last executing test programs: 19.511179463s ago: executing program 1 (id=783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000000000803) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f00001b8000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x6, 0xffff}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x800007) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x68e, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010002000000fcffff7f000000000000000400000004000b00"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000002200)=""/4110, 0x0, 0x100e, 0x1}, 0x28) sched_setscheduler(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25NOUID(r11, 0x89e3, &(0x7f0000000040)=0xffffffffffffffff) 17.830611275s ago: executing program 1 (id=789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 10.42632833s ago: executing program 3 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) ioctl$KDSIGACCEPT(r1, 0x4b62, 0x8000000000001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) socket$inet6(0xa, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9.165489768s ago: executing program 0 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe8c, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (fail_nth: 4) 9.154234623s ago: executing program 1 (id=809): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x100) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000140)={0x9, 0x378, 0x8001, 0x3, 0x6, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x200, 0xb64, 0x4, 0x1}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000190a01010000000000000047000000000000"], 0x20}}, 0x8004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r9, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xed0}], 0x1}}], 0x8, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/usbmon#\x00'}]}, 0x19) 9.029742194s ago: executing program 3 (id=810): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x240408d8) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0xa, 0x4, 0x0, 0x0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1400}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x2, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r5, 0x0}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bind$packet(r9, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) 8.786723531s ago: executing program 2 (id=811): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000400)=[{0xc, 0x4, 0x8, 0x8}, {0x6, 0xe, 0x3, 0x8}]}) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1, 0x2, 0x1) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x8, 0x0) write(r5, &(0x7f0000000240)="fea5d8dd339c13795bd428fc434442949a3d8f2e2ffc6375cfe96cca63e5f5b2be6c674b7941784a1a8e8a934dd75dbdc4cfd115e1", 0x35) mount$9p_fd(0x0, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10004881}, 0x2404c851) getsockopt$SO_COOKIE(r2, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 8.154497974s ago: executing program 0 (id=812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x408281, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x4, 0x0, 0x0, 0x1f, &(0x7f0000000080)="3dfa623a12c47f40980d153147ea5a3065c3662315b262a9e4d8d2fe36c338", 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) syz_open_dev$swradio(&(0x7f0000000740), 0x0, 0x2) socket(0xb, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) sendfile(r4, r4, 0x0, 0xfffa83) 8.098366057s ago: executing program 3 (id=813): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf2b701acf07cbf18}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xec, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xce}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2b1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x27}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x50, 0xd, 0xa7, 0x1, 0xfffff779, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa3e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x8, 0x85]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c6}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xb0}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x2, 0xff, 0xe, 0x8989, 0x8, 0xffffffff, 0x8, 0x6]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x55c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x705}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7000000}]}]}, 0xec}}, 0x40000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xfffe) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r6, &(0x7f0000001540)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbee0000000000008001489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cce1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bf", 0x92}, {&(0x7f0000000500)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbba0000007e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe12158713ef8864796df4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac20000a8e1da8150f1a1d8f51c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e99927685000000000000", 0x9e}, {&(0x7f0000000a80)="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", 0x1b0}, {&(0x7f0000000dc0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a86eb407515edbef8", 0xd5}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="11177d6bde7edfb7d72a0343b4", 0xd}], 0x1}}], 0x3, 0x2000c044) writev(r6, &(0x7f0000000640)=[{&(0x7f00000001c0)="7a76663f4889d470b45705a0288f1ebe8b509127b8b587b2fce7daff32f61d0a58688a27989f9510f283840ddef411b1e61a2988b93e0c93ff9937b0819569976c09e9b1", 0x44}, {&(0x7f0000000080)="b36451453419d8fb697fa8f800497bd7a1e3510d13670076a261420e9a30da094ed964a2a7ea37244499041d", 0x2c}, {&(0x7f0000000440)="7399aec3e67ca47a", 0x8}, {&(0x7f0000000700)="3533abcadaa3f1cfbea1aad6d82ac66dc15aa510d66d388a3b6a8943ea8153c0dd61a95ef79ec4", 0x27}], 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x98, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1efbc419, 0x4b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x60}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4005}, 0x40004) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 7.178618703s ago: executing program 0 (id=814): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x103e41) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0x31) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000240)="d33dd4", 0x3, 0x8004881, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800060003", 0x2d}, {&(0x7f0000000080)="cf4f7b4cc9e2fafbf73eaee366d76b1e5edca5509d699dbb9367cb7353d7b5c75ba5cf957ff4bb3c9c0fd6341da59f", 0x2f}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20004080) close_range(r3, r1, 0x0) 6.977854221s ago: executing program 3 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/96, 0x60}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f00000000c0)={[{0x0, 0x5, 0x3, 0xc, 0x40, 0x2, 0x6, 0x3, 0x3, 0x5, 0xf8, 0x8, 0x9}, {0xfffffff3, 0x4, 0x4, 0xe0, 0x6, 0x2, 0x1, 0x81, 0x1, 0x5, 0x8, 0x28, 0x1}, {0x47, 0x0, 0x2, 0x7f, 0xbc, 0xc, 0xdf, 0x8, 0xaf, 0x1, 0xff, 0x3, 0xe246}], 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.733084919s ago: executing program 2 (id=817): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0xc1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x11da, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xa, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0x6, 0x7, {0xfffffffffffffe21, 0x23, "274c3a9fac"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.978051873s ago: executing program 4 (id=818): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/resume', 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open$dir(&(0x7f0000000300)='./file0/file0\x00', 0x2001, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) setreuid(0x0, 0xee00) sendfile(r0, r0, 0x0, 0x9) 5.142754515s ago: executing program 1 (id=819): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 4.42797948s ago: executing program 3 (id=820): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='cachefiles_prep_read\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0x3) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 4.386217509s ago: executing program 4 (id=821): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}]}, 0xf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000640)={[&(0x7f00000000c0)='\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00']}, &(0x7f0000000780)={[&(0x7f0000000680)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000006c0)='/dev/net/tun\x00', &(0x7f0000000740)='\x85{\x00']}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9348bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba", 0x323) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.420001769s ago: executing program 0 (id=822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xd070000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) stat(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1dc81936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9adc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f770900000000000000494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r3, &(0x7f0000001f00)=""/4093, 0xffd) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0xeaa}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"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"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xd070000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) stat(0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) fstat(0xffffffffffffffff, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1dc81936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9adc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f770900000000000000494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) (async) getdents64(r3, &(0x7f0000001f00)=""/4093, 0xffd) (async) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0xeaa}]}) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"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"}) (async) 3.279384325s ago: executing program 4 (id=823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x42400) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000200)) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r7 = io_uring_setup(0x3146, &(0x7f00000000c0)={0x0, 0x88c2, 0x200, 0x0, 0x20e}) io_uring_setup(0x4689, &(0x7f0000000140)={0x0, 0xdd2e, 0x20, 0x2, 0x120, 0x0, r7}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000940)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3243754163952da7}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24040094) 3.220131509s ago: executing program 2 (id=824): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x2000) mmap(&(0x7f0000181000/0x1000)=nil, 0x1000, 0x2000008, 0x20011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioprio_get$pid(0x3, r3) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x40002015}) syz_io_uring_setup(0x6e90, 0xffffffffffffffff, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x7ff) socket$kcm(0x10, 0x2, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 2.559607863s ago: executing program 2 (id=825): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x408281, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x4, 0x0, 0x0, 0x1f, &(0x7f0000000080)="3dfa623a12c47f40980d153147ea5a3065c3662315b262a9e4d8d2fe36c338", 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) syz_open_dev$swradio(&(0x7f0000000740), 0x0, 0x2) socket(0xb, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) sendfile(r4, r4, 0x0, 0xfffa83) 2.202341648s ago: executing program 4 (id=826): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002a00)={0x1, [{0x3, 0x3d8, 0x4800000, &(0x7f0000000080)="f7628ba557c8d542b69f725062623125d7c02f0e74dbe659f1207e354744ef182309db57a878c600822da0b6979ab865b2022a3c2bbb6ed770c2fb6cd7903e2591352e49426fbbe672d5fdc9d1be180871fb4006d241ad5b57813ebb8a3f725c5f8a37ad14388ddf5911c3d9b05bc9b72c4da3c085fd27f1657d63"}, {0x1, 0x350, 0xd, &(0x7f0000000140)="56ad62578caaeb02e81ca0ee5e6739b9b17308180ba8a32d8fd6581719d643155b8876d4f671014293bb84e3b23dd861411507401ad9cc1d93336094a6fd4fd5ad91980d9e41df46d2e278662c2b01a25373c66f58f706b28f7fe13e73fe61f09217a815a5bc5a597cb8"}, {0x3, 0x358, 0x81, &(0x7f0000000240)="083bba14692a644fd99460d4286281cfca11b79ffb390125557b0c2d1fd93185262a1e7badfe3d2abfc15a4aa7a87a420b949853139d2e88c8be585fd4645c7461fa3a72b4757b3de225c120dd007923c98cf705dd0ee8c03bb1951065dcd64a66d2c60bfdc0fdb88aa17c"}, {0x1, 0x638, 0x7, &(0x7f00000002c0)="17dd6dee900d2f32a4b8f6b971baec8128d8c3320881b6f8d2d07ba94202ddec84dd37ba2cad858cd9cb56e133a6f331b10734b7027ca29b6ba892f3f47a830f1088d9e3d1ad1fc4577ea9c0cbc3b40de1e0847465470c7d01ea61c69359c7579c628b3f34b9bdfdd826b29094bf25643291496965cfda92668bf4ad693e7023258b8f9e24c7ed434435a091d6ef711e623322a93d6a90778e34dd6d1a233f5107e89ea7af1160b6395f9bd65b40f47ce411347ef01697e91173009778a8a9c67dd13ba3bef8f8"}, {0x1, 0x90, 0xf, &(0x7f00000003c0)="33e384ef18c97fb2405b35c168b8a41a0eb9"}, {0x3, 0x3c0, 0x8, &(0x7f0000000400)="ecff78f97f9b3ec0b85e0e8f2836d2c3dfc38ed600f1bcc067b5b1c1bec2d5331bb4463c4037442cda3379aff12512bc90cbef8735e7a383822fd667792ed8f89935657d9c57a7bed2e5c2c7789925f55a16474005712bd4e7366ce6e8f0e5b028dfbcf56ed48e944dc87b756745facac4f9e52dc615e4cf"}, {0x2, 0x8000, 0x9, &(0x7f0000000880)="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"}, {0x3, 0x730, 0x0, &(0x7f0000000480)="d406b63dcb2505c27b7cfd17c2f45f6895ebaa81e264c96b32397ad8c14f4635af15b7002c083a09f14a9688b912c94bf4c5628a9a9596cb571bfb76fe973ba3aaabb9869dcf991185965590f34b03fc0f6304aec4e3adfbf0e3fc1c6af532384acf21509aa0451f8438a844f934ec4d4b975dd893621c52e898754d76d51b974c81645297f27d649f658ee103dda77b220f6d9d26cb70b075bfba6525496c91d8664e85e427175f809995885963846f910264fcc3d4378e98c066ac8c0240f4f2e74c7209a5d0b1f0cb7ba3863a628f85e307ed73e6d66748c9d59ee4c304ccb54aaebb2f68"}, {0x3, 0x588, 0x4, &(0x7f0000000580)="1195a36102a07cc9feaed63bf2aa9d89239424ee09bba9005f9d66e7aeae4da6c1c10627194ef31717e59094156b7a9c57d51c9190bcf5ade2bae23b4d0e0f594fee3f16bd551f18d25835e59914ca62319ca6353412b1af4723dd334a929e8826b92ea295bf073bfe12a4c4e1db07a2508ab002e12cb8dd2e33976fd95dc8c17b9fdff74e9f6681ce0bfdd61b1c7a6e3b667ad0c3f7129ca25d5557bd418807305b4f77db7b920ccdb0946fcfb1d6d3b2"}, {0x2, 0x8000, 0x2, &(0x7f0000001880)="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"}, {0x2, 0x3c8, 0x8, &(0x7f0000000640)="3d9e488e67862bf1b4fcb0f2b4f511994bfd10b2ab01a7af506b8b7e8edc39a4a90bad8edc9c346ac1516bfd4e443b710c8786abe263b65533a6324fcefa351460f4a3e90b5dec39bfacff835f79126b8658c5242420f49273ebf409bb0a0583b9ce04f616517669bd0c4fbd02368a728d7b0e52c6a611811e"}, {0x0, 0x3f8, 0x4, &(0x7f00000006c0)="68b83571e9f09bd68b93d3028a6b817fb453f40ece66865ad533e491126f0079b897a0038ad469346c07610d791e4366d103b08d53aec59da003086d64b3752363479896d323c84d49d46b528d43a2b45db556f7f735daf7c0819a0ce16c5994f8ccfaa9d198914eacd1d3bac2ccd7401b23a535c9082c180b6ce15e3783aa"}, {0x3, 0x4a8, 0x401, &(0x7f0000000740)="93d9c936b025af21e20510626bb3254cebae8e1b70402cad35f295ed37f5ab70d59eec0a740798f93736a86e2798d48a0c457dadf780ffeccd474a3a273f7ce132b9d2ac8fe12ef5e1759b55e38ce7fbfbf21354ae6a852a36dbeeecbc6899575e1ecb6f11fce941bf890fb2ed16c655def442b750a9f2b57c8cdf774790441dd27665724b8bdeb23eb4bdf14e7857658790ab6fbc"}, {0x0, 0x408, 0x580, &(0x7f0000002880)="9be4a365573077513c7bf244c9aa16566cb2176787e4d64c48f88cc5d315a2494d0eb4dadf0340ec3ee215ecf2172407f28e418d6149a5f913fffc6c4142b91e97c3095c63647250cdd60c4cf24094d9ab93fdb1fde27087ac483f09da781a51b53530c21c60bca204d8ae377e1ac4a23e5325b38905db91986933baf3a2587497"}, {0x1, 0x4c8, 0x2, &(0x7f0000002940)="16ac21b58de1dcbf326eb83582b69c2ea66f37555c21fa3c8b15d6b2c0523130dee3ac86a2a07a79f3f22747578a3c38668670a230e70f2e35e469cb88f0d35aa9c91c1ab44d6ef6c94634f115a46bf9fc114410b285bd52aa2076ead533ca03cad1f9c5ec5ef6650a04d8e111420acb517c9a6779c16514fa520d03c0a83a97a9053f9e1b2ed7e4ac85a4022204c5e830bb00e822b2e8f964"}, {0x2, 0x1f0, 0x0, &(0x7f0000000800)="466183f54033f1e4537971f93ad62053fd62c35d91b3038741ab762525f8d1827ba6cb44547d645ffab7de35ddb30161647306d4cf44de132da3c6642620"}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.195977542s ago: executing program 0 (id=827): r0 = socket(0x1, 0x2, 0x1) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x6}}}, 0x4) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @multicast2}, {0x1, @random="d1b656169b8b"}, 0x4, {0x2, 0x4e20, @local}, 'pim6reg1\x00'}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.020850051s ago: executing program 4 (id=828): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x1000, 0x400, 0x401, 0x6, 0x8, 0x3, 0x5, [0x7, 0x6]}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r2], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800007838b7d1e7ffc0abfdce1ba9a7e30010000100010000ffffffff0000000000e54c2e4fc54237ec6ac611c805e053fcd57fdbb415207a7df5ab965754b58e12cd51940b08d1bf287d2544bdfd8a9c000f50603de6559eb57dd8b33250a6d5a3e1bf828b42efe9a853e9d1bee9f9daebf1362784679d", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') mprotect(&(0x7f000000a000/0x1000)=nil, 0x1000, 0xc) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r7, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/76, 0x4c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee15688a8003c000203000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e040024f0298432d6628dcd87f4e312a", 0xb8) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) r10 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r10, &(0x7f0000000d40)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b800da4173b9e63544ee1f32fd585dab49f06f4e7e92a867080b7b83c0a3125", 0x48, 0x0) ppoll(&(0x7f0000000140)=[{r9, 0x1}], 0x1, 0x0, 0x0, 0x0) dup3(r9, r1, 0x0) 1.831340531s ago: executing program 3 (id=829): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008", @ANYBLOB, @ANYRESDEC], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r2, 0x8b24, &(0x7f0000000040)) 1.622571349s ago: executing program 2 (id=830): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 1.607295414s ago: executing program 1 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x1b6b80000000}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000500)={0x4, 0x1, 0x1, "2ecf704b441c52d9cae5f6fd6e34aed1a983546708e42b96a1f9b2c976b04bf9", 0x10006006}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat(r3, 0x0, r3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xb}}, './file0\x00'}) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000340)={0x3, 0x0, [{0x400000b7}, {0x411, 0x0, 0x7}, {0x40, 0x0, 0x5}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0x2, 0x2, 0x3}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@phonet={0x23, 0x80, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x5, &(0x7f0000000080)=0x24007, 0xfffffffffffffee9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0xce22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x200}}, 0x0, 0x0, 0x3c, 0x0, "a30b3b2884c69b16668c68a5daa845f387713f4048782ece1e75f1fcb1b3f41e4de625ff106bb28200c01f696109383664417165bba0dd5ace522fa7880000000000000000000300"}, 0xd8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 1.545676172s ago: executing program 2 (id=832): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x9) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x90) r6 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0x1, 0x7ff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x26, 0x2, 0x3, "a677c17a5ac1f393f65906a68dd1f8822c88000000000300", 0x31324d59}) 1.141550234s ago: executing program 4 (id=833): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x103e41) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0x31) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000240)="d33dd4", 0x3, 0x8004881, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800060003", 0x2d}, {&(0x7f0000000080)="cf4f7b4cc9e2fafbf73eaee366d76b1e5edca5509d699dbb9367cb7353d7b5c75ba5cf957ff4bb3c9c0fd6341da59f", 0x2f}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20004080) close_range(r3, r1, 0x0) 53.723633ms ago: executing program 0 (id=834): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) socket$kcm(0x2b, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x6000, @fd=r1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x4d10, 0x2, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, 0x1c) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r6, 0x200204) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffff", 0x42}], 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 0s ago: executing program 1 (id=835): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) gettid() r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x6, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Only works on TCP SYN packets [ 176.452734][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.473241][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.864806][ T7450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.901695][ T7475] openvswitch: netlink: Actions may not be safe on all matching packets [ 177.042536][ T7484] FAULT_INJECTION: forcing a failure. [ 177.042536][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.059705][ T7484] CPU: 0 UID: 0 PID: 7484 Comm: syz.4.421 Not tainted syzkaller #0 PREEMPT(full) [ 177.059728][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.059738][ T7484] Call Trace: [ 177.059744][ T7484] [ 177.059751][ T7484] dump_stack_lvl+0x16c/0x1f0 [ 177.059772][ T7484] should_fail_ex+0x512/0x640 [ 177.059795][ T7484] _copy_from_user+0x2e/0xd0 [ 177.059817][ T7484] __x64_sys_epoll_ctl+0x131/0x1e0 [ 177.059840][ T7484] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 177.059866][ T7484] do_syscall_64+0xcd/0xfa0 [ 177.059884][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.059902][ T7484] RIP: 0033:0x7efebc98f749 [ 177.059916][ T7484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.059932][ T7484] RSP: 002b:00007efebd877038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 177.059948][ T7484] RAX: ffffffffffffffda RBX: 00007efebcbe5fa0 RCX: 00007efebc98f749 [ 177.059959][ T7484] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 177.059969][ T7484] RBP: 00007efebd877090 R08: 0000000000000000 R09: 0000000000000000 [ 177.059979][ T7484] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 177.059989][ T7484] R13: 00007efebcbe6038 R14: 00007efebcbe5fa0 R15: 00007ffcc70579f8 [ 177.060012][ T7484] [ 178.678541][ T7498] netlink: 596 bytes leftover after parsing attributes in process `syz.2.424'. [ 179.003098][ T24] usb 4-1: USB disconnect, device number 13 [ 179.018721][ T7506] xt_TCPMSS: Only works on TCP SYN packets [ 179.089614][ T7507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.426'. [ 179.442883][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.635186][ T5915] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.646503][ T5915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.657124][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.676086][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.709171][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.740328][ T5915] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.752884][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.775622][ T5915] usb 3-1: Product: syz [ 179.790208][ T5915] usb 3-1: Manufacturer: syz [ 180.052296][ T5915] cdc_wdm 3-1:1.0: skipping garbage [ 180.052319][ T5915] cdc_wdm 3-1:1.0: skipping garbage [ 180.074666][ T5915] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 180.173103][ T5915] cdc_wdm 3-1:1.0: Unknown control protocol [ 180.268312][ T5838] usb 3-1: USB disconnect, device number 8 [ 180.419190][ T7529] overlayfs: overlapping lowerdir path [ 180.765239][ T7534] netlink: 596 bytes leftover after parsing attributes in process `syz.4.435'. [ 180.787208][ T30] audit: type=1400 audit(1764432699.652:380): avc: denied { write } for pid=7530 comm="syz.4.435" path="socket:[15497]" dev="sockfs" ino=15497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.433120][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 181.802826][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 181.821894][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 181.834510][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.853063][ T24] usb 2-1: Product: syz [ 181.863407][ T24] usb 2-1: Manufacturer: syz [ 181.868061][ T24] usb 2-1: SerialNumber: syz [ 181.894906][ T24] usb 2-1: config 0 descriptor?? [ 182.489337][ T24] airspy 2-1:0.0: Board ID: 00 [ 182.512056][ T24] airspy 2-1:0.0: Firmware version: [ 182.882901][ T7571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.893415][ T7571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.935041][ T30] audit: type=1400 audit(1764432701.802:381): avc: denied { execute } for pid=7546 comm="syz.3.440" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 182.981119][ T7573] netlink: 'syz.4.445': attribute type 4 has an invalid length. [ 183.266524][ T24] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 183.294945][ T24] airspy 2-1:0.0: Registered as swradio24 [ 183.309276][ T24] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 183.402121][ T24] usb 2-1: USB disconnect, device number 10 [ 183.662858][ T5880] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 183.717071][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 183.850650][ T7586] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 183.954743][ T5880] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.963804][ T5880] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.976782][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.006125][ T5880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.024615][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.034953][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 184.352852][ T5880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.378982][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 184.393494][ T30] audit: type=1800 audit(1764432703.262:382): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.451" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 184.529996][ T7595] overlayfs: missing 'lowerdir' [ 184.607698][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 184.619478][ T5880] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.708686][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.736717][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 184.799962][ T5880] usb 1-1: Product: syz [ 184.805088][ T5880] usb 1-1: Manufacturer: syz [ 184.907965][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 184.993028][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 185.003069][ T10] usb 4-1: Product: syz [ 185.007284][ T10] usb 4-1: Manufacturer: syz [ 185.014792][ T5880] cdc_wdm 1-1:1.0: skipping garbage [ 185.058118][ T10] usb 4-1: SerialNumber: syz [ 185.062826][ T5880] cdc_wdm 1-1:1.0: skipping garbage [ 185.083099][ T5880] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 185.089029][ T5880] cdc_wdm 1-1:1.0: Unknown control protocol [ 185.163911][ T10] usb 4-1: config 0 descriptor?? [ 185.228998][ T5838] usb 1-1: USB disconnect, device number 22 [ 185.384030][ T7613] FAULT_INJECTION: forcing a failure. [ 185.384030][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 185.414788][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.4.456 Not tainted syzkaller #0 PREEMPT(full) [ 185.414815][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.414826][ T7613] Call Trace: [ 185.414833][ T7613] [ 185.414840][ T7613] dump_stack_lvl+0x16c/0x1f0 [ 185.414867][ T7613] should_fail_ex+0x512/0x640 [ 185.414888][ T7613] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 185.414918][ T7613] should_failslab+0xc2/0x120 [ 185.414940][ T7613] kmem_cache_alloc_node_noprof+0x78/0x770 [ 185.414965][ T7613] ? __alloc_skb+0x2b2/0x380 [ 185.414992][ T7613] ? __alloc_skb+0x2b2/0x380 [ 185.415010][ T7613] __alloc_skb+0x2b2/0x380 [ 185.415031][ T7613] ? __pfx___alloc_skb+0x10/0x10 [ 185.415057][ T7613] ? __lock_acquire+0x622/0x1c90 [ 185.415076][ T7613] tca_action_flush+0xba/0x930 [ 185.415101][ T7613] ? __pfx_tca_action_flush+0x10/0x10 [ 185.415126][ T7613] ? bpf_ksym_find+0x127/0x1c0 [ 185.415164][ T7613] ? __nla_parse+0x40/0x60 [ 185.415192][ T7613] tca_action_gd+0x817/0x1350 [ 185.415212][ T7613] ? stack_trace_save+0x8e/0xc0 [ 185.415236][ T7613] ? __pfx_stack_trace_save+0x10/0x10 [ 185.415261][ T7613] ? stack_depot_save_flags+0x29/0x9c0 [ 185.415283][ T7613] ? __pfx_tca_action_gd+0x10/0x10 [ 185.415301][ T7613] ? __lock_acquire+0xb8a/0x1c90 [ 185.415320][ T7613] ? kasan_save_stack+0x42/0x60 [ 185.415335][ T7613] ? kasan_save_stack+0x33/0x60 [ 185.415351][ T7613] ? kasan_save_track+0x14/0x30 [ 185.415368][ T7613] ? __kasan_save_free_info+0x3b/0x60 [ 185.415391][ T7613] ? __kasan_slab_free+0x5f/0x80 [ 185.415407][ T7613] ? kmem_cache_free+0x2d4/0x6c0 [ 185.415424][ T7613] ? __lock_acquire+0x622/0x1c90 [ 185.415461][ T7613] ? avc_has_perm_noaudit+0x149/0x3b0 [ 185.415505][ T7613] ? __nla_parse+0x40/0x60 [ 185.415528][ T7613] tc_ctl_action+0x29a/0x470 [ 185.415546][ T7613] ? __pfx_tc_ctl_action+0x10/0x10 [ 185.415572][ T7613] ? __pfx_tc_ctl_action+0x10/0x10 [ 185.415590][ T7613] rtnetlink_rcv_msg+0x3c9/0xe90 [ 185.415616][ T7613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.415644][ T7613] ? ref_tracker_free+0x37c/0x830 [ 185.415674][ T7613] netlink_rcv_skb+0x158/0x420 [ 185.415701][ T7613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.415723][ T7613] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.415757][ T7613] ? netlink_deliver_tap+0x1ae/0xd30 [ 185.415787][ T7613] netlink_unicast+0x5aa/0x870 [ 185.415815][ T7613] ? __pfx_netlink_unicast+0x10/0x10 [ 185.415847][ T7613] netlink_sendmsg+0x8c8/0xdd0 [ 185.415876][ T7613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.415909][ T7613] ____sys_sendmsg+0xa98/0xc70 [ 185.415925][ T7613] ? copy_msghdr_from_user+0x10a/0x160 [ 185.415947][ T7613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.415973][ T7613] ___sys_sendmsg+0x134/0x1d0 [ 185.415996][ T7613] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.416014][ T7613] ? __lock_acquire+0x622/0x1c90 [ 185.416057][ T7613] __sys_sendmsg+0x16d/0x220 [ 185.416078][ T7613] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.416113][ T7613] do_syscall_64+0xcd/0xfa0 [ 185.416130][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.416145][ T7613] RIP: 0033:0x7efebc98f749 [ 185.416157][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.416173][ T7613] RSP: 002b:00007efebd877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.416189][ T7613] RAX: ffffffffffffffda RBX: 00007efebcbe5fa0 RCX: 00007efebc98f749 [ 185.416199][ T7613] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 185.416209][ T7613] RBP: 00007efebd877090 R08: 0000000000000000 R09: 0000000000000000 [ 185.416218][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.416227][ T7613] R13: 00007efebcbe6038 R14: 00007efebcbe5fa0 R15: 00007ffcc70579f8 [ 185.416249][ T7613] [ 185.846684][ T7590] Bluetooth: hci1: command 0x0406 tx timeout [ 185.847355][ T10] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 185.859525][ T10] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 185.860521][ T5134] Bluetooth: hci4: command 0x0406 tx timeout [ 185.878729][ T10] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 185.878754][ T10] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 185.878774][ T10] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 185.920995][ T7590] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.943553][ T7590] Bluetooth: hci3: command 0x0406 tx timeout [ 186.061491][ T7618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.459'. [ 186.092484][ T10] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 186.375925][ T7624] netlink: 596 bytes leftover after parsing attributes in process `syz.4.457'. [ 186.716701][ T30] audit: type=1400 audit(1764432705.602:383): avc: denied { setattr } for pid=7625 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 187.721584][ T30] audit: type=1400 audit(1764432706.122:384): avc: denied { name_bind } for pid=7629 comm="syz.4.461" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 187.725188][ T10] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 187.763035][ T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 187.807964][ T10] usb 4-1: USB disconnect, device number 14 [ 187.837584][ T30] audit: type=1400 audit(1764432706.732:385): avc: denied { wake_alarm } for pid=7639 comm="syz.0.465" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.115967][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.465'. [ 188.124874][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.465'. [ 188.285307][ T7648] overlayfs: overlapping lowerdir path [ 188.433052][ T5880] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 188.557800][ T30] audit: type=1400 audit(1764432707.432:386): avc: denied { read } for pid=7642 comm="syz.4.466" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 188.644170][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 188.679629][ T7652] overlayfs: overlapping lowerdir path [ 188.772026][ T5880] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 188.792657][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.811907][ T5880] usb 3-1: config 0 descriptor?? [ 189.670954][ T7636] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.913008][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 189.956803][ T5880] usbhid 3-1:0.0: can't add hid device: -71 [ 189.985098][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 190.019413][ T5880] usb 3-1: USB disconnect, device number 9 [ 190.090947][ T30] audit: type=1400 audit(1764432708.982:387): avc: denied { connect } for pid=7671 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.123287][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 190.189782][ T10] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 190.225054][ T30] audit: type=1400 audit(1764432709.112:388): avc: denied { shutdown } for pid=7671 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.232806][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.347145][ T10] usb 1-1: config 0 descriptor?? [ 190.892882][ T5859] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 190.916044][ T10] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 190.975351][ T10] uvcvideo 1-1:0.0: Found UVC 0.00 device (2833:0201) [ 190.983393][ T10] uvcvideo 1-1:0.0: No valid video chain found. [ 190.990356][ T7682] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 191.001393][ T10] usb 1-1: USB disconnect, device number 23 [ 191.224539][ T5859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.234920][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 191.261364][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 191.277154][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 191.291224][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 191.307333][ T5859] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 191.316506][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 191.325794][ T5859] usb 5-1: Product: syz [ 191.330460][ T5859] usb 5-1: Manufacturer: syz [ 191.335488][ T5859] usb 5-1: SerialNumber: syz [ 191.341673][ T5859] usb 5-1: config 0 descriptor?? [ 191.555253][ T5859] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 191.570651][ T5859] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 191.675766][ T30] audit: type=1400 audit(1764432710.572:389): avc: denied { name_bind } for pid=7701 comm="syz.1.484" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 191.700609][ T30] audit: type=1400 audit(1764432710.572:390): avc: denied { node_bind } for pid=7701 comm="syz.1.484" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 191.757863][ T5859] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 191.766298][ T7704] FAULT_INJECTION: forcing a failure. [ 191.766298][ T7704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.780199][ T5859] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 191.800054][ T5859] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 191.815001][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.1.484 Not tainted syzkaller #0 PREEMPT(full) [ 191.815027][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.815038][ T7704] Call Trace: [ 191.815044][ T7704] [ 191.815050][ T7704] dump_stack_lvl+0x16c/0x1f0 [ 191.815073][ T7704] should_fail_ex+0x512/0x640 [ 191.815099][ T7704] _copy_to_user+0x32/0xd0 [ 191.815124][ T7704] simple_read_from_buffer+0xcb/0x170 [ 191.815155][ T7704] proc_fail_nth_read+0x197/0x240 [ 191.815177][ T7704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.815201][ T7704] ? rw_verify_area+0xcf/0x6c0 [ 191.815227][ T7704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.815248][ T7704] vfs_read+0x1e4/0xcf0 [ 191.815269][ T7704] ? __pfx___mutex_lock+0x10/0x10 [ 191.815289][ T7704] ? __pfx_vfs_read+0x10/0x10 [ 191.815313][ T7704] ? __fget_files+0x20e/0x3c0 [ 191.815338][ T7704] ksys_read+0x12a/0x250 [ 191.815355][ T7704] ? __pfx_ksys_read+0x10/0x10 [ 191.815379][ T7704] do_syscall_64+0xcd/0xfa0 [ 191.815397][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.815415][ T7704] RIP: 0033:0x7ff99678e15c [ 191.815429][ T7704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 191.815446][ T7704] RSP: 002b:00007ff997650030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.815463][ T7704] RAX: ffffffffffffffda RBX: 00007ff9969e5fa0 RCX: 00007ff99678e15c [ 191.815475][ T7704] RDX: 000000000000000f RSI: 00007ff9976500a0 RDI: 0000000000000007 [ 191.815485][ T7704] RBP: 00007ff997650090 R08: 0000000000000000 R09: 0000000000000000 [ 191.815496][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.815505][ T7704] R13: 00007ff9969e6038 R14: 00007ff9969e5fa0 R15: 00007ffde67f6cd8 [ 191.815531][ T7704] [ 192.024729][ T5859] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 192.288998][ T7711] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 192.438060][ T30] audit: type=1400 audit(1764432711.332:391): avc: denied { listen } for pid=7716 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 192.467206][ T7717] ip6tnl1: entered promiscuous mode [ 192.684705][ T7719] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 192.710240][ T5859] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 192.719002][ T5859] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 192.731312][ T5859] usb 5-1: USB disconnect, device number 14 [ 193.242852][ T7726] overlayfs: overlapping lowerdir path [ 193.619099][ T30] audit: type=1400 audit(1764432712.512:392): avc: denied { sqpoll } for pid=7728 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 193.996187][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.006015][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.148636][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 194.273356][ T30] audit: type=1400 audit(1764432713.162:393): avc: denied { ioctl } for pid=7741 comm="syz.3.493" path="socket:[16543]" dev="sockfs" ino=16543 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 194.627744][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 194.638623][ T7753] FAULT_INJECTION: forcing a failure. [ 194.638623][ T7753] name failslab, interval 1, probability 0, space 0, times 0 [ 194.745321][ T7753] CPU: 1 UID: 0 PID: 7753 Comm: syz.2.495 Not tainted syzkaller #0 PREEMPT(full) [ 194.745358][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.745368][ T7753] Call Trace: [ 194.745373][ T7753] [ 194.745380][ T7753] dump_stack_lvl+0x16c/0x1f0 [ 194.745403][ T7753] should_fail_ex+0x512/0x640 [ 194.745422][ T7753] ? fs_reclaim_acquire+0xae/0x150 [ 194.745444][ T7753] should_failslab+0xc2/0x120 [ 194.745465][ T7753] __kmalloc_noprof+0xdd/0x880 [ 194.745489][ T7753] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 194.745516][ T7753] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 194.745535][ T7753] tomoyo_realpath_from_path+0xc2/0x6e0 [ 194.745558][ T7753] ? tomoyo_profile+0x47/0x60 [ 194.745583][ T7753] tomoyo_path_number_perm+0x245/0x580 [ 194.745598][ T7753] ? tomoyo_path_number_perm+0x237/0x580 [ 194.745617][ T7753] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 194.745635][ T7753] ? find_held_lock+0x2b/0x80 [ 194.745679][ T7753] ? find_held_lock+0x2b/0x80 [ 194.745701][ T7753] ? hook_file_ioctl_common+0x145/0x410 [ 194.745731][ T7753] ? __fget_files+0x20e/0x3c0 [ 194.745753][ T7753] security_file_ioctl+0x9b/0x240 [ 194.745775][ T7753] __x64_sys_ioctl+0xb7/0x210 [ 194.745801][ T7753] do_syscall_64+0xcd/0xfa0 [ 194.745820][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.745838][ T7753] RIP: 0033:0x7fc95858f749 [ 194.745853][ T7753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.745869][ T7753] RSP: 002b:00007fc9593b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.745886][ T7753] RAX: ffffffffffffffda RBX: 00007fc9587e5fa0 RCX: 00007fc95858f749 [ 194.745897][ T7753] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 194.745907][ T7753] RBP: 00007fc9593b8090 R08: 0000000000000000 R09: 0000000000000000 [ 194.745917][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.745927][ T7753] R13: 00007fc9587e6038 R14: 00007fc9587e5fa0 R15: 00007ffe8f97a538 [ 194.745950][ T7753] [ 194.745957][ T7753] ERROR: Out of memory at tomoyo_realpath_from_path. [ 195.003315][ T7264] Bluetooth: hci6: Frame reassembly failed (-84) [ 195.136210][ T7739] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 195.242649][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 195.272363][ T30] audit: type=1400 audit(1764432714.162:394): avc: denied { bind } for pid=7760 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.315286][ T7761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7761 comm=syz.3.497 [ 195.416362][ T7765] loop9: detected capacity change from 0 to 7 [ 195.431260][ T7644] Dev loop9: unable to read RDB block 7 [ 195.447300][ T7644] loop9: AHDI p4 [ 195.450972][ T7644] loop9: partition table partially beyond EOD, truncated [ 195.472400][ T7765] Dev loop9: unable to read RDB block 7 [ 195.484023][ T7765] loop9: AHDI p4 [ 195.494224][ T7765] loop9: partition table partially beyond EOD, truncated [ 195.626802][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 195.627704][ T30] audit: type=1400 audit(1764432714.522:395): avc: denied { read write } for pid=7770 comm="syz.4.499" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 195.664070][ T30] audit: type=1400 audit(1764432714.522:396): avc: denied { ioctl open } for pid=7770 comm="syz.4.499" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 195.743269][ T30] audit: type=1400 audit(1764432714.642:397): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.766484][ T30] audit: type=1400 audit(1764432714.642:398): avc: denied { search } for pid=5478 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.790768][ T30] audit: type=1400 audit(1764432714.642:399): avc: denied { search } for pid=5478 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.813328][ T30] audit: type=1400 audit(1764432714.642:400): avc: denied { read } for pid=5478 comm="dhcpcd" name="n100" dev="tmpfs" ino=4123 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.838079][ T30] audit: type=1400 audit(1764432714.642:401): avc: denied { open } for pid=5478 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=4123 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.882846][ T5859] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 196.064308][ T5859] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 196.087620][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.118816][ T5859] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 196.132926][ T5859] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 196.141072][ T5859] usb 2-1: Manufacturer: syz [ 196.157087][ T5859] usb 2-1: config 0 descriptor?? [ 196.252948][ T5859] rc_core: IR keymap rc-hauppauge not found [ 196.262846][ T5859] Registered IR keymap rc-empty [ 196.287742][ T5859] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 196.325901][ T5859] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 196.385246][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 196.396432][ T5859] usb 2-1: USB disconnect, device number 11 [ 196.603605][ T5880] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 196.633131][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 196.639794][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 196.766710][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 196.778031][ T5880] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.787742][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.800790][ T5880] usb 4-1: Product: syz [ 196.805366][ T5880] usb 4-1: Manufacturer: syz [ 196.810042][ T5880] usb 4-1: SerialNumber: syz [ 196.823910][ T5880] usb 4-1: config 0 descriptor?? [ 196.953077][ T5859] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 197.022938][ T5809] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 197.050163][ T5880] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 197.125686][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 197.134440][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.319879][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 197.381382][ T7848] FAULT_INJECTION: forcing a failure. [ 197.381382][ T7848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.398619][ T7848] CPU: 0 UID: 0 PID: 7848 Comm: syz.2.506 Not tainted syzkaller #0 PREEMPT(full) [ 197.398642][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.398650][ T7848] Call Trace: [ 197.398653][ T7848] [ 197.398658][ T7848] dump_stack_lvl+0x16c/0x1f0 [ 197.398676][ T7848] should_fail_ex+0x512/0x640 [ 197.398691][ T7848] _copy_from_user+0x2e/0xd0 [ 197.398705][ T7848] copy_msghdr_from_user+0x98/0x160 [ 197.398721][ T7848] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 197.398737][ T7848] ? __lock_acquire+0xb8a/0x1c90 [ 197.398751][ T7848] ___sys_sendmsg+0xfe/0x1d0 [ 197.398765][ T7848] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.398790][ T7848] ? lockdep_hardirqs_on+0x70/0x110 [ 197.398805][ T7848] __sys_sendmsg+0x16d/0x220 [ 197.398819][ T7848] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.398832][ T7848] ? rcu_is_watching+0x12/0xc0 [ 197.398851][ T7848] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 197.398868][ T7848] do_syscall_64+0xcd/0xfa0 [ 197.398879][ T7848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.398889][ T7848] RIP: 0033:0x7fc95858f749 [ 197.398898][ T7848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.398909][ T7848] RSP: 002b:00007fc959397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.398919][ T7848] RAX: ffffffffffffffda RBX: 00007fc9587e6090 RCX: 00007fc95858f749 [ 197.398926][ T7848] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000007 [ 197.398932][ T7848] RBP: 00007fc959397090 R08: 0000000000000000 R09: 0000000000000000 [ 197.398938][ T7848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.398944][ T7848] R13: 00007fc9587e6128 R14: 00007fc9587e6090 R15: 00007ffe8f97a538 [ 197.398957][ T7848] [ 197.818062][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.904003][ T5859] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 197.932385][ T7845] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 197.940344][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.974689][ T5859] usb 1-1: config 0 descriptor?? [ 197.984398][ T7823] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.993412][ T5859] hub 1-1:0.0: USB hub found [ 198.718833][ T5859] hub 1-1:0.0: 1 port detected [ 199.516068][ T7865] netlink: 596 bytes leftover after parsing attributes in process `syz.2.509'. [ 199.608956][ T5880] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 199.762887][ T5859] usb 1-1: reset high-speed USB device number 24 using dummy_hcd [ 199.835669][ T5880] usb 4-1: USB disconnect, device number 15 [ 200.883945][ T7171] usb 1-1: USB disconnect, device number 24 [ 201.138800][ T7898] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 201.186038][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 201.844852][ T7903] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 202.200259][ T7921] sp0: Synchronizing with TNC [ 202.246559][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 202.246576][ T30] audit: type=1400 audit(1764432721.132:411): avc: denied { create } for pid=7920 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 202.255298][ T7921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.356202][ T5915] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 202.406037][ T30] audit: type=1400 audit(1764432721.132:412): avc: denied { ioctl } for pid=7920 comm="syz.3.522" path="socket:[16719]" dev="sockfs" ino=16719 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 202.652698][ T7921] bond0: (slave rose0): Enslaving as an active interface with an up link [ 202.681333][ T7935] xt_TCPMSS: Only works on TCP SYN packets [ 202.704768][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.738064][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 202.791057][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 202.812280][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 202.824976][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 202.845734][ T5915] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 202.859468][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 202.869589][ T5915] usb 2-1: Product: syz [ 202.874118][ T5915] usb 2-1: Manufacturer: syz [ 202.878889][ T5915] usb 2-1: SerialNumber: syz [ 202.902142][ T5915] usb 2-1: config 0 descriptor?? [ 203.023414][ T5859] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 203.163006][ T5859] usb 1-1: device descriptor read/64, error -71 [ 203.226429][ T5880] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.296155][ T5915] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 203.328638][ T5915] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 203.946054][ T7954] nvme_fabrics: missing parameter 'transport=%s' [ 203.988227][ T5915] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 203.992903][ T5859] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 204.006308][ T5915] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 204.020515][ T7954] nvme_fabrics: missing parameter 'nqn=%s' [ 204.032865][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 204.050910][ T5880] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 204.089708][ T5880] usb 3-1: config 4 has no interface number 0 [ 204.102979][ T5915] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 204.139771][ T5880] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 204.149617][ T5859] usb 1-1: device descriptor read/64, error -71 [ 204.170494][ T5880] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 204.182970][ T5880] usb 3-1: config 4 interface 9 has no altsetting 0 [ 204.196786][ T5880] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 204.254399][ T5859] usb usb1-port1: attempt power cycle [ 204.673913][ T5859] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 204.778662][ T5915] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 204.785713][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 204.794690][ T5859] usb 1-1: device descriptor read/8, error -71 [ 204.798016][ T5880] usb 3-1: Product: syz [ 204.814290][ T5880] usb 3-1: Manufacturer: syz [ 204.819283][ T5880] usb 3-1: SerialNumber: syz [ 204.841667][ T7943] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 204.850448][ T7943] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 204.894706][ T5880] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 205.076133][ T7258] usb 3-1: Failed to submit usb control message: -71 [ 205.079432][ T5880] usb 3-1: USB disconnect, device number 10 [ 205.092038][ T7258] usb 3-1: unable to send the bmi data to the device: -71 [ 205.100067][ T7258] usb 3-1: unable to get target info from device [ 205.106655][ T5859] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 205.160212][ T7258] usb 3-1: could not get target info (-71) [ 205.163607][ T5859] usb 1-1: device descriptor read/8, error -71 [ 205.177604][ T7258] usb 3-1: could not probe fw (-71) [ 205.300120][ T5915] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 205.311464][ T5915] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 205.313180][ T5859] usb usb1-port1: unable to enumerate USB device [ 205.343168][ T5915] usb 2-1: USB disconnect, device number 12 [ 205.627921][ T7988] IPVS: sh: FWM 3 0x00000003 - no destination available [ 205.636299][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 205.675527][ T5880] IPVS: starting estimator thread 0... [ 205.873937][ T7989] IPVS: using max 47 ests per chain, 112800 per kthread [ 205.893197][ T30] audit: type=1400 audit(1764432724.782:413): avc: denied { map } for pid=7990 comm="syz.0.535" path="socket:[16262]" dev="sockfs" ino=16262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 206.082226][ T30] audit: type=1400 audit(1764432724.922:414): avc: denied { setattr } for pid=7993 comm="syz.2.536" name="NETLINK" dev="sockfs" ino=16272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.257536][ T5809] Bluetooth: hci3: hardware error 0x06 [ 207.583520][ T5859] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 208.417409][ T5859] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 208.463398][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.497087][ T5859] usb 3-1: Product: syz [ 208.501947][ T5859] usb 3-1: Manufacturer: syz [ 208.520825][ T5859] usb 3-1: SerialNumber: syz [ 208.558518][ T8050] netlink: 'syz.4.547': attribute type 1 has an invalid length. [ 208.623402][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.547'. [ 208.804691][ T8050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.232481][ T30] audit: type=1400 audit(1764432728.122:415): avc: denied { connect } for pid=8061 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 209.307130][ T30] audit: type=1400 audit(1764432728.152:416): avc: denied { create } for pid=8061 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 209.416761][ T30] audit: type=1400 audit(1764432728.152:417): avc: denied { setopt } for pid=8061 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 209.444289][ T5809] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 210.570451][ T30] audit: type=1400 audit(1764432729.462:418): avc: denied { setopt } for pid=8071 comm="syz.0.552" lport=37600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.940420][ T5859] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 210.954028][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'. [ 210.985842][ T5859] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 210.997559][ T5859] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.053279][ T5859] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 211.089959][ T5859] usb 3-1: USB disconnect, device number 11 [ 212.163728][ T8103] overlay: ./file0 is not a directory [ 212.270668][ T8102] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 213.122841][ T5859] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 213.284691][ T5859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.473150][ T5859] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 213.492935][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.523832][ T5859] usb 5-1: config 0 descriptor?? [ 213.627808][ T8123] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 213.889702][ T5859] pwc: Askey VC010 type 2 USB webcam detected. [ 213.914030][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.921498][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.929023][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.936424][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.943949][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.951366][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.958820][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.966335][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.973847][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.982192][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.989715][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 213.997171][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 214.004726][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 214.012113][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 214.019767][ T5809] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 214.298493][ T8110] tipc: Started in network mode [ 214.303632][ T8110] tipc: Node identity cea9fdc86303, cluster identity 4711 [ 214.311015][ T8110] tipc: Enabled bearer , priority 0 [ 214.402909][ T8132] syzkaller0: entered promiscuous mode [ 214.458507][ T8132] syzkaller0: entered allmulticast mode [ 214.509431][ T8136] xt_TCPMSS: Only works on TCP SYN packets [ 214.510512][ T8110] tipc: Resetting bearer [ 214.585679][ T5859] pwc: recv_control_msg error -32 req 02 val 2b00 [ 214.601066][ T5859] pwc: recv_control_msg error -32 req 02 val 2700 [ 214.612894][ T5880] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 214.633961][ T5859] pwc: recv_control_msg error -32 req 02 val 2c00 [ 214.652904][ T5859] pwc: recv_control_msg error -32 req 04 val 1000 [ 214.661381][ T5859] pwc: recv_control_msg error -32 req 04 val 1300 [ 214.676835][ T5859] pwc: recv_control_msg error -32 req 04 val 1400 [ 214.686827][ T5859] pwc: recv_control_msg error -32 req 02 val 2000 [ 214.695844][ T5859] pwc: recv_control_msg error -32 req 02 val 2100 [ 214.704807][ T5859] pwc: recv_control_msg error -32 req 04 val 1500 [ 214.713403][ T5859] pwc: recv_control_msg error -32 req 02 val 2500 [ 214.782900][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 214.802035][ T5880] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 214.826325][ T5880] usb 2-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config [ 214.867889][ T5880] usb 2-1: config 0 has no interface number 0 [ 214.893685][ T5880] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.894478][ T8145] openvswitch: netlink: Geneve opt len 6 is not a multiple of 4. [ 214.910790][ T5880] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 214.924810][ T8109] tipc: Resetting bearer [ 214.930757][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.944136][ T5880] usb 2-1: Product: syz [ 214.948435][ T5880] usb 2-1: Manufacturer: syz [ 214.953931][ T5880] usb 2-1: SerialNumber: syz [ 214.960417][ T30] audit: type=1400 audit(1764432733.852:419): avc: denied { read } for pid=8144 comm="syz.0.573" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.981220][ T8109] tipc: Disabling bearer [ 215.001204][ T5880] usb 2-1: config 0 descriptor?? [ 215.028058][ T5880] smsc95xx v2.0.0 [ 215.037105][ T5880] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 215.054443][ T5880] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 215.082479][ T5859] pwc: recv_control_msg error -71 req 02 val 2600 [ 215.112472][ T5859] pwc: recv_control_msg error -71 req 02 val 2900 [ 215.137111][ T5859] pwc: recv_control_msg error -71 req 02 val 2800 [ 215.148632][ T5859] pwc: recv_control_msg error -71 req 04 val 1100 [ 215.173670][ T5859] pwc: recv_control_msg error -71 req 04 val 1200 [ 215.197587][ T30] audit: type=1400 audit(1764432734.092:420): avc: denied { ioctl } for pid=8152 comm="syz.0.576" path="socket:[17785]" dev="sockfs" ino=17785 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 215.306685][ T5859] pwc: Registered as video103. [ 215.327070][ T5859] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 215.601278][ T30] audit: type=1400 audit(1764432734.492:421): avc: denied { read } for pid=8152 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 215.635489][ T5859] usb 5-1: USB disconnect, device number 15 [ 217.286418][ T8184] netlink: 96 bytes leftover after parsing attributes in process `syz.4.581'. [ 217.470624][ T8191] xt_TCPMSS: Only works on TCP SYN packets [ 217.624662][ T30] audit: type=1400 audit(1764432736.522:422): avc: denied { listen } for pid=8192 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 217.647075][ T30] audit: type=1400 audit(1764432736.522:423): avc: denied { accept } for pid=8192 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 218.189167][ T5915] usb 2-1: USB disconnect, device number 13 [ 218.952258][ T30] audit: type=1400 audit(1764432737.842:424): avc: denied { mounton } for pid=8212 comm="syz.2.589" path="/107/file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 219.046139][ T30] audit: type=1400 audit(1764432737.882:425): avc: denied { remount } for pid=8212 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 219.554567][ T30] audit: type=1400 audit(1764432738.452:426): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 220.285308][ T8231] xt_TCPMSS: Only works on TCP SYN packets [ 220.321873][ T5915] IPVS: starting estimator thread 0... [ 220.512946][ T8237] IPVS: using max 37 ests per chain, 88800 per kthread [ 220.651758][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 220.717832][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 220.801315][ T30] audit: type=1400 audit(1764432739.692:427): avc: denied { accept } for pid=8249 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 220.975102][ T8262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8262 comm=syz.4.599 [ 220.993513][ T8251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8251 comm=syz.3.601 [ 221.090910][ T30] audit: type=1400 audit(1764432739.982:428): avc: denied { create } for pid=8261 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 221.116699][ T8251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8251 comm=syz.3.601 [ 221.150877][ T30] audit: type=1400 audit(1764432740.042:429): avc: denied { connect } for pid=8242 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 221.179484][ T30] audit: type=1400 audit(1764432740.072:430): avc: denied { sys_admin } for pid=8261 comm="syz.1.603" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 221.442378][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 221.768962][ T8287] binder: 8286:8287 ioctl c00c620f 2000000003c0 returned -22 [ 221.984735][ T30] audit: type=1400 audit(1764432740.802:431): avc: denied { write } for pid=8288 comm="syz.3.608" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 222.028870][ T8291] loop8: detected capacity change from 0 to 8 [ 222.346677][ T8291] Dev loop8: unable to read RDB block 8 [ 222.386746][ T8291] loop8: unable to read partition table [ 222.406747][ T8291] loop8: partition table beyond EOD, truncated [ 222.420958][ T8291] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 222.448273][ T8299] binder: 8298:8299 ioctl c0189371 200000000000 returned -22 [ 222.708242][ T8306] FAULT_INJECTION: forcing a failure. [ 222.708242][ T8306] name failslab, interval 1, probability 0, space 0, times 0 [ 222.736187][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 222.797678][ T8306] CPU: 0 UID: 0 PID: 8306 Comm: syz.0.611 Not tainted syzkaller #0 PREEMPT(full) [ 222.797702][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.797711][ T8306] Call Trace: [ 222.797716][ T8306] [ 222.797723][ T8306] dump_stack_lvl+0x16c/0x1f0 [ 222.797743][ T8306] should_fail_ex+0x512/0x640 [ 222.797766][ T8306] should_failslab+0xc2/0x120 [ 222.797786][ T8306] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 222.797804][ T8306] ? sidtab_sid2str_get+0x17a/0x680 [ 222.797829][ T8306] ? kmemdup_noprof+0x29/0x60 [ 222.797843][ T8306] kmemdup_noprof+0x29/0x60 [ 222.797858][ T8306] sidtab_sid2str_get+0x17a/0x680 [ 222.797880][ T8306] sidtab_entry_to_string+0x33/0x110 [ 222.797900][ T8306] security_sid_to_context_core+0x35c/0x640 [ 222.797921][ T8306] selinux_inode_getsecurity+0x2bf/0x370 [ 222.797941][ T8306] ? __pfx_selinux_inode_getsecurity+0x10/0x10 [ 222.797969][ T8306] security_inode_getsecurity+0x12f/0x2f0 [ 222.797991][ T8306] vfs_getxattr+0x19e/0x290 [ 222.798008][ T8306] ? __pfx_vfs_getxattr+0x10/0x10 [ 222.798031][ T8306] ovl_other_xattr_get+0xf5/0x160 [ 222.798048][ T8306] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 222.798072][ T8306] ? xattr_resolve_name+0x27b/0x3f0 [ 222.798091][ T8306] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 222.798106][ T8306] __vfs_getxattr+0x13d/0x1a0 [ 222.798122][ T8306] ? __pfx___vfs_getxattr+0x10/0x10 [ 222.798145][ T8306] inode_doinit_use_xattr+0xb5/0x410 [ 222.798173][ T8306] inode_doinit_with_dentry+0x51e/0x12e0 [ 222.798198][ T8306] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 222.798216][ T8306] ? do_raw_spin_lock+0x12c/0x2b0 [ 222.798240][ T8306] selinux_d_instantiate+0x26/0x30 [ 222.798258][ T8306] security_d_instantiate+0x142/0x1a0 [ 222.798277][ T8306] d_splice_alias_ops+0x92/0x840 [ 222.798306][ T8306] ovl_lookup+0xeee/0x21a0 [ 222.798331][ T8306] ? __pfx_ovl_lookup+0x10/0x10 [ 222.798349][ T8306] ? d_alloc_parallel+0x864/0x1510 [ 222.798374][ T8306] ? mark_lock+0x32d/0x610 [ 222.798411][ T8306] ? lockdep_init_map_type+0x5c/0x280 [ 222.798432][ T8306] __lookup_slow+0x251/0x460 [ 222.798454][ T8306] ? __pfx___lookup_slow+0x10/0x10 [ 222.798492][ T8306] ? lookup_fast+0x156/0x610 [ 222.798518][ T8306] walk_component+0x353/0x5b0 [ 222.798544][ T8306] path_lookupat+0x142/0x6d0 [ 222.798562][ T8306] filename_lookup+0x224/0x5f0 [ 222.798581][ T8306] ? __pfx_filename_lookup+0x10/0x10 [ 222.798619][ T8306] ? getname_flags.part.0+0x1c5/0x550 [ 222.798646][ T8306] user_path_at+0x3a/0x60 [ 222.798662][ T8306] __x64_sys_truncate+0xf6/0x1e0 [ 222.798680][ T8306] ? __pfx___x64_sys_truncate+0x10/0x10 [ 222.798704][ T8306] do_syscall_64+0xcd/0xfa0 [ 222.798722][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.798738][ T8306] RIP: 0033:0x7fda9f58f749 [ 222.798752][ T8306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.798766][ T8306] RSP: 002b:00007fdaa04aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 222.798781][ T8306] RAX: ffffffffffffffda RBX: 00007fda9f7e5fa0 RCX: 00007fda9f58f749 [ 222.798793][ T8306] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00002000000000c0 [ 222.798802][ T8306] RBP: 00007fdaa04aa090 R08: 0000000000000000 R09: 0000000000000000 [ 222.798811][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.798820][ T8306] R13: 00007fda9f7e6038 R14: 00007fda9f7e5fa0 R15: 00007ffce63d6428 [ 222.798844][ T8306] [ 222.798987][ T8306] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=overlay ino=633 [ 222.874764][ T30] audit: type=1400 audit(1764432741.772:432): avc: denied { checkpoint_restore } for pid=8308 comm="syz.1.612" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.910836][ T8306] overlayfs: failed to get inode (-116) [ 223.323906][ T30] audit: type=1400 audit(1764432742.172:433): avc: denied { read } for pid=8321 comm="syz.2.617" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 223.346792][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.357588][ T8306] overlayfs: failed to get inode (-116) [ 223.364343][ T8306] overlayfs: failed to get inode (-116) [ 223.370240][ T8306] overlayfs: failed to get inode (-116) [ 223.376169][ T30] audit: type=1400 audit(1764432742.172:434): avc: denied { open } for pid=8321 comm="syz.2.617" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 223.399867][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.405805][ T5809] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 224.434599][ T30] audit: type=1400 audit(1764432743.302:435): avc: denied { setcheckreqprot } for pid=8329 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 224.892834][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 225.060023][ T24] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 225.080705][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.092902][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 225.111041][ T24] usb 4-1: Product: syz [ 225.146392][ T24] usb 4-1: Manufacturer: syz [ 225.157093][ T24] usb 4-1: SerialNumber: syz [ 225.182720][ T24] usb 4-1: config 0 descriptor?? [ 225.193516][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 225.203010][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 225.222913][ T7171] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 225.266999][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.283637][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 225.329841][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 225.371369][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.374340][ T7171] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 225.400755][ T7171] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.431528][ T7171] usb 2-1: config 0 has no interface number 0 [ 225.468368][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 225.485025][ T10] usb 5-1: config 0 descriptor?? [ 225.491804][ T7171] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 225.502316][ T30] audit: type=1400 audit(1764432744.362:436): avc: denied { mount } for pid=8336 comm="syz.3.622" name="/" dev="ramfs" ino=18640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 225.528036][ T7171] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.557054][ T7171] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 225.566634][ T7171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.575323][ T7171] usb 2-1: Product: syz [ 225.583573][ T5915] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 225.587806][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 225.610351][ T7171] usb 2-1: Manufacturer: syz [ 225.625186][ T24] dib0700: firmware download failed at 7 with -22 [ 225.712337][ T7171] usb 2-1: SerialNumber: syz [ 225.722540][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.622'. [ 225.881351][ T8355] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.622'. [ 225.939039][ T7171] usb 2-1: config 0 descriptor?? [ 226.062896][ T5915] usb 1-1: device descriptor read/64, error -71 [ 226.224308][ T24] usb 4-1: USB disconnect, device number 16 [ 226.247427][ T10] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 226.377943][ T8362] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 226.416416][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 226.416430][ T30] audit: type=1400 audit(1764432745.312:438): avc: denied { read } for pid=8341 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 226.452153][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.479624][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.505007][ T5915] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 226.643168][ T5915] usb 1-1: device descriptor read/64, error -71 [ 226.753062][ T5915] usb usb1-port1: attempt power cycle [ 226.952003][ T30] audit: type=1400 audit(1764432745.842:439): avc: denied { setopt } for pid=8341 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 227.578408][ T24] usb 2-1: USB disconnect, device number 14 [ 227.634127][ T5915] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 227.663754][ T5915] usb 1-1: device descriptor read/8, error -71 [ 227.886098][ T30] audit: type=1400 audit(1764432746.782:440): avc: denied { read } for pid=8373 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.922926][ T5915] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 227.940464][ T8374] program syz.3.631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.950012][ T8374] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 227.951095][ T5915] usb 1-1: device descriptor read/8, error -71 [ 227.968519][ T8374] UHID_CREATE from different security context by process 464 (syz.3.631), this is not allowed. [ 228.080053][ T5915] usb usb1-port1: unable to enumerate USB device [ 228.321408][ T30] audit: type=1400 audit(1764432747.212:441): avc: denied { accept } for pid=8380 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.327611][ T8383] xt_TCPMSS: Only works on TCP SYN packets [ 228.461504][ T8384] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 228.611817][ T10] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 228.643968][ T10] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 228.712304][ T10] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 228.779690][ T10] usb 5-1: USB disconnect, device number 16 [ 229.151016][ T8407] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 229.186665][ T8407] netlink: 228 bytes leftover after parsing attributes in process `syz.0.638'. [ 229.593106][ T8420] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 230.214185][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 230.424046][ T5809] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 230.486307][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 230.509140][ T10] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 230.519881][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.566480][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.602041][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 230.724104][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.732177][ T10] usb 2-1: Product: syz [ 230.736700][ T10] usb 2-1: Manufacturer: syz [ 230.741306][ T10] usb 2-1: SerialNumber: syz [ 230.753685][ T10] usb 2-1: config 0 descriptor?? [ 230.826398][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'. [ 231.273600][ T8445] xt_TCPMSS: Only works on TCP SYN packets [ 231.476612][ T8453] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 231.498433][ T8454] netlink: 'syz.4.652': attribute type 12 has an invalid length. [ 232.552099][ T8473] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 232.560178][ T8473] netlink: 228 bytes leftover after parsing attributes in process `syz.2.657'. [ 232.746014][ T8473] FAULT_INJECTION: forcing a failure. [ 232.746014][ T8473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.746035][ T8473] CPU: 0 UID: 0 PID: 8473 Comm: syz.2.657 Not tainted syzkaller #0 PREEMPT(full) [ 232.746047][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.746053][ T8473] Call Trace: [ 232.746057][ T8473] [ 232.746061][ T8473] dump_stack_lvl+0x16c/0x1f0 [ 232.746075][ T8473] should_fail_ex+0x512/0x640 [ 232.746090][ T8473] _copy_from_iter+0x29f/0x1720 [ 232.746106][ T8473] ? __alloc_skb+0x200/0x380 [ 232.746120][ T8473] ? __pfx__copy_from_iter+0x10/0x10 [ 232.746139][ T8473] ? netlink_autobind.isra.0+0x158/0x370 [ 232.746160][ T8473] netlink_sendmsg+0x820/0xdd0 [ 232.746186][ T8473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.746216][ T8473] ____sys_sendmsg+0xa98/0xc70 [ 232.746233][ T8473] ? copy_msghdr_from_user+0x10a/0x160 [ 232.746253][ T8473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.746279][ T8473] ___sys_sendmsg+0x134/0x1d0 [ 232.746302][ T8473] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.746317][ T8473] ? __lock_acquire+0x622/0x1c90 [ 232.746343][ T8473] __sys_sendmsg+0x16d/0x220 [ 232.746357][ T8473] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.746379][ T8473] do_syscall_64+0xcd/0xfa0 [ 232.746390][ T8473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.746401][ T8473] RIP: 0033:0x7fc95858f749 [ 232.746410][ T8473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.746420][ T8473] RSP: 002b:00007fc9593b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.746431][ T8473] RAX: ffffffffffffffda RBX: 00007fc9587e5fa0 RCX: 00007fc95858f749 [ 232.746437][ T8473] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 232.746444][ T8473] RBP: 00007fc9593b8090 R08: 0000000000000000 R09: 0000000000000000 [ 232.746454][ T8473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.746463][ T8473] R13: 00007fc9587e6038 R14: 00007fc9587e5fa0 R15: 00007ffe8f97a538 [ 232.746485][ T8473] [ 233.199511][ T7171] usb 2-1: USB disconnect, device number 15 [ 234.115485][ T8481] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 235.185830][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 235.412913][ T56] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 235.443046][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 235.481610][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 235.553786][ T24] usb 5-1: config 0 has no interface number 0 [ 235.602230][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.623979][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 235.671897][ T56] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 235.696073][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 235.713036][ T56] usb 1-1: config 0 has no interface number 0 [ 235.741093][ T56] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 235.767989][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.783741][ T56] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 235.792299][ T8508] tipc: Started in network mode [ 235.794876][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.812194][ T56] usb 1-1: config 0 interface 41 has no altsetting 0 [ 235.812817][ T8508] tipc: Node identity 6af75f0f271d, cluster identity 4711 [ 235.819438][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 235.836759][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.840628][ T8508] tipc: Enabled bearer , priority 0 [ 235.848032][ T56] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 235.861075][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.869465][ T56] usb 1-1: Product: syz [ 235.874518][ T56] usb 1-1: Manufacturer: syz [ 235.879727][ T24] usb 5-1: config 0 descriptor?? [ 235.884926][ T56] usb 1-1: SerialNumber: syz [ 235.892127][ T56] usb 1-1: config 0 descriptor?? [ 235.900018][ T8504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 235.909070][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 235.922156][ T8504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 235.974095][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 236.031412][ T8515] syzkaller0: entered promiscuous mode [ 236.037069][ T8515] syzkaller0: entered allmulticast mode [ 236.070397][ T8508] tipc: Resetting bearer [ 236.140849][ T8504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.312924][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 236.383092][ T8504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.430306][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.440683][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 236.452892][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 236.464431][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 236.479305][ T5950] usb 5-1: USB disconnect, device number 17 [ 236.492106][ T5950] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 236.504277][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 236.521528][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 236.562789][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 236.570891][ T10] usb 4-1: Product: syz [ 236.572437][ T24] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 236.575111][ T10] usb 4-1: Manufacturer: syz [ 236.584017][ T24] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 236.587783][ T10] usb 4-1: SerialNumber: syz [ 236.591089][ T10] usb 4-1: config 0 descriptor?? [ 236.622481][ T24] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 236.639567][ T24] usb 2-1: config 0 has no interface number 0 [ 236.646461][ T24] usb 2-1: config 0 has no interface number 1 [ 236.652599][ T24] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 236.664167][ T24] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 236.677480][ T24] usb 2-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 236.688808][ T24] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 236.699618][ T24] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 236.712117][ T24] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 236.742591][ T24] usb 2-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 236.760506][ T24] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 236.770960][ T24] usb 2-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 236.785440][ T24] usb 2-1: config 0 interface 66 has no altsetting 0 [ 236.786910][ T8518] netlink: 596 bytes leftover after parsing attributes in process `syz.2.668'. [ 236.794263][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 236.811088][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.819324][ T56] Error reading MAC address [ 236.825220][ T24] usb 2-1: Product: syz [ 236.825986][ T10] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 236.829506][ T24] usb 2-1: Manufacturer: syz [ 236.838224][ T8504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.842569][ T24] usb 2-1: SerialNumber: syz [ 236.866407][ T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 236.867614][ T24] usb 2-1: config 0 descriptor?? [ 236.883092][ T8504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.895034][ T24] ljca 2-1:0.84: bulk endpoints not found [ 236.924521][ T7171] tipc: Node number set to 1307205391 [ 237.105738][ T24] ljca 2-1:0.66: probe with driver ljca failed with error -71 [ 237.121563][ T8507] tipc: Resetting bearer [ 237.139175][ T8507] tipc: Disabling bearer [ 237.149707][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.158671][ T10] usb 4-1: USB disconnect, device number 17 [ 237.159590][ T24] usb 2-1: USB disconnect, device number 16 [ 237.202509][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.642890][ T56] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 237.687946][ T56] usb 1-1: USB disconnect, device number 33 [ 237.867260][ T30] audit: type=1400 audit(1764432756.762:442): avc: denied { create } for pid=8526 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 238.016685][ T8537] overlayfs: overlapping lowerdir path [ 238.327607][ T8529] ======================================================= [ 238.327607][ T8529] WARNING: The mand mount option has been deprecated and [ 238.327607][ T8529] and is ignored by this kernel. Remove the mand [ 238.327607][ T8529] option from the mount to silence this warning. [ 238.327607][ T8529] ======================================================= [ 238.372828][ T30] audit: type=1400 audit(1764432757.222:443): avc: denied { remount } for pid=8526 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.430331][ T30] audit: type=1400 audit(1764432757.312:444): avc: denied { watch } for pid=8526 comm="syz.3.671" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="hugetlbfs" ino=19543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 239.402952][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 239.544213][ T10] usb 2-1: device descriptor read/64, error -71 [ 239.612814][ T5880] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 239.794909][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 239.805243][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.824597][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 239.855148][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 239.882527][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 239.926236][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 239.932888][ T56] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 239.967023][ T5880] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 239.976236][ T10] usb 2-1: device descriptor read/64, error -71 [ 239.985816][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 240.003192][ T5880] usb 1-1: Product: syz [ 240.007505][ T5880] usb 1-1: Manufacturer: syz [ 240.012844][ T5880] usb 1-1: SerialNumber: syz [ 240.022040][ T5880] usb 1-1: config 0 descriptor?? [ 240.093090][ T10] usb usb2-port1: attempt power cycle [ 240.484453][ T56] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 241.031668][ T56] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.053571][ T56] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 241.062651][ T56] usb 4-1: config 0 has no interface number 0 [ 241.071647][ T56] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 241.087325][ T56] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 241.100804][ T56] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 210, setting to 64 [ 241.132184][ T56] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.148770][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 241.208395][ T56] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 241.244825][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.252840][ T5880] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 241.253042][ T5880] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 241.270492][ T56] usb 4-1: Product: syz [ 241.312906][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 241.313235][ T30] audit: type=1400 audit(1764432760.172:445): avc: denied { relabelfrom } for pid=8573 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 241.331775][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 241.352869][ T30] audit: type=1400 audit(1764432760.182:446): avc: denied { relabelto } for pid=8573 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 241.366721][ T56] usb 4-1: Manufacturer: syz [ 241.392008][ T24] usb 3-1: config 0 has no interface number 0 [ 241.401568][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 241.414431][ T56] usb 4-1: SerialNumber: syz [ 241.414519][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 241.468940][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 241.483663][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.512432][ T56] usb 4-1: config 0 descriptor?? [ 241.512494][ T10] usb 2-1: device descriptor read/8, error -71 [ 241.521140][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 241.585856][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 241.626375][ T5880] usb 1-1: USB disconnect, device number 34 [ 241.645689][ T8565] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 241.658014][ T56] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.678826][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.731752][ T24] usb 3-1: config 0 descriptor?? [ 241.755210][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 241.782982][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 241.813507][ T10] usb 2-1: device descriptor read/8, error -71 [ 241.892982][ T24] usb 4-1: USB disconnect, device number 18 [ 241.923133][ T10] usb usb2-port1: unable to enumerate USB device [ 242.037130][ T10] usb 3-1: USB disconnect, device number 12 [ 242.045276][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 242.553194][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 242.733173][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 242.824081][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 242.984561][ T24] usb 1-1: config 0 has no interface number 0 [ 243.094666][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.197505][ T5880] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 243.294544][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 243.470168][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.601125][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.833012][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 244.343053][ T30] audit: type=1400 audit(1764432762.662:447): avc: denied { append } for pid=8584 comm="syz.2.690" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 244.537231][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.573977][ T24] usb 1-1: config 0 descriptor?? [ 244.952328][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 244.962286][ T30] audit: type=1400 audit(1764432763.572:448): avc: denied { block_suspend } for pid=8585 comm="syz.4.691" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 245.158922][ T5880] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.314927][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.463940][ T8599] netlink: 1760 bytes leftover after parsing attributes in process `syz.2.694'. [ 245.466581][ T10] usb 1-1: USB disconnect, device number 35 [ 245.482255][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.573465][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 245.614036][ T5880] usb 2-1: string descriptor 0 read error: -71 [ 245.638589][ T5880] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.657659][ T30] audit: type=1400 audit(1764432764.552:449): avc: denied { connect } for pid=8595 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.660816][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.844909][ T5880] usb 2-1: can't set config #1, error -71 [ 245.869010][ T5880] usb 2-1: USB disconnect, device number 21 [ 246.134754][ T24] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 246.142893][ T56] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 246.801552][ T56] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 246.809846][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 4 [ 246.820864][ T56] usb 3-1: config 0 has no interface number 0 [ 246.828144][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 13368, setting to 1023 [ 246.840965][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 246.850711][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.873683][ T56] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 246.952220][ T24] usb 5-1: config 0 descriptor?? [ 246.958500][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.967225][ T56] usb 3-1: Product: syz [ 246.971915][ T56] usb 3-1: Manufacturer: syz [ 246.984863][ T56] usb 3-1: SerialNumber: syz [ 247.007983][ T56] usb 3-1: config 0 descriptor?? [ 247.024876][ T8629] FAULT_INJECTION: forcing a failure. [ 247.024876][ T8629] name failslab, interval 1, probability 0, space 0, times 0 [ 247.037760][ T8629] CPU: 0 UID: 0 PID: 8629 Comm: syz.3.704 Not tainted syzkaller #0 PREEMPT(full) [ 247.037783][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.037790][ T8629] Call Trace: [ 247.037795][ T8629] [ 247.037800][ T8629] dump_stack_lvl+0x16c/0x1f0 [ 247.037815][ T8629] should_fail_ex+0x512/0x640 [ 247.037830][ T8629] should_failslab+0xc2/0x120 [ 247.037846][ T8629] __kmalloc_cache_noprof+0x72/0x780 [ 247.037872][ T8629] ? br_multicast_new_group.part.0+0x13d/0x1b50 [ 247.037898][ T8629] ? br_multicast_new_group.part.0+0x13d/0x1b50 [ 247.037918][ T8629] br_multicast_new_group.part.0+0x13d/0x1b50 [ 247.037935][ T8629] ? lock_acquire+0x179/0x350 [ 247.037947][ T8629] ? br_mdb_ip_get+0x5cb/0xb80 [ 247.037961][ T8629] ? __pfx_br_multicast_new_group.part.0+0x10/0x10 [ 247.037979][ T8629] ? br_mdb_ip_get+0x5d5/0xb80 [ 247.038004][ T8629] br_multicast_new_group+0x47/0x60 [ 247.038026][ T8629] br_mdb_add_group+0x461/0x16f0 [ 247.038046][ T8629] ? __pfx_br_mdb_config_init+0x10/0x10 [ 247.038064][ T8629] ? __pfx_br_mdb_add_group+0x10/0x10 [ 247.038081][ T8629] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.038092][ T8629] ? __pfx_rtnl_validate_mdb_entry+0x10/0x10 [ 247.038109][ T8629] ? br_mdb_add+0x3d4/0x920 [ 247.038119][ T8629] br_mdb_add+0x3d4/0x920 [ 247.038130][ T8629] ? __pfx_br_mdb_add+0x10/0x10 [ 247.038145][ T8629] ? trace_contention_end+0xdd/0x130 [ 247.038169][ T8629] ? __nla_parse+0x40/0x60 [ 247.038193][ T8629] ? __pfx_br_mdb_add+0x10/0x10 [ 247.038208][ T8629] rtnl_mdb_add+0x26f/0x530 [ 247.038226][ T8629] ? __pfx_rtnl_mdb_add+0x10/0x10 [ 247.038242][ T8629] ? __pfx_rtnl_mdb_add+0x10/0x10 [ 247.038255][ T8629] rtnetlink_rcv_msg+0x3c9/0xe90 [ 247.038272][ T8629] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.038297][ T8629] ? ref_tracker_free+0x37c/0x830 [ 247.038321][ T8629] netlink_rcv_skb+0x158/0x420 [ 247.038344][ T8629] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.038367][ T8629] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.038387][ T8629] ? netlink_deliver_tap+0x1ae/0xd30 [ 247.038404][ T8629] netlink_unicast+0x5aa/0x870 [ 247.038421][ T8629] ? __pfx_netlink_unicast+0x10/0x10 [ 247.038453][ T8629] netlink_sendmsg+0x8c8/0xdd0 [ 247.038480][ T8629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.038511][ T8629] ____sys_sendmsg+0xa98/0xc70 [ 247.038524][ T8629] ? copy_msghdr_from_user+0x10a/0x160 [ 247.038537][ T8629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.038553][ T8629] ___sys_sendmsg+0x134/0x1d0 [ 247.038568][ T8629] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.038586][ T8629] ? __lock_acquire+0x622/0x1c90 [ 247.038642][ T8629] __sys_sendmsg+0x16d/0x220 [ 247.038663][ T8629] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.038687][ T8629] do_syscall_64+0xcd/0xfa0 [ 247.038699][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.038710][ T8629] RIP: 0033:0x7f3b25b8f749 [ 247.038723][ T8629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.038744][ T8629] RSP: 002b:00007f3b26ad8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.038761][ T8629] RAX: ffffffffffffffda RBX: 00007f3b25de5fa0 RCX: 00007f3b25b8f749 [ 247.038771][ T8629] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 247.038781][ T8629] RBP: 00007f3b26ad8090 R08: 0000000000000000 R09: 0000000000000000 [ 247.038790][ T8629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.038799][ T8629] R13: 00007f3b25de6038 R14: 00007f3b25de5fa0 R15: 00007ffc28972498 [ 247.038813][ T8629] [ 247.431470][ T24] ath6kl: Failed to submit usb control message: -71 [ 247.439420][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 247.446973][ T24] ath6kl: Unable to send get target info: -71 [ 247.467797][ T24] ath6kl: Failed to init ath6kl core: -71 [ 247.478422][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 247.517745][ T24] usb 5-1: USB disconnect, device number 18 [ 247.647524][ T56] usb 3-1: USB disconnect, device number 13 [ 247.657901][ T7644] udevd[7644]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.542861][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 248.724323][ T10] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 248.811633][ T10] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 248.905276][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.914180][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.924496][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 248.934781][ T10] usb 1-1: Product: syz [ 248.939062][ T10] usb 1-1: Manufacturer: syz [ 249.099334][ T10] usb 1-1: SerialNumber: syz [ 249.132497][ T10] usb 1-1: config 0 descriptor?? [ 249.132832][ T24] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 249.157315][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 249.172001][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 249.206009][ T10] usb 1-1: selecting invalid altsetting 0 [ 249.215114][ T8662] xt_TCPMSS: Only works on TCP SYN packets [ 249.302899][ T24] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 249.312198][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.326797][ T24] usb 2-1: Product: syz [ 249.335394][ T24] usb 2-1: Manufacturer: syz [ 249.341960][ T24] usb 2-1: SerialNumber: syz [ 249.353140][ T24] usb 2-1: config 0 descriptor?? [ 249.369657][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 249.620250][ T30] audit: type=1400 audit(1764432768.512:450): avc: denied { mounton } for pid=8635 comm="syz.0.706" path="/129/file0" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 249.837021][ T30] audit: type=1400 audit(1764432768.732:451): avc: denied { read } for pid=8663 comm="syz.2.716" path="socket:[19366]" dev="sockfs" ino=19366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 250.520198][ T8672] binder: BINDER_SET_CONTEXT_MGR already set [ 250.526531][ T8672] binder: 8669:8672 ioctl 4018620d 200000004a80 returned -16 [ 250.554694][ T30] audit: type=1400 audit(1764432769.392:452): avc: denied { map } for pid=8669 comm="syz.3.717" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.766492][ T8674] fuse: Unknown parameter 'uwv-jѥ&30͕ Yωj}9ᖦ/I6XC)4:<ՄnOQpQ' [ 251.187838][ T56] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 251.212175][ T8681] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 251.392989][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 251.445650][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.466214][ T56] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.486555][ T56] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.713483][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.729228][ T56] usb 3-1: config 0 descriptor?? [ 252.180595][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.193036][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.311573][ T30] audit: type=1400 audit(1764432771.202:453): avc: denied { getopt } for pid=8689 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 252.330932][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.644443][ T56] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input10 [ 252.675309][ T56] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 252.737726][ T56] usb 3-1: USB disconnect, device number 14 [ 252.747142][ T24] gspca_stk1135: reg_w 0x353 err -71 [ 252.761589][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 252.799428][ T24] gspca_stk1135: Sensor write failed [ 252.812820][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 252.825066][ T24] gspca_stk1135: Sensor write failed [ 252.850498][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 252.865996][ T24] gspca_stk1135: Sensor read failed [ 252.866826][ T8706] fido_id[8706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 252.885835][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 252.885852][ T24] gspca_stk1135: Sensor read failed [ 252.885858][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 252.885890][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 252.885899][ T24] gspca_stk1135: Sensor read failed [ 252.885933][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 252.885942][ T24] gspca_stk1135: Sensor read failed [ 252.885973][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 252.885981][ T24] gspca_stk1135: Sensor write failed [ 252.886014][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 252.886023][ T24] gspca_stk1135: Sensor write failed [ 252.886455][ T24] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 252.895014][ T24] usb 2-1: USB disconnect, device number 22 [ 253.037883][ T8707] netlink: 596 bytes leftover after parsing attributes in process `syz.2.725'. [ 253.560802][ T10] usb 1-1: USB disconnect, device number 36 [ 253.627717][ T8722] input: syz0 as /devices/virtual/input/input11 [ 253.689407][ T8725] netlink: 'syz.3.728': attribute type 10 has an invalid length. [ 254.067631][ T8736] overlayfs: overlapping lowerdir path [ 254.293644][ T8725] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 254.308375][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.363768][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.369686][ T8738] loop7: detected capacity change from 0 to 524287487 [ 254.457688][ T8738] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.512458][ T8738] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.728304][ T8738] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.741565][ T8738] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.756029][ T8748] FAULT_INJECTION: forcing a failure. [ 254.756029][ T8748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.772053][ T8749] netlink: 120 bytes leftover after parsing attributes in process `syz.4.734'. [ 254.773019][ T8748] CPU: 1 UID: 0 PID: 8748 Comm: syz.0.736 Not tainted syzkaller #0 PREEMPT(full) [ 254.773039][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.773047][ T8748] Call Trace: [ 254.773052][ T8748] [ 254.773061][ T8748] dump_stack_lvl+0x16c/0x1f0 [ 254.773082][ T8748] should_fail_ex+0x512/0x640 [ 254.773104][ T8748] _copy_from_iter+0x29f/0x1720 [ 254.773125][ T8748] ? __alloc_skb+0x200/0x380 [ 254.773145][ T8748] ? __pfx__copy_from_iter+0x10/0x10 [ 254.773164][ T8748] ? netlink_autobind.isra.0+0x158/0x370 [ 254.773193][ T8748] netlink_sendmsg+0x820/0xdd0 [ 254.773219][ T8748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.773248][ T8748] ____sys_sendmsg+0xa98/0xc70 [ 254.773264][ T8748] ? copy_msghdr_from_user+0x10a/0x160 [ 254.773284][ T8748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.773308][ T8748] ___sys_sendmsg+0x134/0x1d0 [ 254.773329][ T8748] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.773347][ T8748] ? __lock_acquire+0x622/0x1c90 [ 254.773388][ T8748] __sys_sendmsg+0x16d/0x220 [ 254.773407][ T8748] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.773440][ T8748] do_syscall_64+0xcd/0xfa0 [ 254.773457][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.773472][ T8748] RIP: 0033:0x7fda9f58f749 [ 254.773484][ T8748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.773499][ T8748] RSP: 002b:00007fdaa04aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.773514][ T8748] RAX: ffffffffffffffda RBX: 00007fda9f7e5fa0 RCX: 00007fda9f58f749 [ 254.773523][ T8748] RDX: 0000000004004080 RSI: 0000200000000180 RDI: 0000000000000003 [ 254.773532][ T8748] RBP: 00007fdaa04aa090 R08: 0000000000000000 R09: 0000000000000000 [ 254.773541][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.773549][ T8748] R13: 00007fda9f7e6038 R14: 00007fda9f7e5fa0 R15: 00007ffce63d6428 [ 254.773570][ T8748] [ 254.974331][ T8750] overlayfs: overlapping lowerdir path [ 255.038610][ T8738] Buffer I/O error on dev loop7, logical block 0, async page read [ 255.124751][ T8738] Buffer I/O error on dev loop7, logical block 0, async page read [ 255.157379][ T8738] Buffer I/O error on dev loop7, logical block 0, async page read [ 255.338810][ T8738] Buffer I/O error on dev loop7, logical block 0, async page read [ 255.350824][ T8738] ldm_validate_partition_table(): Disk read failed. [ 255.357985][ T8738] Buffer I/O error on dev loop7, logical block 0, async page read [ 255.366325][ T8738] Buffer I/O error on dev loop7, logical block 0, async page read [ 255.380083][ T8738] Dev loop7: unable to read RDB block 0 [ 255.386473][ T8738] loop7: unable to read partition table [ 255.397755][ T8738] loop_reread_partitions: partition scan of loop7 (3 xC) failed (rc=-5) [ 255.424818][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.431179][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.554331][ T30] audit: type=1400 audit(1764432774.442:454): avc: denied { accept } for pid=8735 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.784698][ T30] audit: type=1400 audit(1764432774.682:455): avc: denied { open } for pid=8760 comm="syz.3.740" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 255.925121][ T30] audit: type=1400 audit(1764432774.712:456): avc: denied { ioctl } for pid=8760 comm="syz.3.740" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 257.525081][ T8791] batadv_slave_1: entered promiscuous mode [ 257.553099][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 257.643046][ T7171] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 257.894346][ T7171] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 257.917635][ T7171] usb 5-1: config 1 has no interface number 0 [ 257.953222][ T7171] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.987192][ T7171] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 258.007694][ T7171] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 258.034171][ T7171] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 258.112689][ T7171] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.154832][ T7171] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 258.181523][ T7171] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.192807][ T7171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.347840][ T7171] usb 5-1: Product: syz [ 258.372832][ T7171] usb 5-1: Manufacturer: syz [ 258.395287][ T7171] usb 5-1: SerialNumber: syz [ 258.416469][ T8787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 258.667762][ T8787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 258.669322][ T8790] batadv_slave_1: left promiscuous mode [ 258.712387][ T8787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 259.020833][ T8809] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 259.107404][ T8807] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 259.393060][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 259.404661][ T8814] FAULT_INJECTION: forcing a failure. [ 259.404661][ T8814] name failslab, interval 1, probability 0, space 0, times 0 [ 259.419274][ T8814] CPU: 0 UID: 0 PID: 8814 Comm: syz.1.753 Not tainted syzkaller #0 PREEMPT(full) [ 259.419301][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.419311][ T8814] Call Trace: [ 259.419318][ T8814] [ 259.419324][ T8814] dump_stack_lvl+0x16c/0x1f0 [ 259.419346][ T8814] should_fail_ex+0x512/0x640 [ 259.419367][ T8814] ? fs_reclaim_acquire+0xae/0x150 [ 259.419392][ T8814] should_failslab+0xc2/0x120 [ 259.419412][ T8814] __kmalloc_noprof+0xdd/0x880 [ 259.419431][ T8814] ? tomoyo_encode2+0x100/0x3e0 [ 259.419446][ T8814] ? tomoyo_encode2+0x100/0x3e0 [ 259.419458][ T8814] tomoyo_encode2+0x100/0x3e0 [ 259.419471][ T8814] tomoyo_encode+0x29/0x50 [ 259.419484][ T8814] tomoyo_realpath_from_path+0x18f/0x6e0 [ 259.419511][ T8814] tomoyo_path_number_perm+0x245/0x580 [ 259.419526][ T8814] ? tomoyo_path_number_perm+0x237/0x580 [ 259.419544][ T8814] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 259.419578][ T8814] ? d_alloc_parallel+0xb4e/0x1510 [ 259.419601][ T8814] ? current_check_access_path+0x33c/0x460 [ 259.419617][ T8814] ? __pfx_current_check_access_path+0x10/0x10 [ 259.419647][ T8814] tomoyo_path_mknod+0x10c/0x190 [ 259.419669][ T8814] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 259.419692][ T8814] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.419714][ T8814] security_path_mknod+0x161/0x310 [ 259.419727][ T8814] lookup_open.isra.0+0xc17/0x1580 [ 259.419747][ T8814] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 259.419766][ T8814] ? find_held_lock+0x2b/0x80 [ 259.419792][ T8814] ? __pfx_down_write+0x10/0x10 [ 259.419816][ T8814] path_openat+0x893/0x2cb0 [ 259.419841][ T8814] ? __pfx_path_openat+0x10/0x10 [ 259.419860][ T8814] do_filp_open+0x20b/0x470 [ 259.419871][ T8814] ? __pfx_do_filp_open+0x10/0x10 [ 259.419892][ T8814] ? _raw_spin_unlock+0x28/0x50 [ 259.419906][ T8814] ? alloc_fd+0x471/0x7d0 [ 259.419926][ T8814] do_sys_openat2+0x11b/0x1d0 [ 259.419952][ T8814] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.419975][ T8814] ? __fget_files+0x20e/0x3c0 [ 259.419995][ T8814] __x64_sys_open+0x153/0x1e0 [ 259.420010][ T8814] ? __pfx___x64_sys_open+0x10/0x10 [ 259.420026][ T8814] ? rcu_is_watching+0x12/0xc0 [ 259.420041][ T8814] do_syscall_64+0xcd/0xfa0 [ 259.420053][ T8814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.420066][ T8814] RIP: 0033:0x7ff99678f749 [ 259.420080][ T8814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.420096][ T8814] RSP: 002b:00007ff997650038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 259.420112][ T8814] RAX: ffffffffffffffda RBX: 00007ff9969e5fa0 RCX: 00007ff99678f749 [ 259.420123][ T8814] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 259.420132][ T8814] RBP: 00007ff997650090 R08: 0000000000000000 R09: 0000000000000000 [ 259.420142][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.420148][ T8814] R13: 00007ff9969e6038 R14: 00007ff9969e5fa0 R15: 00007ffde67f6cd8 [ 259.420162][ T8814] [ 259.420246][ T8814] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.693710][ T8787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 259.733622][ T8787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 259.771758][ T7171] cdc_ncm 5-1:1.1: bind() failure [ 259.774072][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.058811][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.099850][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 260.139697][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.155072][ T5950] usb 5-1: USB disconnect, device number 19 [ 260.262127][ T10] usb 3-1: config 0 descriptor?? [ 261.163282][ T7171] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 261.216936][ T10] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 261.242785][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.272890][ T10] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 261.296883][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.303532][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0007/input/input12 [ 261.407232][ T7171] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.428380][ T10] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 261.440524][ T7171] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 261.496405][ T7171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 261.523097][ T10] usb 3-1: USB disconnect, device number 15 [ 261.527783][ T7171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 261.578510][ T7171] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 261.643580][ T7171] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 261.653163][ T7171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 261.688297][ T7171] usb 4-1: Product: syz [ 261.715467][ T7171] usb 4-1: Manufacturer: syz [ 261.730464][ T7171] usb 4-1: SerialNumber: syz [ 261.734975][ T8842] fido_id[8842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 261.768731][ T7171] usb 4-1: config 0 descriptor?? [ 262.020145][ T30] audit: type=1400 audit(1764432780.912:457): avc: denied { write } for pid=8839 comm="syz.0.761" laddr=fe80::13 lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.050815][ T7171] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 262.062091][ T7171] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 262.063781][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 262.112952][ T7171] usb 4-1: USB disconnect, device number 19 [ 262.515751][ T30] audit: type=1400 audit(1764432781.292:458): avc: denied { create } for pid=8849 comm="syz.4.764" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.798569][ T30] audit: type=1400 audit(1764432781.332:459): avc: denied { read } for pid=8846 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.052914][ T30] audit: type=1400 audit(1764432781.942:460): avc: denied { unlink } for pid=5810 comm="syz-executor" name="file0" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.192108][ T8865] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 263.282585][ T30] audit: type=1400 audit(1764432782.172:461): avc: denied { create } for pid=8866 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 263.538267][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.768'. [ 263.589845][ T8872] tmpfs: Unknown parameter 'usrquota_inode_hardlimT' [ 263.614351][ T30] audit: type=1400 audit(1764432782.482:462): avc: denied { connect } for pid=8866 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 263.649972][ T30] audit: type=1400 audit(1764432782.482:463): avc: denied { setopt } for pid=8866 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 263.778343][ T30] audit: type=1400 audit(1764432782.492:464): avc: denied { create } for pid=8870 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 263.857252][ T8873] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 263.974021][ T8873] syzkaller0: entered promiscuous mode [ 263.987787][ T8873] syzkaller0: entered allmulticast mode [ 264.334679][ T8887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.613093][ T5859] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 264.944690][ T5859] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 264.979664][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 265.041023][ T5859] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 265.085649][ T5859] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 265.109656][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.133670][ T5859] usb 2-1: config 0 descriptor?? [ 265.139328][ T8890] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.149188][ T8898] process 'syz.3.778' launched './file1' with NULL argv: empty string added [ 265.167477][ T30] audit: type=1400 audit(1764432784.062:465): avc: denied { execute_no_trans } for pid=8896 comm="syz.3.778" path="/177/file1" dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 265.322916][ T7171] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 265.668134][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 265.834699][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 265.850482][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 265.872858][ T10] usb 1-1: config 0 has no interface number 0 [ 265.909083][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.974049][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 266.034542][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.117076][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 266.202664][ T5859] usbhid 2-1:0.0: can't add hid device: -71 [ 266.252198][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 266.361551][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.568805][ T10] usb 1-1: config 0 descriptor?? [ 266.774957][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 267.040934][ T10] usb 1-1: USB disconnect, device number 37 [ 267.145674][ T5859] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 267.156303][ T5859] usb 2-1: USB disconnect, device number 23 [ 267.190178][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 267.223459][ T7171] usb 5-1: Using ep0 maxpacket: 16 [ 267.230236][ T7171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.241753][ T7171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.251585][ T7171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.264545][ T7171] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 267.273796][ T7171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.283500][ T7171] usb 5-1: config 0 descriptor?? [ 267.614845][ T8920] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 267.695090][ T7171] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 267.702833][ T7171] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 267.725060][ T7171] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 267.763550][ T7171] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 267.789026][ T7171] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 267.805146][ T7171] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 267.829761][ T7171] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 267.848158][ T7171] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 267.869183][ T7171] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 267.888029][ T7171] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 267.912874][ T7171] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 267.933756][ T7171] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 267.962679][ T7171] microsoft 0003:045E:07DA.0008: no inputs found [ 267.980820][ T7171] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 268.044853][ T30] audit: type=1400 audit(1764432786.942:466): avc: denied { module_request } for pid=8917 comm="syz.1.783" kmod="netdev-vxcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 268.108723][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 268.165286][ T7171] usb 5-1: USB disconnect, device number 20 [ 268.188577][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.783'. [ 268.214415][ T30] audit: type=1400 audit(1764432787.102:467): avc: denied { ioctl } for pid=8917 comm="syz.1.783" path="socket:[21174]" dev="sockfs" ino=21174 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 268.424199][ T5859] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 268.583722][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 268.590262][ T5859] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 268.599518][ T5859] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.609343][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.619238][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.629225][ T5859] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.642340][ T5859] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.652052][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.882959][ T5859] usb 4-1: usb_control_msg returned -32 [ 268.888619][ T5859] usbtmc 4-1:16.0: can't read capabilities [ 269.222971][ T5950] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 269.239019][ T30] audit: type=1400 audit(1764432788.122:468): avc: denied { bind } for pid=8937 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 269.239173][ T30] audit: type=1400 audit(1764432788.132:469): avc: denied { listen } for pid=8937 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 270.032795][ T9] usb 4-1: USB disconnect, device number 20 [ 270.046537][ T5950] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 270.085172][ T8939] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 270.232804][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.252992][ T5950] usb 1-1: config 0 descriptor?? [ 270.683446][ T8947] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 270.737627][ T30] audit: type=1326 audit(1764432789.622:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.4.791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efebc98f749 code=0x0 [ 270.872952][ T5950] smartjoyplus 0003:0925:8866.0009: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.0-1/input0 [ 270.909704][ T5950] smartjoyplus 0003:0925:8866.0009: Force feedback for SmartJoy PLUS PS2/USB adapter [ 271.079684][ T5950] usb 1-1: USB disconnect, device number 38 [ 271.116480][ T8957] netlink: 'syz.4.791': attribute type 6 has an invalid length. [ 271.140464][ T8954] fido_id[8954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 271.214097][ T8957] netlink: 'syz.4.791': attribute type 6 has an invalid length. [ 272.703602][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 272.705018][ T5814] Bluetooth: hci5: command 0x1003 tx timeout [ 274.114535][ T5950] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 274.200786][ T8983] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 274.206491][ T8983] PKCS7: Only support pkcs7_signedData type [ 274.382842][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 274.768173][ T5950] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 274.783648][ T5950] usb 1-1: config 0 has no interface number 0 [ 274.789891][ T5950] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.807302][ T5950] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 274.819233][ T5950] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.830539][ T5950] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.843923][ T5950] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 274.854904][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.885178][ T5950] usb 1-1: config 0 descriptor?? [ 274.904217][ T5950] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 275.113224][ T7171] usb 1-1: USB disconnect, device number 39 [ 275.121777][ T7171] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 275.563530][ T8990] tipc: Started in network mode [ 275.575267][ T8990] tipc: Node identity 2a0097379b68, cluster identity 4711 [ 275.605855][ T8990] tipc: Enabled bearer , priority 0 [ 275.633688][ T8990] syzkaller0: entered promiscuous mode [ 275.639280][ T8990] syzkaller0: entered allmulticast mode [ 275.679200][ T8990] tipc: Resetting bearer [ 275.692964][ T8989] tipc: Resetting bearer [ 275.747052][ T8989] tipc: Disabling bearer [ 277.719336][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 277.729669][ T30] audit: type=1400 audit(1764432796.612:471): avc: denied { write } for pid=9007 comm="syz.2.807" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 277.868696][ T9017] FAULT_INJECTION: forcing a failure. [ 277.868696][ T9017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.990150][ T9017] CPU: 1 UID: 0 PID: 9017 Comm: syz.0.808 Not tainted syzkaller #0 PREEMPT(full) [ 277.990175][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.990185][ T9017] Call Trace: [ 277.990191][ T9017] [ 277.990198][ T9017] dump_stack_lvl+0x16c/0x1f0 [ 277.990218][ T9017] should_fail_ex+0x512/0x640 [ 277.990244][ T9017] _copy_from_iter+0x29f/0x1720 [ 277.990268][ T9017] ? __alloc_skb+0x200/0x380 [ 277.990288][ T9017] ? __pfx__copy_from_iter+0x10/0x10 [ 277.990308][ T9017] ? netlink_autobind.isra.0+0x158/0x370 [ 277.990339][ T9017] netlink_sendmsg+0x820/0xdd0 [ 277.990367][ T9017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.990399][ T9017] ____sys_sendmsg+0xa98/0xc70 [ 277.990416][ T9017] ? copy_msghdr_from_user+0x10a/0x160 [ 277.990444][ T9017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.990469][ T9017] ___sys_sendmsg+0x134/0x1d0 [ 277.990493][ T9017] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.990514][ T9017] ? __lock_acquire+0x622/0x1c90 [ 277.990558][ T9017] __sys_sendmsg+0x16d/0x220 [ 277.990580][ T9017] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.990615][ T9017] do_syscall_64+0xcd/0xfa0 [ 277.990633][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.990649][ T9017] RIP: 0033:0x7fda9f58f749 [ 277.990662][ T9017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.990677][ T9017] RSP: 002b:00007fdaa04aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.990692][ T9017] RAX: ffffffffffffffda RBX: 00007fda9f7e5fa0 RCX: 00007fda9f58f749 [ 277.990702][ T9017] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 277.990711][ T9017] RBP: 00007fdaa04aa090 R08: 0000000000000000 R09: 0000000000000000 [ 277.990721][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.990730][ T9017] R13: 00007fda9f7e6038 R14: 00007fda9f7e5fa0 R15: 00007ffce63d6428 [ 277.990752][ T9017] [ 278.061458][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 278.778473][ T30] audit: type=1326 audit(1764432797.672:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.2.811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc95858f749 code=0x0 [ 279.009044][ T9029] SELinux: ebitmap: truncated map [ 279.020826][ T30] audit: type=1400 audit(1764432797.882:473): avc: denied { load_policy } for pid=9028 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 279.243008][ T30] audit: type=1400 audit(1764432798.132:474): avc: denied { ioctl } for pid=9028 comm="syz.3.813" path="socket:[21459]" dev="sockfs" ino=21459 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 279.666872][ T9029] SELinux: failed to load policy [ 280.173124][ T5880] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 280.342906][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 280.419535][ T5880] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 280.555955][ T5880] usb 1-1: config 0 has no interface number 0 [ 280.651581][ T5880] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 280.805668][ T5880] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 281.021523][ T5880] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.220528][ T5880] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.315748][ T5950] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 281.363744][ T5880] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 281.453460][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.554955][ T5950] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 281.609738][ T5880] usb 1-1: config 0 descriptor?? [ 281.832848][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 281.844001][ T5880] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 281.855080][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 281.870104][ T5950] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 281.880787][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.893579][ T5950] usb 3-1: config 0 descriptor?? [ 281.899326][ T9046] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 282.354927][ T24] usb 1-1: USB disconnect, device number 40 [ 282.373617][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 282.670102][ T5950] usbhid 3-1:0.0: can't add hid device: -71 [ 282.682865][ T5950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 282.704704][ T5950] usb 3-1: USB disconnect, device number 16 [ 284.942825][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 284.958080][ T5950] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 285.168915][ T5950] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 285.193107][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.201133][ T5950] usb 1-1: Product: syz [ 285.219937][ T5950] usb 1-1: Manufacturer: syz [ 285.228994][ T5950] usb 1-1: SerialNumber: syz [ 285.319268][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 285.492391][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.545620][ T5950] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 285.567517][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.645634][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.646650][ T5950] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 285.680531][ T9095] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 285.709483][ T5950] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 285.711671][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.740112][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.741752][ T5950] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 285.748779][ T24] usb 4-1: Product: syz [ 285.799005][ T24] usb 4-1: Manufacturer: syz [ 286.692273][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 286.700719][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 286.708408][ T24] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 286.774420][ T5950] usb 1-1: USB disconnect, device number 41 [ 286.911384][ T5859] usb 4-1: USB disconnect, device number 21 [ 286.991661][ T30] audit: type=1400 audit(1764432805.882:475): avc: denied { setopt } for pid=9103 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 287.023663][ T9107] ================================================================== [ 287.031727][ T9107] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 287.039684][ T9107] Read of size 8 at addr ffff88802c058c30 by task syz.1.835/9107 [ 287.047373][ T9107] [ 287.049670][ T9107] CPU: 1 UID: 0 PID: 9107 Comm: syz.1.835 Not tainted syzkaller #0 PREEMPT(full) [ 287.049683][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.049690][ T9107] Call Trace: [ 287.049695][ T9107] [ 287.049700][ T9107] dump_stack_lvl+0x116/0x1f0 [ 287.049714][ T9107] print_report+0xcd/0x630 [ 287.049726][ T9107] ? __virt_addr_valid+0x81/0x610 [ 287.049743][ T9107] ? __phys_addr+0xe8/0x180 [ 287.049758][ T9107] ? sysfs_remove_file_ns+0x63/0x70 [ 287.049770][ T9107] kasan_report+0xe0/0x110 [ 287.049783][ T9107] ? sysfs_remove_file_ns+0x63/0x70 [ 287.049797][ T9107] sysfs_remove_file_ns+0x63/0x70 [ 287.049810][ T9107] driver_remove_file+0x4a/0x60 [ 287.049823][ T9107] bus_remove_driver+0x224/0x2c0 [ 287.049842][ T9107] driver_unregister+0x76/0xb0 [ 287.049854][ T9107] comedi_device_detach_locked+0x12f/0xa50 [ 287.049870][ T9107] do_devconfig_ioctl+0x555/0x710 [ 287.049886][ T9107] ? __mutex_lock+0x1c5/0x1060 [ 287.049899][ T9107] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 287.049918][ T9107] ? find_held_lock+0x2b/0x80 [ 287.049932][ T9107] comedi_unlocked_ioctl+0x165d/0x2f00 [ 287.049945][ T9107] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 287.049957][ T9107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.049971][ T9107] ? do_vfs_ioctl+0x128/0x14f0 [ 287.049986][ T9107] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 287.050000][ T9107] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 287.050017][ T9107] ? hook_file_ioctl_common+0x145/0x410 [ 287.050033][ T9107] ? selinux_file_ioctl+0x180/0x270 [ 287.050043][ T9107] ? selinux_file_ioctl+0xb4/0x270 [ 287.050055][ T9107] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 287.050066][ T9107] __x64_sys_ioctl+0x18e/0x210 [ 287.050081][ T9107] do_syscall_64+0xcd/0xfa0 [ 287.050092][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.050103][ T9107] RIP: 0033:0x7ff99678f749 [ 287.050112][ T9107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.050124][ T9107] RSP: 002b:00007ff99762f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.050134][ T9107] RAX: ffffffffffffffda RBX: 00007ff9969e6090 RCX: 00007ff99678f749 [ 287.050141][ T9107] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008 [ 287.050148][ T9107] RBP: 00007ff996813f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.050154][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.050160][ T9107] R13: 00007ff9969e6128 R14: 00007ff9969e6090 R15: 00007ffde67f6cd8 [ 287.050171][ T9107] [ 287.050175][ T9107] [ 287.301887][ T9107] Allocated by task 7644: [ 287.306206][ T9107] kasan_save_stack+0x33/0x60 [ 287.310885][ T9107] kasan_save_track+0x14/0x30 [ 287.315552][ T9107] __kasan_kmalloc+0xaa/0xb0 [ 287.320223][ T9107] inode_doinit_use_xattr+0x54/0x410 [ 287.325506][ T9107] inode_doinit_with_dentry+0x10c8/0x12e0 [ 287.331222][ T9107] selinux_d_instantiate+0x26/0x30 [ 287.336335][ T9107] security_d_instantiate+0x142/0x1a0 [ 287.341701][ T9107] d_splice_alias_ops+0x92/0x840 [ 287.346637][ T9107] kernfs_iop_lookup+0x23f/0x2d0 [ 287.351570][ T9107] __lookup_slow+0x251/0x460 [ 287.356153][ T9107] walk_component+0x353/0x5b0 [ 287.360831][ T9107] path_lookupat+0x142/0x6d0 [ 287.365413][ T9107] filename_lookup+0x224/0x5f0 [ 287.370168][ T9107] vfs_statx+0x101/0x3f0 [ 287.374406][ T9107] vfs_fstatat+0x7b/0xf0 [ 287.378674][ T9107] __do_sys_newfstatat+0x97/0x120 [ 287.383698][ T9107] do_syscall_64+0xcd/0xfa0 [ 287.388193][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.394084][ T9107] [ 287.396395][ T9107] Freed by task 7644: [ 287.400362][ T9107] kasan_save_stack+0x33/0x60 [ 287.405037][ T9107] kasan_save_track+0x14/0x30 [ 287.409723][ T9107] __kasan_save_free_info+0x3b/0x60 [ 287.414921][ T9107] __kasan_slab_free+0x5f/0x80 [ 287.419674][ T9107] kfree+0x2b8/0x6d0 [ 287.423563][ T9107] inode_doinit_use_xattr+0x1da/0x410 [ 287.428937][ T9107] inode_doinit_with_dentry+0x10c8/0x12e0 [ 287.434653][ T9107] selinux_d_instantiate+0x26/0x30 [ 287.439755][ T9107] security_d_instantiate+0x142/0x1a0 [ 287.445122][ T9107] d_splice_alias_ops+0x92/0x840 [ 287.450059][ T9107] kernfs_iop_lookup+0x23f/0x2d0 [ 287.454997][ T9107] __lookup_slow+0x251/0x460 [ 287.459591][ T9107] walk_component+0x353/0x5b0 [ 287.464273][ T9107] path_lookupat+0x142/0x6d0 [ 287.468859][ T9107] filename_lookup+0x224/0x5f0 [ 287.473616][ T9107] vfs_statx+0x101/0x3f0 [ 287.477855][ T9107] vfs_fstatat+0x7b/0xf0 [ 287.482090][ T9107] __do_sys_newfstatat+0x97/0x120 [ 287.487113][ T9107] do_syscall_64+0xcd/0xfa0 [ 287.491612][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.497494][ T9107] [ 287.499805][ T9107] The buggy address belongs to the object at ffff88802c058c00 [ 287.499805][ T9107] which belongs to the cache kmalloc-256 of size 256 [ 287.513846][ T9107] The buggy address is located 48 bytes inside of [ 287.513846][ T9107] freed 256-byte region [ffff88802c058c00, ffff88802c058d00) [ 287.527551][ T9107] [ 287.529868][ T9107] The buggy address belongs to the physical page: [ 287.536266][ T9107] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c058 [ 287.545013][ T9107] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 287.553501][ T9107] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 287.561469][ T9107] page_type: f5(slab) [ 287.565439][ T9107] raw: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 287.574013][ T9107] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.582589][ T9107] head: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 287.591250][ T9107] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.599913][ T9107] head: 00fff00000000001 ffffea0000b01601 00000000ffffffff 00000000ffffffff [ 287.608576][ T9107] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 287.617234][ T9107] page dumped because: kasan: bad access detected [ 287.623629][ T9107] page_owner tracks the page as allocated [ 287.629331][ T9107] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 26, tgid 26 (kdevtmpfs), ts 10585853717, free_ts 0 [ 287.648509][ T9107] post_alloc_hook+0x1af/0x220 [ 287.653275][ T9107] get_page_from_freelist+0x10a3/0x3a30 [ 287.658824][ T9107] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 287.664732][ T9107] alloc_pages_mpol+0x1fb/0x550 [ 287.669574][ T9107] new_slab+0x24a/0x360 [ 287.673726][ T9107] ___slab_alloc+0xd79/0x1a50 [ 287.678399][ T9107] __slab_alloc.constprop.0+0x63/0x110 [ 287.683863][ T9107] __kmalloc_noprof+0x501/0x880 [ 287.688711][ T9107] security_inode_init_security+0x13f/0x390 [ 287.694608][ T9107] shmem_mknod+0x22e/0x450 [ 287.699016][ T9107] vfs_mknod+0x5da/0x8e0 [ 287.703263][ T9107] devtmpfs_work_loop+0x1b7/0xce0 [ 287.708280][ T9107] devtmpfsd+0x4c/0x50 [ 287.712351][ T9107] kthread+0x3c5/0x780 [ 287.716411][ T9107] ret_from_fork+0x675/0x7d0 [ 287.720990][ T9107] ret_from_fork_asm+0x1a/0x30 [ 287.725761][ T9107] page_owner free stack trace missing [ 287.731113][ T9107] [ 287.733422][ T9107] Memory state around the buggy address: [ 287.739399][ T9107] ffff88802c058b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.747458][ T9107] ffff88802c058b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.755509][ T9107] >ffff88802c058c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.763553][ T9107] ^ [ 287.769166][ T9107] ffff88802c058c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.777213][ T9107] ffff88802c058d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.785257][ T9107] ================================================================== [ 287.797408][ T9107] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.804609][ T9107] CPU: 1 UID: 0 PID: 9107 Comm: syz.1.835 Not tainted syzkaller #0 PREEMPT(full) [ 287.813798][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.823848][ T9107] Call Trace: [ 287.827113][ T9107] [ 287.830035][ T9107] dump_stack_lvl+0x3d/0x1f0 [ 287.834631][ T9107] vpanic+0x640/0x6f0 [ 287.838619][ T9107] panic+0xca/0xd0 [ 287.842340][ T9107] ? __pfx_panic+0x10/0x10 [ 287.846764][ T9107] ? sysfs_remove_file_ns+0x63/0x70 [ 287.851958][ T9107] ? preempt_schedule_common+0x44/0xc0 [ 287.857421][ T9107] ? preempt_schedule_thunk+0x16/0x30 [ 287.862808][ T9107] check_panic_on_warn+0xab/0xb0 [ 287.867764][ T9107] end_report+0x107/0x170 [ 287.872107][ T9107] kasan_report+0xee/0x110 [ 287.876523][ T9107] ? sysfs_remove_file_ns+0x63/0x70 [ 287.881722][ T9107] sysfs_remove_file_ns+0x63/0x70 [ 287.886759][ T9107] driver_remove_file+0x4a/0x60 [ 287.891626][ T9107] bus_remove_driver+0x224/0x2c0 [ 287.896591][ T9107] driver_unregister+0x76/0xb0 [ 287.901371][ T9107] comedi_device_detach_locked+0x12f/0xa50 [ 287.907185][ T9107] do_devconfig_ioctl+0x555/0x710 [ 287.912210][ T9107] ? __mutex_lock+0x1c5/0x1060 [ 287.916971][ T9107] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 287.922533][ T9107] ? find_held_lock+0x2b/0x80 [ 287.927216][ T9107] comedi_unlocked_ioctl+0x165d/0x2f00 [ 287.932690][ T9107] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 287.938586][ T9107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.944490][ T9107] ? do_vfs_ioctl+0x128/0x14f0 [ 287.949259][ T9107] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 287.954283][ T9107] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 287.961133][ T9107] ? hook_file_ioctl_common+0x145/0x410 [ 287.966684][ T9107] ? selinux_file_ioctl+0x180/0x270 [ 287.971878][ T9107] ? selinux_file_ioctl+0xb4/0x270 [ 287.976985][ T9107] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 287.982784][ T9107] __x64_sys_ioctl+0x18e/0x210 [ 287.987561][ T9107] do_syscall_64+0xcd/0xfa0 [ 287.992061][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.997950][ T9107] RIP: 0033:0x7ff99678f749 [ 288.002363][ T9107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.021972][ T9107] RSP: 002b:00007ff99762f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.030390][ T9107] RAX: ffffffffffffffda RBX: 00007ff9969e6090 RCX: 00007ff99678f749 [ 288.038359][ T9107] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008 [ 288.046320][ T9107] RBP: 00007ff996813f91 R08: 0000000000000000 R09: 0000000000000000 [ 288.054286][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.062250][ T9107] R13: 00007ff9969e6128 R14: 00007ff9969e6090 R15: 00007ffde67f6cd8 [ 288.070223][ T9107] [ 288.073586][ T9107] Kernel Offset: disabled [ 288.077892][ T9107] Rebooting in 86400 seconds..