][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1497.134431][T20863] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 1497.142988][T20863] page dumped because: page_pool leak
[ 1497.148342][T20863] page_owner tracks the page as allocated
[ 1497.154034][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313620290, free_ts 1495303495210
[ 1497.171482][T20863]  post_alloc_hook+0x1c0/0x230
[ 1497.176246][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1497.181778][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1497.187659][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1497.193188][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1497.199227][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1497.204578][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1497.209321][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1497.214337][T20863]  do_xdp_generic+0x530/0x1320
[ 1497.219081][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1497.223740][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1497.228652][T20863]  vfs_write+0x7d3/0x11d0
[ 1497.232957][T20863]  ksys_write+0x12a/0x250
[ 1497.237267][T20863]  do_syscall_64+0xcd/0xfa0
[ 1497.241756][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1497.247625][T20863] page last free pid 15 tgid 15 stack trace:
[ 1497.253577][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1497.258767][T20863]  tlb_remove_table_rcu+0x121/0x320
[ 1497.263985][T20863]  rcu_core+0x79c/0x1530
[ 1497.268218][T20863]  handle_softirqs+0x219/0x8e0
[ 1497.272966][T20863]  run_ksoftirqd+0x3a/0x60
[ 1497.277357][T20863]  smpboot_thread_fn+0x3f7/0xae0
[ 1497.282278][T20863]  kthread+0x3c5/0x780
[ 1497.286314][T20863]  ret_from_fork+0x675/0x7d0
[ 1497.290881][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1497.295622][T20863] Modules linked in:
[ 1497.299502][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1497.299518][T20863] Tainted: [B]=BAD_PAGE
[ 1497.299522][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1497.299529][T20863] Call Trace:
[ 1497.299533][T20863]  <TASK>
[ 1497.299537][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1497.299554][T20863]  bad_page+0xcf/0x220
[ 1497.299565][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1497.299574][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1497.299584][T20863]  __free_frozen_pages+0x845/0x1160
[ 1497.299597][T20863]  ? mark_held_locks+0x49/0x80
[ 1497.299612][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1497.299623][T20863]  page_frag_free+0x27f/0x2e0
[ 1497.299632][T20863]  __xdp_return+0x3ab/0xab0
[ 1497.299649][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1497.299662][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1497.299671][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1497.299686][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1497.299698][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1497.299714][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1497.299731][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1497.299744][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1497.299759][T20863]  ? find_held_lock+0x2b/0x80
[ 1497.299772][T20863]  ? tun_get+0x191/0x370
[ 1497.299785][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1497.299798][T20863]  vfs_write+0x7d3/0x11d0
[ 1497.299809][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1497.299823][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1497.299831][T20863]  ? find_held_lock+0x2b/0x80
[ 1497.299846][T20863]  ksys_write+0x12a/0x250
[ 1497.299855][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1497.299866][T20863]  do_syscall_64+0xcd/0xfa0
[ 1497.299883][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1497.299893][T20863] RIP: 0033:0x7fe728b8da7f
[ 1497.299902][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1497.299912][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1497.299922][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1497.299929][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1497.299935][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1497.299942][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1497.299948][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1497.299957][T20863]  </TASK>
[ 1497.299965][T20863] BUG: Bad page state in process syz.0.3419  pfn:52e57
[ 1497.549195][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000118 pfn:0x52e57
[ 1497.558626][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1497.565980][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1497.574538][T20863] raw: 0000000200000118 0000000000000001 00000000ffffffff 0000000000000000
[ 1497.583099][T20863] page dumped because: page_pool leak
[ 1497.588440][T20863] page_owner tracks the page as allocated
[ 1497.594128][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313613867, free_ts 1495303500070
[ 1497.611463][T20863]  post_alloc_hook+0x1c0/0x230
[ 1497.616203][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1497.621739][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1497.627603][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1497.633143][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1497.639178][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1497.644523][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1497.649264][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1497.654265][T20863]  do_xdp_generic+0x530/0x1320
[ 1497.658998][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1497.663659][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1497.668574][T20863]  vfs_write+0x7d3/0x11d0
[ 1497.672877][T20863]  ksys_write+0x12a/0x250
[ 1497.677172][T20863]  do_syscall_64+0xcd/0xfa0
[ 1497.681653][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1497.687511][T20863] page last free pid 15 tgid 15 stack trace:
[ 1497.693460][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1497.698630][T20863]  tlb_remove_table_rcu+0x121/0x320
[ 1497.703804][T20863]  rcu_core+0x79c/0x1530
[ 1497.708024][T20863]  handle_softirqs+0x219/0x8e0
[ 1497.712763][T20863]  run_ksoftirqd+0x3a/0x60
[ 1497.717157][T20863]  smpboot_thread_fn+0x3f7/0xae0
[ 1497.722074][T20863]  kthread+0x3c5/0x780
[ 1497.726108][T20863]  ret_from_fork+0x675/0x7d0
[ 1497.730662][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1497.735406][T20863] Modules linked in:
[ 1497.739282][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1497.739298][T20863] Tainted: [B]=BAD_PAGE
[ 1497.739302][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1497.739308][T20863] Call Trace:
[ 1497.739314][T20863]  <TASK>
[ 1497.739319][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1497.739335][T20863]  bad_page+0xcf/0x220
[ 1497.739344][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1497.739353][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1497.739363][T20863]  __free_frozen_pages+0x845/0x1160
[ 1497.739376][T20863]  ? mark_held_locks+0x49/0x80
[ 1497.739391][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1497.739401][T20863]  page_frag_free+0x27f/0x2e0
[ 1497.739411][T20863]  __xdp_return+0x3ab/0xab0
[ 1497.739427][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1497.739448][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1497.739457][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1497.739471][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1497.739483][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1497.739503][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1497.739518][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1497.739532][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1497.739547][T20863]  ? find_held_lock+0x2b/0x80
[ 1497.739559][T20863]  ? tun_get+0x191/0x370
[ 1497.739572][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1497.739586][T20863]  vfs_write+0x7d3/0x11d0
[ 1497.739596][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1497.739610][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1497.739618][T20863]  ? find_held_lock+0x2b/0x80
[ 1497.739633][T20863]  ksys_write+0x12a/0x250
[ 1497.739642][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1497.739653][T20863]  do_syscall_64+0xcd/0xfa0
[ 1497.739668][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1497.739679][T20863] RIP: 0033:0x7fe728b8da7f
[ 1497.739687][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1497.739697][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1497.739706][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1497.739713][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1497.739719][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1497.739725][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1497.739731][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1497.739741][T20863]  </TASK>
[ 1497.739749][T20863] BUG: Bad page state in process syz.0.3419  pfn:75892
[ 1497.988712][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x75892
[ 1497.998760][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1498.005857][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1498.014442][T20863] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 1498.023026][T20863] page dumped because: page_pool leak
[ 1498.028388][T20863] page_owner tracks the page as allocated
[ 1498.034102][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313607383, free_ts 1495303508487
[ 1498.051457][T20863]  post_alloc_hook+0x1c0/0x230
[ 1498.056203][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1498.061743][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1498.067611][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1498.073140][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1498.079191][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1498.084540][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1498.089286][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1498.094291][T20863]  do_xdp_generic+0x530/0x1320
[ 1498.099025][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1498.103687][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1498.108606][T20863]  vfs_write+0x7d3/0x11d0
[ 1498.112923][T20863]  ksys_write+0x12a/0x250
[ 1498.117221][T20863]  do_syscall_64+0xcd/0xfa0
[ 1498.121720][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1498.127582][T20863] page last free pid 15 tgid 15 stack trace:
[ 1498.133536][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1498.138705][T20863]  tlb_remove_table_rcu+0x121/0x320
[ 1498.143884][T20863]  rcu_core+0x79c/0x1530
[ 1498.148109][T20863]  handle_softirqs+0x219/0x8e0
[ 1498.152853][T20863]  run_ksoftirqd+0x3a/0x60
[ 1498.157241][T20863]  smpboot_thread_fn+0x3f7/0xae0
[ 1498.162161][T20863]  kthread+0x3c5/0x780
[ 1498.166199][T20863]  ret_from_fork+0x675/0x7d0
[ 1498.170783][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1498.175521][T20863] Modules linked in:
[ 1498.179386][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1498.179402][T20863] Tainted: [B]=BAD_PAGE
[ 1498.179405][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1498.179411][T20863] Call Trace:
[ 1498.179417][T20863]  <TASK>
[ 1498.179423][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1498.179446][T20863]  bad_page+0xcf/0x220
[ 1498.179456][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1498.179466][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1498.179475][T20863]  __free_frozen_pages+0x845/0x1160
[ 1498.179488][T20863]  ? mark_held_locks+0x49/0x80
[ 1498.179508][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1498.179519][T20863]  page_frag_free+0x27f/0x2e0
[ 1498.179528][T20863]  __xdp_return+0x3ab/0xab0
[ 1498.179545][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1498.179558][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1498.179566][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1498.179581][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1498.179593][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1498.179609][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1498.179625][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1498.179639][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1498.179654][T20863]  ? find_held_lock+0x2b/0x80
[ 1498.179666][T20863]  ? tun_get+0x191/0x370
[ 1498.179679][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1498.179693][T20863]  vfs_write+0x7d3/0x11d0
[ 1498.179702][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1498.179716][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1498.179725][T20863]  ? find_held_lock+0x2b/0x80
[ 1498.179740][T20863]  ksys_write+0x12a/0x250
[ 1498.179749][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1498.179760][T20863]  do_syscall_64+0xcd/0xfa0
[ 1498.179775][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1498.179786][T20863] RIP: 0033:0x7fe728b8da7f
[ 1498.179795][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1498.179805][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1498.179815][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1498.179822][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1498.179828][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1498.179834][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1498.179841][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1498.179850][T20863]  </TASK>
[ 1498.179858][T20863] BUG: Bad page state in process syz.0.3419  pfn:3213e
[ 1498.428777][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x3213e
[ 1498.438815][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1498.445906][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1498.454463][T20863] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 1498.463019][T20863] page dumped because: page_pool leak
[ 1498.468365][T20863] page_owner tracks the page as allocated
[ 1498.474052][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313600332, free_ts 1495303516832
[ 1498.491388][T20863]  post_alloc_hook+0x1c0/0x230
[ 1498.496124][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1498.501651][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1498.507515][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1498.513046][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1498.519082][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1498.524441][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1498.529177][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1498.534180][T20863]  do_xdp_generic+0x530/0x1320
[ 1498.538912][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1498.543567][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1498.548473][T20863]  vfs_write+0x7d3/0x11d0
[ 1498.552787][T20863]  ksys_write+0x12a/0x250
[ 1498.557088][T20863]  do_syscall_64+0xcd/0xfa0
[ 1498.561572][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1498.567431][T20863] page last free pid 15 tgid 15 stack trace:
[ 1498.573379][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1498.578546][T20863]  tlb_remove_table_rcu+0x121/0x320
[ 1498.583720][T20863]  rcu_core+0x79c/0x1530
[ 1498.587937][T20863]  handle_softirqs+0x219/0x8e0
[ 1498.592678][T20863]  run_ksoftirqd+0x3a/0x60
[ 1498.597065][T20863]  smpboot_thread_fn+0x3f7/0xae0
[ 1498.601998][T20863]  kthread+0x3c5/0x780
[ 1498.606036][T20863]  ret_from_fork+0x675/0x7d0
[ 1498.610594][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1498.615338][T20863] Modules linked in:
[ 1498.619201][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1498.619217][T20863] Tainted: [B]=BAD_PAGE
[ 1498.619220][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1498.619227][T20863] Call Trace:
[ 1498.619231][T20863]  <TASK>
[ 1498.619236][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1498.619252][T20863]  bad_page+0xcf/0x220
[ 1498.619261][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1498.619271][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1498.619280][T20863]  __free_frozen_pages+0x845/0x1160
[ 1498.619293][T20863]  ? mark_held_locks+0x49/0x80
[ 1498.619309][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1498.619319][T20863]  page_frag_free+0x27f/0x2e0
[ 1498.619329][T20863]  __xdp_return+0x3ab/0xab0
[ 1498.619345][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1498.619357][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1498.619366][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1498.619381][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1498.619393][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1498.619409][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1498.619435][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1498.619448][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1498.619463][T20863]  ? find_held_lock+0x2b/0x80
[ 1498.619476][T20863]  ? tun_get+0x191/0x370
[ 1498.619492][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1498.619506][T20863]  vfs_write+0x7d3/0x11d0
[ 1498.619515][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1498.619529][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1498.619538][T20863]  ? find_held_lock+0x2b/0x80
[ 1498.619553][T20863]  ksys_write+0x12a/0x250
[ 1498.619563][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1498.619573][T20863]  do_syscall_64+0xcd/0xfa0
[ 1498.619589][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1498.619599][T20863] RIP: 0033:0x7fe728b8da7f
[ 1498.619607][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1498.619617][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1498.619627][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1498.619633][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1498.619640][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1498.619646][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1498.619652][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1498.619661][T20863]  </TASK>
[ 1498.619670][T20863] BUG: Bad page state in process syz.0.3419  pfn:24fe2
[ 1498.868614][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024fe2000 pfn:0x24fe2
[ 1498.878672][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1498.885772][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1498.894353][T20863] raw: ffff888024fe2000 0000000000000001 00000000ffffffff 0000000000000000
[ 1498.902919][T20863] page dumped because: page_pool leak
[ 1498.908262][T20863] page_owner tracks the page as allocated
[ 1498.913975][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313593827, free_ts 1495303522739
[ 1498.931342][T20863]  post_alloc_hook+0x1c0/0x230
[ 1498.936088][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1498.941630][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1498.947497][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1498.953068][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1498.959119][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1498.964497][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1498.969247][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1498.974280][T20863]  do_xdp_generic+0x530/0x1320
[ 1498.979029][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1498.983714][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1498.988631][T20863]  vfs_write+0x7d3/0x11d0
[ 1498.992947][T20863]  ksys_write+0x12a/0x250
[ 1498.997256][T20863]  do_syscall_64+0xcd/0xfa0
[ 1499.001747][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.007625][T20863] page last free pid 15 tgid 15 stack trace:
[ 1499.013595][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1499.018776][T20863]  tlb_remove_table_rcu+0x121/0x320
[ 1499.023977][T20863]  rcu_core+0x79c/0x1530
[ 1499.028190][T20863]  handle_softirqs+0x219/0x8e0
[ 1499.032935][T20863]  run_ksoftirqd+0x3a/0x60
[ 1499.037322][T20863]  smpboot_thread_fn+0x3f7/0xae0
[ 1499.042250][T20863]  kthread+0x3c5/0x780
[ 1499.046287][T20863]  ret_from_fork+0x675/0x7d0
[ 1499.050855][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1499.055602][T20863] Modules linked in:
[ 1499.059469][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1499.059485][T20863] Tainted: [B]=BAD_PAGE
[ 1499.059489][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1499.059496][T20863] Call Trace:
[ 1499.059501][T20863]  <TASK>
[ 1499.059507][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1499.059523][T20863]  bad_page+0xcf/0x220
[ 1499.059533][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1499.059543][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1499.059552][T20863]  __free_frozen_pages+0x845/0x1160
[ 1499.059565][T20863]  ? mark_held_locks+0x49/0x80
[ 1499.059581][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1499.059595][T20863]  page_frag_free+0x27f/0x2e0
[ 1499.059604][T20863]  __xdp_return+0x3ab/0xab0
[ 1499.059621][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1499.059634][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1499.059643][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1499.059658][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1499.059670][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1499.059685][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1499.059702][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1499.059716][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1499.059732][T20863]  ? find_held_lock+0x2b/0x80
[ 1499.059744][T20863]  ? tun_get+0x191/0x370
[ 1499.059757][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1499.059771][T20863]  vfs_write+0x7d3/0x11d0
[ 1499.059784][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1499.059798][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1499.059807][T20863]  ? find_held_lock+0x2b/0x80
[ 1499.059822][T20863]  ksys_write+0x12a/0x250
[ 1499.059831][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1499.059842][T20863]  do_syscall_64+0xcd/0xfa0
[ 1499.059858][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.059869][T20863] RIP: 0033:0x7fe728b8da7f
[ 1499.059878][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1499.059888][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1499.059898][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1499.059905][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1499.059911][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1499.059917][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1499.059923][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1499.059933][T20863]  </TASK>
[ 1499.059940][T20863] BUG: Bad page state in process syz.0.3419  pfn:7979b
[ 1499.309160][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807979b2d0 pfn:0x7979b
[ 1499.319211][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1499.326311][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1499.334943][T20863] raw: ffff88807979b2d0 0000000000000001 00000000ffffffff 0000000000000000
[ 1499.343511][T20863] page dumped because: page_pool leak
[ 1499.348853][T20863] page_owner tracks the page as allocated
[ 1499.354561][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313586990, free_ts 1495303527693
[ 1499.371902][T20863]  post_alloc_hook+0x1c0/0x230
[ 1499.376654][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1499.382182][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1499.388049][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1499.393581][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1499.399616][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1499.404964][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1499.409705][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1499.414713][T20863]  do_xdp_generic+0x530/0x1320
[ 1499.419444][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1499.424099][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1499.429007][T20863]  vfs_write+0x7d3/0x11d0
[ 1499.433314][T20863]  ksys_write+0x12a/0x250
[ 1499.437611][T20863]  do_syscall_64+0xcd/0xfa0
[ 1499.442110][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.447976][T20863] page last free pid 15 tgid 15 stack trace:
[ 1499.453940][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1499.459110][T20863]  rcu_core+0x79c/0x1530
[ 1499.463332][T20863]  handle_softirqs+0x219/0x8e0
[ 1499.468068][T20863]  run_ksoftirqd+0x3a/0x60
[ 1499.472463][T20863]  smpboot_thread_fn+0x3f7/0xae0
[ 1499.477391][T20863]  kthread+0x3c5/0x780
[ 1499.481436][T20863]  ret_from_fork+0x675/0x7d0
[ 1499.485993][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1499.490741][T20863] Modules linked in:
[ 1499.494607][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1499.494623][T20863] Tainted: [B]=BAD_PAGE
[ 1499.494627][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1499.494632][T20863] Call Trace:
[ 1499.494638][T20863]  <TASK>
[ 1499.494644][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1499.494660][T20863]  bad_page+0xcf/0x220
[ 1499.494670][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1499.494679][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1499.494689][T20863]  __free_frozen_pages+0x845/0x1160
[ 1499.494707][T20863]  ? mark_held_locks+0x49/0x80
[ 1499.494722][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1499.494733][T20863]  page_frag_free+0x27f/0x2e0
[ 1499.494742][T20863]  __xdp_return+0x3ab/0xab0
[ 1499.494758][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1499.494771][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1499.494780][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1499.494795][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1499.494806][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1499.494822][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1499.494839][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1499.494852][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1499.494867][T20863]  ? find_held_lock+0x2b/0x80
[ 1499.494880][T20863]  ? tun_get+0x191/0x370
[ 1499.494893][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1499.494906][T20863]  vfs_write+0x7d3/0x11d0
[ 1499.494916][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1499.494930][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1499.494938][T20863]  ? find_held_lock+0x2b/0x80
[ 1499.494953][T20863]  ksys_write+0x12a/0x250
[ 1499.494962][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1499.494973][T20863]  do_syscall_64+0xcd/0xfa0
[ 1499.494988][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.494998][T20863] RIP: 0033:0x7fe728b8da7f
[ 1499.495008][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1499.495018][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1499.495028][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1499.495035][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1499.495041][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1499.495047][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1499.495053][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1499.495063][T20863]  </TASK>
[ 1499.495070][T20863] BUG: Bad page state in process syz.0.3419  pfn:5c77a
[ 1499.743999][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x5c77a
[ 1499.753428][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1499.760506][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1499.769067][T20863] raw: 0000000200000000 0000000000000001 00000000ffffffff 0000000000000000
[ 1499.777642][T20863] page dumped because: page_pool leak
[ 1499.783012][T20863] page_owner tracks the page as allocated
[ 1499.788714][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313580542, free_ts 1495304973314
[ 1499.806075][T20863]  post_alloc_hook+0x1c0/0x230
[ 1499.810834][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1499.816352][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1499.822224][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1499.827743][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1499.833788][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1499.839126][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1499.843902][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1499.848922][T20863]  do_xdp_generic+0x530/0x1320
[ 1499.853675][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1499.858333][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1499.863266][T20863]  vfs_write+0x7d3/0x11d0
[ 1499.867568][T20863]  ksys_write+0x12a/0x250
[ 1499.871877][T20863]  do_syscall_64+0xcd/0xfa0
[ 1499.876356][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.882236][T20863] page last free pid 19316 tgid 19316 stack trace:
[ 1499.888706][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1499.893978][T20863]  vfree+0x1fd/0xb50
[ 1499.897845][T20863]  delayed_vfree_work+0x56/0x70
[ 1499.902671][T20863]  process_one_work+0x9cf/0x1b70
[ 1499.907577][T20863]  worker_thread+0x6c8/0xf10
[ 1499.912141][T20863]  kthread+0x3c5/0x780
[ 1499.916177][T20863]  ret_from_fork+0x675/0x7d0
[ 1499.920747][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1499.925490][T20863] Modules linked in:
[ 1499.929356][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1499.929372][T20863] Tainted: [B]=BAD_PAGE
[ 1499.929376][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1499.929382][T20863] Call Trace:
[ 1499.929388][T20863]  <TASK>
[ 1499.929393][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1499.929410][T20863]  bad_page+0xcf/0x220
[ 1499.929420][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1499.929429][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1499.929439][T20863]  __free_frozen_pages+0x845/0x1160
[ 1499.929452][T20863]  ? mark_held_locks+0x49/0x80
[ 1499.929471][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1499.929482][T20863]  page_frag_free+0x27f/0x2e0
[ 1499.929492][T20863]  __xdp_return+0x3ab/0xab0
[ 1499.929509][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1499.929522][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1499.929531][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1499.929545][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1499.929557][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1499.929573][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1499.929590][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1499.929603][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1499.929619][T20863]  ? find_held_lock+0x2b/0x80
[ 1499.929631][T20863]  ? tun_get+0x191/0x370
[ 1499.929644][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1499.929658][T20863]  vfs_write+0x7d3/0x11d0
[ 1499.929667][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1499.929682][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1499.929690][T20863]  ? find_held_lock+0x2b/0x80
[ 1499.929705][T20863]  ksys_write+0x12a/0x250
[ 1499.929714][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1499.929725][T20863]  do_syscall_64+0xcd/0xfa0
[ 1499.929740][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.929750][T20863] RIP: 0033:0x7fe728b8da7f
[ 1499.929759][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1499.929769][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1499.929779][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1499.929786][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1499.929792][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1499.929798][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1499.929804][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1499.929814][T20863]  </TASK>
[ 1499.929821][T20863] BUG: Bad page state in process syz.0.3419  pfn:5344e
[ 1500.178914][T20863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x5344e
[ 1500.188955][T20863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1500.196043][T20863] raw: 00fff00000000000 dead000000000040 ffff88801e6dc000 0000000000000000
[ 1500.204611][T20863] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[ 1500.213175][T20863] page dumped because: page_pool leak
[ 1500.218508][T20863] page_owner tracks the page as allocated
[ 1500.224193][T20863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20863, tgid 20862 (syz.0.3419), ts 1495313573843, free_ts 1495304981199
[ 1500.241528][T20863]  post_alloc_hook+0x1c0/0x230
[ 1500.246265][T20863]  get_page_from_freelist+0x10a3/0x3a30
[ 1500.251798][T20863]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1500.257668][T20863]  alloc_pages_bulk_noprof+0x71c/0x1410
[ 1500.263213][T20863]  __page_pool_alloc_netmems_slow+0x1c7/0xca0
[ 1500.269251][T20863]  page_pool_alloc_netmems+0xc4/0x190
[ 1500.274601][T20863]  skb_pp_cow_data+0x7c0/0xff0
[ 1500.279339][T20863]  skb_cow_data_for_xdp+0x88/0xb0
[ 1500.284350][T20863]  do_xdp_generic+0x530/0x1320
[ 1500.289089][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1500.293761][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1500.298672][T20863]  vfs_write+0x7d3/0x11d0
[ 1500.302979][T20863]  ksys_write+0x12a/0x250
[ 1500.307275][T20863]  do_syscall_64+0xcd/0xfa0
[ 1500.311758][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1500.317619][T20863] page last free pid 19316 tgid 19316 stack trace:
[ 1500.324091][T20863]  __free_frozen_pages+0x7df/0x1160
[ 1500.329259][T20863]  vfree+0x1fd/0xb50
[ 1500.333131][T20863]  delayed_vfree_work+0x56/0x70
[ 1500.337949][T20863]  process_one_work+0x9cf/0x1b70
[ 1500.342864][T20863]  worker_thread+0x6c8/0xf10
[ 1500.347424][T20863]  kthread+0x3c5/0x780
[ 1500.351471][T20863]  ret_from_fork+0x675/0x7d0
[ 1500.356290][T20863]  ret_from_fork_asm+0x1a/0x30
[ 1500.361130][T20863] Modules linked in:
[ 1500.365001][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.0.3419 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1500.365017][T20863] Tainted: [B]=BAD_PAGE
[ 1500.365021][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1500.365027][T20863] Call Trace:
[ 1500.365033][T20863]  <TASK>
[ 1500.365038][T20863]  dump_stack_lvl+0x16c/0x1f0
[ 1500.365057][T20863]  bad_page+0xcf/0x220
[ 1500.365067][T20863]  ? __pfx_bad_page+0x10/0x10
[ 1500.365077][T20863]  ? page_bad_reason+0x9d/0x1f0
[ 1500.365086][T20863]  __free_frozen_pages+0x845/0x1160
[ 1500.365100][T20863]  ? mark_held_locks+0x49/0x80
[ 1500.365116][T20863]  ? kasan_quarantine_put+0x10a/0x240
[ 1500.365127][T20863]  page_frag_free+0x27f/0x2e0
[ 1500.365136][T20863]  __xdp_return+0x3ab/0xab0
[ 1500.365153][T20863]  bpf_xdp_adjust_tail+0x887/0xcb0
[ 1500.365166][T20863]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[ 1500.365174][T20863]  bpf_prog_run_generic_xdp+0x61f/0x1570
[ 1500.365190][T20863]  do_xdp_generic+0x8e6/0x1320
[ 1500.365201][T20863]  ? __pfx_do_xdp_generic+0x10/0x10
[ 1500.365217][T20863]  tun_get_user+0x1d41/0x3cc0
[ 1500.365234][T20863]  ? __pfx_tun_get_user+0x10/0x10
[ 1500.365248][T20863]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1500.365263][T20863]  ? find_held_lock+0x2b/0x80
[ 1500.365276][T20863]  ? tun_get+0x191/0x370
[ 1500.365289][T20863]  tun_chr_write_iter+0xdc/0x210
[ 1500.365302][T20863]  vfs_write+0x7d3/0x11d0
[ 1500.365312][T20863]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1500.365331][T20863]  ? __pfx_vfs_write+0x10/0x10
[ 1500.365340][T20863]  ? find_held_lock+0x2b/0x80
[ 1500.365355][T20863]  ksys_write+0x12a/0x250
[ 1500.365365][T20863]  ? __pfx_ksys_write+0x10/0x10
[ 1500.365376][T20863]  do_syscall_64+0xcd/0xfa0
[ 1500.365391][T20863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1500.365406][T20863] RIP: 0033:0x7fe728b8da7f
[ 1500.365416][T20863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1500.365426][T20863] RSP: 002b:00007fe729a18000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1500.365436][T20863] RAX: ffffffffffffffda RBX: 00007fe728de5fa0 RCX: 00007fe728b8da7f
[ 1500.365442][T20863] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[ 1500.365449][T20863] RBP: 00007fe728c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1500.365455][T20863] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[ 1500.365461][T20863] R13: 00007fe728de6038 R14: 00007fe728de5fa0 R15: 00007ffc4b6dec08
[ 1500.365471][T20863]  </TASK>
[ 1500.661199][   T30] audit: type=1400 audit(1761389580.455:387): avc:  denied  { read } for  pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 1500.715842][   T30] audit: type=1400 audit(1761389580.455:388): avc:  denied  { search } for  pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1500.738339][   T30] audit: type=1400 audit(1761389580.455:389): avc:  denied  { search } for  pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1500.760020][   T30] audit: type=1400 audit(1761389580.455:390): avc:  denied  { add_name } for  pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1500.780986][   T30] audit: type=1400 audit(1761389580.455:391): avc:  denied  { create } for  pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1500.801635][   T30] audit: type=1400 audit(1761389580.455:392): avc:  denied  { append open } for  pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1500.824819][   T30] audit: type=1400 audit(1761389580.455:393): avc:  denied  { getattr } for  pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1