last executing test programs: 1m39.971880473s ago: executing program 1 (id=485): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x1000004, &(0x7f00000000c0)={'trans=virtio,', {[{@dfltgid}]}}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x4008af14, &(0x7f0000002000)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x81, 0xb0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x100, 0x1}, {0x6, 0x24, 0x1a, 0x5389, 0x1e}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4c, 0xb, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xf, 0x4c, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x1d7, 0xf7, 0x7, 0x3}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x5, 0x5, 0x6, 0x10, 0xfe}, 0x49, &(0x7f0000000280)={0x5, 0xf, 0x49, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0xbc, 0xa, 0x3, 0x9, 0x1b}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8, 0xd, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "458b3d89f37d00fcfdb1849a69f31c2c"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0xc, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b068ce09048abf82bbe4f17fce9e8269"}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x438}}, {0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "ffebfdbd2497a236762700515337e8f942fc70cc698626c44139a7e76a3ec4c65fb693c68926645edd5c271c82912ccfa41ad2c5df7620f9dd481cec7c8e91d992020696b36e32ed4361bd83634208f7c68aae3dc8ce5048655a04906a6196f6585092f271e2e825be95b6c6c21a3a4390e78cbdb470ed2d23f788430f5e3f658752f65cb7cb6478bdf35cfcc1e2f201c4980fa83205e71b9c289161ac81e04992f012513780a25e4e6c6424cf7501a0ebae586c1528e36fc944334cb9dfdd49afff6ff1bc248965e81f4430b2fcb7abb9ce3f8b87fcbfb46a5345b2d8bb3594e679"}}, {0x7, &(0x7f0000000480)=@string={0x7, 0x3, "fbfcb1e38e"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3401}}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m36.991302725s ago: executing program 1 (id=498): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001900010001000000fbdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb0000000f00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff04000000000000000000000000000000010000000000000000000000000000000200000000000000feffffffffffffff09000000000000000000000000002000000000000000000000000000002000000000000000000000030000000100000001000000000000000c001c"], 0xc4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m36.889537638s ago: executing program 1 (id=499): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000400)={0x7ff, 0x2, 0x6, 0x288f, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x8, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f00000001c0), 0x80) getpeername$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000440)=0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/keycreate\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x3c}}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) 1m35.909572894s ago: executing program 1 (id=501): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m29.901738413s ago: executing program 1 (id=519): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0xb6, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000004300)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004200)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/225, 0xe1}], 0x1, &(0x7f0000000440)=""/155, 0x9b}, 0x8}, {{&(0x7f0000000500)=@ax25={{}, [@remote, @null, @rose, @bcast, @default, @bcast, @rose, @default]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000680)}], 0x2, &(0x7f0000000700)=""/4096, 0x1000}, 0x8f}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001700)=""/77, 0x4d}, {&(0x7f0000001780)=""/198, 0xc6}, {&(0x7f0000001880)=""/29, 0x1d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/81, 0x51}, {&(0x7f0000002940)=""/186, 0xba}, {&(0x7f0000002a00)=""/212, 0xd4}], 0x7, &(0x7f0000002b80)=""/4096, 0x1000}, 0xfffffff9}, {{&(0x7f0000003b80)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003c00)=""/25, 0x19}, {&(0x7f0000003c40)=""/67, 0x43}, {&(0x7f0000003cc0)=""/153, 0x99}, {&(0x7f0000003d80)=""/197, 0xc5}, {&(0x7f0000003e80)=""/123, 0x7b}, {&(0x7f0000003f00)=""/34, 0x22}, {&(0x7f0000003f40)=""/252, 0xfc}, {&(0x7f0000004040)=""/97, 0x61}], 0x8, &(0x7f0000004140)=""/137, 0x89}, 0x7}], 0x4, 0x2000, &(0x7f0000004340)={r3, r4+10000000}) 1m29.7226491s ago: executing program 1 (id=521): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) lsm_get_self_attr(0x66, 0x0, &(0x7f00000012c0), 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) io_uring_setup(0x49c6, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x0, 0x0, 0x0, 0x4000007}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000180)={@local, 0x6}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}}, 0x40810) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000100)={@local, 0x5dd}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) 1m14.48861925s ago: executing program 32 (id=521): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) lsm_get_self_attr(0x66, 0x0, &(0x7f00000012c0), 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) io_uring_setup(0x49c6, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x0, 0x0, 0x0, 0x4000007}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000180)={@local, 0x6}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}}, 0x40810) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000100)={@local, 0x5dd}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) 12.536587543s ago: executing program 3 (id=721): epoll_create1(0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)='\a\x00\x00\x00', 0x4) 12.493391134s ago: executing program 5 (id=722): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket(0x2a, 0x2, 0x10000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000280)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="f08219f4f7abd19b66b9800000c00f326635004000000f30baf80c66b8c0bb248966efbafc0c66ed9a0500200166b86c0000000f23c80f21f866350000b0000f23f80f07ba4200ed66b95b03000066b842b81a7c66ba000000000f30c6c08b", 0x5f}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/warn_count', 0x400800, 0x1c2) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.300584835s ago: executing program 2 (id=724): fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe5d) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) open(&(0x7f0000000480)='./cgroup/../file0\x00', 0x4000, 0x2) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0xfff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x10d083) writev(r3, &(0x7f0000000080)=[{&(0x7f0000003400)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000003340)="b02c", 0x2}], 0x2) r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r4, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, 0x0) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x0, 0x0) r7 = dup(r2) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000380)={0x3, 0x7, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil, 0x55c, r7}) readv(r8, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4040, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) fchdir(r6) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x22020400) openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000540)) 12.202709543s ago: executing program 3 (id=725): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYBLOB="c88845e7e05ae5ad00ff0000000000000017"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) r6 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="8ed69c", 0x3}], 0x2, &(0x7f0000001840)=[@rights={{0x30, 0x1, 0x1, [r4, r8, r1, r2, r4, r4, r1, r7]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r4, r9, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0xf8, 0x24008001}}, {{&(0x7f0000001940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000019c0)="55939c09f2490bdc854c10480800000002fe7a499348b548c759c6cda2788ff21ff7377fffa675b081afaa61ce7cdb877da5a57c385fb3623a717f15", 0x3c}], 0x1, &(0x7f0000001a40), 0x0, 0x44000}}, {{&(0x7f0000001b00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001b80)="48a1d37a2f8127cee41b14a779aa78cdcb338f453c6fcb39b97bbb956b7e3c64aa74aa2a1b735f78a660423d30ec5ac3598b8b9833fbe56e8cec1982e2695ec6b7e608ccc912bcbe25efcd94a46693", 0x4f}, {&(0x7f0000001c00)="914b40262eab2b3bf23531e32f2c0b46c5377ce15af0717a89d94a387361dd23a76f8d341551589b057c43085039f9574256dbe22a09944fd1213c10dbb634e00c3e6749ae402caf348600b46b8c8d39e6e22de234cd265e47a847a2730979d70cb13c10b6de55565c38dcab396cc06b241f65e02d0e3afbb0e718fb914482bb032edf3da5241d7ff4d67e184c046e5a61da0a7176f97e419bdb70229a5cb719a21288d27a71a45bbbbd26e00c8a7f", 0xaf}, {&(0x7f0000001cc0)="84681b971a3068e71129cd758fdfa0a1859e111c583c56870dc446b67eaa0077eb59890473bd7f0282d29e16d9dcb733693efa04b7fbf3dfc6223566a0ded89be1c0dfd0748feb94cc76b2130f7e3fce9a6c8b4bb044e60414a40d0871045f3cad0ea30a338fe198b288a9688bbea9ffa9fcf7", 0x73}, {&(0x7f0000001d40)="6ca979a3c8a02a6bce90e0c8623de8ca2e792d0997ee93568018c99790b241fcaf63e0c54b21e3a4bf71cd0fe9d8b01d9ac220e1f7477581544fd64beaa567bf5591a90c0a18c8b9ffb3b352b7c282530cb7fc53f5cdc216071e0705d709108d012ff6886c7aa8bc8a750d292ab92efc60ba29bd62ac2f52f19bdce27f61d3878e38b9291dc924", 0x87}, {&(0x7f0000001e00)="3f52b7171273a39cf348bba5e1688c17c1c858b342d523df9d8cc3ddbbb3a49b62d29f6e7ae9a2d7e0382a6a49fdebecacad514fd2baf9d553037420874a72aad0755c8fc0d37274", 0x48}], 0x5, 0x0, 0x0, 0x4000}}, {{&(0x7f0000001f00)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000001f80)="67c5ec60af8c71d83c014a9cac78475c85ee244d16eeec53dc36e9c47209759e88b6c59d96d367222cb503018bc536ee2a014d11e28bcf4fd49b23492b8655b5a20f9153c9738cced175efff98fcbb1513a352cba6500d028d3ab9d131313b5c20f0989fca1c6ee73b6f288ce8c9a310", 0x70}, {&(0x7f00000021c0)="4fc04c8cee24056ce300320e6b59e1af3d3fd23fa15ab5faf2bebb6956696382606e944aefe615341f7e11afa5bf1a2fd5db2d3397a031d0f459f6300d6e6fab7f472cb57b110587f1f7efd792aef3bc3cdb2fd14599bee283d908f7bced6ec020f02d3d98c4aad7f55d22a7d0916e9569f8ed602c3a2a5dfb7d4be700eb7c9098550520534e75405adf5b0007267a35a24ade2e56da54847e0e61de92acbe4df924f642f0833c7835f5357cba1904f0a71fb404c62f946952036c0d2c9a7c958cbfcc3a08010451e5c16b95ab7d1595", 0xd0}, {&(0x7f00000022c0)="9fdece146abdb6b6d106fa8814a5f7d67cfed230b29c0e3b06eea4f53b055450b899c1363a62ce2859afe48d9a114392bc9852090008554a078bdb8d02fd59583b2044a41d367b91e5506808458f028af323451926c701a8941a740326a34166dbbf703a650b6a69b7176415acd9e2e545fc509fe5844610b9b3607b26a7d33df9789119248ff7cef8e820af22b3c547a97a0223", 0x94}, {&(0x7f0000002380)="04c125b84e29e9de52d96cebb646b3d8dc847a571fa74f9315b6854bf2739d4d3462f9748f1883e110ab01bbdb8c0123380e43dc4a5ad22f0dbbe90a7ff0e751adcf587c4e952d324f608bed6e2825e347844e7512da43aa93d58c11a23e39c85ffcce000cf18e22944315d5d67c904ead61a7f80f36a7d24f8f54c1c884ba7ff02639cce6e8c33269afb8ff1dcd5e1556978bdcc94252f341a395cfaafbad6c43c6e265a92b30e5abb5e84e", 0xac}, {&(0x7f0000002440)="ce8c38318d289ee48928a70fbc68ee48bcd0478760f95c0f028f58c5993519bec4bdbda8bdc7cfccf34f6869fa2a0b963ca6c5d708fdb576f650cc806c792ccd4eea20173c30cbe7f45f2b1e7dfdfd24c1063a51cad0ed618505e8042ffc15f2ab165a2b893bae977d2841bf8220d5c5c58882439487f5827dc7ac57b61ce6cc947e41d1691f0f60b0968bbc", 0x8c}], 0x5, 0x0, 0x0, 0x1}}, {{&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002900)=[{&(0x7f0000002600)="855a6fe82536c46486488a1716bd0a7cd2310bc00fb76f9dbb84af60e74a91a4469343e8928a15315cec4fb587212db1818500a56aa94546921b5e83d3f719e00dba745932f47853c3939110b190cd716206f807d22938fcfe197970605efb36eafd1fb3b6ed9f3bccf76337b64723", 0x6f}, {&(0x7f0000002680)="280776242625a4ff8ed74110749f54e67e8d2bf64bd227facaab629df9cc231cace929a0358ddabe9655aa65a20ef809b3e91f8a6c8181175576fca43e2e243f2f7f70c39b3378b6a757a25a0f5fefec79282e1d56c4179a3f31ce2fafdef0fe59e8b2f9e72c402e7c9fe6594061d767c2c4fdf79ca02cdd4d", 0x79}, {&(0x7f0000002700)="90c7e29daa0f1dd62bd2c453e9e3eb6d584c4c7daa7b5578dbdcb0ceb16e220bf0254dd834dcd3db7c783c62cc056f35645a10e7e8900b012b0cebefe7a9d476631585573e44a36d16165494", 0x4c}, {&(0x7f0000002780)="d17c00e18e41e9afea992c983febb7ff228d46125c1a0046a01c9d370a18e085c46a101cf6db8419756772c45d1548706c4f89597f4034898d6a30897a580b30c57dca1476097cc83ea8e0a59526c7a328f938d1bd95378c48c3a9e77d9156882ce04bbf64c041b8d39be2f91d8578bb5390d3f4a4be9c377595f9500e508703244322b74ce73f3bd8b2e4ef48fe2eb79c", 0x91}, {&(0x7f0000002840)="7e443ec163371588d558e7ee96fe7bd14066c3e2dc057d68e6f454a8e30eb75728344330762369ee17fe646ed31877bc41c9c88c1bd35094ca8e3badbb5abad15165aeab528ece88c729ddf75dba88a37619f35ef4b1423dc5e41099f72ae6d7d794", 0x62}, {&(0x7f00000028c0)="e7f8a06a31b912f385c4c51ce3fb4ce73a9b074f60b7c92a58b101e2e295919ced641ce1a9a97e3b", 0x28}], 0x6, &(0x7f0000002980)=ANY=[@ANYBLOB="20000009000000000000000001000000", @ANYRES32=r9, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x20000090}}], 0x5, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) connect$unix(r10, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = openat$tun(0xffffffffffffff9c, 0x0, 0x20080, 0x0) unlink(0x0) ioctl$TUNATTACHFILTER(r12, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) close(r9) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x20000) keyctl$instantiate(0xc, 0x0, &(0x7f0000010040)=ANY=[@ANYBLOB], 0x2d, 0xfffffffffffffff9) 11.986697501s ago: executing program 2 (id=726): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa8, 0xa0002) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34424752, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) (fail_nth: 2) 11.848162461s ago: executing program 5 (id=728): getpid() r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mknod$loop(0x0, 0x6000, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xe}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}], 0x30, 0x8000}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040) syz_emit_vhci(0x0, 0x15) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) 11.798000533s ago: executing program 2 (id=729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.649471668s ago: executing program 2 (id=730): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) r3 = open(0x0, 0x0, 0x22) (rerun: 64) fcntl$notify(r3, 0x402, 0x8000003d) (async, rerun: 64) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x157001, 0x498) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) (async, rerun: 32) io_uring_setup(0x483b, &(0x7f0000002fc0)={0x0, 0x6d28, 0x2, 0x0, 0x11f}) (async, rerun: 32) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r7, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x95) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) (async) write$P9_RVERSION(r8, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10.865443241s ago: executing program 5 (id=731): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="02"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.543487718s ago: executing program 5 (id=736): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000300)={0x1fd, 0x0, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x101, r0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x7}, {0x20, 0x7f, 0x1, 0xfffff00c}, {0x6, 0x0, 0xff, 0x7}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1515) 8.422079771s ago: executing program 3 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x70bd27, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 7.697754725s ago: executing program 3 (id=741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r3, 0x917, 0x70bd24, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x620b}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x0, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtclass={0x4c, 0x28, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {0x6, 0x10}, {0xfff1, 0xfff2}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x4c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r8, &(0x7f0000000600)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f00000000c0)=r6) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r11, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x2}) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) r12 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x12, r12, 0xffffe000) ioctl$KVM_RUN(r11, 0xae80, 0x0) inotify_init1(0x800) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r13) 7.546086299s ago: executing program 0 (id=742): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x7000, 0x100, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20040000) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x3ff, @remote, 0x5}}, 0x0, 0x9}, 0x90) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1be) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x2046}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000380)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x2d, 0x2, 0x4, "100000df00000000000000000000000000000000001000", 0x34325241}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x80) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x6a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c049}, 0x8000) 5.530337027s ago: executing program 5 (id=744): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0) r5 = socket(0x2, 0x5, 0x0) recvmsg$kcm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/37, 0x25}, {&(0x7f0000001400)=""/119, 0x77}, {&(0x7f0000001480)=""/31, 0x1f}, {&(0x7f00000014c0)=""/172, 0xac}, {&(0x7f0000001580)=""/204, 0xcc}, {&(0x7f0000001680)=""/18, 0x12}, {&(0x7f00000016c0)=""/155, 0x9b}], 0xa, &(0x7f0000001840)=""/226, 0xe2}, 0x120) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) writev(r0, &(0x7f0000002980)=[{&(0x7f0000000000)="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", 0x167}], 0x1) 5.4457744s ago: executing program 0 (id=745): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7000000100000000000000aaaaaaaabb08004500001400004000002f9078ac1e0001e00000010000655800189078040000000000000086"], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5) r6 = dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$XFS_IOC_FSGROWFSLOG(r6, 0x4008586f, &(0x7f0000000440)={0x1, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c", 0x3f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.282058442s ago: executing program 2 (id=747): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x0, 0x5, 0x28}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x6, 0x4, 0x40}]}, 0x24}}, 0x40080) r3 = io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x1445e, 0x1d410, 0x0, 0x34c}) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x80}}, './file0\x00'}) sendto$inet(r5, &(0x7f0000000140)="552ecc8b6530d0fadc2324e7cab3f53e0851291f12705afb6ce3ef827e49e284d9be5cdbecdf262aaa16774b7bbfd60169134beb2c3ef013328eb1ba7983fc54664ef90268cc54e0efa28bfbed564a4f06b8fca973f48fe114db56fa1f0cc3271f73554b5b053a3cce07f34b426a2546ad7393d32bf879eb89a2967895f7c92d97aeac1f6be8298faada1b3f12fc01ffc2989ddceb710d885c18ac45607574aac1c91b4dd69942", 0xa7, 0x20048080, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0xffffffff80000019, 0x0, 0x0) 3.968374635s ago: executing program 4 (id=748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x2000c884}, 0x20000800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x1b) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) 3.510157335s ago: executing program 5 (id=749): r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}, [{{0x9, 0x5, 0x82, 0x2, 0x9c8920cc360e0f58, 0x2, 0xf7, 0x3}}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0)='\v', 0x1) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000000)=""/161) 3.414105119s ago: executing program 4 (id=750): epoll_create1(0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)='\a\x00\x00\x00', 0x4) 3.262450235s ago: executing program 4 (id=751): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3f", 0x46, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.2620101s ago: executing program 3 (id=752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x410, 0x0, 0x0, 0x0, 0x58, 0x17ef, 0x6049, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0x3, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x4, 0x1a, 0x1, {0x22, 0x958}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0xff, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x440, 0x0, 0xb, 0x1}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x8, 0xfd, 0x8, 0xce}, 0x2d, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x1, [@generic={0x28, 0x10, 0x3, "580bf1d1459167c95b588eb90fe2f25b0676b1dcfb9a14e16c4e3b86a6edf187b5123373d4"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, &(0x7f0000000240)={0x40, 0x10, 0xee, {0xee, 0x1, "fa577406045090cc495a013a28143ab9e7d1d5fe5541dfbab497fc6ac22d284cb438c904643ff05f64bdf56ccaedd1b555ebeecfcaf9c27c91cf4ff4c7d6efe1d8699e2c89fa2f5b91ca28d1e93f93f8a813d1199e8fab5754886422cbc32fe4bd2d00af0ce83eb54e409c8bce7feae272466c02e7973cdaad86ca84ec76c0432e445b75f8adcc62f14d0b5122283a07a1ae736be7d4d13160f41de35bb8822d3d30fff1a2a381ec2dff786db99e0c8b28d6bbdf1f8c163158f8f2442389dc79f4b682bfcea9a08366f30a571370d64afd61c0ad43aad28d49d5cfc31ebc78593e410f607f7b630474dea032"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000380)={0x0, 0x22, 0x15, {[@main=@item_4={0x3, 0x0, 0x8, "52e1d211"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_4={0x3, 0x2, 0x2, "60ad3c59"}, @main=@item_4={0x3, 0x0, 0xb, "1fc86bc0"}, @global=@item_012={0x2, 0x1, 0xb, "4216"}, @main=@item_012={0x0, 0x0, 0x7}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x4b, 0x1, {0x22, 0xe77}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x20, 0x6, 0x2a, "f7c4928bbb89b7ada54b7682b715f59a38b5d1d778d2ccfc814c029c53e73c40da6e93ac59d547ee1795"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x1, 0xa9, "d29075a68176aed68d35293bfa6ebfb31f9fe798119e28d8bff2843e3a1dea65e5add64e262f2a6ef686b5432fb7e5bce6bd8664edbbfce9322a67cd32fa374b5751725221629e52ba8b7e5a3f134198f8f2022556d0c94dc782a3b553316e4e49194f8b35afca8b925817068b77da18d6677f6fe9d8b8991e606723ed351570d0fd06d1bd87cf0cb9f375c995f9e36cd471c97dd625b5790cdb99b35e5b6bf063e9a3ff16611757fe"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x3c}}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) 3.196071859s ago: executing program 0 (id=753): getpid() r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mknod$loop(0x0, 0x6000, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xe}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}], 0x30, 0x8000}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040) syz_emit_vhci(0x0, 0x15) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) 2.969354199s ago: executing program 4 (id=754): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x22) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) getpid() sendto$inet(r0, &(0x7f0000000080)='M', 0x1, 0x4805, 0x0, 0x0) 2.177260887s ago: executing program 0 (id=755): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r1, &(0x7f0000001600)="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", 0xfec) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x476d, &(0x7f0000000140)={0x0, 0x9167, 0x80, 0x1, 0x35d}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mkdir(0x0, 0x1a) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e"]) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r6, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x10001}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40800) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) close_range(r4, r4, 0x0) 2.07837251s ago: executing program 2 (id=756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000680)={0xf3, 0x5, {r0}, {0x0}, 0x6, 0x8}) getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0x0]) sendmmsg$unix(r1, &(0x7f00000007c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)="7ab46d57aca061abbba5f99d2f4f91041f9b349def0b4fed49f6d4a8e24e499ef9b9f673aa162e68cbc3c03f4f91183c94584ae7bf87d69d1c9e8daaecb0d9c21b95d0d30d206e29f5937dbe637563893f92d2d2a0408fd0cbbf65857313ed307d1e4b6edd189267afd0ab8d40f085f3ae39b26e2536d1571b1dc1ef740cecd5370688003c65a6a968d7ff688308af7392162380325c77eed8354d4d79816ed9c70ef3e2ac0a317e11c1ece5d615002a67189155206056f35aedb36806c3c1df00a4cdf979141b8ba3c00cd2a2687c9bcb3b9f91", 0xd4}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="64b36afb"], 0x78, 0x4004}}], 0x1, 0x88c0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x6f, 0x2e, 0x2e, 0x0, 0x5f]}}, 0x0, 0x1f, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 1.851063389s ago: executing program 0 (id=757): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1.755673227s ago: executing program 4 (id=758): unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, 0x0) ptrace$poke(0x5, 0x0, &(0x7f0000000200), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x30, r4, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x4000000, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 47.293011ms ago: executing program 0 (id=759): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1c, 0x2, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x4, 0xfffffffd, 0xfffffffd, 0x200, 0xb, 0x9f, 0x5b0, [0x100, 0xfffffffa]}}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/37, 0x25}, {&(0x7f0000001400)=""/119, 0x77}, {&(0x7f0000001480)=""/31, 0x1f}, {&(0x7f00000014c0)=""/172, 0xac}, {&(0x7f0000001580)=""/204, 0xcc}, {&(0x7f0000001680)=""/18, 0x12}, {&(0x7f00000016c0)=""/155, 0x9b}], 0xa, &(0x7f0000001840)=""/226, 0xe2}, 0x120) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) writev(r0, &(0x7f0000002980)=[{&(0x7f0000000000)="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", 0x167}], 0x1) 3.481047ms ago: executing program 3 (id=760): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000f, 0x8041) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0x10}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x88}, {0x7800}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x3, 0x1}, {0x4, 0x3}, 0x4, 0x7fff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x360) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a3800000100000081"]) 0s ago: executing program 4 (id=761): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x6, 0x0, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x3, 0x3, 0x1, 0x4000000000200, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x5) read$FUSE(r1, &(0x7f0000008400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): T5717] usb 4-1: Using ep0 maxpacket: 32 [ 161.483425][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 161.483437][ T29] audit: type=1400 audit(1777519762.360:590): avc: denied { append } for pid=7090 comm="syz.0.334" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.539758][ T5717] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 161.612551][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.691639][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.710190][ T5717] usb 4-1: config 0 descriptor?? [ 161.732024][ T29] audit: type=1400 audit(1777519762.360:591): avc: denied { append } for pid=7090 comm="syz.0.334" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.765645][ T5717] as10x_usb: device has been detected [ 161.783044][ T5717] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 161.818455][ T7067] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.326'. [ 161.921774][ T29] audit: type=1400 audit(1777519762.550:592): avc: denied { map } for pid=7090 comm="syz.0.334" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 162.049769][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.124869][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.213722][ T5717] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 162.601261][ T5717] as10x_usb: error during firmware upload part1 [ 162.648201][ T5717] Registered device nBox DVB-T Dongle [ 162.708826][ T24] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 162.738371][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.762259][ T24] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 162.801778][ T24] usb 2-1: USB disconnect, device number 15 [ 162.907491][ T29] audit: type=1400 audit(1777519763.780:593): avc: denied { read append } for pid=7113 comm="syz.1.341" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 162.911094][ T7117] FAULT_INJECTION: forcing a failure. [ 162.911094][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 162.945971][ T7117] CPU: 0 UID: 0 PID: 7117 Comm: syz.0.343 Not tainted syzkaller #0 PREEMPT(full) [ 162.945994][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.946004][ T7117] Call Trace: [ 162.946009][ T7117] [ 162.946016][ T7117] dump_stack_lvl+0x100/0x190 [ 162.946042][ T7117] should_fail_ex.cold+0x5/0xa [ 162.946070][ T7117] ? tomoyo_encode2+0xfb/0x3c0 [ 162.946092][ T7117] should_failslab+0xc2/0x120 [ 162.946111][ T7117] __kmalloc_noprof+0xe0/0x850 [ 162.946136][ T7117] ? d_absolute_path+0x136/0x1b0 [ 162.946158][ T7117] tomoyo_encode2+0xfb/0x3c0 [ 162.946185][ T7117] tomoyo_encode+0x29/0x50 [ 162.946207][ T7117] tomoyo_realpath_from_path+0x18c/0x690 [ 162.946237][ T7117] tomoyo_path_number_perm+0x23c/0x580 [ 162.946256][ T7117] ? tomoyo_path_number_perm+0x22e/0x580 [ 162.946278][ T7117] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.946324][ T7117] ? find_held_lock+0x2b/0x80 [ 162.946348][ T7117] ? __fget_files+0x215/0x3d0 [ 162.946369][ T7117] ? hook_file_ioctl_common+0x149/0x410 [ 162.946394][ T7117] ? __fget_files+0x215/0x3d0 [ 162.946420][ T7117] ? __fget_files+0x21f/0x3d0 [ 162.946446][ T7117] security_file_ioctl+0xd3/0x230 [ 162.946469][ T7117] __x64_sys_ioctl+0xb7/0x210 [ 162.946489][ T7117] do_syscall_64+0x10b/0xf80 [ 162.946509][ T7117] ? clear_bhb_loop+0x40/0x90 [ 162.946531][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.946549][ T7117] RIP: 0033:0x7f82c139cdd9 [ 162.946564][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.946581][ T7117] RSP: 002b:00007f82c21d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.946598][ T7117] RAX: ffffffffffffffda RBX: 00007f82c1615fa0 RCX: 00007f82c139cdd9 [ 162.946610][ T7117] RDX: 0000200000020b00 RSI: 0000000080306403 RDI: 0000000000000003 [ 162.946620][ T7117] RBP: 00007f82c21d1090 R08: 0000000000000000 R09: 0000000000000000 [ 162.946630][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.946641][ T7117] R13: 00007f82c1616038 R14: 00007f82c1615fa0 R15: 00007ffeb1482eb8 [ 162.946666][ T7117] [ 162.946690][ T7117] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.066289][ T29] audit: type=1400 audit(1777519763.810:594): avc: denied { open } for pid=7113 comm="syz.1.341" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 163.269793][ T29] audit: type=1400 audit(1777519763.810:595): avc: denied { map } for pid=7113 comm="syz.1.341" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 163.273789][ T5696] usb 4-1: USB disconnect, device number 7 [ 163.297074][ T29] audit: type=1400 audit(1777519763.810:596): avc: denied { write execute } for pid=7113 comm="syz.1.341" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 163.459755][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.936208][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.987919][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 164.025257][ T5696] Unregistered device nBox DVB-T Dongle [ 164.030051][ T5696] as10x_usb: device has been disconnected [ 164.088843][ T29] audit: type=1400 audit(1777519764.970:597): avc: denied { read } for pid=7138 comm="syz.2.351" path="socket:[12174]" dev="sockfs" ino=12174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.138359][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 164.146748][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.163616][ T24] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 164.181158][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.262532][ T24] usb 2-1: Product: syz [ 164.293433][ T24] usb 2-1: Manufacturer: syz [ 164.308220][ T24] usb 2-1: SerialNumber: syz [ 164.375993][ T7152] Set syz1 is full, maxelem 0 reached [ 165.069353][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.081781][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.101479][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.113936][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 165.269474][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.360'. [ 165.292434][ T24] usb 2-1: USB disconnect, device number 16 [ 165.423215][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.100531][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.142079][ T29] audit: type=1400 audit(1777519767.020:598): avc: denied { mounton } for pid=7174 comm="syz.1.363" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 166.218108][ T7178] siw: device registration error -23 [ 166.767224][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.880899][ T7187] tmpfs: Unknown parameter 'mpoHìdefault:,1' [ 167.097397][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 167.138149][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.261332][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.304387][ T7182] lo speed is unknown, defaulting to 1000 [ 168.366884][ T29] audit: type=1400 audit(1777519769.240:599): avc: denied { ioctl } for pid=7204 comm="syz.0.371" path="socket:[13028]" dev="sockfs" ino=13028 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 168.979020][ T29] audit: type=1400 audit(1777519769.840:600): avc: denied { create } for pid=7218 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.072426][ T29] audit: type=1400 audit(1777519769.880:601): avc: denied { setopt } for pid=7218 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.172858][ T7229] FAULT_INJECTION: forcing a failure. [ 169.172858][ T7229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.186109][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.1.374 Not tainted syzkaller #0 PREEMPT(full) [ 169.186130][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.186140][ T7229] Call Trace: [ 169.186145][ T7229] [ 169.186151][ T7229] dump_stack_lvl+0x100/0x190 [ 169.186175][ T7229] should_fail_ex.cold+0x5/0xa [ 169.186200][ T7229] _copy_from_user+0x2e/0xd0 [ 169.186225][ T7229] copy_msghdr_from_user+0x9f/0x4f0 [ 169.186247][ T7229] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 169.186278][ T7229] ___sys_sendmsg+0x106/0x1e0 [ 169.186299][ T7229] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.186346][ T7229] __sys_sendmsg+0x170/0x220 [ 169.186371][ T7229] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.186406][ T7229] ? rcu_is_watching+0x12/0xc0 [ 169.186433][ T7229] do_syscall_64+0x10b/0xf80 [ 169.186451][ T7229] ? clear_bhb_loop+0x40/0x90 [ 169.186471][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.186488][ T7229] RIP: 0033:0x7f0b0079cdd9 [ 169.186501][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.186516][ T7229] RSP: 002b:00007f0b01647028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.186532][ T7229] RAX: ffffffffffffffda RBX: 00007f0b00a15fa0 RCX: 00007f0b0079cdd9 [ 169.186542][ T7229] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 169.186552][ T7229] RBP: 00007f0b01647090 R08: 0000000000000000 R09: 0000000000000000 [ 169.186562][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.186571][ T7229] R13: 00007f0b00a16038 R14: 00007f0b00a15fa0 R15: 00007ffdc14ec588 [ 169.186594][ T7229] [ 169.391957][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.490128][ T29] audit: type=1400 audit(1777519770.370:602): avc: denied { bind } for pid=7231 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.516971][ T29] audit: type=1400 audit(1777519770.390:603): avc: denied { connect } for pid=7231 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.538264][ T29] audit: type=1400 audit(1777519770.390:604): avc: denied { read write } for pid=7231 comm="syz.1.376" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 169.562597][ T29] audit: type=1400 audit(1777519770.390:605): avc: denied { open } for pid=7231 comm="syz.1.376" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 169.860096][ T5717] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 169.861480][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.944613][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.992439][ T5717] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 171.006690][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.002484][ T5717] usb 2-1: Product: syz [ 172.011527][ T5717] usb 2-1: Manufacturer: syz [ 172.019674][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.149082][ T29] audit: type=1400 audit(1777519773.020:606): avc: denied { create } for pid=7259 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 172.207372][ T5717] usb 2-1: SerialNumber: syz [ 172.246816][ T5717] usb 2-1: config 0 descriptor?? [ 172.363510][ T5717] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 172.383031][ T29] audit: type=1400 audit(1777519773.020:607): avc: denied { getopt } for pid=7259 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 172.418636][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.107237][ T29] audit: type=1400 audit(1777519773.900:608): avc: denied { block_suspend } for pid=7272 comm="syz.4.386" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.144763][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.227495][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.273574][ T5717] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 173.282870][ T5717] usb 2-1: media controller created [ 173.296877][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.401013][ T7281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.385'. [ 173.505652][ T5717] DVB: Unable to find symbol mt352_attach() [ 173.631591][ T5717] DVB: Unable to find symbol nxt6000_attach() [ 173.655411][ T5717] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 173.696813][ T5717] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 173.748503][ T29] audit: type=1400 audit(1777520031.631:609): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2944 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.750866][ T5717] dvb-usb: schedule remote query interval to 1000 msecs. [ 173.866341][ T5717] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 173.896350][ T5717] dvb-usb: bulk message failed: -22 (7/0) [ 173.925692][ T5717] dvb-usb: bulk message failed: -22 (7/0) [ 173.953787][ T5717] usb 2-1: USB disconnect, device number 17 [ 174.059488][ T7309] siw: device registration error -23 [ 174.078564][ T5717] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 174.258331][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.578049][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.733240][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 174.759354][ T29] audit: type=1400 audit(1777520032.641:610): avc: denied { setopt } for pid=7316 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.847936][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 174.891521][ T7318] lo speed is unknown, defaulting to 1000 [ 175.017952][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 175.030790][ T10] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 175.055799][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 175.095320][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 175.117650][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 175.150921][ T29] audit: type=1400 audit(1777520033.011:611): avc: denied { read } for pid=7316 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.571376][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 175.571502][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.588193][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.611571][ T10] usb 2-1: Product: syz [ 175.623346][ T10] usb 2-1: Manufacturer: syz [ 175.632780][ T10] usb 2-1: SerialNumber: syz [ 175.646377][ T10] usb 2-1: config 0 descriptor?? [ 176.011602][ T10] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 176.044104][ T10] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 176.121231][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 176.997358][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.005490][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.014878][ T29] audit: type=1400 audit(1777520034.001:612): avc: denied { getopt } for pid=7314 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.010674][ T29] audit: type=1400 audit(1777520034.011:613): avc: denied { getopt } for pid=7314 comm="syz.1.394" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.035040][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.145294][ T5696] usb 2-1: USB disconnect, device number 18 [ 178.445601][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 178.492673][ T7359] macsec1: entered promiscuous mode [ 178.523781][ T7359] dummy0: entered promiscuous mode [ 178.549102][ T7359] macsec1: entered allmulticast mode [ 178.575914][ T7359] dummy0: entered allmulticast mode [ 178.630592][ T7359] dummy0: left allmulticast mode [ 178.660007][ T7359] dummy0: left promiscuous mode [ 178.712839][ T7367] futex_wake_op: syz.0.405 tries to shift op by -1; fix this program [ 179.058402][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.536184][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 179.717982][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 179.763865][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 179.792850][ T29] audit: type=1400 audit(1777520037.671:614): avc: denied { append } for pid=7387 comm="syz.3.409" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 179.902915][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 179.993041][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.019637][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.031741][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.043954][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.056810][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.074109][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 180.085142][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.128032][ T29] audit: type=1400 audit(1777520038.001:615): avc: denied { set_context_mgr } for pid=7396 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 180.148094][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.157032][ T29] audit: type=1400 audit(1777520038.001:616): avc: denied { map } for pid=7396 comm="syz.3.411" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.202691][ T10] usb 1-1: config 0 descriptor?? [ 181.046602][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 181.062587][ T10] usb 1-1: USB disconnect, device number 6 [ 181.086755][ T10] usblp0: removed [ 181.292998][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.306035][ T7406] ref_ctr increment failed for inode: 0x22a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807a0924c0 [ 181.557941][ T29] audit: type=1326 audit(1777520039.431:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b4819cdd9 code=0x0 [ 181.595905][ T29] audit: type=1326 audit(1777520039.461:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b4819cdd9 code=0x0 [ 182.070545][ T7459] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 182.567533][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.675140][ T7458] siw: device registration error -23 [ 182.717971][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 183.849691][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.859202][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 183.874086][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 183.931283][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.940017][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.077935][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 184.241402][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 184.253181][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 184.266030][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 184.292496][ T10] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 184.310102][ T10] usb 4-1: Product: syz [ 184.314649][ T10] usb 4-1: Manufacturer: syz [ 184.319913][ T10] usb 4-1: SerialNumber: syz [ 184.332890][ T10] usb 4-1: config 0 descriptor?? [ 184.363454][ T7477] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.370927][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.434755][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.446112][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.602411][ T1157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.626764][ T1157] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.635848][ T1157] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.645128][ T1157] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.837172][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.861871][ T24] usb 2-1: can't set config #252, error -71 [ 184.879768][ T24] usb 2-1: USB disconnect, device number 19 [ 184.901536][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.974123][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.986594][ T7486] FAULT_INJECTION: forcing a failure. [ 184.986594][ T7486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.000873][ T7486] CPU: 1 UID: 0 PID: 7486 Comm: syz.1.430 Not tainted syzkaller #0 PREEMPT(full) [ 185.000895][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.000904][ T7486] Call Trace: [ 185.000910][ T7486] [ 185.000916][ T7486] dump_stack_lvl+0x100/0x190 [ 185.000940][ T7486] should_fail_ex.cold+0x5/0xa [ 185.000960][ T7486] ? prepare_alloc_pages+0x16d/0x5f0 [ 185.000980][ T7486] should_fail_alloc_page+0xeb/0x140 [ 185.000999][ T7486] prepare_alloc_pages+0x1f0/0x5f0 [ 185.001026][ T7486] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 185.001052][ T7486] ? ima_match_policy+0x8b8/0x2340 [ 185.001075][ T7486] ? ima_match_policy+0x8b8/0x2340 [ 185.001101][ T7486] ? __lock_acquire+0x4a5/0x2630 [ 185.001127][ T7486] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.001162][ T7486] ? process_measurement+0x4c8/0x2350 [ 185.001181][ T7486] ? process_measurement+0x4c8/0x2350 [ 185.001204][ T7486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.001225][ T7486] ? policy_nodemask+0xed/0x4f0 [ 185.001244][ T7486] alloc_pages_mpol+0x1fb/0x540 [ 185.001263][ T7486] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 185.001283][ T7486] ? __lock_acquire+0x4a5/0x2630 [ 185.001305][ T7486] folio_alloc_mpol_noprof+0x36/0x260 [ 185.001326][ T7486] vma_alloc_folio_noprof+0xed/0x1d0 [ 185.001346][ T7486] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 185.001372][ T7486] do_anonymous_page+0xb46/0x2050 [ 185.001396][ T7486] ? rcu_read_unlock+0x2d/0xb0 [ 185.001424][ T7486] __handle_mm_fault+0x1d2c/0x2a00 [ 185.001450][ T7486] ? mt_find+0x45e/0x8e0 [ 185.001470][ T7486] ? __pfx___handle_mm_fault+0x10/0x10 [ 185.001491][ T7486] ? __pfx_mt_find+0x10/0x10 [ 185.001522][ T7486] ? find_vma+0xbf/0x140 [ 185.001537][ T7486] ? __pfx_find_vma+0x10/0x10 [ 185.001556][ T7486] handle_mm_fault+0x36d/0xa20 [ 185.001583][ T7486] do_user_addr_fault+0x74c/0x12f0 [ 185.001608][ T7486] ? trace_page_fault_kernel+0x7a/0x200 [ 185.001631][ T7486] exc_page_fault+0x6f/0xd0 [ 185.001649][ T7486] asm_exc_page_fault+0x26/0x30 [ 185.001665][ T7486] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 185.001688][ T7486] Code: 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 185.001703][ T7486] RSP: 0018:ffffc9000de1fc60 EFLAGS: 00050206 [ 185.001717][ T7486] RAX: 0000000000000001 RBX: 0000000000300000 RCX: 00000000002ff0c0 [ 185.001726][ T7486] RDX: 0000000000000001 RSI: ffffc90004549f40 RDI: 0000200000001000 [ 185.001736][ T7486] RBP: 00002000000000c0 R08: 0000000000000000 R09: fffff520009091ff [ 185.001745][ T7486] R10: ffffc90004848fff R11: 0000000000000000 R12: ffffc90004549000 [ 185.001755][ T7486] R13: 00002000003000c0 R14: 00007ffffffff000 R15: 0000000000000000 [ 185.001775][ T7486] _copy_to_user+0xa4/0xd0 [ 185.001800][ T7486] fb_sys_read+0x23a/0x380 [ 185.001819][ T7486] ? __pfx_drm_fbdev_shmem_defio_read+0x10/0x10 [ 185.001846][ T7486] fb_read+0x19c/0x280 [ 185.001864][ T7486] ? __pfx_fb_read+0x10/0x10 [ 185.001882][ T7486] vfs_read+0x1e4/0xb30 [ 185.001902][ T7486] ? __pfx_vfs_read+0x10/0x10 [ 185.001917][ T7486] ? find_held_lock+0x2b/0x80 [ 185.001931][ T7486] ? __fget_files+0x215/0x3d0 [ 185.001951][ T7486] ? __fget_files+0x215/0x3d0 [ 185.001974][ T7486] ? __fget_files+0x21f/0x3d0 [ 185.001999][ T7486] ksys_read+0x12a/0x250 [ 185.002020][ T7486] ? __pfx_ksys_read+0x10/0x10 [ 185.002038][ T7486] ? rcu_is_watching+0x12/0xc0 [ 185.002065][ T7486] do_syscall_64+0x10b/0xf80 [ 185.002081][ T7486] ? clear_bhb_loop+0x40/0x90 [ 185.002100][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.002116][ T7486] RIP: 0033:0x7f0b0079cdd9 [ 185.002129][ T7486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.002144][ T7486] RSP: 002b:00007f0b01626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.002157][ T7486] RAX: ffffffffffffffda RBX: 00007f0b00a16090 RCX: 00007f0b0079cdd9 [ 185.002167][ T7486] RDX: 00000000d0140f23 RSI: 00002000000000c0 RDI: 0000000000000003 [ 185.002176][ T7486] RBP: 00007f0b01626090 R08: 0000000000000000 R09: 0000000000000000 [ 185.002185][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.002194][ T7486] R13: 00007f0b00a16128 R14: 00007f0b00a16090 R15: 00007ffdc14ec588 [ 185.002216][ T7486] [ 185.427818][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.489099][ T10] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 185.504035][ T29] audit: type=1400 audit(1777520043.381:619): avc: denied { write } for pid=7487 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.040550][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 186.066193][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 186.072263][ T5605] Bluetooth: hci0: command 0x0401 tx timeout [ 186.088346][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 186.114287][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.134069][ T7490] tipc: Started in network mode [ 186.139692][ T7490] tipc: Node identity ac14140f, cluster identity 4711 [ 186.149159][ T7490] tipc: New replicast peer: 255.255.255.255 [ 186.156068][ T7490] tipc: Enabled bearer , priority 10 [ 186.166104][ T7493] netlink: 'syz.1.434': attribute type 10 has an invalid length. [ 186.174095][ T7493] netlink: 228 bytes leftover after parsing attributes in process `syz.1.434'. [ 186.188572][ T10] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 186.207932][ T10] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 186.293307][ T10] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 186.347180][ T10] usb 4-1: USB disconnect, device number 8 [ 186.837646][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 187.174687][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.182826][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.206290][ T7506] macsec1: entered promiscuous mode [ 187.222930][ T7506] dummy0: entered promiscuous mode [ 187.248130][ T7506] macsec1: entered allmulticast mode [ 187.255547][ T7506] dummy0: entered allmulticast mode [ 187.274325][ T7506] dummy0: left allmulticast mode [ 187.290004][ T7506] dummy0: left promiscuous mode [ 187.454618][ T29] audit: type=1400 audit(1777520045.331:620): avc: denied { connect } for pid=7494 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.525529][ T29] audit: type=1400 audit(1777520045.401:621): avc: denied { setopt } for pid=7494 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.619878][ T7512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.983486][ T10] tipc: Node number set to 2886997007 [ 188.178245][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.662255][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.671294][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.671374][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.685773][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.033946][ T7535] Set syz1 is full, maxelem 0 reached [ 189.459508][ T7540] Set syz1 is full, maxelem 0 reached [ 189.569548][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.577842][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 189.647059][ T29] audit: type=1400 audit(1777520047.521:622): avc: denied { setopt } for pid=7542 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.737905][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 189.744981][ T24] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 189.753168][ T24] usb 4-1: config 0 has no interface number 0 [ 189.759725][ T24] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.771096][ T24] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.785487][ T24] usb 4-1: config 0 interface 85 has no altsetting 0 [ 189.795509][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 189.876311][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.903163][ T24] usb 4-1: Product: syz [ 189.907651][ T24] usb 4-1: Manufacturer: syz [ 189.912283][ T24] usb 4-1: SerialNumber: syz [ 189.923298][ T24] usb 4-1: config 0 descriptor?? [ 189.959124][ T7552] autofs: Bad value for 'fd' [ 190.156021][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.737699][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.820606][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.981559][ T24] appletouch 4-1:0.85: Failed to read mode from device. [ 190.994848][ T24] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 191.013255][ T24] usb 4-1: USB disconnect, device number 9 [ 191.778068][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.978713][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.058870][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.795211][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 194.143610][ T7582] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.461'. [ 194.850733][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.882883][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.959541][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.444957][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.948815][ T1910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.355347][ T1910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.498121][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.542953][ T7646] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 198.793417][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 198.828011][ T5717] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 198.830990][ T7653] macsec1: entered promiscuous mode [ 198.858902][ T7653] dummy0: entered promiscuous mode [ 198.879550][ T7653] macsec1: entered allmulticast mode [ 198.914810][ T7653] dummy0: entered allmulticast mode [ 198.925833][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.945867][ T1116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.958842][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.979911][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.000999][ T7653] dummy0: left allmulticast mode [ 199.006626][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 199.035286][ T7653] dummy0: left promiscuous mode [ 199.057814][ T5717] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.098266][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.117146][ T5717] usb 4-1: config 0 descriptor?? [ 199.165535][ T5717] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 199.351229][ T7669] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 199.361173][ T5717] usb 4-1: USB disconnect, device number 10 [ 199.368145][ T29] audit: type=1400 audit(1777520057.231:623): avc: denied { call } for pid=7644 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 199.416543][ T29] audit: type=1400 audit(1777520057.231:624): avc: denied { transfer } for pid=7644 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 199.476382][ T7672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65533 sclass=netlink_route_socket pid=7672 comm=syz.4.478 [ 199.591954][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 200.092693][ T7686] sctp: [Deprecated]: syz.1.483 (pid 7686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.092693][ T7686] Use struct sctp_sack_info instead [ 200.114049][ T7686] sctp: [Deprecated]: syz.1.483 (pid 7686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.114049][ T7686] Use struct sctp_sack_info instead [ 200.578127][ T5717] net_ratelimit: 2 callbacks suppressed [ 200.578143][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.836554][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.897912][ T1910] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 202.249077][ T7705] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 202.263652][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.378790][ T1910] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.434225][ T1910] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 202.498336][ T1910] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.515153][ T1910] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 202.533235][ T1910] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 202.550181][ T1910] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.560247][ T1910] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.568344][ T1910] usb 2-1: Product: syz [ 202.583381][ T1910] usb 2-1: Manufacturer: syz [ 202.594680][ T1910] cdc_wdm 2-1:1.0: skipping garbage [ 202.600196][ T1910] cdc_wdm 2-1:1.0: skipping garbage [ 202.612188][ T1910] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 202.618266][ T1910] cdc_wdm 2-1:1.0: Unknown control protocol [ 202.800850][ T29] audit: type=1400 audit(1777520060.681:625): avc: denied { read write } for pid=7691 comm="syz.1.485" name="cdc-wdm0" dev="devtmpfs" ino=2965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 202.829262][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.492'. [ 202.840600][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.869377][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.895150][ T29] audit: type=1400 audit(1777520060.681:626): avc: denied { open } for pid=7691 comm="syz.1.485" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 202.928629][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.941470][ T5732] usb 2-1: USB disconnect, device number 20 [ 203.118153][ T1910] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 203.287904][ T1910] usb 4-1: Using ep0 maxpacket: 16 [ 203.302976][ T1910] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 203.473771][ T1910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.504501][ T1910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.530050][ T1910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 203.543841][ T1910] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 203.553831][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 203.564668][ T1910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.585281][ T1910] usb 4-1: config 0 descriptor?? [ 204.018320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.196435][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.229193][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.355209][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.524271][ T7751] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 206.178954][ T1910] usbhid 4-1:0.0: can't add hid device: -71 [ 206.213489][ T1910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 206.237156][ T1910] usb 4-1: USB disconnect, device number 11 [ 206.269985][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.271575][ T5617] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 206.278235][ T5617] Bluetooth: hci2: Dropping invalid advertising data [ 206.294449][ T5617] Bluetooth: hci2: unknown advertising packet type: 0x40 [ 206.294467][ T5617] Bluetooth: hci2: Malformed LE Event: 0x02 [ 206.469989][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 206.599982][ T7764] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 207.576250][ T29] audit: type=1400 audit(1777520065.451:627): avc: denied { connect } for pid=7767 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.627826][ T7769] FAULT_INJECTION: forcing a failure. [ 207.627826][ T7769] name failslab, interval 1, probability 0, space 0, times 0 [ 207.643271][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.654684][ T7769] CPU: 0 UID: 0 PID: 7769 Comm: syz.0.508 Not tainted syzkaller #0 PREEMPT(full) [ 207.654699][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.654706][ T7769] Call Trace: [ 207.654710][ T7769] [ 207.654713][ T7769] dump_stack_lvl+0x100/0x190 [ 207.654730][ T7769] should_fail_ex.cold+0x5/0xa [ 207.654745][ T7769] ? tomoyo_encode2+0xfb/0x3c0 [ 207.654758][ T7769] should_failslab+0xc2/0x120 [ 207.654770][ T7769] __kmalloc_noprof+0xe0/0x850 [ 207.654788][ T7769] tomoyo_encode2+0xfb/0x3c0 [ 207.654803][ T7769] tomoyo_encode+0x29/0x50 [ 207.654816][ T7769] tomoyo_realpath_from_path+0x18c/0x690 [ 207.654834][ T7769] tomoyo_path_number_perm+0x23c/0x580 [ 207.654845][ T7769] ? tomoyo_path_number_perm+0x22e/0x580 [ 207.654858][ T7769] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.654883][ T7769] ? find_held_lock+0x2b/0x80 [ 207.654893][ T7769] ? __fget_files+0x215/0x3d0 [ 207.654906][ T7769] ? hook_file_ioctl_common+0x149/0x410 [ 207.654921][ T7769] ? __fget_files+0x215/0x3d0 [ 207.654936][ T7769] ? __fget_files+0x21f/0x3d0 [ 207.654955][ T7769] security_file_ioctl+0xd3/0x230 [ 207.654969][ T7769] __x64_sys_ioctl+0xb7/0x210 [ 207.654980][ T7769] do_syscall_64+0x10b/0xf80 [ 207.654992][ T7769] ? clear_bhb_loop+0x40/0x90 [ 207.655004][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.655015][ T7769] RIP: 0033:0x7f82c139cdd9 [ 207.655024][ T7769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.655035][ T7769] RSP: 002b:00007f82c21b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.655045][ T7769] RAX: ffffffffffffffda RBX: 00007f82c1616090 RCX: 00007f82c139cdd9 [ 207.655052][ T7769] RDX: 0000200000000240 RSI: 00000000400448c8 RDI: 0000000000000004 [ 207.655058][ T7769] RBP: 00007f82c21b0090 R08: 0000000000000000 R09: 0000000000000000 [ 207.655064][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.655069][ T7769] R13: 00007f82c1616128 R14: 00007f82c1616090 R15: 00007ffeb1482eb8 [ 207.655083][ T7769] [ 207.655092][ T7769] ERROR: Out of memory at tomoyo_realpath_from_path. [ 207.868824][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.905224][ T7771] FAULT_INJECTION: forcing a failure. [ 207.905224][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 207.920163][ T7771] CPU: 0 UID: 0 PID: 7771 Comm: syz.3.509 Not tainted syzkaller #0 PREEMPT(full) [ 207.920184][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.920195][ T7771] Call Trace: [ 207.920201][ T7771] [ 207.920207][ T7771] dump_stack_lvl+0x100/0x190 [ 207.920232][ T7771] should_fail_ex.cold+0x5/0xa [ 207.920255][ T7771] should_failslab+0xc2/0x120 [ 207.920275][ T7771] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 207.920302][ T7771] ? __alloc_skb+0x140/0x710 [ 207.920326][ T7771] ? __alloc_skb+0x5b7/0x710 [ 207.920353][ T7771] __alloc_skb+0x140/0x710 [ 207.920376][ T7771] ? __alloc_skb+0x5b7/0x710 [ 207.920398][ T7771] ? __pfx___alloc_skb+0x10/0x10 [ 207.920429][ T7771] netlink_alloc_large_skb+0x69/0x150 [ 207.920451][ T7771] netlink_sendmsg+0x680/0xda0 [ 207.920475][ T7771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.920494][ T7771] ? pti_set_user_pgtbl+0x30/0x50 [ 207.920529][ T7771] ____sys_sendmsg+0x9e1/0xb70 [ 207.920547][ T7771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.920570][ T7771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.920595][ T7771] ? __lock_acquire+0x4a5/0x2630 [ 207.920622][ T7771] ___sys_sendmsg+0x190/0x1e0 [ 207.920644][ T7771] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.920665][ T7771] ? lock_acquire+0x1b1/0x370 [ 207.920714][ T7771] __sys_sendmsg+0x170/0x220 [ 207.920741][ T7771] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.920777][ T7771] ? rcu_is_watching+0x12/0xc0 [ 207.920806][ T7771] do_syscall_64+0x10b/0xf80 [ 207.920825][ T7771] ? clear_bhb_loop+0x40/0x90 [ 207.920848][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.920865][ T7771] RIP: 0033:0x7f2422b9cdd9 [ 207.920879][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.920895][ T7771] RSP: 002b:00007f2423ae3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.920912][ T7771] RAX: ffffffffffffffda RBX: 00007f2422e15fa0 RCX: 00007f2422b9cdd9 [ 207.920923][ T7771] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 207.920934][ T7771] RBP: 00007f2423ae3090 R08: 0000000000000000 R09: 0000000000000000 [ 207.920944][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.920954][ T7771] R13: 00007f2422e16038 R14: 00007f2422e15fa0 R15: 00007ffc91d6a0a8 [ 207.920977][ T7771] [ 208.453778][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.415989][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.947278][ T29] audit: type=1400 audit(1777520067.821:628): avc: denied { ioctl } for pid=7788 comm="syz.3.515" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 210.258637][ T7798] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 210.324641][ T29] audit: type=1400 audit(1777520068.201:629): avc: denied { mount } for pid=7799 comm="syz.0.518" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 210.456391][ T29] audit: type=1400 audit(1777520068.231:630): avc: denied { mounton } for pid=7799 comm="syz.0.518" path="/89/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 210.582739][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.593197][ T29] audit: type=1400 audit(1777520068.251:631): avc: denied { read } for pid=7799 comm="syz.0.518" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 210.633047][ T29] audit: type=1400 audit(1777520068.251:632): avc: denied { read } for pid=7799 comm="syz.0.518" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 210.674804][ T29] audit: type=1400 audit(1777520068.251:633): avc: denied { open } for pid=7799 comm="syz.0.518" path="/89/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 210.841811][ T29] audit: type=1400 audit(1777520068.261:634): avc: denied { read } for pid=7799 comm="syz.0.518" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 210.863344][ T29] audit: type=1400 audit(1777520068.281:635): avc: denied { read } for pid=7799 comm="syz.0.518" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 211.771240][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.805299][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.916925][ T29] audit: type=1400 audit(1777520069.791:636): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 213.070640][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.471132][ T29] audit: type=1400 audit(1777520072.321:637): avc: denied { ioctl } for pid=7830 comm="syz.4.525" path="socket:[15744]" dev="sockfs" ino=15744 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.655656][ T7825] siw: device registration error -23 [ 214.974859][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.452331][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.067202][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.862562][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.019528][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.156037][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.192341][ T7858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.531'. [ 218.953703][ T7863] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 219.828493][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.909426][ T7876] netlink: zone id is out of range [ 219.940725][ T7876] netlink: zone id is out of range [ 219.956843][ T7876] netlink: zone id is out of range [ 219.979186][ T7876] netlink: zone id is out of range [ 219.996748][ T7876] netlink: zone id is out of range [ 220.288825][ T29] audit: type=1400 audit(1777520078.171:638): avc: denied { cmd } for pid=7883 comm="syz.4.540" path="socket:[15809]" dev="sockfs" ino=15809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 222.256959][ T5717] net_ratelimit: 51 callbacks suppressed [ 222.256975][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.537025][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.553741][ T7906] batman_adv: batadv0: Adding interface: macvtap1 [ 223.574290][ T7906] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.587898][ T29] audit: type=1400 audit(1777520081.461:639): avc: denied { write } for pid=7919 comm="syz.0.548" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 223.632330][ T7906] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 223.688533][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 223.893375][ T7915] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 224.328007][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.353506][ T29] audit: type=1400 audit(1777520081.461:640): avc: denied { open } for pid=7919 comm="syz.0.548" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 224.578477][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.582790][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.652649][ T29] audit: type=1400 audit(1777520081.611:641): avc: denied { ioctl } for pid=7919 comm="syz.0.548" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 224.700129][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.736552][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.893411][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.788176][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.854688][ T10] usb 4-1: string descriptor 0 read error: -71 [ 225.865518][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.874889][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.978114][ T10] usb 4-1: can't set config #1, error -71 [ 226.010431][ T10] usb 4-1: USB disconnect, device number 12 [ 226.089575][ T7940] sctp: [Deprecated]: syz.3.554 (pid 7940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.089575][ T7940] Use struct sctp_sack_info instead [ 226.583555][ T7940] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 226.672175][ T7947] siw: device registration error -23 [ 226.820181][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.569234][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.577531][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.587935][ T29] audit: type=1400 audit(1777520085.451:642): avc: denied { map } for pid=7939 comm="syz.3.554" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 227.709933][ T29] audit: type=1400 audit(1777520085.451:643): avc: denied { execute } for pid=7939 comm="syz.3.554" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 227.737330][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.750732][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.761050][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.781158][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.789601][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.802503][ T29] audit: type=1400 audit(1777520085.681:644): avc: denied { mounton } for pid=7949 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 227.860051][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.864898][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.557'. [ 228.152363][ T29] audit: type=1400 audit(1777520086.031:645): avc: denied { read } for pid=7961 comm="syz.4.559" lport=38089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.341416][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'. [ 228.502798][ T7974] bridge3: port 1(veth3) entered blocking state [ 228.537400][ T7974] bridge3: port 1(veth3) entered disabled state [ 228.545232][ T7974] veth3: entered allmulticast mode [ 228.574626][ T29] audit: type=1400 audit(1777520086.451:646): avc: denied { watch } for pid=7981 comm="syz.3.563" path="/96" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 228.597588][ T7974] veth3: entered promiscuous mode [ 228.639826][ T29] audit: type=1400 audit(1777520086.451:647): avc: denied { watch_sb watch_reads } for pid=7981 comm="syz.3.563" path="/96" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 228.697303][ T7971] bridge3: port 2(veth5) entered blocking state [ 228.729460][ T7971] bridge3: port 2(veth5) entered disabled state [ 228.745117][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 228.757649][ T7971] veth5: entered allmulticast mode [ 228.772358][ T7971] veth5: entered promiscuous mode [ 228.836556][ T29] audit: type=1400 audit(1777520086.711:648): avc: denied { create } for pid=7992 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 228.941435][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.139290][ T7949] lo speed is unknown, defaulting to 1000 [ 229.270395][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 229.278515][ T7979] lo speed is unknown, defaulting to 1000 [ 229.462474][ T29] audit: type=1400 audit(1777520087.341:649): avc: denied { mount } for pid=8004 comm="syz.2.568" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 229.919890][ T5616] Bluetooth: hci5: command tx timeout [ 230.412369][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.545809][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.578567][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.652786][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.660082][ T7949] bridge_slave_0: entered allmulticast mode [ 230.667810][ T7949] bridge_slave_0: entered promiscuous mode [ 230.850569][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.857727][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.879410][ T7949] bridge_slave_1: entered allmulticast mode [ 230.906066][ T7949] bridge_slave_1: entered promiscuous mode [ 231.053080][ T7949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.246909][ T7949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.742715][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.831840][ T7949] team0: Port device team_slave_0 added [ 231.839638][ T7949] team0: Port device team_slave_1 added [ 231.883357][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.572926][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.698025][ T5616] Bluetooth: hci5: command tx timeout [ 232.707697][ T7949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.015465][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 233.039817][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.055305][ T8043] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 233.483125][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.492193][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.518115][ T7949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.564285][ T8052] netlink: 52 bytes leftover after parsing attributes in process `syz.3.576'. [ 233.618653][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.755142][ T8053] C: renamed from veth1_to_team (while UP) [ 233.763911][ T8053] netlink: 'syz.0.577': attribute type 2 has an invalid length. [ 233.771657][ T8053] netlink: 120 bytes leftover after parsing attributes in process `syz.0.577'. [ 233.781970][ T8053] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 234.236525][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.265745][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.283967][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.292980][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.355383][ T7949] hsr_slave_0: entered promiscuous mode [ 234.374104][ T7949] hsr_slave_1: entered promiscuous mode [ 234.389587][ T7949] debugfs: 'hsr0' already exists in 'hsr' [ 234.395707][ T7949] Cannot create hsr debugfs directory [ 234.640960][ T8066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.581'. [ 234.657988][ T5732] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 234.739281][ T5616] Bluetooth: hci5: command tx timeout [ 234.819318][ T7949] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.830005][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 234.839326][ T5732] usb 4-1: config 127 has an invalid interface number: 192 but max is 0 [ 234.839344][ T7949] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.857476][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 234.858027][ T5732] usb 4-1: config 127 has no interface number 0 [ 234.868681][ T7949] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.884123][ T5732] usb 4-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06 [ 234.919692][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.986938][ T5732] usb 4-1: Product: syz [ 235.022327][ T5732] usb 4-1: Manufacturer: syz [ 235.073694][ T5732] usb 4-1: SerialNumber: syz [ 235.318357][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.328675][ T7949] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.361977][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 235.378284][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.630897][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 236.330218][ T29] audit: type=1400 audit(1777520094.181:650): avc: denied { write } for pid=8063 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.360330][ T8064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.487455][ T8064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.575371][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.661064][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.815990][ T7949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.819080][ T5616] Bluetooth: hci5: command tx timeout [ 237.238097][ T7949] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.607687][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.614847][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.812493][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.819634][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.015079][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 238.134296][ T5732] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 238.135542][ T85] net_ratelimit: 4 callbacks suppressed [ 238.135553][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.141612][ T5732] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 238.163109][ T5732] pac7311 4-1:127.192: probe with driver pac7311 failed with error -71 [ 238.173814][ T5732] usb 4-1: USB disconnect, device number 13 [ 238.944733][ T29] audit: type=1400 audit(1777520096.821:651): avc: denied { getopt } for pid=8102 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.138724][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.343549][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.680165][ T8139] lo speed is unknown, defaulting to 1000 [ 240.178923][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.635644][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.663954][ T8150] siw: device registration error -23 [ 241.153987][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 241.395438][ T29] audit: type=1400 audit(1777520099.191:652): avc: denied { create } for pid=8157 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.989219][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.066723][ T29] audit: type=1400 audit(1777520099.191:653): avc: denied { write } for pid=8157 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.177867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 242.257659][ T29] audit: type=1400 audit(1777520099.191:654): avc: denied { read } for pid=8157 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.058877][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.384009][ T29] audit: type=1400 audit(1777520099.191:655): avc: denied { write } for pid=8157 comm="syz.0.592" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 243.384578][ T7949] veth0_vlan: entered promiscuous mode [ 244.098520][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.369891][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.382216][ T29] audit: type=1400 audit(1777520099.901:656): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.408029][ T29] audit: type=1400 audit(1777520099.901:657): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.448884][ T7949] veth1_vlan: entered promiscuous mode [ 245.384444][ T29] audit: type=1400 audit(1777520099.901:658): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.385866][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.412423][ T29] audit: type=1400 audit(1777520099.911:659): avc: denied { search } for pid=8164 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.182936][ T29] audit: type=1400 audit(1777520099.911:660): avc: denied { search } for pid=8164 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.249749][ T29] audit: type=1400 audit(1777520099.921:661): avc: denied { search } for pid=8164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.274986][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.391250][ T7949] veth0_macvtap: entered promiscuous mode [ 246.401631][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 246.401658][ T29] audit: type=1400 audit(1777520104.281:686): avc: denied { remove_name } for pid=8182 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3338 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.430561][ T7949] veth1_macvtap: entered promiscuous mode [ 246.437869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 246.438708][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.616427][ T29] audit: type=1400 audit(1777520104.281:687): avc: denied { unlink } for pid=8182 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3338 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.682226][ T29] audit: type=1400 audit(1777520104.351:688): avc: denied { create } for pid=8187 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 246.713472][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.728353][ T5717] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 246.735956][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.754058][ T29] audit: type=1400 audit(1777520104.351:689): avc: denied { bind } for pid=8187 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 246.811507][ T29] audit: type=1400 audit(1777520104.361:690): avc: denied { connect } for pid=8187 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 246.834485][ T1157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.857871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 246.917869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 246.927863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 246.979283][ T1157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.995109][ T29] audit: type=1400 audit(1777520104.371:691): avc: denied { read write } for pid=8187 comm="syz.0.597" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.020125][ T29] audit: type=1400 audit(1777520104.371:692): avc: denied { open } for pid=8187 comm="syz.0.597" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.020185][ T1157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.064286][ T5717] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 247.073514][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.081741][ T5717] usb 1-1: Product: syz [ 247.085931][ T5717] usb 1-1: Manufacturer: syz [ 247.090557][ T5717] usb 1-1: SerialNumber: syz [ 248.011237][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.024405][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.042203][ T5717] usb 1-1: config 0 descriptor?? [ 248.067470][ T29] audit: type=1400 audit(1777520104.371:693): avc: denied { ioctl } for pid=8187 comm="syz.0.597" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.098032][ T5717] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 248.112418][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.124278][ T5717] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 248.133707][ T5717] usb 1-1: media controller created [ 248.147283][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.156403][ T1157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.368257][ T29] audit: type=1400 audit(1777520104.481:694): avc: denied { create } for pid=8185 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.378378][ T8188] dvb-usb: bulk message failed: -22 (7/0) [ 248.389759][ T29] audit: type=1400 audit(1777520104.531:695): avc: denied { read } for pid=8185 comm="syz.3.598" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 248.505917][ T8188] netlink: 260 bytes leftover after parsing attributes in process `syz.0.597'. [ 248.535608][ T8203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.597'. [ 248.622145][ T5717] DVB: Unable to find symbol mt352_attach() [ 248.825744][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.839083][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.847648][ T8205] kAFS: unable to lookup cell 'ÿ' [ 248.893180][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.901712][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.970379][ T8202] lo speed is unknown, defaulting to 1000 [ 248.981201][ T5717] DVB: Unable to find symbol nxt6000_attach() [ 249.001738][ T5717] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 249.015715][ T5616] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 249.049978][ T5717] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 249.080172][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.132995][ T5717] dvb-usb: schedule remote query interval to 1000 msecs. [ 249.154833][ T5717] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 249.206938][ T5717] dvb-usb: bulk message failed: -22 (7/0) [ 249.229028][ T5717] dvb-usb: bulk message failed: -22 (7/0) [ 249.274542][ T5717] usb 1-1: USB disconnect, device number 7 [ 249.477161][ T5717] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 250.100263][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.108941][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.116831][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.322498][ T5696] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 250.435133][ T8246] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 250.523778][ T8247] Set syz1 is full, maxelem 0 reached [ 251.285572][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.320156][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.358228][ T5696] usb 6-1: Using ep0 maxpacket: 32 [ 251.366593][ T5696] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 252.159573][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 252.159589][ T29] audit: type=1400 audit(1777520110.041:745): avc: denied { map_read map_write } for pid=8257 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 252.324886][ T5696] usb 6-1: config 0 has no interface number 0 [ 252.333810][ T5696] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 252.354190][ T5696] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 252.364972][ T5696] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 252.376925][ T5696] usb 6-1: config 0 interface 196 has no altsetting 0 [ 253.097805][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.106491][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 253.115082][ T29] audit: type=1400 audit(1777520110.991:746): avc: denied { ioctl } for pid=8252 comm="syz.3.613" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.310761][ T29] audit: type=1400 audit(1777520111.111:747): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.357918][ T24] usb 4-1: device descriptor read/64, error -71 [ 253.371369][ T5696] usb 6-1: string descriptor 0 read error: -71 [ 253.386793][ T5696] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 253.399390][ T5696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.417041][ T5696] usb 6-1: config 0 descriptor?? [ 253.424511][ T5696] usb 6-1: can't set config #0, error -71 [ 253.452261][ T29] audit: type=1400 audit(1777520111.111:748): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.510673][ T5696] usb 6-1: USB disconnect, device number 2 [ 253.526943][ T29] audit: type=1400 audit(1777520111.111:749): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.638343][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.617'. [ 253.655566][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.617'. [ 253.680697][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 254.368270][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.381695][ T29] audit: type=1400 audit(1777520111.261:750): avc: denied { mounton } for pid=8265 comm="syz.0.616" path="/109/file0" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 254.413823][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.506385][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.514281][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.565603][ T29] audit: type=1400 audit(1777520111.281:752): avc: denied { create } for pid=8265 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 254.658043][ T29] audit: type=1400 audit(1777520111.281:753): avc: denied { execmem } for pid=8265 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 254.696576][ T29] audit: type=1400 audit(1777520111.261:751): avc: denied { mount } for pid=8265 comm="syz.0.616" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 254.749957][ T29] audit: type=1400 audit(1777520111.291:754): avc: denied { create } for pid=8269 comm="syz.5.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.848156][ T8279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.864551][ T8279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.011839][ T164] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.051107][ T164] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.085606][ T164] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.118312][ T164] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.356711][ T5732] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 255.517239][ T5732] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 255.554084][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.591701][ T5732] usb 6-1: Product: syz [ 255.607344][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.651568][ T5732] usb 6-1: Manufacturer: syz [ 255.656780][ T5732] usb 6-1: SerialNumber: syz [ 255.669328][ T5732] usb 6-1: config 0 descriptor?? [ 255.700424][ T5732] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 255.716054][ T5732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.742198][ T5732] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 255.753212][ T5732] usb 6-1: media controller created [ 255.778502][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.825666][ T8313] Set syz1 is full, maxelem 0 reached [ 255.868858][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.894846][ T5732] DVB: Unable to find symbol mt352_attach() [ 255.895726][ T8297] dvb-usb: bulk message failed: -22 (7/0) [ 255.911302][ T8297] netlink: 260 bytes leftover after parsing attributes in process `syz.5.623'. [ 255.920851][ T8297] netlink: 32 bytes leftover after parsing attributes in process `syz.5.623'. [ 256.891055][ T5732] DVB: Unable to find symbol nxt6000_attach() [ 256.900226][ T5732] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 256.909486][ T8325] ptrace attach of "./syz-executor exec"[8326] was attempted by "./syz-executor exec"[8325] [ 256.911404][ T8325] 9p: Bad value for 'rfdno' [ 256.924869][ T5732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 256.940825][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.942357][ T5732] dvb-usb: schedule remote query interval to 1000 msecs. [ 257.307467][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 257.307508][ T29] audit: type=1400 audit(1777520115.181:808): avc: denied { read write } for pid=8327 comm="syz.5.631" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 257.690474][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.700455][ T8335] FAULT_INJECTION: forcing a failure. [ 257.700455][ T8335] name failslab, interval 1, probability 0, space 0, times 0 [ 257.701331][ T5732] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 257.714117][ T29] audit: type=1400 audit(1777520115.181:807): avc: denied { append } for pid=8328 comm="syz.3.633" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 257.748914][ T5732] dvb-usb: bulk message failed: -22 (7/0) [ 257.755273][ T5732] dvb-usb: bulk message failed: -22 (7/0) [ 257.892356][ T8335] CPU: 0 UID: 0 PID: 8335 Comm: syz.0.632 Not tainted syzkaller #0 PREEMPT(full) [ 257.892380][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.892390][ T8335] Call Trace: [ 257.892397][ T8335] [ 257.892404][ T8335] dump_stack_lvl+0x100/0x190 [ 257.892430][ T8335] should_fail_ex.cold+0x5/0xa [ 257.892455][ T8335] ? tomoyo_encode2+0xfb/0x3c0 [ 257.892477][ T8335] should_failslab+0xc2/0x120 [ 257.892496][ T8335] __kmalloc_noprof+0xe0/0x850 [ 257.892520][ T8335] ? d_absolute_path+0x136/0x1b0 [ 257.892544][ T8335] tomoyo_encode2+0xfb/0x3c0 [ 257.892570][ T8335] tomoyo_encode+0x29/0x50 [ 257.892592][ T8335] tomoyo_realpath_from_path+0x18c/0x690 [ 257.892621][ T8335] tomoyo_path_number_perm+0x23c/0x580 [ 257.892640][ T8335] ? tomoyo_path_number_perm+0x22e/0x580 [ 257.892661][ T8335] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.892708][ T8335] ? find_held_lock+0x2b/0x80 [ 257.892725][ T8335] ? __fget_files+0x215/0x3d0 [ 257.892744][ T8335] ? hook_file_ioctl_common+0x149/0x410 [ 257.892769][ T8335] ? __fget_files+0x215/0x3d0 [ 257.892795][ T8335] ? __fget_files+0x21f/0x3d0 [ 257.892820][ T8335] security_file_ioctl+0xd3/0x230 [ 257.892843][ T8335] __x64_sys_ioctl+0xb7/0x210 [ 257.892863][ T8335] do_syscall_64+0x10b/0xf80 [ 257.892882][ T8335] ? clear_bhb_loop+0x40/0x90 [ 257.892903][ T8335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.892921][ T8335] RIP: 0033:0x7f82c139cdd9 [ 257.892936][ T8335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.892952][ T8335] RSP: 002b:00007f82c21d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.892970][ T8335] RAX: ffffffffffffffda RBX: 00007f82c1615fa0 RCX: 00007f82c139cdd9 [ 257.892981][ T8335] RDX: 0000200000000280 RSI: 00000000c058560f RDI: 0000000000000003 [ 257.892992][ T8335] RBP: 00007f82c21d1090 R08: 0000000000000000 R09: 0000000000000000 [ 257.893002][ T8335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.893012][ T8335] R13: 00007f82c1616038 R14: 00007f82c1615fa0 R15: 00007ffeb1482eb8 [ 257.893037][ T8335] [ 257.893294][ T8335] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.972109][ T29] audit: type=1400 audit(1777520115.221:809): avc: denied { open } for pid=8327 comm="syz.5.631" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 258.015982][ T5732] usb 6-1: USB disconnect, device number 3 [ 258.162923][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.223004][ T29] audit: type=1400 audit(1777520115.391:810): avc: denied { read write } for pid=8333 comm="syz.0.632" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 258.301842][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 258.317503][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 258.673577][ T29] audit: type=1400 audit(1777520115.391:811): avc: denied { open } for pid=8333 comm="syz.0.632" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 258.745286][ T8349] netlink: 'syz.5.631': attribute type 19 has an invalid length. [ 259.109403][ T29] audit: type=1400 audit(1777520115.681:812): avc: denied { setopt } for pid=8331 comm="syz.4.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.120525][ T1910] dvb-usb: bulk message failed: -22 (7/0) [ 259.182000][ T1910] dvb-usb: error while querying for an remote control event. [ 259.262700][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.320562][ T5695] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 259.330073][ T29] audit: type=1400 audit(1777520115.701:813): avc: denied { mount } for pid=8331 comm="syz.4.634" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 259.356752][ T29] audit: type=1400 audit(1777520115.941:814): avc: denied { ioctl } for pid=8333 comm="syz.0.632" path="/dev/video3" dev="devtmpfs" ino=936 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 259.409677][ T8355] siw: device registration error -23 [ 259.427822][ T29] audit: type=1400 audit(1777520116.901:815): avc: denied { mounton } for pid=8344 comm="syz.3.636" path="/114/file0" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 259.507294][ T29] audit: type=1400 audit(1777520117.291:816): avc: denied { create } for pid=8345 comm="syz.4.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 259.531304][ T5695] usb 1-1: config 0 has no interfaces? [ 259.692962][ T5732] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 260.446355][ T5695] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 260.456524][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.473597][ T5695] usb 1-1: config 0 descriptor?? [ 260.491093][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.551545][ T8363] SET target dimension over the limit! [ 260.715396][ T8367] Set syz1 is full, maxelem 0 reached [ 260.789775][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.412148][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.472182][ T5695] usb 1-1: USB disconnect, device number 8 [ 262.524732][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 262.524744][ T29] audit: type=1400 audit(1777520120.401:823): avc: denied { name_bind } for pid=8376 comm="syz.2.644" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 262.557556][ T29] audit: type=1400 audit(1777520120.431:824): avc: denied { node_bind } for pid=8376 comm="syz.2.644" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 262.754193][ T29] audit: type=1400 audit(1777520120.631:825): avc: denied { getopt } for pid=8379 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.806828][ T29] audit: type=1400 audit(1777520120.681:826): avc: denied { create } for pid=8381 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 262.879355][ T29] audit: type=1400 audit(1777520120.681:827): avc: denied { connect } for pid=8381 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 262.955913][ T29] audit: type=1400 audit(1777520120.711:828): avc: denied { write } for pid=8381 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.145057][ T29] audit: type=1400 audit(1777520121.021:829): avc: denied { ioctl } for pid=8381 comm="syz.4.646" path="socket:[17342]" dev="sockfs" ino=17342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.182303][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 263.206432][ T29] audit: type=1400 audit(1777520121.051:830): avc: denied { create } for pid=8383 comm="syz.5.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.226810][ T29] audit: type=1400 audit(1777520121.051:831): avc: denied { bind } for pid=8383 comm="syz.5.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.266327][ T8388] FAULT_INJECTION: forcing a failure. [ 263.266327][ T8388] name failslab, interval 1, probability 0, space 0, times 0 [ 263.280307][ T8388] CPU: 1 UID: 0 PID: 8388 Comm: syz.0.648 Not tainted syzkaller #0 PREEMPT(full) [ 263.280329][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.280339][ T8388] Call Trace: [ 263.280345][ T8388] [ 263.280351][ T8388] dump_stack_lvl+0x100/0x190 [ 263.280377][ T8388] should_fail_ex.cold+0x5/0xa [ 263.280401][ T8388] ? tomoyo_encode2+0xfb/0x3c0 [ 263.280422][ T8388] should_failslab+0xc2/0x120 [ 263.280441][ T8388] __kmalloc_noprof+0xe0/0x850 [ 263.280465][ T8388] ? d_absolute_path+0x136/0x1b0 [ 263.280491][ T8388] tomoyo_encode2+0xfb/0x3c0 [ 263.280516][ T8388] tomoyo_encode+0x29/0x50 [ 263.280537][ T8388] tomoyo_realpath_from_path+0x18c/0x690 [ 263.280564][ T8388] tomoyo_path_number_perm+0x23c/0x580 [ 263.280582][ T8388] ? tomoyo_path_number_perm+0x22e/0x580 [ 263.280606][ T8388] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.280650][ T8388] ? find_held_lock+0x2b/0x80 [ 263.280666][ T8388] ? __fget_files+0x215/0x3d0 [ 263.280685][ T8388] ? hook_file_ioctl_common+0x149/0x410 [ 263.280708][ T8388] ? __fget_files+0x215/0x3d0 [ 263.280732][ T8388] ? __fget_files+0x21f/0x3d0 [ 263.280755][ T8388] security_file_ioctl+0xd3/0x230 [ 263.280777][ T8388] __x64_sys_ioctl+0xb7/0x210 [ 263.280796][ T8388] do_syscall_64+0x10b/0xf80 [ 263.280819][ T8388] ? clear_bhb_loop+0x40/0x90 [ 263.280840][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.280856][ T8388] RIP: 0033:0x7f82c139cdd9 [ 263.280871][ T8388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.280886][ T8388] RSP: 002b:00007f82c21d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.280902][ T8388] RAX: ffffffffffffffda RBX: 00007f82c1615fa0 RCX: 00007f82c139cdd9 [ 263.280912][ T8388] RDX: 0000000000000000 RSI: 0000000080184560 RDI: 0000000000000003 [ 263.280921][ T8388] RBP: 00007f82c21d1090 R08: 0000000000000000 R09: 0000000000000000 [ 263.280931][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.280940][ T8388] R13: 00007f82c1616038 R14: 00007f82c1615fa0 R15: 00007ffeb1482eb8 [ 263.280963][ T8388] [ 263.281134][ T8388] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.498732][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.514256][ T29] audit: type=1400 audit(1777520121.051:832): avc: denied { write } for pid=8383 comm="syz.5.647" path="socket:[17346]" dev="sockfs" ino=17346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.555533][ T8382] lo speed is unknown, defaulting to 1000 [ 263.711705][ T8392] netlink: 84 bytes leftover after parsing attributes in process `syz.2.649'. [ 263.745308][ T8392] nbd: must specify at least one socket [ 263.858359][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.150708][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.546781][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.833910][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 265.885739][ T8422] macsec2: entered promiscuous mode [ 265.896194][ T8422] dummy0: entered promiscuous mode [ 265.907494][ T8422] macsec2: entered allmulticast mode [ 265.914129][ T8422] dummy0: entered allmulticast mode [ 265.922896][ T8422] dummy0: left allmulticast mode [ 265.928666][ T8422] dummy0: left promiscuous mode [ 266.108466][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'. [ 266.908393][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.922220][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.036752][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 267.176921][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 267.191601][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 267.368090][ T5696] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 267.927914][ T5696] usb 4-1: device descriptor read/64, error -71 [ 267.965199][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.034203][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 268.034216][ T29] audit: type=1400 audit(1777520125.911:852): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 268.198117][ T5696] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 268.260898][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 268.278651][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 269.071914][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.149504][ T5696] usb 4-1: device descriptor read/64, error -71 [ 269.206491][ T29] audit: type=1400 audit(1777520127.081:853): avc: denied { map } for pid=8453 comm="syz.5.669" path="/dev/video4" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 269.279666][ T5696] usb usb4-port1: attempt power cycle [ 269.568294][ T8449] kvm: Disabled LAPIC found during irq injection [ 269.640111][ T5696] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 269.778636][ T5696] usb 4-1: device descriptor read/8, error -71 [ 269.914126][ T29] audit: type=1400 audit(1777520127.791:854): avc: denied { create } for pid=8470 comm="syz.5.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 269.954368][ T1910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.967016][ T29] audit: type=1400 audit(1777520127.841:855): avc: denied { read } for pid=8470 comm="syz.5.673" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 270.018152][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 270.018523][ T8469] lo speed is unknown, defaulting to 1000 [ 270.057987][ T5696] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 270.088595][ T29] audit: type=1400 audit(1777520127.841:856): avc: denied { open } for pid=8470 comm="syz.5.673" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 270.099057][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.224218][ T29] audit: type=1400 audit(1777520127.881:857): avc: denied { ioctl } for pid=8470 comm="syz.5.673" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 270.298416][ T29] audit: type=1400 audit(1777520127.891:858): avc: denied { setopt } for pid=8470 comm="syz.5.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 270.326788][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 270.358585][ T5696] usb 4-1: device not accepting address 19, error -71 [ 270.366738][ T5696] usb usb4-port1: unable to enumerate USB device [ 270.391955][ T8481] macsec2: entered promiscuous mode [ 270.403516][ T8481] dummy0: entered promiscuous mode [ 270.416814][ T8481] macsec2: entered allmulticast mode [ 270.450482][ T8481] dummy0: entered allmulticast mode [ 270.467961][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 270.486096][ T8481] dummy0: left allmulticast mode [ 270.507974][ T8481] dummy0: left promiscuous mode [ 270.638627][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 270.661318][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 270.670529][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.698485][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 270.718177][ T24] pvrusb2: ********** [ 270.722174][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 270.734704][ T24] pvrusb2: Important functionality might not be entirely working. [ 270.742627][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 270.767958][ T24] pvrusb2: ********** [ 270.902867][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 270.928231][ T8478] macsec1: entered promiscuous mode [ 270.933467][ T8478] dummy0: entered promiscuous mode [ 270.939442][ T8478] macsec1: entered allmulticast mode [ 270.944997][ T8478] dummy0: entered allmulticast mode [ 270.955918][ T8478] dummy0: left allmulticast mode [ 270.966768][ T8478] dummy0: left promiscuous mode [ 271.005350][ T29] audit: type=1400 audit(1777520128.881:859): avc: denied { read } for pid=8477 comm="syz.5.675" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 271.046107][ T29] audit: type=1400 audit(1777520128.881:860): avc: denied { open } for pid=8477 comm="syz.5.675" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 271.070825][ T29] audit: type=1400 audit(1777520128.911:861): avc: denied { ioctl } for pid=8477 comm="syz.5.675" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 271.104036][ T24] usb 6-1: USB disconnect, device number 4 [ 271.110859][ T24] pvrusb2: Device being rendered inoperable [ 271.154053][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.489322][ T8502] siw: device registration error -23 [ 272.328276][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.117664][ T8507] ptrace attach of "./syz-executor exec"[8508] was attempted by "./syz-executor exec"[8507] [ 273.131851][ T8507] 9p: Bad value for 'rfdno' [ 273.163861][ T1910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.378534][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.484654][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 273.484667][ T29] audit: type=1400 audit(1777520131.361:863): avc: denied { create } for pid=8510 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 273.742679][ T29] audit: type=1400 audit(1777520131.621:864): avc: denied { bind } for pid=8517 comm="syz.5.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.885979][ T29] audit: type=1400 audit(1777520131.761:865): avc: denied { write } for pid=8522 comm="syz.3.689" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.930413][ T29] audit: type=1400 audit(1777520131.811:866): avc: denied { read write } for pid=8522 comm="syz.3.689" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.959595][ T29] audit: type=1400 audit(1777520131.811:867): avc: denied { open } for pid=8522 comm="syz.3.689" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.986703][ T29] audit: type=1400 audit(1777520131.831:868): avc: denied { ioctl } for pid=8522 comm="syz.3.689" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 274.052774][ T29] audit: type=1400 audit(1777520131.931:869): avc: denied { write } for pid=8510 comm="syz.0.685" name="ipv6_route" dev="proc" ino=4026533035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 274.141637][ T8530] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 274.208175][ T8536] sctp: [Deprecated]: syz.3.692 (pid 8536) Use of int in maxseg socket option. [ 274.208175][ T8536] Use struct sctp_assoc_value instead [ 274.545687][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.641305][ T8547] siw: device registration error -23 [ 275.548235][ T1910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.565728][ T29] audit: type=1400 audit(1777520133.041:870): avc: denied { ioctl } for pid=8540 comm="syz.5.694" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17948 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 276.216454][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.225834][ T29] audit: type=1400 audit(1777520133.731:871): avc: denied { wake_alarm } for pid=8540 comm="syz.5.694" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 276.384269][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.747922][ T29] audit: type=1400 audit(1777520134.621:872): avc: denied { read } for pid=8556 comm="syz.5.699" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 276.878056][ T8553] lo speed is unknown, defaulting to 1000 [ 276.933187][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 277.310909][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 277.437857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 277.493955][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.441526][ T8574] lo speed is unknown, defaulting to 1000 [ 278.501940][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.617923][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 278.706280][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.707'. [ 278.718810][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.707'. [ 278.768766][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 278.776453][ T24] usb 4-1: config 1 has an invalid interface number: 163 but max is 0 [ 279.459923][ T24] usb 4-1: config 1 has no interface number 0 [ 279.486904][ T24] usb 4-1: config 1 interface 163 altsetting 248 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 279.533035][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.537873][ T24] usb 4-1: config 1 interface 163 has no altsetting 0 [ 279.549020][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.578544][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=2f.87 [ 279.587746][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.616767][ T24] usb 4-1: Product: syz [ 279.631245][ T24] usb 4-1: Manufacturer: syz [ 279.647876][ T24] usb 4-1: SerialNumber: syz [ 279.664843][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 279.664855][ T29] audit: type=1400 audit(1777520137.541:879): avc: denied { create } for pid=8573 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.917057][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 279.925195][ T24] usb 4-1: Please update to version 0.2 or newer [ 279.994381][ T24] usb 4-1: USB disconnect, device number 20 [ 280.047884][ T85] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 280.399511][ T8604] siw: device registration error -23 [ 280.429906][ T85] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.450176][ T29] audit: type=1400 audit(1777520138.321:880): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 280.521337][ T85] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.712970][ T85] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.729246][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.773963][ T85] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.845369][ T85] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.901897][ T85] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.953518][ T85] usb 6-1: Product: syz [ 280.993888][ T85] usb 6-1: Manufacturer: syz [ 281.042163][ T85] cdc_wdm 6-1:1.0: skipping garbage [ 281.080338][ T85] cdc_wdm 6-1:1.0: skipping garbage [ 281.109876][ T85] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 281.140686][ T85] cdc_wdm 6-1:1.0: Unknown control protocol [ 281.313561][ T29] audit: type=1400 audit(1777520139.191:881): avc: denied { read write } for pid=8597 comm="syz.5.709" name="cdc-wdm0" dev="devtmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 281.424775][ T29] audit: type=1400 audit(1777520139.211:882): avc: denied { open } for pid=8597 comm="syz.5.709" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 281.886233][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.085225][ T8617] lo speed is unknown, defaulting to 1000 [ 282.118188][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 282.566032][ T8629] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.713'. [ 282.577378][ T5695] libceph: connect (1)[c::]:6789 error -101 [ 282.704325][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 282.725329][ T29] audit: type=1400 audit(1777520140.521:883): avc: denied { create } for pid=8618 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 282.786258][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.903847][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.002183][ T29] audit: type=1400 audit(1777520140.841:884): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.062666][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 283.101159][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 283.149559][ T29] audit: type=1400 audit(1777520140.851:885): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.178485][ T8637] ceph: No mds server is up or the cluster is laggy [ 283.331926][ T29] audit: type=1400 audit(1777520140.851:886): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.470855][ T29] audit: type=1400 audit(1777520140.851:887): avc: denied { read } for pid=5273 comm="dhcpcd" name="n37" dev="tmpfs" ino=3637 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.585613][ T29] audit: type=1400 audit(1777520140.851:888): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=3637 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 283.644397][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 283.672584][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 283.948894][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.569864][ T24] usb 6-1: USB disconnect, device number 5 [ 284.863048][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.717'. [ 284.929175][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 285.073085][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 285.073113][ T29] audit: type=1400 audit(1777520142.911:890): avc: denied { read open } for pid=8657 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.873627][ T29] audit: type=1400 audit(1777520142.911:891): avc: denied { getattr } for pid=8657 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.054835][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.631438][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.719'. [ 287.641984][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.682671][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.719'. [ 287.709325][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.726304][ T29] audit: type=1400 audit(1777520145.551:892): avc: denied { read write } for pid=8661 comm="syz.3.720" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 287.726506][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.750859][ T29] audit: type=1400 audit(1777520145.551:893): avc: denied { open } for pid=8661 comm="syz.3.720" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 287.799490][ T29] audit: type=1400 audit(1777520145.591:894): avc: denied { ioctl } for pid=8661 comm="syz.3.720" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 287.920043][ T29] audit: type=1400 audit(1777520145.681:895): avc: denied { map } for pid=8661 comm="syz.3.720" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 288.093713][ T29] audit: type=1400 audit(1777520145.711:896): avc: denied { set_context_mgr } for pid=8661 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 288.235301][ T8680] Set syz1 is full, maxelem 0 reached [ 288.300267][ T29] audit: type=1400 audit(1777520146.181:897): avc: denied { create } for pid=8681 comm="syz.2.724" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 288.361673][ T29] audit: type=1400 audit(1777520146.201:898): avc: denied { read } for pid=8681 comm="syz.2.724" name="file0" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 288.471031][ T29] audit: type=1400 audit(1777520146.201:899): avc: denied { open } for pid=8681 comm="syz.2.724" path="/183/file0" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 288.748219][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.876613][ T85] libceph: connect (1)[c::]:6789 error -101 [ 288.900688][ T85] libceph: mon0 (1)[c::]:6789 connect error [ 289.315879][ T5695] libceph: connect (1)[c::]:6789 error -101 [ 289.323316][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 289.778714][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.840214][ T5695] libceph: connect (1)[c::]:6789 error -101 [ 289.872040][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 289.928618][ T8703] ceph: No mds server is up or the cluster is laggy [ 290.003663][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 290.016120][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.732'. [ 290.753130][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 290.753145][ T29] audit: type=1400 audit(1777520147.981:941): avc: denied { ioctl } for pid=8724 comm="syz.4.732" path="socket:[18124]" dev="sockfs" ino=18124 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.795577][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.833612][ T1134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.850326][ T29] audit: type=1400 audit(1777520148.631:942): avc: denied { ioctl } for pid=8692 comm="syz.3.725" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 291.018274][ T29] audit: type=1400 audit(1777520148.771:943): avc: denied { execmem } for pid=8734 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 291.182819][ T8737] ptrace attach of "./syz-executor exec"[8738] was attempted by "./syz-executor exec"[8737] [ 291.197110][ T8737] 9p: Bad value for 'rfdno' [ 291.849058][ T29] audit: type=1400 audit(1777520149.071:944): avc: denied { mounton } for pid=8734 comm="syz.4.733" path="/173" dev="tmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 291.871160][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.099868][ T29] audit: type=1400 audit(1777520149.971:945): avc: denied { read } for pid=8745 comm="syz.0.735" dev="nsfs" ino=4026532843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 292.263024][ T29] audit: type=1400 audit(1777520149.971:946): avc: denied { open } for pid=8745 comm="syz.0.735" path="net:[4026532843]" dev="nsfs" ino=4026532843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 292.288040][ T29] audit: type=1400 audit(1777520149.971:947): avc: denied { create } for pid=8745 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.328027][ T29] audit: type=1400 audit(1777520149.981:948): avc: denied { bind } for pid=8745 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.400843][ T29] audit: type=1400 audit(1777520149.981:949): avc: denied { write } for pid=8745 comm="syz.0.735" path="socket:[18141]" dev="sockfs" ino=18141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.723373][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.740'. [ 292.796551][ T29] audit: type=1400 audit(1777520150.251:950): avc: denied { create } for pid=8752 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 293.043627][ T8766] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8766 comm=syz.4.740 [ 293.223939][ T8773] Set syz1 is full, maxelem 0 reached [ 293.298247][ T8772] syzkaller0: entered promiscuous mode [ 293.349871][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.364945][ T8772] syzkaller0: entered allmulticast mode [ 294.454613][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.930218][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 294.960851][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 294.963006][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.219795][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.746'. [ 295.271001][ T24] libceph: connect (1)[c::]:6789 error -101 [ 295.309473][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 295.768243][ T8800] ptrace attach of "./syz-executor exec"[8801] was attempted by "./syz-executor exec"[8800] [ 296.423606][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 296.423633][ T29] audit: type=1400 audit(1777520154.301:974): avc: denied { sys_module } for pid=8786 comm="syz.0.745" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 296.430270][ T24] libceph: connect (1)[c::]:6789 error -101 [ 296.457077][ T1134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.593475][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 296.828325][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.886492][ T8794] ceph: No mds server is up or the cluster is laggy [ 297.037876][ T29] audit: type=1400 audit(1777520154.911:975): avc: denied { read write } for pid=8808 comm="syz.5.749" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.083187][ T29] audit: type=1400 audit(1777520154.911:976): avc: denied { open } for pid=8808 comm="syz.5.749" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.112531][ T29] audit: type=1400 audit(1777520154.911:977): avc: denied { ioctl } for pid=8808 comm="syz.5.749" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.168215][ T85] libceph: connect (1)[c::]:6789 error -101 [ 297.182249][ T85] libceph: mon0 (1)[c::]:6789 connect error [ 297.308166][ T5732] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 297.470991][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.550619][ T5732] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.578536][ T5732] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 297.590043][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.601742][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 297.809101][ T29] audit: type=1400 audit(1777520155.671:978): avc: denied { write } for pid=8816 comm="syz.0.753" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 297.861844][ T29] audit: type=1400 audit(1777520155.741:979): avc: denied { name_bind } for pid=8819 comm="syz.4.754" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 297.897673][ T29] audit: type=1400 audit(1777520155.741:980): avc: denied { node_bind } for pid=8819 comm="syz.4.754" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 297.912780][ T5732] usb 6-1: Product: syz [ 297.926575][ T5732] usb 6-1: Manufacturer: syz [ 297.932537][ T5732] usb 6-1: SerialNumber: syz [ 297.942566][ T29] audit: type=1400 audit(1777520155.801:981): avc: denied { ioctl } for pid=8814 comm="syz.3.752" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.974334][ T8809] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 297.991278][ T29] audit: type=1400 audit(1777520155.821:982): avc: denied { create } for pid=8819 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.013741][ T29] audit: type=1400 audit(1777520155.821:983): avc: denied { write } for pid=8819 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.036736][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.049223][ T10] usb 4-1: device descriptor read/64, error -71 [ 298.292840][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 298.428038][ T10] usb 4-1: device descriptor read/64, error -71 [ 298.468405][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 298.498146][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.518308][ T5732] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 298.538572][ T10] usb usb4-port1: attempt power cycle [ 298.834986][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 298.847528][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'. [ 298.918505][ T8837] siw: device registration error -23 [ 299.750027][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.827904][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 300.173374][ T8836] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.180869][ T8836] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.195144][ T8836] tipc: Resetting bearer [ 300.254217][ T8836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.266413][ T8836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.490325][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.534513][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.706419][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.044912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.782829][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 405.789798][ C1] rcu: 0-...!: (2 ticks this GP) idle=988c/1/0x4000000000000000 softirq=30517/30517 fqs=1 [ 405.800472][ C1] rcu: (detected by 1, t=10504 jiffies, g=28873, q=108 ncpus=2) [ 405.808178][ C1] Sending NMI from CPU 1 to CPUs 0: [ 405.808202][ C0] NMI backtrace for cpu 0 [ 405.808214][ C0] CPU: 0 UID: 0 PID: 8835 Comm: syz.2.756 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.808233][ C0] Tainted: [L]=SOFTLOCKUP [ 405.808238][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.808246][ C0] RIP: 0010:__lock_acquire+0x555/0x2630 [ 405.808268][ C0] Code: ff 1f c1 e0 0d 44 09 c8 98 44 29 c0 31 f8 89 f7 89 c6 29 c7 01 d0 c1 c6 06 31 fe 89 f7 29 f2 01 c6 c1 c7 08 31 d7 89 fa 29 f8 <01> f7 c1 c2 10 41 89 f8 31 c2 89 d0 29 d6 01 fa c1 c8 0d 31 c6 89 [ 405.808281][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00000012 [ 405.808293][ C0] RAX: 000000000329e73d RBX: ffff8880684cd5b8 RCX: 0000000000000001 [ 405.808303][ C0] RDX: 00000000fcd60c27 RSI: 00000000fffcc88a RDI: 00000000fcd60c27 [ 405.808312][ C0] RBP: ffff8880684cca00 R08: 00000000ffffffff R09: 0000000000000c98 [ 405.808321][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 405.808329][ C0] R13: 0000000000000c98 R14: 0000000000000000 R15: 0000000000000003 [ 405.808338][ C0] FS: 0000000000000000(0000) GS:ffff888124379000(0000) knlGS:0000000000000000 [ 405.808353][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.808362][ C0] CR2: 0000200001000000 CR3: 000000000e596000 CR4: 00000000003526f0 [ 405.808371][ C0] Call Trace: [ 405.808376][ C0] [ 405.808382][ C0] ? do_raw_spin_lock+0x128/0x260 [ 405.808403][ C0] ? do_raw_spin_lock+0x128/0x260 [ 405.808422][ C0] lock_acquire+0x1b1/0x370 [ 405.808438][ C0] ? advance_sched+0xe5/0xd20 [ 405.808462][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 405.808482][ C0] _raw_spin_lock+0x2e/0x40 [ 405.808502][ C0] ? advance_sched+0xe5/0xd20 [ 405.808519][ C0] advance_sched+0xe5/0xd20 [ 405.808537][ C0] ? find_held_lock+0x2b/0x80 [ 405.808550][ C0] ? __hrtimer_run_queues+0x383/0xa00 [ 405.808570][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 405.808589][ C0] ? __pfx_advance_sched+0x10/0x10 [ 405.808607][ C0] __hrtimer_run_queues+0x470/0xa00 [ 405.808630][ C0] hrtimer_interrupt+0x3e5/0x940 [ 405.808647][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 405.808667][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 405.808683][ C0] [ 405.808687][ C0] [ 405.808692][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.808707][ C0] RIP: 0010:unwind_next_frame+0x167b/0x2090 [ 405.808728][ C0] Code: 00 0f 84 42 f9 ff ff 4c 89 e7 e8 20 71 be 00 e9 35 f9 ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 <0f> 85 29 06 00 00 49 8d 7d 08 49 8b 5d 38 48 b8 00 00 00 00 00 fc [ 405.808740][ C0] RSP: 0018:ffffc900030a6ef0 EFLAGS: 00000246 [ 405.808751][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff917b52ca [ 405.808760][ C0] RDX: 1ffff92000614df3 RSI: 0000000000000001 RDI: 0000000000000001 [ 405.808769][ C0] RBP: ffffc900030a6fa8 R08: ffffffff917b52ce R09: 0000000000000007 [ 405.808778][ C0] R10: 0000000000000200 R11: 000000000000f2da R12: ffffc900030a6fb0 [ 405.808786][ C0] R13: ffffc900030a6f60 R14: ffffc900030a7090 R15: ffffc900030a6f94 [ 405.808800][ C0] ? stack_trace_save+0x8e/0xc0 [ 405.808816][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 405.808830][ C0] arch_stack_walk+0x94/0xf0 [ 405.808850][ C0] ? save_stack+0x162/0x1e0 [ 405.808866][ C0] stack_trace_save+0x8e/0xc0 [ 405.808879][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 405.808893][ C0] ? __lock_acquire+0x4a5/0x2630 [ 405.808909][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 405.808923][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 405.808938][ C0] save_stack+0x162/0x1e0 [ 405.808950][ C0] ? __pfx_save_stack+0x10/0x10 [ 405.808966][ C0] ? page_ext_put+0x3e/0xd0 [ 405.808981][ C0] __reset_page_owner+0x84/0x190 [ 405.808995][ C0] free_unref_folios+0xa0d/0x16f0 [ 405.809017][ C0] ? __print_lock_name+0x20/0x80 [ 405.809030][ C0] ? folios_put_refs+0x50a/0xa90 [ 405.809049][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 405.809064][ C0] folios_put_refs+0x571/0xa90 [ 405.809084][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 405.809105][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 405.809121][ C0] shmem_undo_range+0x5e5/0x1570 [ 405.809144][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 405.809173][ C0] ? __lock_acquire+0x4a5/0x2630 [ 405.809197][ C0] ? find_held_lock+0x2b/0x80 [ 405.809209][ C0] ? percpu_counter_add_batch+0xb9/0x230 [ 405.809231][ C0] shmem_evict_inode+0x3f3/0xc40 [ 405.809252][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 405.809268][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 405.809288][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 405.809305][ C0] ? find_held_lock+0x2b/0x80 [ 405.809317][ C0] ? evict+0x37e/0xad0 [ 405.809335][ C0] ? evict+0x37e/0xad0 [ 405.809355][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 405.809376][ C0] evict+0x3c2/0xad0 [ 405.809393][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 405.809409][ C0] ? __pfx_evict+0x10/0x10 [ 405.809429][ C0] ? iput.part.0+0x5fd/0xf50 [ 405.809455][ C0] iput.part.0+0x605/0xf50 [ 405.809473][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 405.809490][ C0] iput+0x35/0x40 [ 405.809508][ C0] dentry_unlink_inode+0x2c0/0x4c0 [ 405.809527][ C0] __dentry_kill+0x1d0/0x690 [ 405.809547][ C0] finish_dput+0x76/0x480 [ 405.809560][ C0] dput.part.0+0x456/0x570 [ 405.809573][ C0] dput+0x1f/0x30 [ 405.809585][ C0] __fput+0x519/0xb50 [ 405.809603][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 405.809617][ C0] task_work_run+0x150/0x240 [ 405.809634][ C0] ? __pfx_task_work_run+0x10/0x10 [ 405.809651][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 405.809671][ C0] do_exit+0x8d2/0x2a60 [ 405.809685][ C0] ? lock_acquire+0x1b1/0x370 [ 405.809701][ C0] ? find_held_lock+0x2b/0x80 [ 405.809714][ C0] ? __pfx_do_exit+0x10/0x10 [ 405.809728][ C0] ? find_held_lock+0x2b/0x80 [ 405.809740][ C0] ? get_signal+0x7e0/0x21e0 [ 405.809760][ C0] do_group_exit+0xd5/0x2a0 [ 405.809776][ C0] get_signal+0x1ec7/0x21e0 [ 405.809796][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 405.809814][ C0] ? __pfx_get_signal+0x10/0x10 [ 405.809833][ C0] ? do_futex+0x192/0x350 [ 405.809852][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 405.809874][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 405.809897][ C0] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 405.809917][ C0] ? rcu_is_watching+0x12/0xc0 [ 405.809938][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 405.809955][ C0] ? do_syscall_64+0x52d/0xf80 [ 405.809970][ C0] do_syscall_64+0x706/0xf80 [ 405.809984][ C0] ? clear_bhb_loop+0x40/0x90 [ 405.809999][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.810012][ C0] RIP: 0033:0x7f7b4819cdd9 [ 405.810023][ C0] Code: Unable to access opcode bytes at 0x7f7b4819cdaf. [ 405.810029][ C0] RSP: 002b:00007f7b49060028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 405.810041][ C0] RAX: 000000000003ffff RBX: 00007f7b48416090 RCX: 00007f7b4819cdd9 [ 405.810051][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000003 [ 405.810060][ C0] RBP: 00007f7b48232d69 R08: 0000000000000000 R09: 0000000000000000 [ 405.810068][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 405.810077][ C0] R13: 00007f7b48416128 R14: 00007f7b48416090 R15: 00007ffdb5038648 [ 405.810091][ C0] [ 405.810198][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g28873 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 406.521869][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 406.531824][ C1] rcu: RCU grace-period kthread stack dump: [ 406.537697][ C1] task:rcu_preempt state:R running task stack:27992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 406.551176][ C1] Call Trace: [ 406.554445][ C1] [ 406.557371][ C1] __schedule+0x10e9/0x6820 [ 406.561884][ C1] ? __pfx___schedule+0x10/0x10 [ 406.566723][ C1] ? find_held_lock+0x2b/0x80 [ 406.571391][ C1] ? schedule+0x2bf/0x390 [ 406.575712][ C1] schedule+0xdd/0x390 [ 406.579774][ C1] schedule_timeout+0x127/0x280 [ 406.584622][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 406.589994][ C1] ? __pfx_process_timeout+0x10/0x10 [ 406.595271][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 406.601067][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 406.606522][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 406.611284][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 406.616564][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 406.622017][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 406.626947][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 406.632137][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 406.637938][ C1] rcu_gp_kthread+0x179/0x230 [ 406.642605][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 406.647793][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 406.653591][ C1] ? __kthread_parkme+0x18c/0x230 [ 406.658608][ C1] ? kthread+0x13a/0x450 [ 406.662842][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 406.668029][ C1] kthread+0x370/0x450 [ 406.672090][ C1] ? __pfx_kthread+0x10/0x10 [ 406.676679][ C1] ret_from_fork+0x72b/0xd50 [ 406.681263][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 406.686368][ C1] ? __switch_to+0x800/0x1100 [ 406.691041][ C1] ? __pfx_kthread+0x10/0x10 [ 406.695623][ C1] ret_from_fork_asm+0x1a/0x30 [ 406.700399][ C1] [ 406.703402][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 406.709710][ C1] CPU: 1 UID: 0 PID: 8846 Comm: syz.4.761 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.720459][ C1] Tainted: [L]=SOFTLOCKUP [ 406.724767][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.734807][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 406.741477][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 89 7c 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 406.761073][ C1] RSP: 0018:ffffc90003e17a80 EFLAGS: 00000246 [ 406.767129][ C1] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90006203000 [ 406.775087][ C1] RDX: 0000000000080000 RSI: ffffffff81fc0f17 RDI: ffff8880684c8000 [ 406.783044][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 406.790999][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 406.798958][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 406.806917][ C1] FS: 00007f35825f66c0(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 406.815835][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.822406][ C1] CR2: 0000001b33318ff8 CR3: 000000006ab21000 CR4: 00000000003526f0 [ 406.830384][ C1] Call Trace: [ 406.833663][ C1] [ 406.836585][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 406.841613][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 406.847933][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 406.853309][ C1] ? __pfx___text_poke+0x10/0x10 [ 406.858252][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 406.863270][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 406.868374][ C1] ? yield_to+0x43f/0x9b0 [ 406.872691][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 406.878404][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 406.884641][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 406.890870][ C1] ? find_held_lock+0x2b/0x80 [ 406.895543][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 406.901509][ C1] jump_label_update+0x37a/0x550 [ 406.906447][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 406.912334][ C1] static_key_enable+0x1a/0x20 [ 406.917087][ C1] sched_core_get+0x8a/0xa0 [ 406.921577][ C1] sched_core_share_pid+0x406/0x9d0 [ 406.926765][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 406.932653][ C1] ? cap_task_prctl+0x104/0xa50 [ 406.937495][ C1] ? __pfx_sched_core_share_pid+0x10/0x10 [ 406.943203][ C1] ? static_key_count+0x5a/0x70 [ 406.948045][ C1] ? security_task_prctl+0x11c/0x160 [ 406.953333][ C1] __do_sys_prctl+0x6bd/0x2310 [ 406.958092][ C1] ? __pfx___do_sys_prctl+0x10/0x10 [ 406.963284][ C1] ? rcu_is_watching+0x12/0xc0 [ 406.968050][ C1] do_syscall_64+0x10b/0xf80 [ 406.972629][ C1] ? clear_bhb_loop+0x40/0x90 [ 406.977297][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.983180][ C1] RIP: 0033:0x7f358439cdd9 [ 406.987582][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.007174][ C1] RSP: 002b:00007f35825f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 407.015575][ C1] RAX: ffffffffffffffda RBX: 00007f3584615fa0 RCX: 00007f358439cdd9 [ 407.023532][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 407.031490][ C1] RBP: 00007f3584432d69 R08: 0000000000000000 R09: 0000000000000000 [ 407.039446][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 407.047401][ C1] R13: 00007f3584616038 R14: 00007f3584615fa0 R15: 00007ffd526a1d08 [ 407.055379][ C1]