last executing test programs: 15.162848541s ago: executing program 4 (id=882): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000180)}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="75c6c1015909d4338683df9486bbc81e43f13e4926c27c2f82f846633ae45dde55cd4aa48598dfcbe26577ac059a9420bca1c94427a6d7872a1b30832e91813fe7e1af1f00f4587326ea389615a22b9b665a4b77d6cd3efb7c7ef750596fd9d755e7c9200af5a208abf303434848890294b53f279f4390b8cba0f4c94ad8b0815e520566857afa936aea2e23f24e936f8f9b2e7aafcabd0f1fdc885b32e9dcf5eddf7cd4445f872327973e0789fe437e6201e32297c99c6be42731a056ed21fee6df04daae244d4164b1f27764dc0d3b38d824461b54c9b7f13dba393b8e2029454f5174b5a59a35970316b38de13bd00db37eb9029abcf71c734e0a865ce878284540125caad33853dc11039bda8f0fb6bb9f67065a858d9d13aa1e8a79727b376ac3b5e25f688821e19fa5573034c50882e3fcbd111e137b80b428f6986d9d8cdb2a2476fbebf22de118e27f0fc48bcfb54fccde391238eea73f5a9fbe2138ae958f44fcfe66845acb714d9b49bfba663b6fe29e09f58ff81d65abe5516378bc176bf7212ed988d1e306b36a37d35ca97a62fa5c70e76829b3f63b3deaa7b98b67fc19586cc60541fadf4b6c5da31a083e57a34399348f53b9c5ab83579ce5ea883195be71b8383cbc6e6227054f1867bcb321d9da7eff2a93f0487ecf6bd2ae805d95be46bea30d267f52ace8c21410b357fef133ace7eba38a326dae7c708a25320c70f229c555289cd8703b680d78b9c6eac6bc99c8abfe8e656f6054a7cede6330f335e9c43d88f1f31380e575fec7e04b1c8cb7b43288849dc0e1ec01e259a15986e23a501ce360a25ec565e0d7d12a20513e82c89fd4f89774ad4b395191b6a9d6b26c99bccd3bc61668dd642aeddeb506782ee87da02eab31f8281587b0dff57a7dd4d8f470c96b467a711f19855c939ef8b503a302673545eb77ba3e599962eeb4e30d5261490bde68860d14d7dfd2e797674384394a39ba4635f902d15e6198e6a2df8357fd0ef40c5a309a2aafd0d94f2983d83086b93ad787ae6b6c22389cd36ee9e958b6e297123ffa6dddfa0d5f7c56de809681b23b89ddb0f38c889c5d7957d47e2aaa1330b12cde716d47c9d60c5e0ded86c8f3c592394eec7c94740e14fdfe799d75f2417c9c8d7ff3247e85bcecda02f7c22d8133a92bc44f3c96f1b7c24fb8493b117efbb2fab56013a4f442da56c46beee7ff473e8e2618e387cb2576d6a4b1d8937203bd01f5f1f8bc035c4009ac67ebc53f88e314ceeda2c1156e0150ca1c4686db66be31986aac9d0799905058a998bf04b417fefa43a9d28e89eae3e5bce4e645097646708d26789c01ecd2b592bce9caffa134a2a31bdbd14d1cc20ef586e6827a009b3472b3fc6b8e759afce903e35f588416480621d1ffb3d7fb66dfe4f0f00e343128cd677ea9833c979cdf94f3cc3eccca626af6537a268297d860e1ee10dfa3e6ee4b30cc369208ab8d44d52e6bcc961766a303053a8e459bc95be9f0f815aba00a9f9e6d4f8c13289169e6f4c2ad4f4a0ddd88e3c54460fa01814a6e154447bade1c4d2dc99d9eadf2427ba9bffb6c3c1fe76d83971d082f7f60435f226754b647ed02aa4364ed22d4331647f4c7aa8bdf5822ecf2ec217d929e5aff4625fee1dcaf38bf4dcd2233d84eba0667c868a18a39c4337f41e9ac33b94bf7856994efcf2564fb1111518ab8dd5459939043c8d72636fc2b089aa99ff158d252a864cb2281592154ff3699623da1b8dfab8f874c14672e7a3f676a0bc654495dd1779e9ba599bfcab5b77bfdce1429dc68c8738ac23056328c918ff8e6eb735c524ce0a1413cdeebe26906d123999c3445d8a6b74dadc9b2d8718c028b52ca3bc5fd30411673dd5564111dcb4f1423c880c3160d2dd83a41bd76fc80474b7e0601a8bd2708ebe85f1b23e190833485f7f3f43b4767b9aba721711dd79d55ac5aecd9ddaa66b04490f52bf6b6475309f15bb64132dc6111be416267c04a2658c490542a7e04d6a7a9dec7237555cbdb32f051c33018452976101cda7d145f39011ac31d019dddb8755998ad1721a04b3fc3f7bb07b3ac2f2087e8f63c9070c65c509238b9d0e33a596b1247108bb7985b35bc33b9c4426e90554f00b6a9c37d1e9ddc27f2f8b16ec70a8fbf13a48659fd75cf71e245772848b4999d37e1b45a3253ae3900b03acd571f5f4621b5d0b672fd87ee83bc1c0d2c08a478fb57091c1634e10d196b4a185728736e75066eb222bfdb463762e773912d5f78fcaf400531fcb2ebe375ab81be7e5412dc153b18bdd3cb0a271e5c650ee2b3fb41727144659bd9e3867733ef3dafccff61adcbc079f0034080ad6cebd2d591f5519f374c1e9cfcc1e1d149b19ed169f3d0a63ee80513db620807e89ceb0ad9c8a5bfc3e1207aab30df7e460fc715bd0e1cf8bd1f346d56e2046f2174d67e89180e5b80c2b3947a3fa80a5def940eaabd2a53d8658d07dc7290dbbdd5277ae9a5e66a8afdbe591798e2f283903bb389274e70af2b45863e6660b62b31b0b0b7c3785f9b0cc292659f97464089399a3f517a8b3b48eb751b855f37ad65d5f2c8ff377a87225ed7c9a970dcde700c62a107b59d10e8c7a6bc2d218099c457be927e35ca4fcc839a5e77ebd022b12848a85c4611d81c6dfa703dae14cbde0e4f0d4df9c888976b09b36d4b63fd474777e8841fda0fa58a3d4291303440e5c7af3ccf8bb478068577214556f48bc14fe4f25c4566c300cde1b20aeeb90c8b6e14ceea3b1c2545e9add0036af3ef47b70eeb6a4bd945bbd514b6f297992aed30393295ac72a5170b0e4b0048b4b4b16a0174405f6165721e69d5ac1c0a1b1c31f6756a0750ab9cf5e1325b77678266b4ee9e5efab246bdee0f1d48b1281cfaa0578e063caeaab14508a340043e6ea18b495ecfe518aadbd0ba4e6d534376611121917ce1eb5197997daed456437207d1e83ad98aee13e3581b0a826eb34a6ec65b6258b0791a2e86a3cdae26d3ef60cfe77ea622bc234d42530c40bc63f86a66c2e6df3efb6b0b6f1c3370eee8e123fe6d952f03ca7ffb94f2f837296771294febf0e4dc28f626da6b4a5bfc7b4c980e3a1eb2d5fa669bc661be59a73d681cefae5def0b866bf4fd7fcd967f9a3bca09c327aaff7635e218b5b7f822c759fd2a6a0a2ddcbd1daa57aef73d69ca88679dfd39934377321e080f4fccaeb5a08786fbf7c6df97ae830f1b2ab77e66bbb9ed9aea46114638b1afd0443a625f0a6e708db7431ebd946638993ffcc7f837e30f5e66abfff9cddf1f9ceba7b025b2452014616c2a66db5d6f4afaf678b1330a70bbdfbbcfb950df9f75f03eb013189982ba8d204315ecd13d70b3ed75f14386224f83b0c95fa45fb4c40a2e655204a01187aaf705bec8e6dfa8f3a387fded3205a613606b794356818ba193a89c4eb716c66ccda98becddd25e9b681307d87d8bf1f3a581ec11becc96996cdc953fa357a1b9537c25c7ea3524d8a929caef9165970aa400e4a2d9ef6dbd7bab4a79491916112073880da0ebcc22035c1f0ea07512ef2908ec62a8e7993f2871aab05016d9cdc548bb7eb8962a54a5c13977ef6b79573d2ca2977b65c22519708af129cebc852563368c225f80d4ae2e51a7bb7d5cf7031c6379697bef8bd696f1e5671d41f4121da411d9ed6a9c345c64d71c469454c1ce8fd8f9c745f6160093cd6400e625e60b7b5646c1d1d167a63379cc87201987d28ad3dae05ab8651591ece4ddb055bf5f7310ea6858040f6cd4f38fea70568f10b09a98a12d1546e7fd5efe549622f54bbc10dcd42f60f8d61aa31fa050a0f7bcbc6e45f9dce0091b5e769ed9ed4aa31e9c1b97619945c03fccf60f8bd547dc0fa072093e4265940d223555534b77489f6cef12f523deab648d6e77b7af4614eaf283a292e3034c6bcd485e8c65f7cc52ff123d1432f53ca3bd42be8b348ba3bfaf57451a5483fce32956669ec96863c3989794fb3359a4b4ac54fbedf566859b9818a5d71779f676874fd126888ad4c03a0dd018732cf5a11e58836556d5378a50c31ae83c364ae9fdeb5e183e5b34587c13e814f2fc757cbb4dbbffeb2d362d442d0617050c33c6aaa1ea593f63374566f10b741f57805d4c74fb43435b54b92c532f865300b4351e1913a34cdc80f5eb0e09e29b248df71a08cfb93351f2af9c9cb052c46d100beeb326d92d70e40da88eabb5acca56fb5fe498ee5d9e1302c3fbd05c6bc7ab12446d089635cd4d9ad88752b131e6ec91fa553afb66ace2c2e3c3709d97b68647b244843e247cf09fd7d056002e4c1754434bd4507f0b79b964bddfd3ad9ed1d1e361995f448808c886998d69f2feadc6d2babcfda86e694866728701b8ae04ef2df56d11fe16da0da9390371fa1ad5158528c5e316b292c123e3f56a579b9e9f516e6f5d321b1df3080959443ce2f88460ec57d7707b87d7f0f878aa3a0c6dff6de51b778410906cb9668c86ebb43a856d651f475142809abecf6cfafff6ed7143b4923d375678f9cb05409a23875d180c3b60a8f80dab10cee5d54fd9b12521c47e09b5df1a5c6d05e25d81232c144385bb3b46f2b5436ee0836e066d12dfe7e844c249431dfd8713ae6428607a337f06d35778ecc5ddfe3470287fc777cde9f0f8aad11e5bf89fd3c097a0fd8f8da1ebd1e4d4de1b39ad0d1cc933e1386875cae224c29a232a15d4fc1e79196ede9ec8f2ec6fa72098a93b90d8cfce870bcffc270e0874f10dd5387867aadf6413925da4ad1d581201cc914bcbe7754685a25ee3b52bdbe20491d460f7275f943f5be210faa4e9d5dbcd4a4e23adc739c521dbc78a2040d33f206e85f3ac04dfc0195368d211de09ab29855f3ea400e12ac2d43f8ca8d12502bba88fe8e027f5970ccac619e9136ee0c9bce5ee7dd16d715a046a539e042c662723b7fac74c4e2de06f7f7ef4e31648a19b0bf9628d57f3bee570147aaa29faaa60ecf78e5eee6f2b5ce48706a498d72ada4334b82815af52991a77a3546dbbc80c3e53c3a4546fe7f1c0b2dd22100a943b83125c0d0e9a7c5412aa1245c228e13bb9d176fd3734c75963d18260ae25ee11a4588a41c480220bd089223cf5bb70318d4109b5ba190525362374b457b4f198a916ff6066acc5d6e1e3d19a48b2d89ce74cf9338c9ac9ed32343536549b694eb334a5c6316522bd7c703e2df29e6266d7b715ab740098dc98c4338ea91ca592f686ac5b09ceed0fc17ad127b817556289d039bed5f7afeb9922a25a64e6259e9dfa407bc595e97b3a234c053061e9d216292b60c9f2d2465b42c31a8b0357209c6134d3b94d9bc68af60204738301072792e416c8dc612405b766bc2bc4b97acde6f6844b5fb2dfee21be5c1d91a2301bdd5740852ebc8df9c36fb1ff7d8aaee18e2c75c9763366fa7692f87f7d1076980436892251203790599dc789310964a9c03f88dc1f1c0b1cac159f5e36399c75cdb805744486f5624876e81af3f0e1590d098183a40afecf0841d0acf687b13049148eed079796bbb6c1edd3f5c0f5661a2d329b0165ac12f5cf58606970656d2c4d13a4cf2e15aaec175fc59bd9f23ea7869db744fcc0eba039259c7e541efaa066106e9b2c92bdded3e42884a8a02e71457f44775692a1c4fd845ff5ba8595c55ad4bb2177f975de0d22e0feac37f5c3f16426ebcd99d17c829759ac72dc1448661394d3a104999cd40cb09d086146cc92c6408ab1a0b0ad898cbfe76d4962ad0eec1c572a78f9d7342c3de64e881e99afc5b1df3227e198c79c1727a141a8a9da7ba3aae5b3e4ee59a84020191b70fa928d7ce136904c0b03c6c13391f55b381e2df7087b00932251ad7688117cd02ef5ceb5c7dda16d069de3a3e3ff2e341db15df06a96cab1ad2a51db41310ac48d572229695ca941cdfc8416b4307ac6dc176566635bc87d94557e7e4f7a14bdf86d1293c6dafe9ecc280d1a36cc6734485d41b6bd6a33e3605591d98e17fd34f901cdbc33710d768f791b9600218fed28a5d21a0e6589c7d6fb5120c8446eba3a8c8b39dddff369b30cffc0426484ef0b6f6664bec8655e040b2bb3fe3f6863c0a36fe182e3627f6ac38d23050092327f8b67beef764bc35207ed73e4850b43a229d48105d3649c45dc658e27b964b149f978b884268e69a4b353a06e473da3dc7d94c93f7070aae7f3cd2b422840ae55105a6ade053b47b2c72f8b7bad5edc52bc6a8daae76922517e6e3f19b82c5a286e7bfc7254d764ddb79c612e91e1bc61927ad424d1914043a6aacfecb7c90ffb16797349a1ec02de9585b51f19da3a0665f484826f77759234b4b4b7ebf0e176fde2571abc3d4714b543000a1726743dc9e0e6c0bc393b25300287603f47464988eed454ca2dc4377c4c1056f688aa1b5a40d380ba787e962f5cbb902db29a084e305b68f289df8112d19b9a34a32b76a827aa607eb306982aa8aa071c3909c9d1120a0e15a041524eeb12cba62e0378ffcfdf14821710c0d767e32e6a1bd09e76e4f6f9fe4843a967bd633a5fae28a3ae1f64861df70aec3c0cff134a5c8609f011686a430a0c7ef3a36a34a36e0d401b51e51c7eb6e8d13e8616f8c40f0bea3ed9c2b722e141567dbb558da1d7c509ee205b2e9936702b79cec40270398b97dc3525bad7b6809aece6cbe80728c4a188935aaad9edf706a557b84614741259345dfcff830299c640ab3cc534bc1ed744b3a935bb2943e4f8582600394b43269bb94b7c8b6de766770c43b96b04d59d6bb15831fe0bfbc0bb930141d0bd64c280c0a42f49380dd315adab35a4ebaa081ae1f736669156088e2d07670169ec89b85fe4149362135b290336c20451330a968e457c1c8b30ba6ee5ec335b9356a84a19dd459d49ed0b12f730289c24565d2ab0c1d5ed68fb4fa92800c8be4eba970913dd2cec7cfc1617ef0b3f7cae1d2979d2944bcdc375cf0c16a86ac6d5ed98a8d9405b674108f0bfb16b9c0408b134bec0df951bbf261ebc0be30ef15321bf82a6a482bc02db237e1a3d0c401316082ba674962a819d73671829f329b67dd5fcf3715fe6219fbf3631d265a5f0c7cfc3c107e469a55318357fc4f5f28fe48c534025fe0c1f06fa815987b7e1f5acd5a16fdd1c0dccb18d1047f8fb837affeb16dffbf91e01ea904571b21a1c0ac3cab6054314a7becb4188c96596258661a8eb71fcb374ada50b4c8e381f8e76a6b56a9e20a04ecf87445eb164760a4b9abcf96be310a9e0c2ac067f3be2bc05aeb0e91e9998bd1be01c68ce885edb372ca48d8518b45ecce90e2144c2356ceac563bfb4735ce0f21427bec2f728798578ef3c83e0a9ec0e16c4bb1ee24e99ca4dec6888eec3727702e058a3e0d5b8d5a72819b5b9dedd5e698ddb1f4542bd19f6cfdfe62cc179c7ee17307d2d8868c61d061a9310b8a037009017d24dcc6137f79926e20ff015cef3de464c2a9774b1db06a885782ac5abfcd1d48a0d65cdb898d3acaf6fbe347d4a80c9455cf7f16d8c890bc629b5d28d669e74db300023471c887f718ad5e7150890e7fdb8c78f2e63f727b205c71640840bedc58f9a52445ea55b95a6b7ddb7919e64728f716ad19c416fb51bac0e3535ff50a16acf7bdfe8066d519ce21ca4a17e4008c00b9f21c72f718d4de2d0cbeff5ca13032d498540478685bc7e45b4d5773c28acc39e58737dc2a3c907bef44e3e2af584fc7aac8f0e7d82fffc341cc984a9a7523de2ef72970646ce8b0d608315d888cc7cfa0f32d1d8da8aa646d9ad12b5dbe8049178b1ffe3bd13183d76dd06073cbca93685f096d8aedfde7c16060ca6bf3d14a24fcfa073673d77321ebfb290b2e92ea026e69ac6881a94e9ebc9b8ddb799ffb8ee771b7951312cc110a1c99a06529c0a0775b830805c54367001ceb69dcf5ab6a11d197bf1d170f686d53ec1b9635db856fd27b92e966f6c6a59ba8bb1ba812937d1b1e68193b3d7e4b213f7eb2a716717a73db04dd22878bfc34646499ded4a7acbffe6694bbae40635e6f0f322dc1662eb7e34b5a1f4a19c0c77bf2faa29b4aa2e2bb88238302cebc0210674473a3a440ddd1ce34317d74638acef8f6b8e471568887a6192a9ddf7c9d003e4890e4390a05bb5a0de8ca6ee7cebe360e6a7b326b3bf56f08fe8732fe8cf56781054ee56db70b45719f40b529d9cc9ff65362fae742c19b958cced92dac22a880ed6def03c3729612bb0ee34ff18557087a103474eff4f8066f8f25379a4d823f95718afbe5601a613abf3af27d247c88fba62280e904c4038fd8b370018a103693091ad3a44fb8be1e73fe9651c8beb51d70f945ca6ac32585b1a693b2d4598178839c10a7e60553fc83122647c5853e31bdef3a1b304da02a5b6df5d37217749c03467024a70703e32d0ec971ce4a8bab10b7a5a12303a7db83526a7fa3c4ec9fc6e125089c05f3a16e7be89249495e5b20cd6857c93378f524d0c46894e595ee76e301bd6da1743ae4e7e750ad8c4f0282f0bbf12e90383af5796e447fee78e302cf46e3a45126fd59d49a624f7033caeac61d49e147d5ed8e85a90c8914efbdfe2bebdf2ae19b58ce9b61684697dc6f0c65088437df7ec3810724ad7a021ec82b0351826dad927acd1a0662f7fc0278bcfcaafa11315bf5121d1b62f0f0471c54052bee73f2b1fb4139243a6d8de170c80604eadab39021306ff9cf5ce751af1fef52e232fc7c64247e32119e4de98d076b0dc84cf918100d8d3ebff83abefee2353acd133612e3815b8ae14d4f0d1006152807e3b42e035b9a62b58d64706730809a21440c7a9ea228ee033abf7cff2343fc4360b541311fa9ad18110be064ccab41436ca6560081111528dd2eb46a961392f024026d127b5836466fdfba1078b1a89f4c88bf8244b640da376a81142db5b1f27bc7e429cc15e6bad993f3d76f2ba3ff0815895361f20067f57fddd43f44b47375340c39283b3871a68f28b0a8166ac3ee35c8393278d5d2d3887c8a0a964f56f1769c29adbba6fbca7901415e2ab3b63f82d09caa3bf6e7f2e743aa073b57ed8a097f80c47ee546e2fe7b4f6fcbc98770fd7e9f1480517f26656171d394cf47ea395bfb995c087f93cde36b07f3507de2ae23d75b000a532c71265521631e4f8126c5eb96f15d04f183e2162ad9c967c0a1c291f1f1fc2b644271f160764af4e469823c3535ebb25cbc37f09b43fbd258b4a1d45335f162ad5f3d9e5406b671811cc0a16e76f4874041bac7b116483a0727f59a2144ca0490fb8acac82e62cba2e45442d4bf35e49f240a57f542be5df86f6942a5a4b82ff437ff2494c7837d22711aae24265a954d8b6e44b731022214e97ef1111f9bd5fde591bba1541799641670bdb290bd45c15c6b7f594179e3a81873f60e382de67bfe33ec177b64950e05706f1243388ffce2a541c5f30a72cf25623e1c35e72bdebf6d87b4684ff156efb10f96392ddb71353d8c8535173ce57ca41905afbef07ba646a067b2fd71bf3e9335e47672fb43639d7a6a4d51923243121724cb3bca92d304ba2c3fc4942b50c302f1ebb15902c5e191d0b3588df150ddb6aa67477a0046394f6ba91c38cb70d4bf5181e5e99d5c5e1fc39ed3c9b793f0520cf96831d65d51b0ecd92e3bee353b413483fa57690152bb4b524fa6d81d82f66bc2b260a40c232dabe1962f0349a078ec42ccc93bd4acbbcfe61af01388719bcf395f27c401f604684a312624820bfa594755fba5a7f61a7d59f364122398b573f37af4b0526099350b43e5bb8c42300be4f2f78a7fd5a317cb6a7cba8758d25122bb3e0fdab6d4968a668fb6db5e9a7944a78dbb0760059e1f3c2e372f28f3787c1c0163fdcf4812c48c08a381a651d4acab89797cf7a4cb1b792d049fdb4d61eb5e65e2870d94b5b23adbabb1c3e6860a021ec90e226475e5b7358199ffe783536ad7be7437b536affb32c74d5c7702b2d6eb47f3b14132bc270ee6ff482fcf6bd5125ac3b17f72e1de54f07d8f97535a0e59c5b8738c9aa630eeddb0c72d3320bf6e99eaf2b321965734106a49b82c57851f2cdbfcbe7197c3eee3a51e03beedb57a186972f0c276579c0cd429e012b3c09f697ec9a71aa074385e1a1c3d3f235bf6e72072be48d025965866667d64a9d80a18baba65ebf3594c5514dee7e4b414e72f79a47a6aab389cfdc5258d08bbb808c97e1f6e0598bc8b7935dc6faa051a95635cc31169b5b8a044a7ecdb9435b1dd5dcf7d28998cb834212777b49a02932787bd690f102fb0772284feed90aa7b5b4887c8d397c0350a010dffe01c6d35e0de2685e6dcc5e71e1542998610b12eec1cebf0bcfa4ddce0bf7b666216c1a352818e941904203dd64d7a253c9632672885e83e2bccd48410a80294a4628f24913cca629fbc5f4a5c4fa0c3c918f479c2247b8cd3768a144894ee10f41f73d18555661b68679dc09f6fb8647f85a4c752d66679468f96400f300d2636e97af596fccb3fa68038ec626d896b40b1297ab4f849dbbe109886fdb3db6cd230271a8c164be8565772125c86059dcb3aa18d40cbcc356450859b5c157f60f4c657d38c0abf8287a836ced10d852025b70000b04d6977306b5d19cac3ed6d50cf0f2a623fce68a233dd6263c0635783998d0a2da76d5080ca8aac7afe8b5750004be87b260f5c6f6dfe4ffbe55fa86924b3fae0f84e2c23f608f41e4d4e4611f22cb282d9ec2413817656806265cd4b0ec24b2ccf79235f348d5d327618c79717f4a849bf838ce3edf7b02fc27bf92abe64aded9f6f2ee8857384dbf63f88471c73cc28366c30b37361ccdb95e16523a6f65f198906b75e148e9ca78ea7e823db6ab7221697e5fc285dfb308ccfa47980e7c4bb4f6047da4cb127ba2334b6ae616098149ffb0cfd5467dc97580d838929b5363768030a59ee1b60f60194094ca8f02ba5aa3eccf7eab811a8204f6f73a886f74d0ac4669d282c7f1cfb29b26f4902f6f7e0b027b01090f362313a5ad20aa719432cea2444959d19c7889f5b3c37ae7439974bd7cb2c03279a402418600bc854b1f9456d62081a89c931b1bf427e3f495e4dcb6f85d9beb948c62a19ea47b40a00525704bda039ba87a7ea1a674da1e9d2da3878438ef4f48fb764f65841934fe0d1886714a422f1b13db25c0587f4557c042545fbae6c91aa2e9fc5a8f84b5fe90427192b0140527c56fc437be55a48d0a82d2fbb8e5254da21a3d48e5632933d1a54b3a2c0bc7ea34321640708a5790185b1f00439971d676ae6fddf92db22bc801cce738768b0618578f192fcfb4a9b9d736b61f7aeaac0ae76039ee17052f20c23754c9e3ab751a5567648eeae2de4183a7ae6d6149eeca6566a7388c3c7ff41bc7e3858978ea73dae0c9af915232f9f05308bb6b7f99fcd265a95edc4ff3ff5ccb02840c75f4d19a118deb7ef445f617bcd15a8c6fb975e51e776527eff86c7b50bcae2e3797d26237ae8e9722639decaf9489b12ad7aeaff6db3e447df91302ac942de2b6ff30b1eb506a43a0e65f02de7d512f41ee700d62b70b982d55dca30494c04a28adee874a1c7c", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x40100000000, {0x3, 0x3, 0x718, 0x81, 0x0, 0x2c7, {0x1, 0x38000, 0x8, 0x8, 0x1a20, 0xb, 0x5e7, 0x80, 0x9, 0x8000, 0x7, 0x0, 0x0, 0x8, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x141301) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x7, 0x0, 0x2, 0x9, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0xac, @dev={0xfe, 0x80, '\x00', 0x27}, 0x400}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x48}}, 0x4) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) r5 = openat(r4, &(0x7f0000000000)='./file0\x00', 0x80101, 0x8) r6 = openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r7, r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r6, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x779a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44050) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r8, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r8, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{0x7ffd, 0xffffffffffffffff}, {0xffffffffffffffff}]}) 12.117572616s ago: executing program 3 (id=891): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="ae28d6126c30b50f783718e05b1efa743609b2450a907d70d428fd80ec33ff6c927ba84c2929f2ff89d2b2db5f59e337f1ea807d44c81eafe3e7bd33682526acbe3f69a36271b0688682bcc2a137e70a4fd32edf7ce801dddfa01658bee2f220aff3e1ddadfa079f5ed9ce7a1e35a820afcbe36fd91bf8a3b61826f718e3c5a9a7b3"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x11d, 0xf, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf0, 0x8, 0x7, 0x4b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000180)={@local, 0x1, 0x2}, 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x4, &(0x7f0000000000)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) socket(0x840000000002, 0x3, 0x100) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11.669393531s ago: executing program 4 (id=896): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) pipe2(0x0, 0x0) listen(0xffffffffffffffff, 0x1ff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree_skb\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x30}, 0x791}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}}, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) 11.565809648s ago: executing program 2 (id=897): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x4, 0x0) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 10.69359581s ago: executing program 3 (id=898): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x5, 0x8, 0x8000, 0x9, 0x3}, &(0x7f0000000100)=0x98) r1 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000304000000040316"], 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={r0, 0xe4, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, @in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e21, 0x4, @remote, 0x905}, @in6={0xa, 0x4e20, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e22, 0x9e52, @remote, 0x8000}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x52, @mcast2, 0x1}, @in6={0xa, 0x4e23, 0xd, @dev={0xfe, 0x80, '\x00', 0xf}, 0x4}, @in6={0xa, 0x4e20, 0x9, @empty, 0x4}]}, &(0x7f0000000300)=0x10) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r2) mount$bind(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000140)='./cgroup\x00', 0x0, 0x3a87406, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r2}) 10.257716049s ago: executing program 2 (id=899): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) fanotify_init(0xf00, 0x1) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800034000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) splice(r1, &(0x7f0000000140)=0x9, r2, &(0x7f0000000340)=0x8, 0x493, 0x1c) (async, rerun: 64) r3 = socket$kcm(0x23, 0x5, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r3, 0x113, 0x2, 0x0, 0x0) socket(0x10, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x448}, 0x94) (async) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffb, 0x1}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) (async, rerun: 64) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10040) (async, rerun: 32) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (rerun: 32) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x54, 0x5e, 0xd, 0x20, 0x499, 0x6bb7, 0x682f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xff, 0x70, 0x79, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) 9.592937101s ago: executing program 2 (id=900): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_group_source_req(r7, 0x0, 0x1, &(0x7f0000000340)={0x80, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @remote}}}, 0x108) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="6271d0ca42"], 0x9) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x2d, 0x2, 0x0) connect$qrtr(r10, &(0x7f00000000c0)={0x2d, 0x0, 0x2}, 0xc) connect$qrtr(r10, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="0a000100aaaaaaaaaa7e8f00"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 9.482725716s ago: executing program 1 (id=901): socket(0x6, 0x80002, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRES64], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') pread64(r1, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) 8.359212888s ago: executing program 1 (id=902): socket$kcm(0x11, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r4 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x7fff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000040)={0x458000, 0x0, 0x1014, 0x3, 0x2, {0x40, 0x6}, 0x1}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='GPL\x00'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x10001, @rand_addr=' \x01\x00', 0x8}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x21}, 0x0, "0c29c40e87d98c7b536da5cc57709fa1f351e5421c17d9c2b852960b3e7cc7be", 0x7, 0xd, 0x1, 0x8}, 0x3c) 8.189112063s ago: executing program 4 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000280)={r5, 0x1000, {0x40000000, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) 7.493014115s ago: executing program 3 (id=904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x2b06, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 7.411253602s ago: executing program 1 (id=906): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 6.912566099s ago: executing program 1 (id=908): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x62000, 0x0) epoll_create(0xb4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/211, 0xd3}], 0x2}, 0x10002) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000540)="87eadb14fb3142a079dbdadb40def44bc8174fffaeeb2628234227e71327530d58d888169c5d5610e795269beede2cd7e699a2a6f6eceef3e8403a64f253e95a152cb7ecfae931ac1756bae58e111f1afc1a5c63665e6bfd", 0x58}, {&(0x7f00000005c0)="c6fd9b76fdd209fcc86974f707ba42564c2f30186ee65e2bad8be413cd323f1bc63a84cc06482181c5d7b78f6984612a692063a6b73240d5a6ae11e2839beb1fc841edef0bdee5cb88f5ec940f16917d417963d0be54275c4d93ba8c5a459f3af68253678812a9f6", 0x68}, {&(0x7f0000000640)="e1e2ba51821d2b54e33bc9b6b418f91d4fb9d1b1cfc42500fb0ecdc7b279672a615ad8cca4894c9a7929906dda4db9b469046602b1a90f7af342486ef3c91d5aa9287da8a07f104a1d92e6d50510396c477142e027143a15c429b15456efe2913df6f5777f97f507ce7bfc4f88d4ad46c5a6e23296f7dfbcc566fd098856e92a3b50c299c2cdf6222d1bc1749edbf89fd5c3f049c6dfd146b5694e02faaebc56432f14fea9110b043f6076f2f37646403ebd86d3658792a2dd7e896074a0a793aecd6e88220fce21e9901919b217c7c7a40f03b450dd3e7d6fef0b3d660ac45bec8db735bc5750d00480754a0826a5546d", 0xf1}, {&(0x7f0000000740)="1c2c4b5b27c327f7e3c205fcae357348a3096a5d74deb531c541820da38f9db873a57b4290b7da79105a279ee60367cecffbb993c84f9b4286103a6ba8a729f4760eb17712cafc9cdab3c57d70181b9c1724a1e5a74559f7b791a58cf3e12140f3a878d5ba10f0052d65b814dc4e0fd5711edaea770d9c56d628912024483216bfb4e0437a93b817f00f8100e9fe88c76c3f05617e37c2da556306bab5b76b32fa3720e17bb4069c89990d3b404f9eca2506bdc6917e819e02a899e37e66723be6bd395f119739fe0890d49d512653ad6f5366bf7ac4182c066a8c9587960da8ed1462b87bffbcd106ac00", 0xeb}, {&(0x7f0000000840)="66be99dfef5d976c0a67a1cd683058e07a20fbbaf2c7cdd68a7112719a9d5b27ccdd374c5c64ca0d2153a46fa718c9e1758f0edd8d3664bcff36f69cf8117628f1c722930922fac2f8b01fbe6b092182ee879711e9a99fa73567cb7bfdcf7bbe38a636ef72813666f259e96d6d52d7b5b856929a77096ebaef4f939f82876ead32a35e1ffd5b1084c6a41e278207ceadffdf99971ed6f844d44ecf3d53f37bfd15d69f0c4e596c0b009364a9c4eb04500139717bb9f8a3c6a6b6a3", 0xbb}, {&(0x7f0000000900)="e3335f0bb10a813e74628a0bacc20655ad8230c5df5f1b82ef43d2d78de439d7d973def1d3dbc507db0ee7c1d2b6d699433358eaa44e102b2577cda182ef95c8e64a30cf75e43790d43c735badff4bd6bb64042d9d6b25a4c7e66f04165e23ac5f6dde243207be322743c87de859b2d95be1fb3165caee3ae3546d96f34c0355e6376a989fddff77c77ed6b24dbe639c217add41a56011781205005fbbe4195897d9b8aadee7e1ed2a14f13d8d71cf", 0xaf}, {&(0x7f0000000200)="a954", 0x2}], 0x7, 0x2) r3 = epoll_create(0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x13, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7c3a, 0x0, 0x0, 0x0, 0x7d460d28}, [@generic={0x1b, 0x9, 0x8, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xcf}, @alu={0x4, 0x1, 0x1, 0x4, 0x0, 0x30, 0x10}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x2c, &(0x7f0000000c40)=""/44, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x0, 0x4, 0x6, 0xb}, {0x4, 0x4, 0x7, 0xb}, {0x3, 0x1, 0x8}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='rpc_call_rpcerror\x00', r7, 0x0, 0x3d}, 0x18) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f00000000c0)) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000084, 0xbc9faef6, 0x7}, {0x4000009b, 0x0, 0x4de}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x1490, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01004b00", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03"], 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x80000018}) 6.715400821s ago: executing program 0 (id=909): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x4, 0x0) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 5.469537249s ago: executing program 0 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260158e7c4a19d9c08566c408e3d612031e61f82a7be109bd7519f295bdb6a9c5cd"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x50}}, 0x2000e994) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd700014000200776730000000000000000000000000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) 5.425337061s ago: executing program 4 (id=911): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0xf, 0xffff, 0x7, 0x14, "2cd342ed74715b01"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x58, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x50, 0x80, 0xa, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "9869d8"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xf001, 0x0, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x80}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xb, 0xff, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xd, 0xc, 0xd1, 0x10, 0xee}, 0x30, &(0x7f0000000200)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ecb1c554188622e2599047b4338c6e41"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5f53fc08915f3a91136ab6a781997131"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42a}}, {0x1c, &(0x7f0000000280)=@string={0x1c, 0x3, "5839273d20fb170ea840da0666c6667474a1449d4884d48efd22"}}, {0xdc, &(0x7f00000002c0)=@string={0xdc, 0x3, "7f165830b47fa58baf50f3d1a207f06f7519d009fe074e33e31ffc4daa80222472964a25d3cc4b29c9b0dfd45df9276223c4b733563c74dc39a92137f831de92c8405ee5e25606ea039304a47195d32a8fcba41cddc39c1092902769a509223d006c79a072c0ece5b3be0935e8df8824a93f563e6f4d0cf5f8f75e67330f15cf13fdacd59f92dc429910c96619544cd6ca7ada132ba5c7396d596cc10370f4234dd6d2727a6c934e467f282d9bb1022cee15f9ecd48719e36c6320512cd29377f1bd47fad90df0e9e5dc452957d93ef26bda1ed5cdd125d9b8ab"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x446}}, {0xe0, &(0x7f0000000440)=@string={0xe0, 0x3, "0b8789ed0212b057c8a8fe4982d4debad10656e9e1659f66b5dd40e31810d16bfe36d2c7afd1645332c9a41a4826e08b114c35f1f0bc100873204b015c1571697f659def2735568a35256104b7bbe6b556ba11bff3ec155baa1285b364d6fb4ae1ca9e9aad8ee2a4717900e205250421001137afa1da19e4759af19c80f87f6e7dea26c835a44f0398644dbfea66f964f15d279ca87c173c58da08b6e5cae9c57009c14d68ee5d170bf193c9a22870ae12eb827215c7d05921a8b8301e2076093b487920e445ceb440e3566d332cc3884e1d469b4250ad18859853559cff"}}, {0xde, &(0x7f0000000540)=@string={0xde, 0x3, "98a0a9f0fd205614455070b24002437c5add63105dbf60c55ba7d52f60a2156e1ee06b25f12674a0a41b3f6f5a2923e3522804a6d8d56c83ec111e3382a782cbaa01678882bf4625f416a47f1298fd28fb260859eb54911da023d9851a1d24b6eb987256813acfda46773b4ae8d2cd3616d77f6e7dc7552178125ffbc1bbbc817833678e5af9f397594262f8fd00280f5119c3e61258f01e8b925519d6c40702a624baaa23e37ce92480a0f4cd18fd0d4b3acbef75d764b076889b45cdc2ea858ac06c344a93944fe5f08eeb20bea1e85416a84d42f962f87ecc352d"}}, {0x39, &(0x7f0000000640)=@string={0x39, 0x3, "02e16bec36e444c8c2af47dfaf456bb62051be6e2700cf3c21f135f9702da66b4482a6ec88d3a5484e945d827863baa7ac9d56c69db233"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0xf000) 4.87690953s ago: executing program 3 (id=912): socket(0x6, 0x80002, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRES64], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') pread64(r1, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) 4.835102347s ago: executing program 1 (id=913): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, &(0x7f0000000140)="a52876830a604014f6b5e928f38a5a7cb4b31c0c0f289e9ebb6286660300000000010000", 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x134, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x10008801}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000600000000000000000000009500000000000000204825166cbf3cc48788e4c53cf531eaaae76c9c95c29961f02cb12d58202f30501bcca21620411b6d14a49b7ca71ada58431b84c60641cca97ad9399668c7e44229c0885c9df2e2b1c6609b7a408e80805d1178c8a23232db3978a0aab0de37eba91093e97b6b1c3e489576fb74a2005e68615de487ae259674d793f2315842ebd3387c89dd34cecce90af7f3ac4accf2cd9871fcdbfdcf5e6832ca08"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x4001, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, 0x0, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) r6 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x3, r6}) 4.39569737s ago: executing program 3 (id=914): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x1000000) close(r2) 3.641844273s ago: executing program 2 (id=915): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0x340000000, 0x930311}) r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x308, 0x20400) shmat(r1, &(0x7f0000000000/0x2000)=nil, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00001b0000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/dri/card#\x00') r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf}, 0x88b, 0xfffffffffffffffa, 0x8, 0x3, 0x0, 0x0, 0x1}) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000100), 0x0, 0x800}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000000070104000000005fa63d2661319f54321923b7a6ca3700000000000000080905000000797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x2000c814}, 0x8010) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {0x4, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) syz_emit_ethernet(0x1d4, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback, 0x6, 0x0, 0xfbff, 0x0, 0x4000000000000009, 0x10200, r6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000940)="25092d7118ae50ec4d525461247b000020a8eff497f0646cd69c16fe530fd4826e51410547ad84e195390eaea1ee00caa673d0feb7ba0013d8eaca8afa7980091b17100580492223b8cc476ee1203afa8d88167636260000604925f1b560f76be42915f5a6b032cd3673947b46b785baf0eb1211025ca4378f332209759501be1c6d258c5db9b7ece443a46f991ea42a702e480e01fe1fa270cbd4a9ac42f6842e8aba4b48ce7be459da4729a2b55fa6fccdf2f552ba6907ce8de693e13817919d7d496ce6f3b6677c99c386f732e62274bc1279", 0x0, 0xd01, 0x88be, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae}, 0xfffffffffffffe1a) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) 3.585327825s ago: executing program 0 (id=916): socket$kcm(0x11, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r4 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x7fff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000040)={0x458000, 0x0, 0x1014, 0x3, 0x2, {0x40, 0x6}, 0x1}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='GPL\x00'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x10001, @rand_addr=' \x01\x00', 0x8}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x21}, 0x0, "0c29c40e87d98c7b536da5cc57709fa1f351e5421c17d9c2b852960b3e7cc7be", 0x7, 0xd, 0x1, 0x8}, 0x3c) 1.966971038s ago: executing program 0 (id=917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="b95d77ad55cbbe17f1b50f815ff7ceb2183cc01588050b74afc86689a1d8a1ff08000000db6c902c77c7addc23d3be2c30144196983df419a801f47ae3edfbd0657b8d36c08c907da315d2b0f61b524ececf680463b0a1c53632b79ac9a4b6f8f1ce00f2b194ce2556c3733cc2826f56036304f437f2031f22112807b7d497a0a3bcefa388aac844d656d86e9252e2d393812c5788546f8e2a7e2d1e75830b00", 0xa0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x4, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000ee850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000003680)=ANY=[@ANYBLOB="74722000f500756e69782c00"]) 1.881055964s ago: executing program 2 (id=918): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xc4, 0x1001, 0x9, 0x512ea, r0, 0x6, '\x00', 0x0, r0, 0x0, 0x0, 0x4, 0x4e}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000419900010000000500050001000000080004000000000005000600010000000800030001000000b60f8ee6417bd5a3a5455bfdda42a4f7af978c7d9599637e12713c4c4ca6ec1a48fab7aea5b966a3cbf3fe42c0b7d905bc4fb9da6beae29c12d6581f1479ca14001075b34a72f9223e911351d11de340d54cf29cd74282b738"], 0x34}}, 0x0) 1.78976446s ago: executing program 4 (id=919): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', './file0', [{0x20, 'tunl0\x00'}, {0x20, 'tunl0\x00'}], 0xa, "0edb15585c74f6428c8a9e5c670545a9e2ffda1c8be8c3ff662999cdf6b80635b2c4a8c89808422a522cfc25134115dccbc5906217c51393a5e33c730712ee461932b1756c47b946fbf31defb875438d86eda00f7ade327fadc715dd97a1411cffc83cc9b21d941bfa4e733a77735cec2ca7393a99f6bc78890f01df557fddbeda792f"}, 0x9c) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c81, 0x0) 1.095998219s ago: executing program 0 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x4, 0x0) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 1.027292015s ago: executing program 4 (id=921): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a310000000010bc82e31a0000000000fc4000000002140000001100"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8040) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x4, 0x0, 0x0, 0x0, 0x8000000, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) 999.734188ms ago: executing program 2 (id=922): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = epoll_create(0xaf2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xe000200f}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000005"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x10000}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000440)) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x2, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r8, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 986.741883ms ago: executing program 1 (id=923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) getrlimit(0x9, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socket(0x40000000015, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @sliced={0x7, [0xffff, 0x7, 0x774, 0xa0, 0xb9, 0x2, 0x5, 0xff, 0xfd76, 0xd, 0x50ff, 0x8, 0x25, 0x3, 0x8, 0x9015, 0x9, 0x3, 0x7fff, 0x5, 0x1ff, 0x6, 0x4, 0xffff, 0x7fff, 0x88, 0x7fff, 0x92, 0x5, 0x18, 0x3ff, 0x6, 0x320, 0x4, 0x0, 0x1, 0x7, 0x0, 0xd, 0x7, 0x4, 0x9, 0x5, 0x4, 0xe, 0x82, 0x7, 0x9], 0x8001}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 933.366676ms ago: executing program 3 (id=924): socket(0x6, 0x80002, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') pread64(r1, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) 0s ago: executing program 0 (id=925): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_normal', 0x123481, 0x127) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x24, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 'ip6_vti0\x00'}) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x30000, 0x112000, 0x1}) kernel console output (not intermixed with test programs): 342673][ T30] audit: type=1400 audit(1768189026.444:555): avc: denied { bind } for pid=7674 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 212.397303][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.421280][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.524445][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 212.842395][ T5894] usb-storage 1-1:0.0: USB Mass Storage device detected [ 212.869256][ T5922] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 213.012522][ T5894] usb 1-1: USB disconnect, device number 16 [ 213.051049][ T7251] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 213.541892][ T5922] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 213.561825][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 213.574764][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.589092][ T5922] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 213.601712][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.619189][ T5922] usb 4-1: config 0 descriptor?? [ 213.625115][ T7673] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 213.737605][ T7251] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 213.748543][ T7251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.758249][ T7251] usb 2-1: Product: syz [ 213.762477][ T7251] usb 2-1: Manufacturer: syz [ 213.767135][ T7251] usb 2-1: SerialNumber: syz [ 213.789892][ T790] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 213.880962][ T30] audit: type=1400 audit(1768189028.125:556): avc: denied { remount } for pid=7669 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 213.951694][ T790] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.975222][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 213.993402][ T790] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 214.006109][ T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.015191][ T790] usb 5-1: Product: syz [ 214.019795][ T790] usb 5-1: Manufacturer: syz [ 214.022399][ T30] audit: type=1400 audit(1768189028.265:557): avc: denied { map } for pid=7677 comm="syz.1.435" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.024661][ T790] usb 5-1: SerialNumber: syz [ 214.063363][ T7251] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 214.065555][ T790] usb 5-1: config 0 descriptor?? [ 214.080759][ T7251] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 214.091344][ T7687] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 214.101243][ T30] audit: type=1400 audit(1768189028.295:558): avc: denied { execute } for pid=7677 comm="syz.1.435" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 214.127818][ T7251] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 214.128604][ T7685] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 214.148483][ T7251] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 214.639789][ T7694] No such timeout policy "syz0" [ 214.669209][ T7694] input: syz0 as /devices/virtual/input/input9 [ 214.726111][ T30] audit: type=1400 audit(1768189028.875:559): avc: denied { setopt } for pid=7689 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.750769][ T30] audit: type=1400 audit(1768189028.965:560): avc: denied { read } for pid=5168 comm="acpid" name="event4" dev="devtmpfs" ino=2951 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.773686][ T30] audit: type=1400 audit(1768189028.965:561): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2951 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.797967][ T30] audit: type=1400 audit(1768189028.965:562): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2951 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.976184][ T5929] usb 4-1: USB disconnect, device number 18 [ 215.039383][ T5922] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 215.159083][ T7702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.181612][ T7702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.191217][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.211000][ T5922] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 215.220391][ T5922] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 215.236328][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.246061][ T5922] usb 3-1: config 0 descriptor?? [ 215.254395][ T5922] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 215.262125][ T5922] dvb-usb: bulk message failed: -22 (3/0) [ 215.272068][ T5922] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 215.293642][ T30] audit: type=1400 audit(1768189036.532:563): avc: denied { setopt } for pid=7701 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.314745][ T5922] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 215.344372][ T5922] usb 3-1: media controller created [ 215.366832][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.400312][ T5922] dvb-usb: bulk message failed: -22 (6/0) [ 215.406264][ T5922] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 215.440915][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 215.489435][ T5922] dvb-usb: schedule remote query interval to 150 msecs. [ 215.498213][ T5922] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 215.525984][ T5922] usb 2-1: USB disconnect, device number 27 [ 215.637604][ T7709] netlink: 'syz.1.442': attribute type 49 has an invalid length. [ 215.669650][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 215.679338][ T7709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.816810][ T5929] dvb-usb: error while querying for an remote control event. [ 216.255637][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 216.282549][ T5922] dvb-usb: error while querying for an remote control event. [ 216.314961][ T790] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 216.331649][ T790] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 216.352600][ C0] powermate: config urb returned -71 [ 216.358121][ C0] powermate: config urb returned -71 [ 216.364205][ C0] powermate: config urb returned -71 [ 216.369614][ C0] powermate: config urb returned -71 [ 216.400832][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 216.409682][ T790] usb 5-1: USB disconnect, device number 21 [ 216.560622][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 216.572045][ T5922] dvb-usb: error while querying for an remote control event. [ 216.739214][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 216.744971][ T5922] dvb-usb: error while querying for an remote control event. [ 216.903621][ T30] audit: type=1400 audit(1768189038.142:564): avc: denied { ioctl } for pid=7721 comm="syz.0.445" path="socket:[16321]" dev="sockfs" ino=16321 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 216.939433][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 216.948982][ T5922] dvb-usb: error while querying for an remote control event. [ 216.957783][ T30] audit: type=1400 audit(1768189038.202:565): avc: denied { ioctl } for pid=7720 comm="syz.3.446" path="socket:[16815]" dev="sockfs" ino=16815 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 217.048833][ T7728] __vm_enough_memory: pid: 7728, comm: syz.0.445, bytes: 21200026591232 not enough memory for the allocation [ 217.109297][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 217.119271][ T7728] __vm_enough_memory: pid: 7728, comm: syz.0.445, bytes: 11727476219904 not enough memory for the allocation [ 217.131065][ T5922] dvb-usb: error while querying for an remote control event. [ 217.299190][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 217.307926][ T7251] usb 3-1: USB disconnect, device number 31 [ 218.191494][ T5922] dvb-usb: error while querying for an remote control event. [ 218.537728][ T7251] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 218.579263][ T89] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 218.736294][ T89] usb 5-1: config 0 has no interfaces? [ 218.746079][ T89] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 218.956994][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.000541][ T89] usb 5-1: config 0 descriptor?? [ 219.196072][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 219.196087][ T30] audit: type=1400 audit(1768189040.432:567): avc: denied { setopt } for pid=7754 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.273573][ T790] usb 5-1: USB disconnect, device number 22 [ 219.338646][ T30] audit: type=1400 audit(1768189040.462:568): avc: denied { ioctl } for pid=7754 comm="syz.2.453" path="socket:[17412]" dev="sockfs" ino=17412 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.559229][ T5929] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 219.659313][ T7251] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 220.178068][ T7251] usb 3-1: Using ep0 maxpacket: 16 [ 220.238054][ T7251] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.261158][ T7251] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 220.271160][ T7251] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.284320][ T7251] usb 3-1: config 1 interface 0 has no altsetting 0 [ 220.412659][ T7251] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 220.425202][ T7251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.429190][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 220.434014][ T7251] usb 3-1: Product: syz [ 220.571402][ T7251] usb 3-1: Manufacturer: syz [ 220.576223][ T7251] usb 3-1: SerialNumber: syz [ 220.595975][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 215, changing to 11 [ 220.641519][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 58822, setting to 1024 [ 220.668224][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.687236][ T5929] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 220.697559][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.705780][ T5929] usb 4-1: Product: syz [ 220.729233][ T5929] usb 4-1: Manufacturer: syz [ 220.734166][ T5929] usb 4-1: SerialNumber: syz [ 220.744254][ T5929] usb 4-1: config 0 descriptor?? [ 220.753678][ T7758] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 221.346298][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 221.368427][ T5929] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 221.443107][ T5929] imon:send_packet: packet tx failed (-71) [ 221.469169][ T5929] imon 4-1:0.0: panel buttons/knobs setup failed [ 221.550654][ T5929] rc_core: IR keymap rc-imon-pad not found [ 221.562966][ T5929] Registered IR keymap rc-empty [ 221.574181][ T5929] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 221.597825][ T5929] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 221.620143][ T5929] imon:send_packet: packet tx failed (-71) [ 221.649249][ T5929] imon 4-1:0.0: remote input dev register failed [ 221.663318][ T5929] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 221.812724][ T5929] imon 4-1:0.0: unable to initialize intf0, err 0 [ 221.836043][ T5929] imon:imon_probe: failed to initialize context! [ 221.855728][ T5929] imon 4-1:0.0: unable to register, err -19 [ 221.888049][ T5929] usb 4-1: USB disconnect, device number 19 [ 221.999203][ T790] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 222.170063][ T790] usb 5-1: Using ep0 maxpacket: 32 [ 222.229532][ T5929] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 223.584239][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.597790][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.607868][ T790] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 223.679200][ T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.693368][ T790] usb 5-1: config 0 descriptor?? [ 223.740500][ T30] audit: type=1400 audit(1768189044.982:569): avc: denied { ioctl } for pid=7788 comm="syz.0.463" path="socket:[16911]" dev="sockfs" ino=16911 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.748168][ T7791] input: syz0 as /devices/virtual/input/input15 [ 223.999176][ T30] audit: type=1400 audit(1768189045.232:570): avc: denied { getopt } for pid=7795 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.044423][ T7251] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 224.091929][ T7251] usb 3-1: USB disconnect, device number 32 [ 224.101740][ T30] audit: type=1400 audit(1768189045.232:571): avc: denied { read } for pid=7795 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.132309][ T7251] usblp0: removed [ 224.269182][ T30] audit: type=1400 audit(1768189045.262:572): avc: denied { audit_read } for pid=7795 comm="syz.3.465" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.768667][ T790] usbhid 5-1:0.0: can't add hid device: -71 [ 224.778686][ T790] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 224.798172][ T790] usb 5-1: USB disconnect, device number 23 [ 224.975052][ T30] audit: type=1400 audit(1768189046.212:573): avc: denied { ioctl } for pid=7811 comm="syz.2.468" path="socket:[17566]" dev="sockfs" ino=17566 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 225.109207][ T30] audit: type=1400 audit(1768189046.312:574): avc: denied { read } for pid=7811 comm="syz.2.468" dev="sockfs" ino=17564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 225.306381][ T30] audit: type=1400 audit(1768189046.312:575): avc: denied { setattr } for pid=7811 comm="syz.2.468" name="NETLINK" dev="sockfs" ino=16948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 225.359235][ T790] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 225.400108][ T30] audit: type=1400 audit(1768189046.322:576): avc: denied { bind } for pid=7811 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 225.482842][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.529406][ T790] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 225.548572][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.567795][ T790] usb 1-1: config 0 descriptor?? [ 225.721689][ T5929] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 225.890060][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 225.897711][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.908952][ T5929] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.920272][ T5929] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 225.930785][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.939427][ T5929] usb 4-1: Product: syz [ 225.949459][ T5929] usb 4-1: Manufacturer: syz [ 225.959329][ T5929] usb 4-1: SerialNumber: syz [ 225.967326][ T5929] usb 4-1: config 0 descriptor?? [ 226.180438][ T10] usb 4-1: USB disconnect, device number 21 [ 226.430293][ T790] usb 1-1: Cannot set autoneg [ 226.435844][ T790] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 226.458133][ T790] usb 1-1: USB disconnect, device number 17 [ 226.807892][ T7852] input: syz0 as /devices/virtual/input/input18 [ 227.544477][ T30] audit: type=1400 audit(1768189048.782:577): avc: denied { create } for pid=7857 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 227.642516][ T30] audit: type=1400 audit(1768189048.882:578): avc: denied { write } for pid=7857 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 228.094404][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 228.103332][ T7875] netlink: 'syz.3.482': attribute type 11 has an invalid length. [ 228.218217][ T7880] fuse: Unknown parameter 'wroup_ie' [ 228.223556][ T30] audit: type=1400 audit(1768189049.452:579): avc: denied { open } for pid=7878 comm="syz.0.483" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 228.255122][ T7875] netlink: 56 bytes leftover after parsing attributes in process `syz.3.482'. [ 228.266928][ T7879] fuse: Unknown parameter 'wroup_ie' [ 228.999172][ T30] audit: type=1400 audit(1768189049.792:580): avc: denied { setopt } for pid=7882 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 229.249556][ T89] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 229.459608][ T89] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 229.504420][ T89] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.545717][ T89] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.575633][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.587660][ T89] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.605120][ T89] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.616480][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.713545][ T89] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.738947][ T89] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.775850][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.804527][ T89] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.840082][ T89] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.861345][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.913053][ T89] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.922531][ T89] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.044778][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.128446][ T89] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.165712][ T89] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.568157][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.577395][ T89] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.586540][ T89] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.598523][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.606216][ T89] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.620398][ T89] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.631689][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.663032][ T89] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 230.674323][ T89] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 230.694303][ T89] usb 4-1: Product: syz [ 230.714707][ T89] usb 4-1: Manufacturer: syz [ 230.720831][ T89] usb 4-1: SerialNumber: syz [ 230.822997][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 230.838251][ T89] usb 4-1: config 0 descriptor?? [ 230.949105][ T89] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 230.989226][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 231.046425][ T7920] netlink: 'syz.4.496': attribute type 10 has an invalid length. [ 231.054289][ T7920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.496'. [ 231.404871][ T7920] batman_adv: batadv0: Adding interface: virt_wifi0 [ 231.412220][ T7920] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.437800][ T7920] batman_adv: batadv0: Interface activated: virt_wifi0 [ 231.649358][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 232.150742][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 232.167088][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 232.181632][ T10] usb 3-1: Product: syz [ 232.191763][ T10] usb 3-1: Manufacturer: syz [ 232.200503][ T10] usb 3-1: SerialNumber: syz [ 232.216182][ T10] usb 3-1: config 0 descriptor?? [ 232.586372][ T10] usb 3-1: USB disconnect, device number 33 [ 232.629538][ T7304] udevd[7304]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.345847][ T5929] usb 4-1: USB disconnect, device number 22 [ 233.369785][ T5929] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 233.405995][ T7936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.501'. [ 233.423616][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.501'. [ 233.580066][ T30] audit: type=1400 audit(1768189054.822:581): avc: denied { map } for pid=7940 comm="syz.1.503" path="socket:[17127]" dev="sockfs" ino=17127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.623136][ T30] audit: type=1400 audit(1768189054.822:582): avc: denied { read } for pid=7940 comm="syz.1.503" path="socket:[17127]" dev="sockfs" ino=17127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.946204][ T7946] input: syz1 as /devices/virtual/input/input19 [ 233.952559][ T7946] input: failed to attach handler leds to device input19, error: -6 [ 234.120099][ T5929] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 234.285130][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 234.505765][ T5929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.517583][ T5929] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.747978][ T5929] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 234.808228][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.827074][ T5929] usb 1-1: Product: syz [ 234.841941][ T5929] usb 1-1: Manufacturer: syz [ 234.857571][ T5929] usb 1-1: SerialNumber: syz [ 234.892737][ T5929] usb 1-1: config 0 descriptor?? [ 235.719892][ T89] usb 1-1: USB disconnect, device number 19 [ 235.815674][ T37] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 235.991971][ T30] audit: type=1400 audit(1768189057.232:583): avc: denied { append } for pid=7976 comm="syz.1.514" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.169202][ T790] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 236.329462][ T790] usb 3-1: Using ep0 maxpacket: 8 [ 236.340808][ T5929] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 236.452406][ T790] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 236.515147][ T790] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 236.538923][ T790] usb 3-1: Product: syz [ 236.545184][ T790] usb 3-1: Manufacturer: syz [ 236.558902][ T790] usb 3-1: SerialNumber: syz [ 236.585867][ T790] usb 3-1: config 0 descriptor?? [ 236.718432][ T5929] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 236.729524][ T30] audit: type=1400 audit(1768189057.972:584): avc: denied { write } for pid=7989 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 236.757868][ T5929] usb 4-1: config 0 has no interface number 0 [ 236.870377][ T5929] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 236.882343][ T5929] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 236.893742][ T5929] usb 4-1: config 0 interface 200 has no altsetting 0 [ 237.180137][ T5929] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 237.212148][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.237738][ T5929] usb 4-1: Product: syz [ 237.252826][ T5929] usb 4-1: Manufacturer: syz [ 237.261460][ T790] usb 3-1: USB disconnect, device number 34 [ 237.271560][ T5929] usb 4-1: SerialNumber: syz [ 237.303503][ T5929] usb 4-1: config 0 descriptor?? [ 237.312414][ T7304] udevd[7304]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.833102][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.885774][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.925831][ T5929] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input20 [ 237.940293][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 237.942591][ T5929] usb 4-1: USB disconnect, device number 23 [ 237.947417][ C1] usb 4-1: hanwang_irq - usb_submit_urb failed with result -19 [ 238.379192][ T790] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 238.459191][ T7251] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 238.539547][ T790] usb 5-1: Using ep0 maxpacket: 8 [ 238.562417][ T790] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 238.591656][ T790] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 238.721575][ T790] usb 5-1: Product: syz [ 238.724858][ T7251] usb 1-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.725768][ T790] usb 5-1: Manufacturer: syz [ 238.742654][ T7251] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 238.742661][ T790] usb 5-1: SerialNumber: syz [ 238.742682][ T7251] usb 1-1: config 1 interface 0 has no altsetting 0 [ 238.759588][ T790] usb 5-1: config 0 descriptor?? [ 238.806239][ T7251] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.829360][ T7251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.855961][ T7251] usb 1-1: Product: syz [ 238.871802][ T7251] usb 1-1: Manufacturer: syz [ 238.882105][ T7251] usb 1-1: SerialNumber: syz [ 238.926783][ T7251] cdc_mbim 1-1:1.0: skipping garbage [ 239.102451][ T8016] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 239.317420][ T790] usb 5-1: USB disconnect, device number 24 [ 239.373478][ T30] audit: type=1400 audit(1768189060.612:585): avc: denied { write } for pid=8036 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 240.566941][ T8040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.647065][ T8040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.785573][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.794813][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.015631][ T7251] cdc_mbim 1-1:1.0: bind() failure [ 241.036236][ T7251] usb 1-1: USB disconnect, device number 20 [ 241.658007][ T8048] FAULT_INJECTION: forcing a failure. [ 241.658007][ T8048] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 241.814349][ T8048] CPU: 1 UID: 0 PID: 8048 Comm: syz.2.536 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.814374][ T8048] Tainted: [L]=SOFTLOCKUP [ 241.814377][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.814384][ T8048] Call Trace: [ 241.814388][ T8048] [ 241.814392][ T8048] dump_stack_lvl+0x16c/0x1f0 [ 241.814412][ T8048] should_fail_ex+0x512/0x640 [ 241.814432][ T8048] should_fail_alloc_page+0xe7/0x130 [ 241.814448][ T8048] prepare_alloc_pages+0x401/0x670 [ 241.814466][ T8048] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 241.814480][ T8048] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.814495][ T8048] ? mas_next_node+0x7e0/0xf50 [ 241.814511][ T8048] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 241.814529][ T8048] ? __lock_acquire+0x436/0x2890 [ 241.814543][ T8048] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.814563][ T8048] ? policy_nodemask+0xea/0x4e0 [ 241.814579][ T8048] alloc_pages_mpol+0x1fb/0x550 [ 241.814594][ T8048] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 241.814612][ T8048] folio_alloc_mpol_noprof+0x36/0x2f0 [ 241.814630][ T8048] alloc_migration_target_by_mpol+0x246/0x500 [ 241.814648][ T8048] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 241.814666][ T8048] ? __pfx___might_resched+0x10/0x10 [ 241.814676][ T8048] ? __kernel_text_address+0xd/0x40 [ 241.814693][ T8048] migrate_pages_batch+0x3bc/0x3bb0 [ 241.814711][ T8048] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 241.814728][ T8048] ? mark_held_locks+0x49/0x80 [ 241.814745][ T8048] ? __pfx_migrate_pages_batch+0x10/0x10 [ 241.814761][ T8048] ? kasan_save_stack+0x42/0x60 [ 241.814773][ T8048] ? kasan_save_stack+0x33/0x60 [ 241.814785][ T8048] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 241.814796][ T8048] ? __mpol_dup+0x74/0x380 [ 241.814812][ T8048] ? mbind_range+0x2ad/0x570 [ 241.814827][ T8048] ? do_mbind+0x83a/0xf20 [ 241.814841][ T8048] ? kernel_mbind+0x1e3/0x1f0 [ 241.814859][ T8048] migrate_pages_sync+0x12d/0x8a0 [ 241.814876][ T8048] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 241.814897][ T8048] ? __pfx_migrate_pages_sync+0x10/0x10 [ 241.814915][ T8048] ? __lock_acquire+0x436/0x2890 [ 241.814931][ T8048] migrate_pages+0x1b0b/0x2350 [ 241.814949][ T8048] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 241.814970][ T8048] ? __pfx_migrate_pages+0x10/0x10 [ 241.814988][ T8048] ? find_held_lock+0x2b/0x80 [ 241.815007][ T8048] ? up_write+0x282/0x4e0 [ 241.815022][ T8048] do_mbind+0x6e2/0xf20 [ 241.815043][ T8048] ? __pfx_do_mbind+0x10/0x10 [ 241.815058][ T8048] ? find_held_lock+0x2b/0x80 [ 241.815081][ T8048] ? __pfx_get_nodes+0x10/0x10 [ 241.815097][ T8048] kernel_mbind+0x1e3/0x1f0 [ 241.815114][ T8048] ? __pfx_kernel_mbind+0x10/0x10 [ 241.815132][ T8048] ? rcu_is_watching+0x12/0xc0 [ 241.815144][ T8048] do_syscall_64+0xcd/0xf80 [ 241.815160][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.815171][ T8048] RIP: 0033:0x7f222d98f749 [ 241.815180][ T8048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.815191][ T8048] RSP: 002b:00007f222e77d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 241.815202][ T8048] RAX: ffffffffffffffda RBX: 00007f222dbe5fa0 RCX: 00007f222d98f749 [ 241.815209][ T8048] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 241.815215][ T8048] RBP: 00007f222e77d090 R08: 0000000000000000 R09: 0000000000000002 [ 241.815221][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.815227][ T8048] R13: 00007f222dbe6038 R14: 00007f222dbe5fa0 R15: 00007ffdb7865ad8 [ 241.815241][ T8048] [ 242.247466][ T8056] atomic_op ffff8880555fe998 conn xmit_atomic 0000000000000000 [ 243.896020][ T5929] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 244.391709][ T5929] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.412470][ T5929] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 244.423077][ T5929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.436757][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 244.449182][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 244.472291][ T8080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.496227][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 244.531451][ T8075] overlayfs: missing 'lowerdir' [ 244.548984][ T5929] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.558098][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.613574][ T5929] usb 5-1: Product: syz [ 244.779807][ T5929] usb 5-1: Manufacturer: syz [ 244.963157][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.993907][ T5929] cdc_wdm 5-1:1.0: skipping garbage [ 244.999106][ T5929] cdc_wdm 5-1:1.0: skipping garbage [ 245.017683][ T5929] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 245.037814][ T5929] cdc_wdm 5-1:1.0: Unknown control protocol [ 245.239407][ T30] audit: type=1400 audit(1768189066.472:586): avc: denied { read write } for pid=8061 comm="syz.4.545" name="cdc-wdm0" dev="devtmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 245.289220][ T5929] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 245.299922][ T8063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8063 comm=syz.4.545 [ 245.330718][ T8063] netlink: 'syz.4.545': attribute type 1 has an invalid length. [ 245.338992][ T30] audit: type=1400 audit(1768189066.502:587): avc: denied { open } for pid=8061 comm="syz.4.545" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 245.412952][ T8063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.429174][ T30] audit: type=1400 audit(1768189066.522:588): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 245.460732][ T5929] usb 3-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.473838][ T8095] bond1: (slave dummy0): making interface the new active one [ 245.535316][ T5929] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 245.542941][ T8095] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 245.586673][ T5929] usb 3-1: config 1 interface 0 has no altsetting 0 [ 245.598884][ T5929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.628297][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.642756][ T5929] usb 3-1: Product: syz [ 245.647892][ T5929] usb 3-1: Manufacturer: syz [ 245.654854][ T5929] usb 3-1: SerialNumber: syz [ 245.670878][ T5929] cdc_mbim 3-1:1.0: skipping garbage [ 245.689948][ T8063] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 245.773172][ T89] usb 5-1: USB disconnect, device number 25 [ 245.867573][ T8092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.286274][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.295849][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.312371][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.321045][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.554939][ T5929] cdc_mbim 3-1:1.0: bind() failure [ 246.570675][ T5929] usb 3-1: USB disconnect, device number 35 [ 246.683410][ T8113] FAULT_INJECTION: forcing a failure. [ 246.683410][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 246.696055][ T8113] CPU: 0 UID: 0 PID: 8113 Comm: syz.4.556 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.696073][ T8113] Tainted: [L]=SOFTLOCKUP [ 246.696076][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.696083][ T8113] Call Trace: [ 246.696087][ T8113] [ 246.696091][ T8113] dump_stack_lvl+0x16c/0x1f0 [ 246.696110][ T8113] should_fail_ex+0x512/0x640 [ 246.696128][ T8113] ? __kmalloc_cache_noprof+0x5f/0x800 [ 246.696140][ T8113] should_failslab+0xc2/0x120 [ 246.696156][ T8113] __kmalloc_cache_noprof+0x80/0x800 [ 246.696166][ T8113] ? fl_change+0x2e4/0x7820 [ 246.696177][ T8113] ? __nla_parse+0x40/0x60 [ 246.696191][ T8113] ? fl_change+0x2e4/0x7820 [ 246.696200][ T8113] fl_change+0x2e4/0x7820 [ 246.696214][ T8113] ? __lock_acquire+0x436/0x2890 [ 246.696228][ T8113] ? find_held_lock+0x2b/0x80 [ 246.696245][ T8113] ? tcf_chain0_head_change.isra.0+0xe7/0x120 [ 246.696257][ T8113] ? find_held_lock+0x2b/0x80 [ 246.696274][ T8113] ? __pfx_fl_change+0x10/0x10 [ 246.696285][ T8113] ? find_held_lock+0x2b/0x80 [ 246.696301][ T8113] ? fl_get+0x20a/0x3b0 [ 246.696312][ T8113] ? fl_get+0x214/0x3b0 [ 246.696321][ T8113] ? __pfx_fl_get+0x10/0x10 [ 246.696332][ T8113] ? __pfx_fl_change+0x10/0x10 [ 246.696342][ T8113] tc_new_tfilter+0xa35/0x2340 [ 246.696364][ T8113] ? __pfx_tc_new_tfilter+0x10/0x10 [ 246.696383][ T8113] ? __lock_acquire+0x436/0x2890 [ 246.696402][ T8113] ? find_held_lock+0x2b/0x80 [ 246.696418][ T8113] ? __pfx_tc_new_tfilter+0x10/0x10 [ 246.696431][ T8113] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 246.696446][ T8113] ? __pfx_tc_new_tfilter+0x10/0x10 [ 246.696460][ T8113] rtnetlink_rcv_msg+0x95e/0xe90 [ 246.696474][ T8113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.696491][ T8113] ? ref_tracker_free+0x37c/0x830 [ 246.696503][ T8113] netlink_rcv_skb+0x158/0x420 [ 246.696517][ T8113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.696531][ T8113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.696549][ T8113] ? netlink_deliver_tap+0x1ae/0xd30 [ 246.696565][ T8113] netlink_unicast+0x5aa/0x870 [ 246.696581][ T8113] ? __pfx_netlink_unicast+0x10/0x10 [ 246.696600][ T8113] netlink_sendmsg+0x8c8/0xdd0 [ 246.696616][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.696635][ T8113] ____sys_sendmsg+0xa5d/0xc30 [ 246.696651][ T8113] ? copy_msghdr_from_user+0x10a/0x160 [ 246.696664][ T8113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.696684][ T8113] ___sys_sendmsg+0x134/0x1d0 [ 246.696697][ T8113] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.696725][ T8113] __sys_sendmsg+0x16d/0x220 [ 246.696736][ T8113] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.696757][ T8113] do_syscall_64+0xcd/0xf80 [ 246.696778][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.696789][ T8113] RIP: 0033:0x7fea4f58f749 [ 246.696798][ T8113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.696809][ T8113] RSP: 002b:00007fea503be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.696819][ T8113] RAX: ffffffffffffffda RBX: 00007fea4f7e5fa0 RCX: 00007fea4f58f749 [ 246.696826][ T8113] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 246.696832][ T8113] RBP: 00007fea503be090 R08: 0000000000000000 R09: 0000000000000000 [ 246.696838][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.696845][ T8113] R13: 00007fea4f7e6038 R14: 00007fea4f7e5fa0 R15: 00007ffe7e174808 [ 246.696859][ T8113] [ 250.951804][ T8158] PKCS8: Unsupported PKCS#8 version [ 251.049605][ T30] audit: type=1400 audit(1768189072.292:589): avc: denied { execute } for pid=8154 comm="syz.0.567" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 252.263726][ T8163] netlink: 9 bytes leftover after parsing attributes in process `syz.2.570'. [ 252.477098][ T30] audit: type=1400 audit(1768189073.712:590): avc: denied { connect } for pid=8174 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.856536][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 254.759479][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.772901][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.879266][ T5929] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 255.089184][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 255.110715][ T5929] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 255.139158][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.155045][ T30] audit: type=1400 audit(1768189076.392:591): avc: denied { create } for pid=8209 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 255.159695][ T5929] usb 1-1: Product: syz [ 255.208833][ T5929] usb 1-1: Manufacturer: syz [ 255.219396][ T30] audit: type=1400 audit(1768189076.392:592): avc: denied { ioctl } for pid=8209 comm="syz.3.582" path="socket:[18729]" dev="sockfs" ino=18729 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 255.286991][ T5929] usb 1-1: SerialNumber: syz [ 255.450122][ T5929] usb 1-1: config 0 descriptor?? [ 255.461627][ T5929] ttusb_dec_send_command: command bulk message failed: error -22 [ 255.496439][ T5929] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22 [ 255.708214][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.717482][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.769791][ T5929] usb 1-1: USB disconnect, device number 21 [ 255.880819][ T8241] binder: 8240:8241 ioctl 401870cb 200000000140 returned -22 [ 257.777483][ T5929] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 258.019185][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 258.119193][ T5929] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 258.655716][ T5929] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 258.686942][ T30] audit: type=1400 audit(1768189079.922:593): avc: denied { create } for pid=8264 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.734086][ T30] audit: type=1400 audit(1768189079.922:594): avc: denied { write } for pid=8264 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.763768][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.783447][ T5929] usb 5-1: Product: syz [ 258.799543][ T5929] usb 5-1: Manufacturer: syz [ 259.267614][ T5929] usb 5-1: SerialNumber: syz [ 259.304496][ T5929] usb 5-1: config 0 descriptor?? [ 259.619339][ T5929] usb 5-1: can't set config #0, error -71 [ 259.640640][ T5929] usb 5-1: USB disconnect, device number 26 [ 259.785173][ T8294] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.608'. [ 259.823506][ T30] audit: type=1400 audit(1768189081.062:595): avc: denied { read write } for pid=8295 comm="syz.1.609" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 259.897258][ T30] audit: type=1400 audit(1768189081.062:596): avc: denied { open } for pid=8295 comm="syz.1.609" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 260.089677][ T8304] dlm: Unknown command passed to DLM device : 142 [ 260.089677][ T8304] [ 260.100355][ T8304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.547610][ T5929] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 260.729204][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 260.739842][ T5929] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 260.769159][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.783711][ T5929] usb 5-1: config 0 descriptor?? [ 260.803351][ T5929] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 260.859184][ T5893] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 260.960614][ T30] audit: type=1326 audit(1768189082.202:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8293 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222d98f749 code=0x7ffc0000 [ 260.984607][ T30] audit: type=1326 audit(1768189082.222:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8293 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222d98f749 code=0x7ffc0000 [ 261.024502][ T30] audit: type=1400 audit(1768189082.262:599): avc: denied { lock } for pid=8311 comm="syz.0.613" path="socket:[18417]" dev="sockfs" ino=18417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.049367][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 261.058480][ T5893] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 261.067340][ T5893] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.077441][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.087514][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.100788][ T5893] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.124328][ T5893] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.231507][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.569837][ T8292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.583773][ T8292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.603548][ T5893] usb 4-1: usb_control_msg returned -32 [ 262.629161][ T5893] usbtmc 4-1:16.0: can't read capabilities [ 262.664484][ T30] audit: type=1400 audit(1768189083.902:600): avc: denied { read } for pid=8327 comm="syz.2.619" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 262.709166][ T30] audit: type=1400 audit(1768189083.902:601): avc: denied { open } for pid=8327 comm="syz.2.619" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 262.789179][ T9] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 262.951920][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 262.978271][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.083642][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 263.096664][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.109169][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.117642][ T9] usb 2-1: Product: syz [ 263.122094][ T9] usb 2-1: Manufacturer: syz [ 263.127093][ T9] usb 2-1: SerialNumber: syz [ 263.481568][ T8338] usbtmc 4-1:16.0: control status returned 1d [ 263.565978][ T9] usb 2-1: USB disconnect, device number 28 [ 263.893952][ T5929] gspca_sonixj: reg_r err -71 [ 263.898726][ T5929] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 263.910534][ T5929] usb 5-1: USB disconnect, device number 27 [ 265.417908][ T30] audit: type=1400 audit(1768189086.652:602): avc: denied { mounton } for pid=8354 comm="syz.4.624" path="/proc/457/cgroup" dev="proc" ino=18895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 265.419741][ T5929] usb 4-1: USB disconnect, device number 24 [ 265.950893][ T55] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 267.009228][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 267.038558][ T55] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 267.049144][ T55] usb 5-1: config 179 has no interface number 0 [ 267.060715][ T55] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 267.075639][ T30] audit: type=1400 audit(1768189088.312:603): avc: denied { accept } for pid=8385 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.097391][ T8386] overlayfs: failed to resolve './file1': -2 [ 267.103525][ T55] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 267.268781][ T55] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 267.281297][ T30] audit: type=1400 audit(1768189088.332:604): avc: denied { watch_mount } for pid=8385 comm="syz.0.635" path="/127" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 267.303670][ T55] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 267.315482][ T55] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 267.328821][ T30] audit: type=1400 audit(1768189088.462:605): avc: denied { write } for pid=8382 comm="syz.2.633" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 267.352845][ T55] usb 5-1: config 179 interface 65 has no altsetting 0 [ 267.805826][ T55] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 267.842859][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.866323][ T30] audit: type=1400 audit(1768189089.102:606): avc: denied { bind } for pid=8388 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.456884][ T30] audit: type=1400 audit(1768189089.102:607): avc: denied { setopt } for pid=8388 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.646373][ T55] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input21 [ 268.989308][ T5168] input input21: unable to receive magic message: -110 [ 269.092007][ T7304] input input21: unable to receive magic message: -32 [ 269.119868][ T5168] input input21: unable to receive magic message: -32 [ 269.135913][ T55] usb 5-1: USB disconnect, device number 28 [ 269.135946][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 269.150324][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 269.274645][ T30] audit: type=1400 audit(1768189090.462:608): avc: denied { getopt } for pid=8401 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 269.453259][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 272.107743][ T8444] rdma_op ffff88802ae609f0 conn xmit_rdma 0000000000000000 [ 272.509181][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 272.672353][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 272.734534][ T24] usb 4-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.791259][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 272.949632][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 273.015933][ T8455] FAULT_INJECTION: forcing a failure. [ 273.015933][ T8455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.032292][ T8455] CPU: 0 UID: 0 PID: 8455 Comm: syz.0.652 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.032320][ T8455] Tainted: [L]=SOFTLOCKUP [ 273.032326][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.032334][ T8455] Call Trace: [ 273.032338][ T8455] [ 273.032342][ T8455] dump_stack_lvl+0x16c/0x1f0 [ 273.032361][ T8455] should_fail_ex+0x512/0x640 [ 273.032378][ T8455] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 273.032393][ T8455] _copy_to_user+0x32/0xd0 [ 273.032411][ T8455] simple_read_from_buffer+0xcb/0x170 [ 273.032428][ T8455] proc_fail_nth_read+0x197/0x240 [ 273.032440][ T8455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.032454][ T8455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.032465][ T8455] vfs_read+0x1e4/0xcf0 [ 273.032479][ T8455] ? __pfx___mutex_lock+0x10/0x10 [ 273.032496][ T8455] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 273.032512][ T8455] ? __pfx_vfs_read+0x10/0x10 [ 273.032528][ T8455] ? __rcu_read_unlock+0x2b5/0x5a0 [ 273.032547][ T8455] ? __fget_files+0x20e/0x3c0 [ 273.032567][ T8455] ksys_read+0x12a/0x250 [ 273.032580][ T8455] ? __pfx_ksys_read+0x10/0x10 [ 273.032597][ T8455] do_syscall_64+0xcd/0xf80 [ 273.032613][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.032625][ T8455] RIP: 0033:0x7f1a8d98e15c [ 273.032634][ T8455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.032645][ T8455] RSP: 002b:00007f1a8e7b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.032655][ T8455] RAX: ffffffffffffffda RBX: 00007f1a8dbe6090 RCX: 00007f1a8d98e15c [ 273.032662][ T8455] RDX: 000000000000000f RSI: 00007f1a8e7b90a0 RDI: 0000000000000007 [ 273.032668][ T8455] RBP: 00007f1a8e7b9090 R08: 0000000000000000 R09: 0000000000000000 [ 273.032674][ T8455] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.032681][ T8455] R13: 00007f1a8dbe6128 R14: 00007f1a8dbe6090 R15: 00007fff78cde938 [ 273.032695][ T8455] [ 273.626189][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.638128][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.679146][ T24] usb 4-1: Product: syz [ 273.683302][ T24] usb 4-1: Manufacturer: syz [ 273.687873][ T24] usb 4-1: SerialNumber: syz [ 273.707024][ T24] cdc_mbim 4-1:1.0: skipping garbage [ 273.865891][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 273.913027][ T8437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 275.420447][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.522016][ T8477] FAULT_INJECTION: forcing a failure. [ 275.522016][ T8477] name failslab, interval 1, probability 0, space 0, times 0 [ 275.534682][ T8477] CPU: 1 UID: 0 PID: 8477 Comm: syz.1.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.534708][ T8477] Tainted: [L]=SOFTLOCKUP [ 275.534714][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.534724][ T8477] Call Trace: [ 275.534731][ T8477] [ 275.534738][ T8477] dump_stack_lvl+0x16c/0x1f0 [ 275.534767][ T8477] should_fail_ex+0x512/0x640 [ 275.534797][ T8477] ? fs_reclaim_acquire+0xae/0x150 [ 275.534824][ T8477] should_failslab+0xc2/0x120 [ 275.534848][ T8477] __kmalloc_noprof+0xeb/0x910 [ 275.534878][ T8477] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 275.534908][ T8477] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 275.534933][ T8477] tomoyo_realpath_from_path+0xc2/0x6e0 [ 275.534961][ T8477] ? tomoyo_profile+0x47/0x60 [ 275.534990][ T8477] tomoyo_path_number_perm+0x245/0x580 [ 275.535010][ T8477] ? tomoyo_path_number_perm+0x237/0x580 [ 275.535034][ T8477] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 275.535085][ T8477] ? hook_file_ioctl_common+0x144/0x410 [ 275.535115][ T8477] ? __rcu_read_unlock+0x2b5/0x5a0 [ 275.535141][ T8477] ? __fget_files+0x20e/0x3c0 [ 275.535171][ T8477] security_file_ioctl+0x9b/0x240 [ 275.535197][ T8477] __x64_sys_ioctl+0xb7/0x210 [ 275.535220][ T8477] do_syscall_64+0xcd/0xf80 [ 275.535246][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.535271][ T8477] RIP: 0033:0x7fcdf138f749 [ 275.535286][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.535304][ T8477] RSP: 002b:00007fcdef5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.535322][ T8477] RAX: ffffffffffffffda RBX: 00007fcdf15e6180 RCX: 00007fcdf138f749 [ 275.535333][ T8477] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000004 [ 275.535343][ T8477] RBP: 00007fcdef5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 275.535353][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.535364][ T8477] R13: 00007fcdf15e6218 R14: 00007fcdf15e6180 R15: 00007fff01aa37b8 [ 275.535390][ T8477] [ 275.535431][ T8477] ERROR: Out of memory at tomoyo_realpath_from_path. [ 275.693456][ T30] audit: type=1400 audit(1768189096.642:609): avc: denied { ioctl } for pid=8463 comm="syz.4.656" path="socket:[19819]" dev="sockfs" ino=19819 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 276.120616][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.757566][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.766358][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.835034][ T5955] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 276.988562][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 277.189233][ T24] cdc_mbim 4-1:1.0: bind() failure [ 277.230235][ T24] usb 4-1: USB disconnect, device number 25 [ 277.245972][ T30] audit: type=1400 audit(1768189098.482:610): avc: denied { setopt } for pid=8481 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 277.271001][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 277.580966][ T5955] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 277.680017][ T5955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.939609][ T5955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.972713][ T5955] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.999440][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.007932][ T5955] usb 3-1: Product: syz [ 278.018176][ T5955] usb 3-1: Manufacturer: syz [ 278.030123][ T5955] usb 3-1: SerialNumber: syz [ 278.442173][ T8502] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 278.448847][ T8502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.463909][ T5955] usb 3-1: 0:2 : does not exist [ 278.510813][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 278.633025][ T8502] vhci_hcd vhci_hcd.0: Device attached [ 279.142574][ T8505] vhci_hcd: connection closed [ 279.144581][ T6234] vhci_hcd vhci_hcd.4: stop threads [ 279.165452][ T6234] vhci_hcd vhci_hcd.4: release socket [ 279.194672][ T6234] vhci_hcd vhci_hcd.4: disconnect device [ 279.199238][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 279.202953][ T55] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 279.238109][ T55] usb 41-1: enqueue for inactive port 0 [ 279.247095][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 279.274060][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.289007][ T9] usb 4-1: Product: syz [ 279.296225][ T9] usb 4-1: Manufacturer: syz [ 279.301101][ T9] usb 4-1: SerialNumber: syz [ 279.322950][ T9] usb 4-1: config 0 descriptor?? [ 279.413562][ T55] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 279.598582][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 280.739392][ T5955] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 280.874903][ T5955] usb 3-1: USB disconnect, device number 36 [ 281.062267][ T7304] udevd[7304]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.111518][ T30] audit: type=1400 audit(1768189103.352:611): avc: denied { bind } for pid=8524 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 282.276823][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 282.319699][ T9] usb 4-1: USB disconnect, device number 26 [ 282.343537][ T8525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.763746][ T8525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.056262][ T8525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.152997][ T8525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.205909][ T8561] No control pipe specified [ 283.423924][ T5941] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.449335][ T5941] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.457617][ T5941] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.494503][ T5941] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.499176][ T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 283.811253][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 283.829220][ T9] usb 2-1: config 0 has no interface number 0 [ 283.836864][ T9] usb 2-1: config 0 interface 188 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 283.870629][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 283.898497][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.912792][ T9] usb 2-1: Product: syz [ 284.081577][ T9] usb 2-1: Manufacturer: syz [ 284.086215][ T9] usb 2-1: SerialNumber: syz [ 284.110176][ T9] usb 2-1: config 0 descriptor?? [ 284.124530][ T8564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.359746][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.910900][ T8564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.152167][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 285.199610][ T9] asix 2-1:0.188: probe with driver asix failed with error -61 [ 285.716859][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 286.191339][ T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 286.206079][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.218265][ T9] usb 5-1: config 0 descriptor?? [ 286.301267][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 286.418118][ T8616] netlink: 112 bytes leftover after parsing attributes in process `syz.2.697'. [ 286.800912][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 286.899751][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.929163][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.959431][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 287.489473][ T89] usb 2-1: USB disconnect, device number 29 [ 287.506998][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.533964][ T10] usb 4-1: config 0 descriptor?? [ 288.333179][ T9] usb 5-1: Cannot set autoneg [ 288.356041][ T9] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 288.459883][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 288.482761][ T9] usb 5-1: USB disconnect, device number 29 [ 288.489031][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 288.489629][ T89] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 288.501462][ T10] usb 4-1: USB disconnect, device number 27 [ 288.851108][ T89] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.864443][ T89] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 288.873927][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.890796][ T89] usb 2-1: config 0 descriptor?? [ 289.144507][ T8650] ipip0: entered promiscuous mode [ 289.204626][ T30] audit: type=1400 audit(1768189366.441:612): avc: denied { read } for pid=8648 comm="syz.3.707" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 289.237141][ T8650] syz.4.706 (8650) used greatest stack depth: 19352 bytes left [ 289.258568][ T30] audit: type=1400 audit(1768189366.451:613): avc: denied { open } for pid=8648 comm="syz.3.707" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 289.310366][ T30] audit: type=1400 audit(1768189366.541:614): avc: denied { ioctl } for pid=8632 comm="syz.1.701" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.363228][ T89] waltop 0003:172F:0037.0004: collection stack underflow [ 289.393031][ T89] waltop 0003:172F:0037.0004: item 0 1 0 12 parsing failed [ 289.429485][ T30] audit: type=1400 audit(1768189366.581:615): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.458483][ T89] waltop 0003:172F:0037.0004: probe with driver waltop failed with error -22 [ 289.501587][ T30] audit: type=1400 audit(1768189366.581:616): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.528915][ T89] usb 2-1: USB disconnect, device number 30 [ 289.559589][ T30] audit: type=1400 audit(1768189366.581:617): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.595548][ T30] audit: type=1400 audit(1768189366.641:618): avc: denied { write } for pid=8648 comm="syz.3.707" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 289.656328][ T30] audit: type=1400 audit(1768189366.741:619): avc: denied { ioctl } for pid=8632 comm="syz.1.701" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 289.687404][ T30] audit: type=1400 audit(1768189366.781:620): avc: denied { read write } for pid=8656 comm="syz.4.709" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.760071][ T30] audit: type=1400 audit(1768189366.781:621): avc: denied { open } for pid=8656 comm="syz.4.709" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.839421][ T55] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 289.859253][ T10] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 290.250835][ T10] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 290.271840][ T10] usb 5-1: config 0 has no interface number 0 [ 290.280071][ T55] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.292887][ T10] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 290.328456][ T10] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 290.358872][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.371865][ T55] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 290.378976][ T10] usb 5-1: Product: syz [ 290.412962][ T10] usb 5-1: Manufacturer: syz [ 290.439062][ T10] usb 5-1: SerialNumber: syz [ 290.446024][ T10] usb 5-1: config 0 descriptor?? [ 290.454565][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.456085][ T8657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 290.476643][ T55] usb 4-1: Product: syz [ 290.492024][ T10] ums-karma 5-1:0.46: USB Mass Storage device detected [ 290.519312][ T55] usb 4-1: Manufacturer: syz [ 291.434022][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 291.485599][ T55] usb 4-1: SerialNumber: syz [ 291.620176][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 291.639825][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.788270][ T8681] netlink: 'syz.2.713': attribute type 3 has an invalid length. [ 291.829539][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.855761][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 291.874978][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.894717][ T9] usb 2-1: config 0 descriptor?? [ 291.912404][ T55] usb 4-1: config 0 descriptor?? [ 291.931028][ T55] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 291.939022][ T55] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 292.336561][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 292.343366][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 292.352886][ T9] usb 2-1: USB disconnect, device number 31 [ 292.524157][ T55] usb 4-1: USB disconnect, device number 28 [ 292.945148][ T9] usb 5-1: USB disconnect, device number 30 [ 292.963054][ T55] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 293.185747][ T55] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 293.196241][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.206569][ T55] usb 4-1: config 0 descriptor?? [ 293.619200][ T5893] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 293.939461][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 293.947494][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.106257][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.120998][ T5893] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 294.130143][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.574267][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 294.574283][ T30] audit: type=1400 audit(1768189371.451:664): avc: denied { shutdown } for pid=8716 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.633269][ T5893] usb 3-1: config 0 descriptor?? [ 294.649961][ T5893] hub 3-1:0.0: USB hub found [ 294.666939][ T30] audit: type=1400 audit(1768189371.451:665): avc: denied { getopt } for pid=8716 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.692073][ T30] audit: type=1400 audit(1768189371.451:666): avc: denied { connect } for pid=8716 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.712354][ T30] audit: type=1400 audit(1768189371.461:667): avc: denied { name_connect } for pid=8716 comm="syz.4.723" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 294.762565][ T30] audit: type=1400 audit(1768189371.481:668): avc: denied { read } for pid=8716 comm="syz.4.723" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 294.849502][ T55] usb 4-1: Cannot set autoneg [ 294.854669][ T55] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 294.881750][ T5893] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 294.908529][ T55] usb 4-1: USB disconnect, device number 29 [ 294.923114][ T30] audit: type=1400 audit(1768189371.481:669): avc: denied { setopt } for pid=8716 comm="syz.4.723" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 294.972747][ T30] audit: type=1400 audit(1768189372.071:670): avc: denied { read } for pid=8693 comm="syz.3.717" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 295.036782][ T30] audit: type=1400 audit(1768189372.071:671): avc: denied { open } for pid=8693 comm="syz.3.717" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 295.122289][ T5893] usbhid 3-1:0.0: can't add hid device: -71 [ 295.247800][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 295.312771][ T30] audit: type=1400 audit(1768189372.121:672): avc: denied { create } for pid=8706 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.473282][ T5893] usb 3-1: USB disconnect, device number 37 [ 295.509780][ T30] audit: type=1400 audit(1768189372.121:673): avc: denied { write } for pid=8706 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.903408][ T8732] netlink: 348 bytes leftover after parsing attributes in process `syz.1.727'. [ 296.319241][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 296.807786][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.815405][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.850597][ T9] usb 2-1: device descriptor read/64, error -71 [ 297.053553][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.067945][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.100109][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 297.157450][ T6398] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.166694][ T6398] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.189064][ T6398] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.200827][ T6398] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.293747][ T9] usb 2-1: device descriptor read/64, error -71 [ 297.576063][ T9] usb usb2-port1: attempt power cycle [ 297.821661][ T8767] netlink: 'syz.0.735': attribute type 4 has an invalid length. [ 297.829435][ T8767] netlink: 17 bytes leftover after parsing attributes in process `syz.0.735'. [ 299.058690][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'. [ 300.611243][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 300.611258][ T30] audit: type=1400 audit(1768189377.851:702): avc: denied { mount } for pid=8779 comm="syz.1.738" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 300.629532][ T8783] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 300.654691][ T30] audit: type=1400 audit(1768189377.891:703): avc: denied { read } for pid=8779 comm="syz.1.738" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 300.711673][ T8783] xt_limit: Overflow, try lower: 4294967292/0 [ 300.824655][ T8783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 300.849228][ T30] audit: type=1400 audit(1768189377.911:704): avc: denied { open } for pid=8779 comm="syz.1.738" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 300.872836][ T30] audit: type=1400 audit(1768189377.921:705): avc: denied { ioctl } for pid=8779 comm="syz.1.738" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 300.945840][ T30] audit: type=1400 audit(1768189378.181:706): avc: denied { read } for pid=8779 comm="syz.1.738" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 300.969952][ T30] audit: type=1400 audit(1768189378.181:707): avc: denied { open } for pid=8779 comm="syz.1.738" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 301.056501][ T8780] SELinux: failed to load policy [ 301.102258][ T30] audit: type=1400 audit(1768189378.201:708): avc: denied { ioctl } for pid=8779 comm="syz.1.738" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 301.223846][ T30] audit: type=1400 audit(1768189378.231:709): avc: denied { load_policy } for pid=8779 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 301.391112][ T30] audit: type=1400 audit(1768189378.501:710): avc: denied { mounton } for pid=8786 comm="syz.0.742" path="/152/file1" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 301.413975][ T30] audit: type=1400 audit(1768189378.501:711): avc: denied { mount } for pid=8786 comm="syz.0.742" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 302.718275][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 302.739199][ T5893] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 302.746887][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 302.829170][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 302.855876][ T8805] binder: binder_mmap: 8804 200000000000-200000b36000 bad vm_flags failed -1 [ 303.019168][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 303.028655][ T5893] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 303.036829][ T5893] usb 1-1: config 0 has no interface number 0 [ 303.043256][ T5893] usb 1-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 303.556037][ T24] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 303.581323][ T5893] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 303.591419][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 303.600509][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.609190][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.617214][ T5893] usb 1-1: Product: syz [ 303.627941][ T5893] usb 1-1: Manufacturer: syz [ 303.636961][ T5893] usb 1-1: SerialNumber: syz [ 303.739483][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 303.780773][ T5893] usb 1-1: config 0 descriptor?? [ 303.787751][ T8795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 303.953830][ T5893] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 304.077425][ T5941] usb 1-1: Failed to submit usb control message: -71 [ 304.090414][ T5893] usb 1-1: USB disconnect, device number 22 [ 304.096650][ T5941] usb 1-1: unable to send the bmi data to the device: -71 [ 304.107283][ T5941] usb 1-1: unable to get target info from device [ 304.114253][ T5941] usb 1-1: could not get target info (-71) [ 304.120478][ T5941] usb 1-1: could not probe fw (-71) [ 304.505561][ T8817] netlink: 428 bytes leftover after parsing attributes in process `syz.2.749'. [ 304.545016][ T8817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.749'. [ 304.686210][ T8820] input: syz1 as /devices/virtual/input/input22 [ 304.941006][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 304.980463][ T24] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 305.102279][ T24] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 305.409371][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 305.700685][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.714560][ T24] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 305.733724][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.749590][ T24] usb 4-1: Product: syz [ 305.758663][ T24] usb 4-1: Manufacturer: syz [ 305.768796][ T24] usb 4-1: SerialNumber: syz [ 305.794720][ T24] usb 4-1: config 0 descriptor?? [ 305.815760][ T24] cytherm 4-1:0.0: Cypress thermometer device now attached [ 306.230464][ T5938] usb 4-1: USB disconnect, device number 30 [ 306.236688][ T5938] cytherm 4-1:0.0: Cypress thermometer now disconnected [ 306.319309][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 306.360885][ T9] usb 2-1: USB disconnect, device number 35 [ 306.364092][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 306.364104][ T30] audit: type=1400 audit(1768189383.601:734): avc: denied { connect } for pid=8836 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.446787][ T30] audit: type=1400 audit(1768189383.631:735): avc: denied { write } for pid=8836 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.533065][ T30] audit: type=1400 audit(1768189383.721:736): avc: denied { create } for pid=8836 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 306.552663][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 306.557840][ T30] audit: type=1400 audit(1768189383.791:737): avc: denied { ioctl } for pid=8844 comm="syz.1.757" path="socket:[21012]" dev="sockfs" ino=21012 ioctlcmd=0x500a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 306.585140][ T30] audit: type=1400 audit(1768189383.811:738): avc: denied { name_connect } for pid=8844 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 306.614676][ T24] usb 1-1: config 0 has an invalid interface number: 166 but max is 0 [ 306.623735][ T24] usb 1-1: config 0 has no interface number 0 [ 306.630276][ T24] usb 1-1: config 0 interface 166 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 306.644257][ T30] audit: type=1400 audit(1768189383.881:739): avc: denied { ioctl } for pid=8844 comm="syz.1.757" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 306.669906][ T24] usb 1-1: config 0 interface 166 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 306.680437][ T24] usb 1-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=b0.a7 [ 306.698354][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.715673][ T24] usb 1-1: config 0 descriptor?? [ 306.721290][ T8840] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 306.728485][ T8840] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 306.985147][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 307.119067][ T30] audit: type=1400 audit(1768189384.351:740): avc: denied { create } for pid=8852 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 307.499171][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 307.506699][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.523317][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.538841][ T8839] netlink: 9 bytes leftover after parsing attributes in process `syz.0.755'. [ 307.547739][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.557912][ T8839] netlink: 9 bytes leftover after parsing attributes in process `syz.0.755'. [ 307.567025][ T9] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 307.580943][ T30] audit: type=1400 audit(1768189384.351:741): avc: denied { listen } for pid=8852 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 307.690038][ T30] audit: type=1400 audit(1768189384.741:742): avc: denied { create } for pid=8850 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 307.710391][ T30] audit: type=1400 audit(1768189384.781:743): avc: denied { mount } for pid=8838 comm="syz.0.755" name="/" dev="autofs" ino=20418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 307.868743][ T55] usb 1-1: USB disconnect, device number 23 [ 307.906663][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 307.913713][ T9] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.02 [ 307.923181][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.934094][ T9] usb 5-1: config 0 descriptor?? [ 308.470964][ T9] a4tech 0003:09DA:0006.0005: unbalanced collection at end of report description [ 308.481006][ T9] a4tech 0003:09DA:0006.0005: parse failed [ 308.496974][ T9] a4tech 0003:09DA:0006.0005: probe with driver a4tech failed with error -22 [ 308.681493][ T9] usb 5-1: USB disconnect, device number 31 [ 308.985738][ T8868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.587376][ T8873] binder: 8872:8873 ioctl 40946400 2000000005c0 returned -22 [ 310.669180][ T5929] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 310.799190][ T5929] usb 5-1: device descriptor read/64, error -71 [ 310.994180][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 311.273810][ T5929] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 311.543678][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 311.543691][ T30] audit: type=1400 audit(1768189388.511:760): avc: denied { create } for pid=8888 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 311.579361][ T9] usb 1-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.592577][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 311.602783][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 311.671508][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.681680][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.693596][ T9] usb 1-1: Product: syz [ 311.713553][ T9] usb 1-1: Manufacturer: syz [ 311.736168][ T9] usb 1-1: SerialNumber: syz [ 311.740843][ T5929] usb 5-1: device descriptor read/64, error -71 [ 311.767031][ T9] cdc_mbim 1-1:1.0: skipping garbage [ 311.774704][ T30] audit: type=1400 audit(1768189389.011:761): avc: denied { create } for pid=8893 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 311.849573][ T5929] usb usb5-port1: attempt power cycle [ 312.199371][ T5929] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 312.359856][ T8884] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 312.392169][ T5929] usb 5-1: device descriptor read/8, error -71 [ 312.659394][ T5929] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 312.719765][ T5929] usb 5-1: device descriptor read/8, error -71 [ 312.867257][ T8884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.876611][ T5929] usb usb5-port1: unable to enumerate USB device [ 312.876965][ T8884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.895584][ T30] audit: type=1400 audit(1768189390.131:762): avc: denied { mount } for pid=8883 comm="syz.0.767" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 312.949492][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 313.323471][ T9] cdc_mbim 1-1:1.0: bind() failure [ 313.355985][ T9] usb 1-1: USB disconnect, device number 24 [ 313.385040][ T30] audit: type=1400 audit(1768189390.621:763): avc: denied { read write } for pid=8913 comm="syz.3.775" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 313.408802][ T30] audit: type=1400 audit(1768189390.621:764): avc: denied { open } for pid=8913 comm="syz.3.775" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 313.446758][ T30] audit: type=1400 audit(1768189390.621:765): avc: denied { mount } for pid=8913 comm="syz.3.775" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 313.468915][ T8916] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 313.487998][ T30] audit: type=1400 audit(1768189390.721:766): avc: denied { bind } for pid=8915 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 313.489153][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 313.508276][ T30] audit: type=1400 audit(1768189390.721:767): avc: denied { create } for pid=8915 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 313.512524][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 313.532719][ T30] audit: type=1400 audit(1768189390.721:768): avc: denied { write } for pid=8915 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 313.562059][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 313.577093][ T10] usb 3-1: config 0 has no interface number 0 [ 313.634423][ T30] audit: type=1400 audit(1768189390.751:769): avc: denied { nlmsg_write } for pid=8915 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 313.659579][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 313.825878][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 313.843063][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 314.049524][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.057555][ T10] usb 3-1: Product: syz [ 314.064520][ T8928] netlink: 'syz.4.779': attribute type 10 has an invalid length. [ 314.067982][ T10] usb 3-1: Manufacturer: syz [ 314.072516][ T8928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.779'. [ 314.077558][ T10] usb 3-1: SerialNumber: syz [ 314.163306][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.171119][ T8930] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.521500][ T10] usb 3-1: config 0 descriptor?? [ 316.158218][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.167236][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.911214][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 317.918738][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 318.029360][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 319.147383][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 319.147395][ T30] audit: type=1400 audit(1768189395.751:786): avc: denied { write } for pid=8960 comm="syz.2.788" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 319.196196][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 319.216755][ T10] usb 3-1: USB disconnect, device number 38 [ 319.263896][ T30] audit: type=1400 audit(1768189396.481:787): avc: denied { read write } for pid=8964 comm="syz.1.789" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 319.536665][ T8967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.789'. [ 319.909394][ T30] audit: type=1400 audit(1768189396.491:788): avc: denied { open } for pid=8964 comm="syz.1.789" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 319.935201][ T30] audit: type=1400 audit(1768189396.741:789): avc: denied { create } for pid=8964 comm="syz.1.789" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 319.956085][ T30] audit: type=1400 audit(1768189396.831:790): avc: denied { setopt } for pid=8964 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.142183][ T30] audit: type=1400 audit(1768189397.381:791): avc: denied { bind } for pid=8968 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 320.236599][ T30] audit: type=1400 audit(1768189397.411:792): avc: denied { unlink } for pid=5808 comm="syz-executor" name="file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 321.719942][ T30] audit: type=1400 audit(1768189398.951:793): avc: denied { unlink } for pid=8985 comm="syz.1.794" name="#c" dev="tmpfs" ino=793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 321.799205][ T30] audit: type=1400 audit(1768189398.981:794): avc: denied { mount } for pid=8985 comm="syz.1.794" name="/" dev="overlay" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 322.032674][ T8995] dummy0: entered promiscuous mode [ 322.042133][ T8995] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 322.053107][ T8995] debugfs: 'hsr1' already exists in 'hsr' [ 322.058882][ T8995] Cannot create hsr debugfs directory [ 322.430528][ T30] audit: type=1400 audit(1768189399.241:795): avc: denied { mount } for pid=8988 comm="syz.0.796" name="/" dev="hugetlbfs" ino=21676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 324.579574][ T9020] netlink: 1424 bytes leftover after parsing attributes in process `syz.4.802'. [ 324.683734][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 324.683749][ T30] audit: type=1400 audit(1768189401.921:808): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 324.887164][ T30] audit: type=1400 audit(1768189402.111:809): avc: denied { read write } for pid=9028 comm="syz.2.806" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 324.925482][ T30] audit: type=1400 audit(1768189402.111:810): avc: denied { open } for pid=9028 comm="syz.2.806" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 324.928504][ T10] libceph: connect (1)[c::]:6789 error -101 [ 324.959641][ T30] audit: type=1400 audit(1768189402.201:811): avc: denied { execute } for pid=9029 comm="syz.3.807" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 324.985866][ T24] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 325.060991][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 325.159313][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 325.339821][ T10] libceph: connect (1)[c::]:6789 error -101 [ 325.366324][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 325.496319][ T24] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 325.699147][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 325.704621][ T24] usb usb5-port1: attempt power cycle [ 325.707877][ T9030] ceph: No mds server is up or the cluster is laggy [ 325.841990][ T30] audit: type=1400 audit(1768189403.061:812): avc: denied { create } for pid=9046 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 326.024946][ T30] audit: type=1400 audit(1768189403.251:813): avc: denied { write } for pid=9048 comm="syz.3.811" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.296253][ T24] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 326.366093][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 326.690948][ T24] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 326.709126][ T30] audit: type=1400 audit(1768189403.701:814): avc: denied { name_bind } for pid=9046 comm="syz.1.810" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 326.759626][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 326.769376][ T24] usb usb5-port1: unable to enumerate USB device [ 328.103052][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 328.114537][ T9064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.813'. [ 328.143199][ T30] audit: type=1400 audit(1768189405.381:815): avc: denied { write } for pid=9059 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.163100][ T9069] xt_bpf: check failed: parse error [ 328.201009][ T30] audit: type=1400 audit(1768189405.431:816): avc: denied { read } for pid=9067 comm="syz.4.816" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 328.232804][ T9064] tipc: Started in network mode [ 328.237761][ T9064] tipc: Node identity ac1414aa, cluster identity 4711 [ 328.253406][ T9064] tipc: New replicast peer: 172.30.0.2 [ 328.258982][ T30] audit: type=1400 audit(1768189405.431:817): avc: denied { open } for pid=9067 comm="syz.4.816" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 328.338546][ T9064] tipc: Enabled bearer , priority 10 [ 328.375001][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'. [ 328.387672][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'. [ 328.592015][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 329.453688][ T10] tipc: Node number set to 2886997162 [ 330.325775][ T30] audit: type=1400 audit(1768189407.391:818): avc: denied { setopt } for pid=9086 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.477139][ T30] audit: type=1400 audit(1768189407.391:819): avc: denied { listen } for pid=9086 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.575133][ T30] audit: type=1400 audit(1768189407.391:820): avc: denied { connect } for pid=9086 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.850626][ T30] audit: type=1400 audit(1768189407.711:821): avc: denied { connect } for pid=9090 comm="syz.2.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 332.221079][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 332.498067][ T9118] Cannot find add_set index 0 as target [ 332.565113][ T30] audit: type=1400 audit(1768189409.711:822): avc: denied { write } for pid=9109 comm="syz.1.825" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 333.062582][ T9123] FAULT_INJECTION: forcing a failure. [ 333.062582][ T9123] name failslab, interval 1, probability 0, space 0, times 0 [ 333.079571][ T9123] CPU: 0 UID: 0 PID: 9123 Comm: syz.1.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.079599][ T9123] Tainted: [L]=SOFTLOCKUP [ 333.079605][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.079615][ T9123] Call Trace: [ 333.079621][ T9123] [ 333.079627][ T9123] dump_stack_lvl+0x16c/0x1f0 [ 333.079657][ T9123] should_fail_ex+0x512/0x640 [ 333.079683][ T9123] ? __kmalloc_cache_noprof+0x5f/0x800 [ 333.079703][ T9123] should_failslab+0xc2/0x120 [ 333.079727][ T9123] __kmalloc_cache_noprof+0x80/0x800 [ 333.079744][ T9123] ? ovl_init_fs_context+0x11f/0x5f0 [ 333.079769][ T9123] ? ovl_init_fs_context+0x11f/0x5f0 [ 333.079787][ T9123] ovl_init_fs_context+0x11f/0x5f0 [ 333.079808][ T9123] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 333.079829][ T9123] alloc_fs_context+0x629/0xf50 [ 333.079852][ T9123] path_mount+0xe21/0x23a0 [ 333.079869][ T9123] ? rcu_is_watching+0x12/0xc0 [ 333.079890][ T9123] ? __pfx_path_mount+0x10/0x10 [ 333.079907][ T9123] ? kmem_cache_free+0x2d8/0x770 [ 333.079927][ T9123] ? putname+0xf5/0x1a0 [ 333.079958][ T9123] ? putname+0xf5/0x1a0 [ 333.079981][ T9123] ? putname+0xf5/0x1a0 [ 333.080015][ T9123] ? __x64_sys_mount+0x293/0x310 [ 333.080031][ T9123] __x64_sys_mount+0x293/0x310 [ 333.080049][ T9123] ? __pfx___x64_sys_mount+0x10/0x10 [ 333.080074][ T9123] do_syscall_64+0xcd/0xf80 [ 333.080100][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.080119][ T9123] RIP: 0033:0x7fcdf138f749 [ 333.080134][ T9123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.080151][ T9123] RSP: 002b:00007fcdef5f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 333.080168][ T9123] RAX: ffffffffffffffda RBX: 00007fcdf15e5fa0 RCX: 00007fcdf138f749 [ 333.080181][ T9123] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 333.080192][ T9123] RBP: 00007fcdef5f6090 R08: 0000200000000500 R09: 0000000000000000 [ 333.080202][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.080213][ T9123] R13: 00007fcdf15e6038 R14: 00007fcdf15e5fa0 R15: 00007fff01aa37b8 [ 333.080238][ T9123] [ 333.632691][ T30] audit: type=1400 audit(1768189410.871:823): avc: denied { bind } for pid=9135 comm="syz.1.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 333.667852][ T9137] xt_hashlimit: max too large, truncated to 1048576 [ 333.704176][ T30] audit: type=1400 audit(1768189410.931:824): avc: denied { mount } for pid=9135 comm="syz.1.831" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 333.726109][ T5955] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 333.921403][ T5955] usb 5-1: config 8 has an invalid interface number: 8 but max is 1 [ 333.949918][ T5955] usb 5-1: config 8 has an invalid interface number: 8 but max is 1 [ 334.015432][ T9144] program syz.1.832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.384869][ T5955] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 334.418028][ T5955] usb 5-1: config 8 has no interface number 0 [ 334.438952][ T5955] usb 5-1: config 8 interface 8 has no altsetting 1 [ 334.474816][ T5955] usb 5-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=33.93 [ 334.500403][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.508390][ T5955] usb 5-1: Product: syz [ 334.528376][ T5955] usb 5-1: Manufacturer: syz [ 334.542947][ T5955] usb 5-1: SerialNumber: syz [ 334.605097][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 334.996748][ T30] audit: type=1400 audit(1768189412.201:825): avc: denied { getopt } for pid=9127 comm="syz.4.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 335.081526][ T30] audit: type=1400 audit(1768189412.311:826): avc: denied { read } for pid=9156 comm="syz.1.837" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 336.317284][ T30] audit: type=1400 audit(1768189412.311:827): avc: denied { open } for pid=9156 comm="syz.1.837" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 336.359272][ T30] audit: type=1400 audit(1768189412.351:828): avc: denied { write } for pid=9147 comm="syz.0.834" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 336.473511][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 336.531650][ T5955] qmi_wwan 5-1:8.8: probe with driver qmi_wwan failed with error -22 [ 336.626524][ T5955] usb 5-1: USB disconnect, device number 40 [ 337.008477][ T30] audit: type=1400 audit(1768189414.201:829): avc: denied { create } for pid=9165 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 337.209194][ T5893] libceph: connect (1)[c::]:6789 error -22 [ 337.233280][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 337.311595][ T9188] ceph: No mds server is up or the cluster is laggy [ 337.528253][ T24] libceph: connect (1)[c::]:6789 error -22 [ 337.535625][ T5955] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 337.542740][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 337.690429][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.701877][ T5955] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 337.724141][ T5955] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.826105][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.849351][ T5955] usb 2-1: config 0 descriptor?? [ 338.160925][ T30] audit: type=1400 audit(1768189415.181:830): avc: denied { connect } for pid=9196 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.330615][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 338.715919][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.755604][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 338.786739][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.070677][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.089885][ T9] usb 4-1: Product: syz [ 339.096858][ T9] usb 4-1: Manufacturer: syz [ 339.189164][ T9] usb 4-1: SerialNumber: syz [ 339.199437][ T5955] usb 2-1: USB disconnect, device number 36 [ 339.316340][ T9] cdc_mbim 4-1:1.0: skipping garbage [ 339.519542][ T9201] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 339.557255][ T24] IPVS: starting estimator thread 0... [ 339.692750][ T9221] IPVS: using max 40 ests per chain, 96000 per kthread [ 340.409182][ T5955] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 340.449889][ T9201] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 340.462513][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 340.469583][ T9] cdc_mbim 4-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 340.481503][ T9] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 340.502279][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 340.609144][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 340.622423][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.633557][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 340.673436][ T5955] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 340.699157][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.717378][ T9] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 340.728193][ T5955] usb 1-1: config 0 descriptor?? [ 340.736665][ T9] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 340.769958][ T9] wwan wwan0: port wwan0mbim0 attached [ 340.804064][ T9] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 72:87:c4:1f:e2:1b [ 340.824691][ T5922] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 340.864755][ T9] usb 4-1: USB disconnect, device number 31 [ 341.027854][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 341.154359][ T9] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 341.187455][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 341.200327][ T30] audit: type=1400 audit(1768189418.421:831): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 341.261020][ T5922] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 341.261362][ T5955] holtek_mouse 0003:04D9:A070.0006: item fetching failed at offset 2/5 [ 341.290528][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.309694][ T30] audit: type=1400 audit(1768189418.441:832): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.314911][ T5922] usb 2-1: config 0 descriptor?? [ 341.336874][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 341.382408][ T5955] holtek_mouse 0003:04D9:A070.0006: hid parse failed: -22 [ 341.405812][ T5955] holtek_mouse 0003:04D9:A070.0006: probe with driver holtek_mouse failed with error -22 [ 341.436016][ T30] audit: type=1400 audit(1768189418.441:833): avc: denied { search } for pid=5478 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.528821][ T9237] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 341.556501][ T30] audit: type=1400 audit(1768189418.441:834): avc: denied { search } for pid=5478 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.591000][ T9260] FAULT_INJECTION: forcing a failure. [ 341.591000][ T9260] name failslab, interval 1, probability 0, space 0, times 0 [ 341.647541][ T30] audit: type=1400 audit(1768189418.441:835): avc: denied { read } for pid=5478 comm="dhcpcd" name="n101" dev="tmpfs" ino=5237 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 341.927589][ T9260] CPU: 1 UID: 0 PID: 9260 Comm: syz.3.865 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.927609][ T9260] Tainted: [L]=SOFTLOCKUP [ 341.927613][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.927620][ T9260] Call Trace: [ 341.927624][ T9260] [ 341.927628][ T9260] dump_stack_lvl+0x16c/0x1f0 [ 341.927654][ T9260] should_fail_ex+0x512/0x640 [ 341.927686][ T9260] ? fs_reclaim_acquire+0xae/0x150 [ 341.927710][ T9260] should_failslab+0xc2/0x120 [ 341.927728][ T9260] __kmalloc_noprof+0xeb/0x910 [ 341.927746][ T9260] ? tomoyo_encode2+0x100/0x3e0 [ 341.927764][ T9260] ? tomoyo_encode2+0x100/0x3e0 [ 341.927778][ T9260] tomoyo_encode2+0x100/0x3e0 [ 341.927805][ T9260] tomoyo_encode+0x29/0x50 [ 341.927827][ T9260] tomoyo_realpath_from_path+0x18f/0x6e0 [ 341.927857][ T9260] tomoyo_path_number_perm+0x245/0x580 [ 341.927871][ T9260] ? tomoyo_path_number_perm+0x237/0x580 [ 341.927886][ T9260] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 341.927899][ T9260] ? lock_acquire+0x179/0x330 [ 341.927927][ T9260] ? find_held_lock+0x2b/0x80 [ 341.927952][ T9260] ? hook_file_ioctl_common+0x144/0x410 [ 341.927983][ T9260] ? __fget_files+0x20e/0x3c0 [ 341.928008][ T9260] security_file_ioctl+0x9b/0x240 [ 341.928025][ T9260] __x64_sys_ioctl+0xb7/0x210 [ 341.928039][ T9260] do_syscall_64+0xcd/0xf80 [ 341.928054][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.928065][ T9260] RIP: 0033:0x7f4b62f8f749 [ 341.928077][ T9260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.928093][ T9260] RSP: 002b:00007f4b611d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.928109][ T9260] RAX: ffffffffffffffda RBX: 00007f4b631e6090 RCX: 00007f4b62f8f749 [ 341.928119][ T9260] RDX: 0000200000000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 341.928129][ T9260] RBP: 00007f4b611d5090 R08: 0000000000000000 R09: 0000000000000000 [ 341.928138][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.928148][ T9260] R13: 00007f4b631e6128 R14: 00007f4b631e6090 R15: 00007fffc4657f58 [ 341.928163][ T9260] [ 341.928173][ T9260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 342.214093][ T30] audit: type=1400 audit(1768189418.441:836): avc: denied { open } for pid=5478 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=5237 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.323781][ T9] usb 1-1: USB disconnect, device number 25 [ 342.349254][ T30] audit: type=1400 audit(1768189418.441:837): avc: denied { getattr } for pid=5478 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=5237 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.395206][ T9248] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 342.489150][ T30] audit: type=1400 audit(1768189418.761:838): avc: denied { read open } for pid=9253 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.630306][ T30] audit: type=1400 audit(1768189418.761:839): avc: denied { getattr } for pid=9253 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.809178][ T30] audit: type=1400 audit(1768189418.851:840): avc: denied { setopt } for pid=9250 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 342.869172][ T30] audit: type=1400 audit(1768189418.901:841): avc: denied { create } for pid=9250 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 342.943342][ T5922] usbhid 2-1:0.0: can't add hid device: -71 [ 342.970973][ T30] audit: type=1400 audit(1768189418.911:842): avc: denied { append } for pid=9250 comm="syz.2.864" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.003756][ T5922] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 343.119245][ T5922] usb 2-1: USB disconnect, device number 37 [ 344.011988][ T9296] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 344.048529][ T9288] bond1: option mode: invalid value (205) [ 344.079427][ T9288] bond1 (unregistering): Released all slaves [ 348.992941][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 348.992955][ T30] audit: type=1400 audit(1768189426.231:854): avc: denied { append } for pid=9366 comm="syz.0.888" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 349.116525][ T30] audit: type=1400 audit(1768189426.351:855): avc: denied { bind } for pid=9368 comm="syz.2.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 349.231993][ T30] audit: type=1400 audit(1768189426.431:856): avc: denied { setopt } for pid=9368 comm="syz.2.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 349.912325][ T5922] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 350.159166][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 350.533146][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 350.567603][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.587706][ T5922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.918063][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 350.988757][ T5922] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 351.022006][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.046347][ T5922] usb 1-1: config 0 descriptor?? [ 351.459190][ T7251] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 352.700654][ T7251] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.751625][ T5955] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 352.769314][ T7251] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.883272][ T7251] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 352.901939][ T7251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.910875][ T7251] usb 4-1: SerialNumber: syz [ 352.932057][ T7251] usb 4-1: 0:2 : does not exist [ 353.051075][ T5955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.065856][ T5955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.666723][ T5955] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.676548][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.685144][ T5955] usb 3-1: Product: syz [ 353.704746][ T24] usb 1-1: USB disconnect, device number 26 [ 353.734331][ T5955] usb 3-1: Manufacturer: syz [ 353.739794][ T7251] usb 4-1: USB disconnect, device number 32 [ 353.765231][ T5955] usb 3-1: SerialNumber: syz [ 353.856551][ T5955] cdc_mbim 3-1:1.0: skipping garbage [ 353.892217][ T7304] udevd[7304]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.120021][ T9427] loop4: detected capacity change from 0 to 7 [ 354.130443][ T9427] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.138500][ T9427] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.146493][ T9427] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.154510][ T9427] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.162727][ T9427] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.170844][ T9427] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.178846][ T9427] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.186782][ T9427] ldm_validate_partition_table(): Disk read failed. [ 354.194360][ T9427] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.202376][ T9427] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.210369][ T9427] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.218345][ T9427] Dev loop4: unable to read RDB block 0 [ 354.224248][ T9427] loop4: unable to read partition table [ 354.230881][ T9427] loop4: partition table beyond EOD, truncated [ 354.237189][ T9427] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 354.563054][ T9431] netlink: 44 bytes leftover after parsing attributes in process `syz.1.908'. [ 355.121998][ T9436] ip6gretap0: entered promiscuous mode [ 355.128734][ T9436] vlan2: entered promiscuous mode [ 355.525687][ T30] audit: type=1400 audit(1768189432.231:857): avc: denied { connect } for pid=9406 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 355.991306][ T9442] : entered promiscuous mode [ 356.641835][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 357.495324][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.506391][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.517939][ T5955] cdc_mbim 3-1:1.0: bind() failure [ 357.525456][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 357.543494][ T5955] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 357.572948][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.586377][ T5955] usb 3-1: USB disconnect, device number 39 [ 357.661518][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.697050][ T30] audit: type=1400 audit(1768189434.931:858): avc: denied { ioctl } for pid=9456 comm="syz.2.915" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 357.697841][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'. [ 359.181033][ T24] usb 5-1: config 0 descriptor?? [ 359.436180][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 359.442159][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 359.940263][ T24] usb 5-1: USB disconnect, device number 41 [ 359.978522][ T9477] Option 'Ӿ,0A' to dns_resolver key: bad/missing value [ 361.237141][ T30] audit: type=1326 audit(1768189438.471:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.2.922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f222d98f749 code=0x0 [ 361.478851][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.921'. [ 361.534063][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.921'. [ 361.578916][ T30] audit: type=1400 audit(1768189438.811:860): avc: denied { create } for pid=9486 comm="syz.2.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 469.589048][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 469.596002][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9495/1:b..l P9398/1:b..l P7256/1:b..l P7304/1:b..l [ 469.607591][ C0] rcu: (detected by 0, t=10502 jiffies, g=29265, q=1022 ncpus=2) [ 469.615366][ C0] task:udevd state:R running task stack:24760 pid:7304 tgid:7304 ppid:5183 task_flags:0x40014c flags:0x00080000 [ 469.629210][ C0] Call Trace: [ 469.632466][ C0] [ 469.635373][ C0] ? __schedule+0x10b9/0x6150 [ 469.640041][ C0] __schedule+0x1139/0x6150 [ 469.644526][ C0] ? __pfx___schedule+0x10/0x10 [ 469.649356][ C0] ? mark_held_locks+0x49/0x80 [ 469.654097][ C0] preempt_schedule_irq+0x51/0x90 [ 469.659098][ C0] irqentry_exit+0x1d8/0x8c0 [ 469.663667][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 469.669618][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 469.674790][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 22 be ee 0e 0f 82 74 02 00 00 8b 35 ba ee ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 469.694373][ C0] RSP: 0018:ffffc9001b00f458 EFLAGS: 00000206 [ 469.700429][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000072a80970 [ 469.708374][ C0] RDX: 0000000000000000 RSI: ffffffff8daa89dc RDI: ffffffff8bf2b400 [ 469.716332][ C0] RBP: 0000000000000002 R08: 000000005247d6c7 R09: 0000000075247d6c [ 469.724274][ C0] R10: 0000000000000002 R11: ffff888031e80b30 R12: 0000000000000000 [ 469.732219][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.740172][ C0] ? is_module_text_address+0x148/0x220 [ 469.745697][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.751825][ C0] is_bpf_text_address+0x36/0x1a0 [ 469.756824][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 469.761996][ C0] kernel_text_address+0x8d/0x100 [ 469.766996][ C0] __kernel_text_address+0xd/0x40 [ 469.771996][ C0] unwind_get_return_address+0x59/0xa0 [ 469.777432][ C0] arch_stack_walk+0xa6/0x100 [ 469.782090][ C0] stack_trace_save+0x8e/0xc0 [ 469.786740][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 469.792088][ C0] kasan_save_stack+0x33/0x60 [ 469.796744][ C0] ? kasan_save_stack+0x33/0x60 [ 469.801586][ C0] ? kasan_save_track+0x14/0x30 [ 469.806415][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 469.811431][ C0] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 469.817049][ C0] ? kmem_alloc_batch+0x49/0x170 [ 469.821973][ C0] ? debug_objects_fill_pool+0x413/0x660 [ 469.827578][ C0] ? debug_object_activate+0x10b/0x4c0 [ 469.833015][ C0] ? __call_rcu_common.constprop.0+0x35/0xa10 [ 469.839065][ C0] ? kmem_cache_free+0x171/0x770 [ 469.843986][ C0] ? exit_mmap+0x507/0xb60 [ 469.848375][ C0] ? __mmput+0x12a/0x410 [ 469.852593][ C0] ? mmput+0x62/0x70 [ 469.856462][ C0] ? do_exit+0x7d7/0x2bd0 [ 469.860775][ C0] ? do_group_exit+0xd3/0x2a0 [ 469.865423][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 469.870591][ C0] ? x64_sys_call+0x151c/0x1740 [ 469.875419][ C0] ? do_syscall_64+0xcd/0xf80 [ 469.880070][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.886121][ C0] kasan_save_track+0x14/0x30 [ 469.890772][ C0] __kasan_slab_alloc+0x89/0x90 [ 469.895596][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 469.901029][ C0] ? kmem_alloc_batch+0x49/0x170 [ 469.905942][ C0] ? kmem_alloc_batch+0x49/0x170 [ 469.910852][ C0] kmem_alloc_batch+0x49/0x170 [ 469.915590][ C0] debug_objects_fill_pool+0x413/0x660 [ 469.921023][ C0] ? x64_sys_call+0x151c/0x1740 [ 469.925862][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 469.931818][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 469.937945][ C0] debug_object_activate+0x10b/0x4c0 [ 469.943206][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 469.948990][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 469.955114][ C0] __call_rcu_common.constprop.0+0x35/0xa10 [ 469.960987][ C0] kmem_cache_free+0x171/0x770 [ 469.965724][ C0] ? exit_mmap+0x507/0xb60 [ 469.970120][ C0] ? exit_mmap+0x507/0xb60 [ 469.974511][ C0] exit_mmap+0x507/0xb60 [ 469.978747][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 469.983489][ C0] ? __lock_acquire+0x436/0x2890 [ 469.988404][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 469.993926][ C0] __mmput+0x12a/0x410 [ 469.997972][ C0] mmput+0x62/0x70 [ 470.001669][ C0] do_exit+0x7d7/0x2bd0 [ 470.005802][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 470.010802][ C0] ? __pfx_do_exit+0x10/0x10 [ 470.015367][ C0] ? rcu_is_watching+0x12/0xc0 [ 470.020119][ C0] do_group_exit+0xd3/0x2a0 [ 470.024595][ C0] __x64_sys_exit_group+0x3e/0x50 [ 470.029592][ C0] x64_sys_call+0x151c/0x1740 [ 470.034246][ C0] do_syscall_64+0xcd/0xf80 [ 470.038725][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.044592][ C0] RIP: 0033:0x7fbcbeef16c5 [ 470.048994][ C0] RSP: 002b:00007fff9b415a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 470.057379][ C0] RAX: ffffffffffffffda RBX: 00005555c8a6fd90 RCX: 00007fbcbeef16c5 [ 470.065322][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 470.073266][ C0] RBP: 00005555c88202c0 R08: 0000000000000000 R09: 0000000000000000 [ 470.081209][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.089154][ C0] R13: 00007fff9b415ac0 R14: 0000000000000000 R15: 0000000000000000 [ 470.097104][ C0] [ 470.100100][ C0] task:udevd state:R running task stack:27112 pid:7256 tgid:7256 ppid:5183 task_flags:0x40014c flags:0x00080000 [ 470.113544][ C0] Call Trace: [ 470.116811][ C0] [ 470.119717][ C0] ? __schedule+0x10b9/0x6150 [ 470.124368][ C0] __schedule+0x1139/0x6150 [ 470.128861][ C0] ? arch_stack_walk+0xa6/0x100 [ 470.133695][ C0] ? __pfx___schedule+0x10/0x10 [ 470.138536][ C0] ? mark_held_locks+0x49/0x80 [ 470.143281][ C0] preempt_schedule_irq+0x51/0x90 [ 470.148281][ C0] irqentry_exit+0x1d8/0x8c0 [ 470.152848][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.158802][ C0] RIP: 0010:lock_acquire+0x130/0x330 [ 470.164059][ C0] Code: b1 00 00 00 65 8b 05 d7 fa 18 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 97 b3 18 12 8b 90 2c 0b 00 00 85 d2 0f 85 8c 00 00 00 9c <8f> 04 24 fa 48 c7 c7 87 f1 bb 8d e8 d0 52 de 09 45 89 e0 89 e9 44 [ 470.183638][ C0] RSP: 0018:ffffc9000c1d7708 EFLAGS: 00000246 [ 470.189676][ C0] RAX: ffff888026c624c0 RBX: ffffffff8e3c96a0 RCX: 0000000000000001 [ 470.197619][ C0] RDX: 0000000000000000 RSI: ffffffff816cb681 RDI: fffffbfff1c792d4 [ 470.205564][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 470.213509][ C0] R10: 0000000000000002 R11: 0000000000007d80 R12: 0000000000000000 [ 470.221454][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.229402][ C0] ? unwind_next_frame+0xd1/0x20b0 [ 470.234493][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 470.239669][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 470.245795][ C0] unwind_next_frame+0xd1/0x20b0 [ 470.250709][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 470.255795][ C0] ? x64_sys_call+0x151c/0x1740 [ 470.260639][ C0] ? unwind_get_return_address+0x59/0xa0 [ 470.266261][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 470.272387][ C0] arch_stack_walk+0x94/0x100 [ 470.277042][ C0] ? x64_sys_call+0x151c/0x1740 [ 470.281886][ C0] stack_trace_save+0x8e/0xc0 [ 470.286546][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 470.291916][ C0] ? kasan_save_stack+0x42/0x60 [ 470.296746][ C0] ? kasan_save_stack+0x33/0x60 [ 470.301572][ C0] kasan_save_stack+0x33/0x60 [ 470.306223][ C0] ? kasan_save_stack+0x33/0x60 [ 470.311050][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 470.316402][ C0] ? kmem_cache_free+0x15e/0x770 [ 470.321319][ C0] ? exit_mmap+0x507/0xb60 [ 470.325726][ C0] ? __mmput+0x12a/0x410 [ 470.329949][ C0] ? mmput+0x62/0x70 [ 470.333834][ C0] ? do_exit+0x7d7/0x2bd0 [ 470.338142][ C0] ? do_group_exit+0xd3/0x2a0 [ 470.342798][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 470.347971][ C0] ? x64_sys_call+0x151c/0x1740 [ 470.352816][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 470.357994][ C0] kmem_cache_free+0x15e/0x770 [ 470.362730][ C0] ? exit_mmap+0x507/0xb60 [ 470.367123][ C0] ? exit_mmap+0x507/0xb60 [ 470.371514][ C0] exit_mmap+0x507/0xb60 [ 470.375738][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 470.380480][ C0] ? __lock_acquire+0x436/0x2890 [ 470.385397][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 470.390921][ C0] __mmput+0x12a/0x410 [ 470.394981][ C0] mmput+0x62/0x70 [ 470.398680][ C0] do_exit+0x7d7/0x2bd0 [ 470.402811][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 470.407810][ C0] ? __pfx_do_exit+0x10/0x10 [ 470.412375][ C0] ? rcu_is_watching+0x12/0xc0 [ 470.417116][ C0] do_group_exit+0xd3/0x2a0 [ 470.421594][ C0] __x64_sys_exit_group+0x3e/0x50 [ 470.426594][ C0] x64_sys_call+0x151c/0x1740 [ 470.431247][ C0] do_syscall_64+0xcd/0xf80 [ 470.435730][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.441609][ C0] RIP: 0033:0x7fbcbeef16c5 [ 470.445996][ C0] RSP: 002b:00007fff9b415a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 470.454394][ C0] RAX: ffffffffffffffda RBX: 00005555c8ad4240 RCX: 00007fbcbeef16c5 [ 470.462341][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 470.470300][ C0] RBP: 00005555c88202c0 R08: 0000000000000000 R09: 0000000000000000 [ 470.478244][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.486191][ C0] R13: 00007fff9b415ac0 R14: 0000000000000000 R15: 0000000000000000 [ 470.494146][ C0] [ 470.497141][ C0] task:syz.4.896 state:R running task stack:23208 pid:9398 tgid:9398 ppid:5809 task_flags:0x40064c flags:0x00080001 [ 470.510584][ C0] Call Trace: [ 470.513838][ C0] [ 470.516749][ C0] ? __schedule+0x10b9/0x6150 [ 470.521402][ C0] __schedule+0x1139/0x6150 [ 470.525890][ C0] ? __pfx___schedule+0x10/0x10 [ 470.530719][ C0] ? find_held_lock+0x2b/0x80 [ 470.535374][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 470.540720][ C0] preempt_schedule_common+0x44/0xc0 [ 470.545979][ C0] preempt_schedule_thunk+0x16/0x30 [ 470.551154][ C0] _raw_spin_unlock+0x3e/0x50 [ 470.555805][ C0] unmap_page_range+0x1047/0x43c0 [ 470.560817][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 470.566164][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 470.571082][ C0] ? uprobe_munmap+0x93/0x600 [ 470.575733][ C0] unmap_single_vma+0x153/0x240 [ 470.580558][ C0] unmap_vmas+0x218/0x470 [ 470.584878][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 470.589718][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 470.594644][ C0] exit_mmap+0x1b0/0xb60 [ 470.598878][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 470.603635][ C0] ? __lock_acquire+0x436/0x2890 [ 470.608550][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 470.614073][ C0] __mmput+0x12a/0x410 [ 470.618123][ C0] mmput+0x62/0x70 [ 470.621823][ C0] do_exit+0x7d7/0x2bd0 [ 470.625953][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 470.631561][ C0] ? __pfx_do_exit+0x10/0x10 [ 470.636125][ C0] do_group_exit+0xd3/0x2a0 [ 470.640602][ C0] get_signal+0x2671/0x26d0 [ 470.645087][ C0] ? __pfx_get_signal+0x10/0x10 [ 470.649918][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 470.655442][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 470.661575][ C0] ? __bad_area_nosemaphore+0x350/0x690 [ 470.667098][ C0] irqentry_exit+0x38a/0x8c0 [ 470.671666][ C0] asm_exc_page_fault+0x26/0x30 [ 470.676491][ C0] RIP: 0033:0x7fea4f58f751 [ 470.680891][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 470.686929][ C0] RAX: 0000000000000000 RBX: 00007fea4f7e6090 RCX: 00007fea4f58f749 [ 470.694873][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 470.702818][ C0] RBP: 00007fea4f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 470.710761][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 470.718704][ C0] R13: 00007fea4f7e6128 R14: 00007fea4f7e6090 R15: 00007ffe7e174808 [ 470.726657][ C0] [ 470.729652][ C0] task:syz.0.925 state:R running task stack:27544 pid:9495 tgid:9494 ppid:5819 task_flags:0x40044c flags:0x00080000 [ 470.743097][ C0] Call Trace: [ 470.746349][ C0] [ 470.749257][ C0] ? __schedule+0x10b9/0x6150 [ 470.753911][ C0] __schedule+0x1139/0x6150 [ 470.758386][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.763567][ C0] ? __pfx___schedule+0x10/0x10 [ 470.768393][ C0] ? find_held_lock+0x2b/0x80 [ 470.773046][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 470.778391][ C0] preempt_schedule_common+0x44/0xc0 [ 470.783652][ C0] preempt_schedule_thunk+0x16/0x30 [ 470.788823][ C0] _raw_spin_unlock+0x3e/0x50 [ 470.793475][ C0] unmap_page_range+0x1047/0x43c0 [ 470.798488][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 470.803833][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 470.808750][ C0] ? uprobe_munmap+0x12b/0x600 [ 470.813489][ C0] unmap_single_vma+0x153/0x240 [ 470.818315][ C0] unmap_vmas+0x218/0x470 [ 470.822621][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 470.827450][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 470.832372][ C0] exit_mmap+0x1b0/0xb60 [ 470.836592][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 470.841335][ C0] ? __lock_acquire+0x436/0x2890 [ 470.846252][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 470.851776][ C0] __mmput+0x12a/0x410 [ 470.855825][ C0] mmput+0x62/0x70 [ 470.859522][ C0] do_exit+0x7d7/0x2bd0 [ 470.863657][ C0] ? __pfx_do_exit+0x10/0x10 [ 470.868221][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 470.873222][ C0] ? find_held_lock+0x2b/0x80 [ 470.877879][ C0] do_group_exit+0xd3/0x2a0 [ 470.882369][ C0] get_signal+0x2671/0x26d0 [ 470.886854][ C0] ? putname+0xf5/0x1a0 [ 470.890988][ C0] ? __pfx_get_signal+0x10/0x10 [ 470.895830][ C0] ? do_futex+0x122/0x350 [ 470.900152][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 470.905674][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 470.911806][ C0] ? __x64_sys_openat+0x174/0x210 [ 470.916806][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 470.922070][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 470.927334][ C0] do_syscall_64+0x4ee/0xf80 [ 470.931903][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.937768][ C0] RIP: 0033:0x7f1a8d98f749 [ 470.942154][ C0] RSP: 002b:00007f1a8e7da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 470.950540][ C0] RAX: fffffffffffffe00 RBX: 00007f1a8dbe5fa8 RCX: 00007f1a8d98f749 [ 470.958482][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a8dbe5fa8 [ 470.966426][ C0] RBP: 00007f1a8dbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 470.974368][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.982310][ C0] R13: 00007f1a8dbe6038 R14: 00007fff78cde850 R15: 00007fff78cde938 [ 470.990277][ C0] [ 470.993284][ C0] rcu: rcu_preempt kthread starved for 10642 jiffies! g29265 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 471.004447][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 471.014383][ C0] rcu: RCU grace-period kthread stack dump: [ 471.020241][ C0] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 471.033686][ C0] Call Trace: [ 471.036940][ C0] [ 471.039861][ C0] ? __schedule+0x10b9/0x6150 [ 471.044514][ C0] __schedule+0x1139/0x6150 [ 471.049002][ C0] ? __pfx___schedule+0x10/0x10 [ 471.053824][ C0] ? find_held_lock+0x2b/0x80 [ 471.058477][ C0] ? schedule+0x2d7/0x3a0 [ 471.062794][ C0] schedule+0xe7/0x3a0 [ 471.066835][ C0] schedule_timeout+0x123/0x290 [ 471.071658][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 471.077002][ C0] ? __pfx_process_timeout+0x10/0x10 [ 471.082260][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 471.088039][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 471.093472][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 471.098213][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 471.103474][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 471.108647][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 471.113556][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 471.118383][ C0] rcu_gp_kthread+0x26d/0x380 [ 471.123033][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 471.128206][ C0] ? rcu_is_watching+0x12/0xc0 [ 471.132942][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 471.138115][ C0] ? __kthread_parkme+0x19e/0x250 [ 471.143112][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 471.148285][ C0] kthread+0x3c5/0x780 [ 471.152327][ C0] ? __pfx_kthread+0x10/0x10 [ 471.156890][ C0] ? rcu_is_watching+0x12/0xc0 [ 471.161622][ C0] ? __pfx_kthread+0x10/0x10 [ 471.166187][ C0] ret_from_fork+0x983/0xb10 [ 471.170752][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 471.175836][ C0] ? __switch_to+0x7af/0x10d0 [ 471.180487][ C0] ? __pfx_kthread+0x10/0x10 [ 471.185051][ C0] ret_from_fork_asm+0x1a/0x30 [ 471.189799][ C0] [ 471.192791][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 471.199083][ C0] Sending NMI from CPU 0 to CPUs 1: [ 471.204267][ C1] NMI backtrace for cpu 1 [ 471.204279][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.204297][ C1] Tainted: [L]=SOFTLOCKUP [ 471.204302][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.204310][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 471.204328][ C1] Code: a6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 19 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 471.204341][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 471.204352][ C1] RAX: 000000000159e1d5 RBX: 0000000000000001 RCX: ffffffff8b7846d9 [ 471.204361][ C1] RDX: 0000000000000000 RSI: ffffffff8dacea71 RDI: ffffffff8bf2b400 [ 471.204370][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 471.204378][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 471.204387][ C1] R13: ffff88801dac24c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 471.204396][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 471.204410][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.204419][ C1] CR2: 0000000000000000 CR3: 000000005eec0000 CR4: 00000000003526f0 [ 471.204427][ C1] Call Trace: [ 471.204432][ C1] [ 471.204436][ C1] default_idle+0x13/0x20 [ 471.204455][ C1] default_idle_call+0x6c/0xb0 [ 471.204474][ C1] do_idle+0x38d/0x510 [ 471.204494][ C1] ? __pfx_do_idle+0x10/0x10 [ 471.204516][ C1] cpu_startup_entry+0x4f/0x60 [ 471.204535][ C1] start_secondary+0x21d/0x2d0 [ 471.204549][ C1] ? __pfx_start_secondary+0x10/0x10 [ 471.204564][ C1] common_startup_64+0x13e/0x148 [ 471.204584][ C1]