last executing test programs: 2m43.969038351s ago: executing program 0 (id=1955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000400)={0x0, 0xcc90, 0x100, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x3513, 0x217, 0xa1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000d260f9547cbff9ba81b20000000005000000180001801400020073797a5f74756e00200000000000", @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m40.187677513s ago: executing program 0 (id=1968): syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001c00010027bd70008e9a9cc91d01040015000400000000e00501000004000000000000000300000015000300000000c006000000d65b658954d218f302000000"], 0x44}}, 0x2000c000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x15) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2m39.045699574s ago: executing program 0 (id=1972): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="040100001600010025bd7000ffdbdf25fe800000000000000000000000000014ffffffff0000000000000000000000004e2300004e220003020020103a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d233000000ac1414aa0000000000000000000000000100000000000000100000000000000004d808e52438ba57248000000000000008000000000000000500000000000000f0aa00000000000001000000000000000200500000000000040000000000000004000000000000000200000000000000060000008a4c2721080000002b3d70000a3500000a00000010000000000000000000000002000080"], 0x104}, 0x1, 0x0, 0x0, 0x63a0f7cf031481fc}, 0x48080) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) openat$fb0(0xffffffffffffff9c, 0x0, 0x182080, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x80, 0x0, 0xfffffffffffffffa}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_macvtap\x00', 0x10) write$dsp(0xffffffffffffffff, &(0x7f0000000940)="76354345aad59cb2e4194024d60fc1d4889de120c50fac1f6e7092a5a2e18da22fb6cf7e9d2309d36b0bd26a00b05d10a9fee0311063b95a3cce714b59da4740e69804c07d6796002095b380cd7670742456c1865562", 0x56) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000300)=""/197, &(0x7f00000000c0)=0xc5) dup(0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in=@loopback, 0x4e21, 0x4, 0x4e21, 0x0, 0xa, 0x60, 0x20, 0x3b, r2}, {0x4, 0x43, 0x8000000000000000, 0x3ff, 0x4, 0x7fffffffffffffff, 0x4, 0x5}, {0x10000, 0xa0, 0x9, 0x2}, 0x2a6, 0x6e6bb8, 0x1, 0x1, 0x2, 0x2}, {{@in6=@mcast1, 0x4d3, 0x32}, 0x2, @in=@empty, 0x3506, 0x1, 0x0, 0xd, 0x3, 0xd5, 0x6}}, 0xe8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.268568728s ago: executing program 0 (id=1978): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000340)='pkcs7_test\x00', &(0x7f00000003c0)='^#\xa0,\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x50) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x400001, 0x6, 0x40101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000240)={0x8, 0x2, 0x101, 0x6, 0xf4, 0x20, 0x23, "83ff471db224636834ff6ff37f9832299bb64cb2", "a8847b8a40a3eba388692c6dc4419d5719d19e40"}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003e0007412dbd7000fcdbdf25047c000004000000200008"], 0x38}}, 0x0) 2m36.231769755s ago: executing program 0 (id=1982): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fef4fefffbdbdf25670000000800010001000000ec0fb05b0000000022000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0xc800) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000300)=r8, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0x50040, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r9 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r10], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtaction={0x1e8, 0x30, 0x1af, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x20000000, 0x4, 0xfffffffd}, @multicast1, @broadcast, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x17c, 0x1, [@m_sample={0x100, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}]}, {0xca, 0x6, "aea7567dcf393259b0120d2973f8a953e6c6efcd64caa7af6e975a657361e3723533d80d2cad115edcf5caf34334dc45416e1fcf2fa9ba57e814f72a3553f8cf2bbf58179c75c9f0be346fc968c7a6b9f1681c7c19a73510a63c8c3c2b09a0feaef8d5dd01666aed38b84c22a372a1704c13dfb10a7c32bae737e925e61d517d65ae0a62a52f1494e9e285d064c74871a9499e38e69b7e4b1696eed9a845923de68cd50267eff7018aab0f8c3c0b5812d8e4debfd71a931522265619eda935e372941dce16c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_ife={0x78, 0x14, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x3c, 0x6, "009abe4c42bcb4340d62eb5790da20a26638939d9e4b5239db3871fb2b675a3b47a39e02109aec1ad663869bde30d7c3e0df3eaec8e82762"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1e8}}, 0x0) 2m34.142168509s ago: executing program 0 (id=1990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4008020}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f00000001c0)=0x6) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0xffff}, 0x20) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x34e0, &(0x7f0000000040)={0x0, 0x5de4, 0x40, 0x3, 0x13d, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000000100)) 2m18.803901281s ago: executing program 32 (id=1990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4008020}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f00000001c0)=0x6) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0xffff}, 0x20) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x34e0, &(0x7f0000000040)={0x0, 0x5de4, 0x40, 0x3, 0x13d, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000000100)) 13.284249521s ago: executing program 2 (id=2475): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) socket$netlink(0x10, 0x3, 0xc) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab"]) (fail_nth: 2) socket$inet6(0xa, 0x80001, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[], 0x0) 11.245860127s ago: executing program 4 (id=2478): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000340)='pkcs7_test\x00', &(0x7f00000003c0)='^#\xa0,\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x50) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x400001, 0x6, 0x40101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000240)={0x8, 0x2, 0x101, 0x6, 0xf4, 0x20, 0x23, "83ff471db224636834ff6ff37f9832299bb64cb2", "a8847b8a40a3eba388692c6dc4419d5719d19e40"}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003e0007412dbd7000fcdbdf25047c000004000000200008"], 0x38}}, 0x0) 9.299832593s ago: executing program 4 (id=2483): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe007108480b0730644f010203010902120001000000000904"], 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x2000000022, &(0x7f0000000300)={0x77359400}) setsockopt$sock_int(r6, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYRESHEX=r5], 0x10}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x123, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0x81, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 8.077028846s ago: executing program 2 (id=2486): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000680)='E', 0x1}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) getpid() r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x9, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x494002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0x7, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000240)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x10}}], 0x2, 0x45) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000440)=""/221, 0xdd}], 0x2, 0x0, 0x64}, 0x100) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x4900, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000180)={@private0, @rand_addr=0x64010100, 0x8, 0x20}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002f03ac4f44027db570e4d897ac15061200000300"/33], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4008000) 7.282375981s ago: executing program 5 (id=2488): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt(r0, 0x1, 0xe, 0x0, &(0x7f0000000640)) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f000058e000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}) 6.257796309s ago: executing program 2 (id=2490): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) ioprio_get$uid(0x3, r0) 6.192746722s ago: executing program 3 (id=2491): setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r0}, 0x38) unshare(0x20000400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setstatus(r2, 0x4, 0x800) r3 = getpid() ptrace$ARCH_SHSTK_STATUS(0x1e, r3, 0x0, 0x5005) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000340)={0x81, 0x0, 0x10009, 0xffffffff, 0x0, 'M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000a40)) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x40000000000015f, 0x80) dup3(r5, r4, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @multicast1}, &(0x7f0000000240)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r7, 0x29, 0x7, 0xb, 0x4, 0x6, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x40, 0xc2, 0x6}}) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, @none}, 0x8) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 6.151066323s ago: executing program 2 (id=2492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0xffc4) connect$inet(r0, 0x0, 0x0) fsopen(0x0, 0x0) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r3) sendmsg$TIPC_NL_MEDIA_GET(r3, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0x1, &(0x7f00000000c0)={0x4, 0xb2f5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x40106183, &(0x7f0000000000)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 5.38111282s ago: executing program 1 (id=2494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f0000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc45, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 5.267729224s ago: executing program 5 (id=2495): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c31ffba527c5dfb132cb48cbc2e0ffcfbc12ef2db3c", 0x71}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe98bc2db9799488aa4bd58432fb72dee", 0x23}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70ab992f8", 0x5e}], 0x6}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001100)={&(0x7f0000001000)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001080)="0e37f41dcf6c61266aad71bbb1d286b4a7d0", 0x12}], 0x1}, 0x20000008) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="000000000000000000005718da3231a791af0000e2ab994eff4a4fe3f89619e77068125a9ed5ed3e900b9f7b5a30f8643dae13be4491fba346781608ed45cf44c7cc849f1388a1602a74a563f037b310ca397859c9eca5f32c2b9ef31901551b0fc3f1c4f2342c43f4240e8521daa8ef55f1167e8fb1cf7fe80949f01f98158127e437f0854bf27354a359f51e2ef043c0345f584ab18af3bc9b6887667948ec2299f4e065272d0483ca95d53f72deb80d286185b1b5bd7c7cefab94c5fdb5858543978b0065868798f3fa25eb3102f563788bc70ec56c2b3285924f7994bf023191459227912e97659df3f67c94316ccb9fdfbf065d199683d4fbb6a4cf4ec3b29084f8cf9e2ddc1654d7b60b8cf87ccff9e4b5b8550d6829c20c453cbee09d650787ee3678079cd2cab844ed4ddc9da25a391844cd8cbde21f04adbdf28b46626ce03458b77a6e95e1811936393825aeed755a1d6bbf23f059963ab58e51da33d6ee48dce426cff99c445775e7ee43f590ba7c7f55e36fe5dc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000002d80)=[{{0x0, 0xfffffffffffffeaf, 0x0}, 0xfd}], 0x1, 0x10043, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x2, 0x6, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7d, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.789181027s ago: executing program 4 (id=2496): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) creat(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x2, [{0x6, 0x0, 0x8}, {0x2, 0x4, 0x5}, {0x1, 0x4, 0x8}]}]}}, &(0x7f0000000a40)=""/276, 0x4a, 0x114, 0x1, 0x7a72}, 0x28) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) (fail_nth: 7) 4.699210109s ago: executing program 3 (id=2497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 3.818130134s ago: executing program 4 (id=2498): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=r1], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_open_dev$vim2m(0x0, 0x800000000020001, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f00000003c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) 3.791978303s ago: executing program 1 (id=2499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() pselect6(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x1, 0xb651, 0x1, 0x6da, 0x5, 0xbc96, 0xa}, &(0x7f0000000600), 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x8, &(0x7f0000000040)="11a3a309", 0x4) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6}) 3.729119541s ago: executing program 2 (id=2500): syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001c00010027bd70008e9a9cc91d01040015000400000000e00501000004000000000000000300000015000300000000c006000000d65b658954d218f302000000"], 0x44}}, 0x2000c000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x15) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 3.576073804s ago: executing program 3 (id=2501): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f) mq_timedsend(r2, &(0x7f0000000600)="1a58a86ba5e9a080a0221e0d0a2b0648efa30b5ac9e26b5d6b45514f885c682d3cb8b5b146afa52b5dd58fb06280fa8e14c5f385b46f13fe8eb84fa5b317a70a78efe11da6e247ae2bfefa3a9976ca7a4a6184396f7c05d8b8a5cb2c03619f26c5da534dd55b402e557a5e7189ee2373509949448238f90d5202632e8eb751a70a", 0x81, 0x80, &(0x7f0000000240)) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') write$FUSE_BMAP(r5, 0x0, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.543464441s ago: executing program 5 (id=2502): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000040)={0x1, &(0x7f0000152bc0)=[{0x8000000, 0x0, 0x0, 0x1}]}) (fail_nth: 3) 2.080748619s ago: executing program 1 (id=2503): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) ioprio_get$uid(0x3, r0) 2.026426616s ago: executing program 3 (id=2504): r0 = socket$netlink(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x61) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r4) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r6, 0x1, 0x0, 0x80000000, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x2, 0x2675, {{0x7, 0x4, 0x3, 0x3, 0x1c, 0x64, 0x0, 0x9, 0x2f, 0x0, @empty, @loopback, {[@rr={0x7, 0x7, 0x73, [@remote]}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1dc, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8}, 0x40008) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r14, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.63710861s ago: executing program 5 (id=2505): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x494002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x340f5, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 1.63586435s ago: executing program 1 (id=2506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) ioctl$KVM_CAP_STEAL_TIME(r2, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0xffff, 0x80) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[{}], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000840)={&(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0], 0x6, 0x2, 0x1}) r13 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r13, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r13, 0xc01064b5, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r13, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r13, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r15], 0x0, &(0x7f0000000440)=[r14], &(0x7f0000000040), 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000980)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x52525252}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000a40)={0x100, 0x2, &(0x7f0000000100)=[r7, r10], &(0x7f0000000180)=[0x1, 0x200, 0x7], &(0x7f00000009c0)=[r11, r12, r14, r16], &(0x7f0000000a00)=[0x6, 0x4, 0x8000000000000001], 0x0, 0x4}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x6, 0x7, 0x8, 0x6, 0x4, 0x5, 0x3, 0x1, 0x7f, 0x3, 0xe, 0x3, 0x3, 0x9, 0x7, 0x1}}) 1.255481241s ago: executing program 3 (id=2507): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRESDEC], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x404, @mcast1, 0x2}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000400)="c27d9e726f340a491f84d3745a6a37f5bcbba73bfa7949ba53dcf83065ef28f0403dcb338eb9a99cb1695cb9a058838e30e3c67433844a51de0c86bca4441574a6248de675fd9e86e53d4d5cbf8f8a0f027ea55e6d", 0x55}, {&(0x7f0000000600)="658e582a892dca2d7d0c7576c7a659851c45dcdd8b204377c67c57ef4c6c2db7af02616cac1e3fd15810762b6c795de3ad0930316eeaa225f3372427a2df63f37d3ec585fcd387f0b42d4fb1d323db436e2581c975cf8cfeff558bddc7f556a446b3e39a5819f7ba17c573e490e9099d3198ddc5a636527523d9d47e6af4260bb4867bb9bf0c25810a6bb80ccfcf4158e9aa7fffe3da8157857e2535e9fd8251d9f4be8615549d0f7f9dfc2ca8b675abf342dbaa305f998d7f3e", 0xba}, {&(0x7f0000001000)="dd11548d9b7a4082b8ec80c3771b8e5691c315d495af07c56950caef4922f721d36433eac56081e1b5dc36103b6ae688e1bb4f5afb2ef263cc511a5d7987769022054a9257f063c63c0dba8d5e22d5de4fd3917767eb2527d0539aa54c5156a2e4a41fd430698938f9a64603123a0664a1f9c26554f4d815962fcea24cf96d7cb6ec8a06102e82e85a4edac60ce924480c50ad0d40cabc81983a098a085699d87bcd831e6a8753861edac6005d6eb061e45315d0a0df5ce074ffda6bfc387fc8299aa0726569ce7de4e769b79a47", 0xc6}, {&(0x7f0000000c80)="5eed8cfe1da68dffd560645a355232ef28055dbd5802e7c6e923eeee6a46d031a1ff249abe6fb7f318be095f1086cba63ff383c27aa67102d7d0bd80f6083b6fe664838feca6e34d8525d4527a0689e0837704980d95af4156a21e8ae74421d4a76a42c40c6c1e1ae68ed73983648ca5b2a7a46340405cc5e6d78228bec4730777c8c831ca5f98d0852d3e60d27c4015448f4d1fa2e69e718aa6779e7cb646cbd4e45ca063f843e29597af5fccdb5ee82f2aa52cc9285c60e80ddb28089eb2912a93ae93f7a38092e134171369a8b3d21c532cb3", 0xd4}, {&(0x7f0000000340)="67539f97e233dfc7a3a94b9093e04ef9dfa3f60c"}, {&(0x7f0000000d80)="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", 0xfa}, {&(0x7f0000000e80)="e838d5c46bc27d7bfa1c1947e026a60846e29f9bca67c16e8600a5c2f7dccefbd63ae59b89930003e06b853097b48ea15b0c14c2fee00692ef6da759c0fa7d5af6c3b8acf43dfe47ba00f549008909b5b82019c56972ff41340c58fa65e8025caa6cc2923a63d3bc22c523f077e357a3b05ed5719d7b71085afe9b56706bbc94e1a23e293cb5bf4b3bbf8da34d15882eb8e45bfbc0a250c7a6d7b1e8825e761e941c8b3ff81d38f4bf4801eccea22d5a10660f5e0a711886f3922fdec3cff85043c02a35b8a499a115fdd6a9a6915a05d7ddb77231154283b6293f6093aef002577fd2fa6fc0dced66157af1", 0x125}, {&(0x7f0000001300)="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", 0xfe}], 0x8}}], 0x2, 0x810) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) madvise(&(0x7f0000069000/0x2000)=nil, 0x2000, 0x8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00', 0x0, 0x842, 0x0, 0x2, 0x0, 0x116, 0x0, 0x0, 0x4, 0xfd}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES64=r3], 0x50) madvise(&(0x7f0000a56000/0x2000)=nil, 0x2000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x48, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xeeef0000, 0xeeef0000, 0xb, 0x1, 0x2, 0x4, 0x5, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x6, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0x3, 0x7, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x6}, 0x40030000, 0x0, 0x0, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000010}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, 0x0) 1.206530392s ago: executing program 5 (id=2508): recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x8}], 0x1, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) process_mrelease(0xffffffffffffffff, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000540000000e0002006e657464657673696d0000000f0002006e657464657673696d300000080003000000000096a9ed18be61421f4957da0a7b385e40a00ec850a66377d12814945709feba47"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) unshare(0x26020480) r7 = socket(0x10, 0x80002, 0x2) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1.037162367s ago: executing program 1 (id=2509): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x29, 0xb, 0x70bd27, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 977.071824ms ago: executing program 1 (id=2510): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc45, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 881.044501ms ago: executing program 2 (id=2511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700"/147, 0x93, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b02000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESOCT=r1, @ANYRES8=r1, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') socket$nl_route(0x10, 0x3, 0x0) 741.071801ms ago: executing program 4 (id=2512): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40002022) poll(&(0x7f0000000080)=[{r2, 0x20}], 0x1, 0x1d) madvise(&(0x7f000083f000/0x2000)=nil, 0x2000, 0x11) 296.343571ms ago: executing program 5 (id=2513): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x9, 0xffffffffffff2ae4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) creat(&(0x7f0000000ac0)='./file0\x00', 0x121) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x102) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3d, 0xc, &(0x7f0000000940)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x237c6bbf}, 0x4d) eventfd(0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) 291.893613ms ago: executing program 3 (id=2514): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xf0}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000001080)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00), 0x105000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x397d, 0x0, 0x0, 0x0, 0xc}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x5, 0x7ff, 0x24f5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0xffff8001}], 0x1, 0x10000, 0x0) r8 = syz_open_dev$loop(&(0x7f00000000c0), 0x761, 0x100c2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) ioctl$BLKRAGET(r8, 0x1263, &(0x7f0000000100)) 0s ago: executing program 4 (id=2515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000002280)=ANY=[@ANYBLOB="0c0000000300d0"], 0x4063c0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000280)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="b6dfbabef5c6236520e67a7599a821ebbae8a3c3cc256499259d1fd3f13fcdfb49aa8434aa650dd499c47a11fd125994", 0x30}, {&(0x7f0000000300)="d74fc4ecd631da86b2f70a", 0xb}, {0x0}, {&(0x7f00000004c0)="0a1f6058f2940e57bf7d17373739558a984daa8b3fa06dcc42caf7693577dc5312ace9369989c3373f4c22b29d72e348841083ca9377fbc80cb3fc0b551fbc55f42abb5375fdc6157609289356f03129fb959dcc29ed980e5579083d31ab4f466576b2fd92949db9faaa5097c13001630c027c2a8fbc95a0867a7f1495089b13448649203f090c73be68e733f313dcc9d3e9c84a3da8d50a7f56c399a6315b0f52908d1ace5d6d97b0d284bf933fba07b5ab41adb420625cedf190238937", 0xbe}, {&(0x7f0000000580)="c2b2c2845878e06770d619d3e9eca0e581d43f7444a57c65dd68a353d6ed418950ce931df506fbc501a2e77fb801ed1410c5dbcbda39aba16fa6079b0edc1a0813efd8aab7db80b981a5a62c232203d9917f728e13cbdc0bae21d8be5c949fb9c1294a947110f6536e0a70eab741daf1ea6dbe8d53d04da5fc73c1faadb4946cfe1bfd35d1084efb2f837823a0ef62475626159337805df4505b272a92879ecc4b05536afd0bd7e4ddce3e5dc65d8e8e4d3b0d08f251614e2e63b3a1", 0xbc}, {&(0x7f0000000640)="84b6992c8c06a69aa3f1bb35f450c791da67ec6906b97ea51bdf54a11b96d6a8ee3883ede75d7bc6494c520c442b650674606426de486e6ba909679b13ef79e2bb7a04604babd6b262025ec316940f8d38a999e39d0a0b6feb78ece3ee328233efebe358401f095b0bb94fcb78cb9f175c99f0a2613c4b6980cb32b8689449b581f0a578b44ccb9712f37d466260e8b5b4537cc173ed42aa413a2c8d94d306c21e6b4ef0c4b1e67ebc5bc36529652b9a01752352b0cefd974455", 0xba}], 0x6, &(0x7f0000002a40)=ANY=[@ANYBLOB="a159f3a67977631200000000810003c2c93f4b8ed411234e41c14e469f67215171fdbd1418a7f4f546f6a3ac0e638f9747170bf29c783e2315c19bcda4d40b1411888b792bb50b5136ee8965f5b6c275934af87ab2ef45e1e5f1e186a91a281bff18531614b571d7d9715c0fb7ad323586eac1ca5878756c0061538ca56f2a81641e7ce9fd3c382d72fc207a6bae61009750a278e40572803915e19893ec4632cb5fa0d2ef804689a325b4b1fec7d98a4e22a25a81f0ccb68e03", @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32], 0x28}, 0x0) shutdown(r5, 0x1) read$FUSE(r7, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r5, 0x0, r8) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000008880)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000088c0)=0x1c, 0x80800) getresuid(&(0x7f0000008b80), &(0x7f0000008bc0), &(0x7f0000008c00)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000008c40)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a400)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000003c0)="cdb2e6febafa9b38a3ae70f2fd41855fe821999601ec519f3458955d992d5c5805d47e12aabfd8857caff0459b6b37a5b68aaed8b005d5e1fd0fbff85c8988d6a2a896f4e9b662b1a230742aaa6364c40d2765891a2d90f59dbb9d436c0f4aa76427223efdaba8049097a3941ccbef25df5a1f3568318aa79d3bd1d6507100f7e18f8cb3af685f075fe26ae6498e17895ff786a46412cd5f6aaef145d5521e08acc6fc02e2d6105a6edfc35f7c2dbb104418672a3d1cd513317e3a2fc64ddcc054340f325bc7874f0789826b9e8d9371edc68c7d8827275c47070e56062520da8b", 0xe1}, {&(0x7f00000011c0)="3842598028e40be82b09ed80d008d4db7e18d445f0ac33a7ec0e61c921c21c5cae2eb55ec644b3a225bd36d13c63a9f5acbf9824d7b45af0bebc0dfc02380468e8aabebbc1565bb6df042a8d68d2faad3c559c5d748beabcbce521aa688264cdddbd566aa8bd1215a4862af7142429d51569b1da6baa4b8189b990088d41b610bdaffd98251988408eeee1ccd930ed180fef0fded6560c6700601e1ba20e8875add01a7e517a6e065a2ccd3760797b16ae35b3d6ad7f0abe7516c1241ad1a745fe0ec91233d9da82d203baa534c214b390ad0462293462b521a4cda6640535feb17c0725481fc9bf3f4b8554fa25ca819f13babdf3c52fc6a5184f3fd46ca0422ff56cf31b13d35990b75a7f2798d376bae5257cce3a915fc115521bb7f5e5e151c592e52269307e1a34b24b83a315a5ad2a618d09472326f392f2b6f8d2e9fee9002d84c975adc89e9bcbcbddbef5ec291ab947874546bfd5cda67f5a954f6cb2caa112d3deb0c119cc02d1b6f75d41db7fdd6af7139335b69b68f8aafa23e4cfb0a25489db9c48c30e18792927d7b7fd0e4f31f0ba76216eea46e6a0574397d7e8758c8dc79ba8d23706d4a651e6397a82b2178e1072cb90e3026fdff66d64cd10e7560621aab521dadace4b805ac2728f0467cdd01d46921daa1fcd5601115e39b194facdc97f8110caad01843b9e2f3c23a5601af61a30404366e387d879e9ff1a199f5eac7954bda2ae375a100555fd55d6a20c59a9abaec00745249bb64ccb40945b919a0d8d7c2697341f2022fd26d9c4645d99f7ccf6f4068092d5706d357968168cb3c1b38604e07d85507125115d748cd8ccb3eebf76562129602e2e829be22b932e72c9c34d77882e70cd85871092be06869dd07b952493d2530c7091dda3afaab5b8f3ec6ca45b53f0cfa468d47909e3cb5b05d00b1ab12e8fc062bcc911874b7156269878aeb99b0580ec7445e9187884588df3e26e570a1ec4f6d1ec5ad5a0261751bbda169408cc82ce7eea520052a3336eb2e3681001901772702829805610ab3573ea8350ba6e11016e1888eb0634c9e09f2c6dbb8af9e86f49ba741fce215146fe77a3e05f9d86af9dd5c899aa1c229016e1bd80df9f0f131f0f88b07c8f2cac6554f4ca5ad72b63512d69c8be46bbb25b238b9c691ed19f054c22e42e1cd842514bee2c4a14758327f36d2d465259da03c5d84c1dc87f67910578885f315c6b483e9deff5a01b1353ff691cbdf3ef881bde056c6d10c293176d32fbef85a0d182c719c7a9780136d11ee7ebd2d0a84be5a365764551dad0d1ec9eefb6ac6af7d19be8d8a71ab9da1c035157ce0b4723cc18d2440807b84a8e8719c7c83a9d2490c59866b44cfa43d33be46d68d5dcb2bab38511b7ed9b3370d3732e9d9b6642862b0c8fe7b98e26c1a218e4f6777e957b5a8adb935246f976fba54f87af0700e773d2bea2c3736b21604885919ab134486e569a4dc36a9797f3dce943603dfc6ae52d3ddaa1129e1886dd58cdc321495785214bcb6b366515e52737923ec7cb7c08250fd7074d0dc2aaac3cda484d1885b82f7504c4fe749e4192cbd9c0a7177cb2fc335d221d7dbc68a885e109dc0b2b4f84c18aabede653e85bfab6ca806caeb212258d900ee86cdcd29094e75197c68947ac9d19e536af3935749e93842f4fc520eac6b777ec2e457876bc6a9a296d28bd1239d5493b75fe2ee48541d40a7044a001b4d68c3f5a20461f4d660a18bab4596bbac0bc8b2177ea8e2321c9c91f5e0ed80187910308eadc57faf9a0374da1dc3b1fa81b4aefd32a64554c9e170e2a1426e1143ebb3f5f131ed3e03cfae255cbdddd66b945577b36e8aba8ec6d0f5f025f66d092e882e9f42e8c76cff0dfd3f52ecef11382c64106336978f99533dbd5dcbadc6da47d9ed12e6c5b1e66f8eac3af08bf7696c837ca7b5d2b8e4b9029998e138b739b4a66da3de8fb50bdf83a32dcd26c363c8d441825140db6425f201ade99b60f3e14bdb11a41727ddc90394f7c435e2f13358fc000ad6d29a3e3b5b591c0139d0c291d677cc6f86e87f428123db2461e09f2a7ced8a719d5e3680b17b2b254e89c3bdf1aebd874c9f0e876b00e11766aa4ad8d1b36a5ee388cdfd37c02e4bbf78eaa0962bc5fcc6daf6c85d5532adc5762f0a6d9930365f072d2367a8355d882374d412af8709c706a2fe06f1d2d995ecc425827dc587104cdc07bbc8029d7aa8d803ce89fbe885ba6209470b94c020402bbf51892c9f3b9561bec63dde85c17d524df26fdabe80e74f0beb7692e00d6e39f23ee58dd735b05dacba866727c2b97f710bc5b150f60d7b9e6c3e6527d220a8e26501d9e26f8bba325770c7de50b4ec26a9de6e936570dc7816be54acf1b24243cf54358083dfae5b5492683906cf2bee1cb9a48fa86af5c122bba55be873b4ebce9413c6e0feb3af15b6f60d0c4db729a2cb0e284240132eccda25d9f3a3c8597dad1b658e078a3fb9b3d9f1f5fd7807f1eb01df786fe15277f1a1bc9f2a6c8e07d0150e4fbbd758c6f9c0ba2c886a8691c96fd9e8e5e9a9049b3589e14f8367c25af3a45a7e0afd0e224f3bad9b9ed88787542638abf8219e77641e663cc046aca0cc088517b042f6d7241de060cec984d128b6a2a07f7f728828504a707a84e447c4a49ff1c9f04e4987d6dbb1543b241c1381a6e3e5ba5a886cc2cc183132df96804027c6f37bc462ab7e466a4f48355dc946d16d88e985445fe9167d290c99d065ee2cb8be99d5d26c2b77499c3f56a619e776f36e4a96552e6fa273529895d28c6d74616d8f5a13e45c959d2a228fad13d8c2c08256ccd2edc960d51208bbf40be99c684224dca66596cde4efa36b11b43333570b2f277de9cce339466417fcb1e469b69b4cbb83f2db8d61bc32f5c44f9be6befe587ca22e229abba2d7642c4b0d381f769b242fb07413b4fd85167fd24043590565fdef39a5d5f864708be1d647aef6a93fe1bcb3138740dd566272ad82e37bd00da83984e9840f6b2c62c51777cdcfd3e717b7d5b073cf448d247b519bab42ffd0e211231dc3afe6e6a8f9a333de82eba1826d15d77b942bffcccb8f060a89d04a775932cbbe7229a0c151fd04dc331c4f2753da216678cb2b7c648ee6d57bc4aa0068c26999b13bcb14e48d4fa7d4a018d0fd8cf11921e46e6e4733826af00fd9cdcf3bc68d3e8f8f24598f83547cf2e9c784b14e7e5d0bbbd71a87615a78e058e3315367591028af0790a24812e1a26fb19fb6f09c1f27631dcc8c6a5f6f77cdf850efdb5f424d8ac7198b209aaa5e141f62af3a7051d5459262548d5d5b4e337549f9b427ec1e7b2221e56047cd98bf29d7d12fa34e00565b9db15ea7905911218379523de3ced5368780ed3ebac4a70768e3a161ee960cf5d29ef06da768d8724d41c6f0072706e8282fac09b63ffdf3215cd0b952787e6e0d1fdbdfc6a47a28e67b7c043bdad8a088d4142dbadcd711ab67132c7d3bbe81fa189fb55bb29ec75fa41491e0fdbf6331091ee8af6c12f3883fae2afdec6fe7386634339d9f0a913db049094a54c404fe975b596e6bc44c694d7230cc86b4dcfda060e0ed66782e277dc7cba769958c4cf8b42a1902b63b4f5ccaa0e54f7f551188194b712c38c4dfff6963eeb7bd35aa29f0cbbceed1d1ecad85787974cd37eae25df11cf12af6fd3c100f825a8149ae4be0f59f701ae9dae0c799079f798ce66528c752ecc03d03a4c468f9b218430d822b0542dd04a5246f06b3fa26c4a9762377ac3d033159359b8e5d14b60a2930dfd70fe4329cf832c1558bfd9c3d86ca6863050f1c2ded3cd732d91dc304604444ced289068636dc09f2cce1824d4b4e0bb78ffdc87510a694fb1297a9ae739971d65f8932da46ad0027e3d66e223ab4cca451d8705e2416a6034e11d495598a6c34b71f3f1167b7053bed353a119f93f491d539a8e32d7f34fbe46a7d5806ca028ca40d2c9dcc0848d43086c2d60a0b33ce2ffeb3032f0db8f67bdcb05453e2612ffdeb89fd2641c1188b584d1604692c94e0db96bca10db32ab3f7f8a926b76e46cae3f6b8bfa83baa7d1b3e319bd11fa659e5f8534c3d3239d7c1b6971a2f2e780a69c29e5ff3f430d3806ccfd4cf67d18a8d00d565950fbe590184fdde34a6be120a5112a408600be0326a586c7dbe2d224e27a7d6f1f6e9419a68be6f6c3ab0209dce4605ce6c8a80e9641e9221a2ec5f2b9a3819b03e37e68bc6c8c4dc3b3a7244a4cfde044806e9b8a49f711289ef7dc861a5279874003f0aed565a5a60d65a81d6738f80f75f55b680329279664c0b6b9957f7d3331967b80deaaa73a8125ca200ca8e948261792018ff421f69b7d8569bf3ed602cdab53e463607032a2c6d8c01a68b6eabd3e4584c978cca1694bd8cf62b2ae69ada52d01c42049bc486034c9fd315ee8fe3f74aacd5a6d7285f24315c24e02d7ff741d6a0ca7e948549bf5cac23a2a907e31f27411ba8924879f92692877e5f5d682f9b4da27a0ec0339e796ed2c2131a8827dddebce8b08297cb0325481fd0187f8e3ab3a3f6b86eb3bca2590182c7c98ff0d113f594c484f2130d6e0b49aa92c5843301b72c244ca82f3c303f5c78c6e2321d40603ee843d7777585fe057992a51bafb2cdd050e989c3b05569d7e8fdf00dcb487420b2bd65e576bfb3b066b3c06d28bae086d73838c501f1d033f1c5fffafa055928a63b281015272171238fa4f922de8c88c3e5c9410b30e2a0fd9800b1236070ead3b77bf4edea35cd3161e9e5b8eda621f90eddb3fc9e5dd23012781f9cf1bbd6093d99bfac3fbd524aea745e7492b3afa953cc5c50cf282d2901b08e14acaad5b262a538626fcb315b9f73bfdf8b94fe19b246658323c8c93f67d8b07ca1421ba6a3a10f25260fe0753dde702077057446f75d7bc1cbe4f05b8a858acc7c5f75166ec899b505a54ec4f1a151a7682e24c34c8f6bd5abbdff4deb7655e102e67693f5d7353001a5d46c372ff3c70b2e94d5a665e1c89839f6657572d776082f4b9e8e1bd7eb683c6bced23f9a7679a7e05b72de03a3ccb5821cf134b9d1475d0229c387646f3a0b906239bc8bb1b2da2563e0ad7cb4e4f525b92a795dadc25f9f12a36391b2b0587b150dc71bae89bacb5baa120ddb6179b6b490c7a075fb801f98351a394d44963105498a301d77ac2f8e2b8a4bc076be41d4bc63a46773d4c319613c22f844ac984a03c6eec44ab3bdffded0313a08fb29dd3f73dc0c67186f04be7fc35bae5eaf6419cab8dcbeb5edd02ca6fd9f084bee706935192d061ddcaca61b8ed7e6bc027052dc6c3b86fae3fa502e2535d8a84e46a810c892b310b07d3d35b5fe6d1a0d4cb60b0193937ce546c784509412c3b8eee46efdc283f3df176d71791710b81a1ee503ad9b1a0ee7ba423abe30fceaf4255ec300ae6c1e6c655d85eb61bf166014d27567bb8873815ed1f2c3a49e968457547bc9dc11f1c2793b682302b2ea7eb86e3619106b92a088ac7713e71c984169150b825412aa6d88b18f98bd9f11d06a850de06b66825757c10a1c3b1d8888070544843566a0426aa63b9f62e1f7d1d189b58672f3fca8b8d2a24753daf5aa204ac4fa4f453587757bd3ce1b6fd62c8bc7153cc9a299016de2626c61b9808ec1dc2957ba8894bf1b69dc533d5c5a96d8f4b7a9abd0b5c73078f26c5df013e51420e0e108d65cad46af888084f10a03edca67e05427b12a72b392c8d9c7365965256677a2e5af1388e7d6b98693f348f6bd649f6", 0x1000}], 0x2, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r0, r2, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r3, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000800)="b7a23e4a58a7d3614ff17b5a9e394f4215045706666fb8673aadacfd6781aa2542212c2d7492fe09d3fe74d6cb843661bfbf6e10dcd889bb75f3b8588985f20d8c51e3bd228c6bf9b5ad76106d64158564", 0x51}], 0x1, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x28, 0x1, 0x1, [r3, r0, r0, r0, r3, r2]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xf8, 0x4000}}, {{&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)}, {&(0x7f0000000e00)="a3c4d5fe23c727799cf25fbc23bf2b3700ee5a8c8d9683997b0123f234f487fc1a19aa99be560c85149d629de761", 0x2e}, {&(0x7f0000000e40)="69d7ff941cb3f926f997a9a04e36b31ec1698897a7b000413cb43edb53fe4acadfe2c89d203bf670e8771f01f7a4348a3815c2dd2ffce2954bcdae", 0x3b}, {&(0x7f0000000e80)="135190febf67af516f14c1773151bf0a3380c69e80111415590654019eb3c3", 0x1f}], 0x4, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x98}}, {{&(0x7f00000021c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000006580)=[{&(0x7f0000006340)="317542960d18305310f21043708d2d3ec99f350635e5bb39b17baa8266e2ded3c7a66188914a5274ad5da61c266bdb0091142b1b852213f5276cabe2e821b046c11734188e1b95b3394868193df2f00989ae226793ec743b7c09906c66605ddf94ad73e851f3443579900bca9b470fc8af3ad1192f17c7f85cba9cd41e2f293a3327f1b0fbc2ebff9dbe4f01cdffb8267c9d64d65b0955a8ac197ecb85327fc9b3e313ea5cef6ae9d28a2daefafa5d76b329aad0ff2898754340e389f3edef6ab274500661ba08618f95e786e87191581afcba7281ed7ea57bcce1bf6a1468f81bd182602e04f5c52580140c61cc16fea2a11702", 0xf4}, {&(0x7f0000002240)="57d3fcec82113b11e0a9a75a4ca6d26b3642e9f8c265f0dd", 0x18}, {&(0x7f0000006440)="6e42ed5ff9a10a15aad24e02a768ab242642678a349bcaf3875a5d2be131", 0x1e}, {&(0x7f0000006480)="d7f74abf8aa8e74226b5825936bfc3ddccdd0cf28cc6d414f3bc498a2c3d164f5394caf0832e58ffa439648bd27821fdae392c40ebe3c2514b47d9f1f10613a96e246d3587ae0d9a62a714de97a360ba1416c1fd72e151ad57fd064c67dbf64bd9c1658082972ad86971c908d33db221f76149a444e0438970335bb04c16111d40f3542fac227b3d7beca7a8d6b8d8adcaeec7c85378a937e31f601ad89fdd5514080d5d27992645277ea355553b25b8a3f93664351c3702db049e11f4ea6690a1377d76f0bdc8e654789b8577b2f89c73145ca5ac62c6bf3dba9d62313b", 0xde}], 0x4, &(0x7f0000008900)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r2]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r8}}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r0, r9, r2]}}], 0x150}}, {{&(0x7f0000008a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008b40)=[{&(0x7f0000008b00)="f1a1d3611807db6e41a501809dd0c8fce6b543988634d70e43ec54ef48df7d0522c1533bf8aa106c69fa3f06ff38665fe2356cd482ce013dfb85c74c", 0x3c}], 0x1, &(0x7f0000008c80)=[@cred={{0x1c, 0x1, 0x2, {r1, r10, r11}}}], 0x20, 0x40}}, {{&(0x7f0000008cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009e40)=[{&(0x7f0000008d40)="fc917584221c7bc8341dd505e378ce5323b88d16cadd69fcb6b70f67c1ef1b52d6d9f9a556913892b797ad15ac6eba3dc76c846ca83e5435573eb43dbf35e795e1c1dc7cac2a9c50387bea9e7a0640f28282a2c3b9684bd639ab30c298de2e4f6b838375d05236cee5448e2395405ea6ddef50fd3e3700ead594c9daae01c572cc7ff03020f2060fef9b091b5a6d6d7220291bcad412b47eb48bad9a0c21eeb614e94e65e3db564f9784e57e8f551a109f8fca6c7d60888d680e254f3b3cecd105f042cca0f060402c0c0d9a16bcdefad6bba62b935064902f2230b8ee2375cc212adf3ad45d19", 0xe7}, {&(0x7f0000008e40)="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", 0x1000}], 0x2, &(0x7f0000009e80)=[@rights={{0x1c, 0x1, 0x1, [r0, r3, r0]}}], 0x20, 0x4008000}}, {{&(0x7f0000009ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a380)=[{&(0x7f0000009f40)="405ebfec0cc70698468e65da978c990e6d9dbebf265aecf592b9b85f4996351aeded9c5b", 0x24}, {&(0x7f0000009f80)="f7200eff25830210f6b460f2be565d1ed3f18551b9773b7b23151798ac5c5a240ea426c56d41901518500129e5fb62874d117b54315c80d07c0d623062f5f47fddbfca2b502cb0cdc8d070084630c48c139d1b65d6b1ad81a5baf08b57c8e335b04c1b10bb2a4f38bb5d0c62ab3bf301ec5556efe8b8783017700ec4ccf54b066881fd187b9ec3ffbc6007078ebb0adbe66cac87d89cad6f18861e9b2a2f74dc237252417f9e04241a3c45f1a14059185a62ca25f2b8eb977396", 0xba}, {&(0x7f000000a040)="b773e8683c1cd65b68f4e0ce8c51c2ab3d2053dfc7fa5cec885536b2eb84bbe9c939e4f6dc3aa747f5fa96568a2092e04154be930af5cd0772dfe70757ba120f6d4553c0ec8787f61ef137ce8c0334bd6d9ca5fc5519b4e1cf74b2e343b6dcd921a3c3755707cbf861adf0627d53b9aa92155810b4af9b36f07fbc3ac7fdb7dd6785adee63d7fcfb846755d52ad95ec067d4e6c9944df25eadd671970a6135c9ff8f8b", 0xa3}, {&(0x7f000000a100)="e1adb6478ae88f0468bb2bf6ff233cd40d3bf29106f134a173e9f7b0cbdd82c8d6ead2c30b90d2d3120505147e532fe0cdb856057331108b6a303da10424efb2803beb10444dfdd3c45d4fdbf0cf0e0a6247b6d8e0aa817fc6c74ad931d282ba4b0b97e36f8cbeaeb7b6d412e5dfd0960f3762c49b3aba7cc3db24486a128a8ccbc1d2a8be8517d8cbb2c1768df995b58ca6ff7e122b5369fa77bcbb625e18211f43643a09535c29aa71dfb1f1ae7d9a87a3cd250e2b9d3774454ca5ddce905af52366390b2c391a2e8b83831ee72735cf1fe0a7d230c03c40c57199ad9e9e198932c38a8e29d886bdde37537a3fa7", 0xef}, {&(0x7f000000a200)="92b98243c2c63442ed21cc06d794727561becd26f8fd1f8b261d627c4a39a859e9326b9f0027b1c4165005a34901424ecc08aa56f25e866e4b7ffedc58d7f9326ba24019f202", 0x46}, {&(0x7f000000a280)="84f13e1e5b31fa6924ce44a218d19bf5c9b5a140558932e86cb5fe3e892a8d40858b3deb1ec68c96ef943eb6e32a01ba4cc6862872a30483c7fae09a837bad01db7a67dde912aefb6280fb42c20a7fe6002fd6bf1265676f42c145a4b303fa279d99004cd7352bab24994f71440b3bd1d516c4283e14d82ffcaea0d061cd62e5c71a2ecb54f6ef98adf39b7d5fe2b1659f84a4c8ec467d799cebf7b0f403f8c56779fa22cf7cc41977fe5c50521d821a2f2db8936c21fc12ab91e6e3eb952a238a1367c62e125537c9870e46f783a1df921d21208b7541ea14a111dcd4d6412fe993ba8415320a07d994e8f3b9d144da6e60ba53e53832ce88", 0xf9}], 0x6, 0x0, 0x0, 0x40011}}], 0x7, 0x84) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): sadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 825.638575][ T30] audit: type=1400 audit(1762685375.468:1098): avc: denied { read } for pid=14156 comm="syz.1.2132" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 825.737384][ T30] audit: type=1400 audit(1762685375.468:1099): avc: denied { open } for pid=14156 comm="syz.1.2132" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 825.813793][ T30] audit: type=1400 audit(1762685375.518:1100): avc: denied { read } for pid=14163 comm="syz.2.2131" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 825.841859][T14153] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 825.938650][ T30] audit: type=1400 audit(1762685375.518:1101): avc: denied { open } for pid=14163 comm="syz.2.2131" path="net:[4026532801]" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 826.010759][ T30] audit: type=1400 audit(1762685375.528:1102): avc: denied { allowed } for pid=14156 comm="syz.1.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 826.094162][ T30] audit: type=1400 audit(1762685375.528:1103): avc: denied { read } for pid=14163 comm="syz.2.2131" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 826.243607][ T30] audit: type=1400 audit(1762685375.528:1104): avc: denied { open } for pid=14163 comm="syz.2.2131" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 826.306886][ T30] audit: type=1400 audit(1762685375.598:1105): avc: denied { create } for pid=14163 comm="syz.2.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 826.448294][T14180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2136'. [ 826.571203][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2136'. [ 826.580975][ T5867] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 826.862962][ T5867] usb 2-1: config 1 has an invalid interface number: 101 but max is 0 [ 826.872766][ T5867] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 826.900844][ T5867] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 826.921497][ T5867] usb 2-1: config 1 has no interface number 0 [ 826.931572][ T5867] usb 2-1: config 1 interface 101 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 826.942805][ T5867] usb 2-1: config 1 interface 101 altsetting 7 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 826.969347][ T5867] usb 2-1: config 1 interface 101 altsetting 7 endpoint 0x89 has invalid maxpacket 56669, setting to 64 [ 826.985586][ T5867] usb 2-1: config 1 interface 101 altsetting 7 endpoint 0xD has invalid wMaxPacketSize 0 [ 826.997056][ T5867] usb 2-1: config 1 interface 101 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 827.009097][ T5867] usb 2-1: config 1 interface 101 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 827.021190][ T5867] usb 2-1: config 1 interface 101 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 827.140748][ T5867] usb 2-1: config 1 interface 101 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 827.169728][ T5867] usb 2-1: config 1 interface 101 altsetting 7 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 827.199520][ T5867] usb 2-1: config 1 interface 101 altsetting 7 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 827.321980][ T5867] usb 2-1: config 1 interface 101 has no altsetting 0 [ 828.900645][ T5894] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 828.945931][T14219] wg1 speed is unknown, defaulting to 1000 [ 828.956812][T14219] lo speed is unknown, defaulting to 1000 [ 829.080849][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 829.102004][ T5894] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 829.110129][ T5894] usb 6-1: config 0 has no interface number 0 [ 829.185767][ T5894] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 829.194647][T14227] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2152'. [ 829.218204][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.513908][ T5867] usb 2-1: string descriptor 0 read error: -71 [ 829.528670][ T5894] usb 6-1: Product: syz [ 829.533124][ T5867] usb 2-1: Dual-Role OTG device on HNP port [ 829.549316][ T5867] usb 2-1: can't set HNP mode: -71 [ 829.575240][ T5894] usb 6-1: Manufacturer: syz [ 829.579868][ T5894] usb 6-1: SerialNumber: syz [ 829.607456][T14232] FAULT_INJECTION: forcing a failure. [ 829.607456][T14232] name failslab, interval 1, probability 0, space 0, times 0 [ 829.630077][ T5894] usb 6-1: config 0 descriptor?? [ 829.645921][T14232] CPU: 0 UID: 0 PID: 14232 Comm: syz.4.2153 Not tainted syzkaller #0 PREEMPT(full) [ 829.645945][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 829.645956][T14232] Call Trace: [ 829.645962][T14232] [ 829.645970][T14232] dump_stack_lvl+0x16c/0x1f0 [ 829.646001][T14232] should_fail_ex+0x512/0x640 [ 829.646026][T14232] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 829.646056][T14232] should_failslab+0xc2/0x120 [ 829.646076][T14232] kmem_cache_alloc_noprof+0x75/0x6e0 [ 829.646100][T14232] ? find_held_lock+0x2b/0x80 [ 829.646121][T14232] ? getname_flags.part.0+0x4c/0x550 [ 829.646150][T14232] ? getname_flags.part.0+0x4c/0x550 [ 829.646172][T14232] getname_flags.part.0+0x4c/0x550 [ 829.646197][T14232] getname_flags+0x93/0xf0 [ 829.646214][T14232] user_path_at+0x24/0x60 [ 829.646231][T14232] __x64_sys_mount+0x1fb/0x310 [ 829.646251][T14232] ? __pfx___x64_sys_mount+0x10/0x10 [ 829.646285][T14232] do_syscall_64+0xcd/0xfa0 [ 829.646302][T14232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.646318][T14232] RIP: 0033:0x7f56f3b8f6c9 [ 829.646333][T14232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.646349][T14232] RSP: 002b:00007f56f4b14038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 829.646367][T14232] RAX: ffffffffffffffda RBX: 00007f56f3de5fa0 RCX: 00007f56f3b8f6c9 [ 829.646378][T14232] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 829.646390][T14232] RBP: 00007f56f4b14090 R08: 0000200000000400 R09: 0000000000000000 [ 829.646401][T14232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.646411][T14232] R13: 00007f56f3de6038 R14: 00007f56f3de5fa0 R15: 00007fff5187e1d8 [ 829.646434][T14232] [ 829.967219][T14241] kernel profiling enabled (shift: 63) [ 829.975089][T14241] profiling shift: 63 too large [ 829.986559][ T5894] radio-si470x 6-1:0.35: this is not a si470x device. [ 830.507484][ T5894] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 830.517855][ T5894] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 830.532778][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 830.532787][ T30] audit: type=1400 audit(1762685380.508:1165): avc: denied { setopt } for pid=14235 comm="syz.2.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 830.583068][ T5894] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 830.621397][ T5894] usb 6-1: USB disconnect, device number 3 [ 830.680604][ T30] audit: type=1400 audit(1762685380.898:1166): avc: denied { create } for pid=14247 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 830.735521][ T5894] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 830.764490][ T30] audit: type=1400 audit(1762685380.898:1167): avc: denied { write } for pid=14247 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 830.853206][ T30] audit: type=1400 audit(1762685380.908:1168): avc: denied { nlmsg_write } for pid=14247 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 830.949472][ T30] audit: type=1400 audit(1762685381.088:1169): avc: denied { nlmsg_read } for pid=14247 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 830.993703][T14258] wg1 speed is unknown, defaulting to 1000 [ 831.071234][T14258] lo speed is unknown, defaulting to 1000 [ 831.924832][ T30] audit: type=1400 audit(1762685382.208:1170): avc: denied { open } for pid=14272 comm="syz.3.2165" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 832.917743][ T30] audit: type=1400 audit(1762685383.158:1171): avc: denied { ioctl } for pid=14284 comm="syz.5.2168" path="socket:[51558]" dev="sockfs" ino=51558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 832.960623][ T55] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 833.059096][ T30] audit: type=1400 audit(1762685383.328:1172): avc: denied { create } for pid=14286 comm="syz.5.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 833.151217][ T55] usb 4-1: device descriptor read/64, error -71 [ 833.163519][T14291] ubi31: attaching mtd0 [ 833.177781][ T30] audit: type=1400 audit(1762685383.328:1173): avc: denied { create } for pid=14286 comm="syz.5.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 833.278947][ T30] audit: type=1400 audit(1762685383.458:1174): avc: denied { append } for pid=14286 comm="syz.5.2169" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 833.282091][T14291] ubi31: scanning is finished [ 833.430829][ T55] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 833.665010][ T55] usb 4-1: device descriptor read/64, error -71 [ 834.137439][ T55] usb usb4-port1: attempt power cycle [ 834.145608][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2174'. [ 834.188903][T14307] bridge1: port 1(veth3) entered blocking state [ 834.207418][T14307] bridge1: port 1(veth3) entered disabled state [ 834.218317][T14307] veth3: entered allmulticast mode [ 834.253109][T14307] veth3: entered promiscuous mode [ 834.299720][T14291] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 834.322988][T14309] bridge1: port 2(veth5) entered blocking state [ 834.351150][T14309] bridge1: port 2(veth5) entered disabled state [ 834.475419][T14309] veth5: entered allmulticast mode [ 834.511833][T14309] veth5: entered promiscuous mode [ 834.531542][ T55] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 834.566528][ T55] usb 4-1: device descriptor read/8, error -71 [ 834.577834][T14313] wg1 speed is unknown, defaulting to 1000 [ 834.583859][T14316] netlink: 'syz.2.2178': attribute type 3 has an invalid length. [ 834.617020][T14316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2178'. [ 834.711841][T14313] lo speed is unknown, defaulting to 1000 [ 835.281440][ T55] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 835.282007][T14327] ptm ptm9: ldisc open failed (-12), clearing slot 9 [ 835.311363][ T55] usb 4-1: device descriptor read/8, error -71 [ 835.380193][T14333] FAULT_INJECTION: forcing a failure. [ 835.380193][T14333] name failslab, interval 1, probability 0, space 0, times 0 [ 835.392995][T14333] CPU: 0 UID: 0 PID: 14333 Comm: syz.1.2181 Not tainted syzkaller #0 PREEMPT(full) [ 835.393019][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 835.393028][T14333] Call Trace: [ 835.393035][T14333] [ 835.393043][T14333] dump_stack_lvl+0x16c/0x1f0 [ 835.393072][T14333] should_fail_ex+0x512/0x640 [ 835.393091][T14333] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 835.393111][T14333] should_failslab+0xc2/0x120 [ 835.393131][T14333] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 835.393147][T14333] ? __get_vm_area_node+0x101/0x330 [ 835.393170][T14333] ? __get_vm_area_node+0x101/0x330 [ 835.393183][T14333] __get_vm_area_node+0x101/0x330 [ 835.393202][T14333] ? find_held_lock+0x2b/0x80 [ 835.393224][T14333] __vmalloc_node_range_noprof+0x271/0x1480 [ 835.393244][T14333] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 835.393265][T14333] ? find_held_lock+0x2b/0x80 [ 835.393278][T14333] ? avc_has_perm_noaudit+0x117/0x3b0 [ 835.393295][T14333] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 835.393310][T14333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 835.393324][T14333] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 835.393336][T14333] ? __lock_acquire+0xb8a/0x1c90 [ 835.393354][T14333] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 835.393365][T14333] __vmalloc_node_noprof+0xad/0xf0 [ 835.393378][T14333] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 835.393391][T14333] bpf_prog_alloc_no_stats+0x58/0x610 [ 835.393402][T14333] ? security_capable+0x7e/0x260 [ 835.393419][T14333] bpf_prog_alloc+0x3b/0x230 [ 835.393430][T14333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 835.393444][T14333] bpf_prog_load+0x1c28/0x2850 [ 835.393462][T14333] ? __pfx_bpf_prog_load+0x10/0x10 [ 835.393476][T14333] ? __rcu_read_unlock+0x2bc/0x550 [ 835.393488][T14333] ? avc_has_perm_noaudit+0x149/0x3b0 [ 835.393503][T14333] ? avc_has_perm+0x144/0x1f0 [ 835.393524][T14333] ? selinux_bpf+0xde/0x130 [ 835.393543][T14333] ? bpf_lsm_bpf+0x9/0x10 [ 835.393555][T14333] __sys_bpf+0x3e72/0x4980 [ 835.393569][T14333] ? __cgroup_account_cputime+0xcc/0x120 [ 835.393586][T14333] ? __pfx___sys_bpf+0x10/0x10 [ 835.393601][T14333] ? find_held_lock+0x2b/0x80 [ 835.393614][T14333] ? __schedule+0x3fec/0x5de0 [ 835.393629][T14333] ? rcu_is_watching+0x12/0xc0 [ 835.393642][T14333] ? trace_sched_exit_tp+0xd1/0x120 [ 835.393654][T14333] ? __schedule+0x11a3/0x5de0 [ 835.393685][T14333] __x64_sys_bpf+0x78/0xc0 [ 835.393699][T14333] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.393715][T14333] do_syscall_64+0xcd/0xfa0 [ 835.393725][T14333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.393736][T14333] RIP: 0033:0x7fd0e1f8f6c9 [ 835.393745][T14333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.393755][T14333] RSP: 002b:00007fd0e2e2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 835.393766][T14333] RAX: ffffffffffffffda RBX: 00007fd0e21e6090 RCX: 00007fd0e1f8f6c9 [ 835.393772][T14333] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 835.393793][T14333] RBP: 00007fd0e2e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 835.393800][T14333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.393806][T14333] R13: 00007fd0e21e6128 R14: 00007fd0e21e6090 R15: 00007ffcb39e08e8 [ 835.393820][T14333] [ 835.393841][T14333] warn_alloc: 1 callbacks suppressed [ 835.393850][T14333] syz.1.2181: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 835.665723][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.760464][T14333] ,cpuset=/,mems_allowed=0-1 [ 835.765664][T14333] CPU: 0 UID: 0 PID: 14333 Comm: syz.1.2181 Not tainted syzkaller #0 PREEMPT(full) [ 835.765686][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 835.765695][T14333] Call Trace: [ 835.765701][T14333] [ 835.765707][T14333] dump_stack_lvl+0x16c/0x1f0 [ 835.765737][T14333] warn_alloc+0x248/0x3a0 [ 835.765765][T14333] ? __pfx_warn_alloc+0x10/0x10 [ 835.765786][T14333] ? rcu_is_watching+0x12/0xc0 [ 835.765807][T14333] ? trace_kmalloc+0x2b/0xd0 [ 835.765822][T14333] ? __get_vm_area_node+0x101/0x330 [ 835.765844][T14333] ? __kasan_kmalloc+0x8a/0xb0 [ 835.765862][T14333] ? __get_vm_area_node+0x208/0x330 [ 835.765885][T14333] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 835.765909][T14333] ? find_held_lock+0x2b/0x80 [ 835.765929][T14333] ? avc_has_perm_noaudit+0x117/0x3b0 [ 835.765954][T14333] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 835.765980][T14333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 835.766001][T14333] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 835.766019][T14333] ? __lock_acquire+0xb8a/0x1c90 [ 835.766050][T14333] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 835.766067][T14333] __vmalloc_node_noprof+0xad/0xf0 [ 835.766086][T14333] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 835.766107][T14333] bpf_prog_alloc_no_stats+0x58/0x610 [ 835.766125][T14333] ? security_capable+0x7e/0x260 [ 835.766151][T14333] bpf_prog_alloc+0x3b/0x230 [ 835.766168][T14333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 835.766190][T14333] bpf_prog_load+0x1c28/0x2850 [ 835.766226][T14333] ? __pfx_bpf_prog_load+0x10/0x10 [ 835.766248][T14333] ? __rcu_read_unlock+0x2bc/0x550 [ 835.766265][T14333] ? avc_has_perm_noaudit+0x149/0x3b0 [ 835.766289][T14333] ? avc_has_perm+0x144/0x1f0 [ 835.766322][T14333] ? selinux_bpf+0xde/0x130 [ 835.766342][T14333] ? bpf_lsm_bpf+0x9/0x10 [ 835.766362][T14333] __sys_bpf+0x3e72/0x4980 [ 835.766384][T14333] ? __cgroup_account_cputime+0xcc/0x120 [ 835.766411][T14333] ? __pfx___sys_bpf+0x10/0x10 [ 835.766435][T14333] ? find_held_lock+0x2b/0x80 [ 835.766453][T14333] ? __schedule+0x3fec/0x5de0 [ 835.766477][T14333] ? rcu_is_watching+0x12/0xc0 [ 835.766497][T14333] ? trace_sched_exit_tp+0xd1/0x120 [ 835.766517][T14333] ? __schedule+0x11a3/0x5de0 [ 835.766566][T14333] __x64_sys_bpf+0x78/0xc0 [ 835.766591][T14333] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.766617][T14333] do_syscall_64+0xcd/0xfa0 [ 835.766634][T14333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.766649][T14333] RIP: 0033:0x7fd0e1f8f6c9 [ 835.766668][T14333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.766683][T14333] RSP: 002b:00007fd0e2e2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 835.766698][T14333] RAX: ffffffffffffffda RBX: 00007fd0e21e6090 RCX: 00007fd0e1f8f6c9 [ 835.766709][T14333] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 835.766719][T14333] RBP: 00007fd0e2e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 835.766729][T14333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.766739][T14333] R13: 00007fd0e21e6128 R14: 00007fd0e21e6090 R15: 00007ffcb39e08e8 [ 835.766765][T14333] [ 835.767004][T14333] Mem-Info: [ 835.770904][ T55] usb usb4-port1: unable to enumerate USB device [ 835.786725][T14333] active_anon:147003 inactive_anon:0 isolated_anon:0 [ 835.786725][T14333] active_file:11089 inactive_file:51677 isolated_file:0 [ 835.786725][T14333] unevictable:768 dirty:438 writeback:0 [ 835.786725][T14333] slab_reclaimable:12992 slab_unreclaimable:105436 [ 835.786725][T14333] mapped:41485 shmem:132556 pagetables:2831 [ 835.786725][T14333] sec_pagetables:0 bounce:0 [ 835.786725][T14333] kernel_misc_reclaimable:0 [ 835.786725][T14333] free:1140271 free_pcp:12096 free_cma:0 [ 836.145033][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.154958][T14333] Node 0 active_anon:588024kB inactive_anon:0kB active_file:44356kB inactive_file:206504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:169916kB dirty:1752kB writeback:0kB shmem:528688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14696kB pagetables:11304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 836.187204][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.205988][T14333] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 836.235977][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.253776][T14333] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 836.285937][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.297940][T14333] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 836.304732][T14333] Node 0 DMA32 free:646696kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:588024kB inactive_anon:0kB active_file:44356kB inactive_file:206504kB unevictable:1536kB writepending:1752kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:28712kB local_pcp:15704kB free_cma:0kB [ 836.338228][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.350185][T14333] lowmem_reserve[]: 0 0 1 1 1 [ 836.356080][T14333] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 836.385856][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.392543][T14333] lowmem_reserve[]: 0 0 0 0 0 [ 836.397688][T14333] Node 1 Normal free:3899044kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21248kB local_pcp:10752kB free_cma:0kB [ 836.434823][T14333] lowmem_reserve[]: 0 0 0 0 0 [ 836.439973][T14333] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 836.458432][T14333] Node 0 DMA32: 8*4kB (UME) 29*8kB (UME) 2*16kB (UM) 2*32kB (UM) 79*64kB (ME) 86*128kB (UME) 110*256kB (UME) 78*512kB (UM) 39*1024kB (UME) 5*2048kB (UME) 125*4096kB (M) = 646696kB [ 836.460996][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 836.461007][ T30] audit: type=1400 audit(1762685386.538:1188): avc: denied { create } for pid=14335 comm="syz.4.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 836.477432][T14333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 836.477528][T14333] Node 1 Normal: 225*4kB (UME) 56*8kB (UME) 48*16kB (UME) 227*32kB (UME) 72*64kB (UME) 22*128kB (UME) 5*256kB (UM) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3899044kB [ 836.538297][T14333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 836.549884][T14333] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 836.559462][T14333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 836.570710][T14333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 836.580101][T14333] 195318 total pagecache pages [ 836.586210][T14333] 0 pages in swap cache [ 836.590506][T14333] Free swap = 124996kB [ 836.609959][T14333] Total swap = 124996kB [ 836.614332][T14333] 2097051 pages RAM [ 836.618219][T14333] 0 pages HighMem/MovableOnly [ 836.623265][T14333] 428747 pages reserved [ 836.627484][T14333] 0 pages cma reserved [ 836.627629][ T30] audit: type=1400 audit(1762685386.538:1189): avc: denied { ioctl } for pid=14335 comm="syz.4.2182" path="socket:[51738]" dev="sockfs" ino=51738 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 837.370705][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 837.798725][ T30] audit: type=1400 audit(1762685387.738:1190): avc: denied { mount } for pid=14344 comm="syz.1.2185" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 837.902200][ T30] audit: type=1400 audit(1762685387.748:1191): avc: denied { mounton } for pid=14344 comm="syz.1.2185" path="/438/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 837.929110][ T30] audit: type=1400 audit(1762685388.108:1192): avc: denied { setopt } for pid=14348 comm="syz.5.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 837.948861][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.958677][ T30] audit: type=1400 audit(1762685388.108:1193): avc: denied { bind } for pid=14348 comm="syz.5.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 837.979726][ T30] audit: type=1400 audit(1762685388.108:1194): avc: denied { ioctl } for pid=14348 comm="syz.5.2187" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=51774 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 838.005951][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.015311][ T30] audit: type=1400 audit(1762685388.178:1195): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 838.234946][ T5867] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 838.250797][T11333] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 838.417111][T11333] usb 6-1: unable to get BOS descriptor or descriptor too short [ 838.686366][T11333] usb 6-1: config 252 has an invalid interface number: 89 but max is 1 [ 838.695729][T11333] usb 6-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 838.706365][T11333] usb 6-1: config 252 has 1 interface, different from the descriptor's value: 2 [ 838.715761][T11333] usb 6-1: config 252 has no interface number 0 [ 838.723687][T11333] usb 6-1: config 252 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 838.737227][T11333] usb 6-1: config 252 interface 89 has no altsetting 0 [ 838.747071][T11333] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0011, bcdDevice=7a.23 [ 838.756276][T11333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.764438][T11333] usb 6-1: Product: syz [ 838.768664][T11333] usb 6-1: Manufacturer: 씷訾䭈 [ 838.774209][T11333] usb 6-1: SerialNumber: syz [ 838.831110][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 838.840258][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 838.852669][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 838.864502][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 838.876405][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 838.894321][ T5867] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 838.904675][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.913378][ T5867] usb 4-1: Product: syz [ 838.917799][ T5867] usb 4-1: Manufacturer: syz [ 838.922995][ T5867] usb 4-1: SerialNumber: syz [ 838.930277][ T5867] usb 4-1: config 0 descriptor?? [ 839.072992][T11333] dvb-usb: found a 'Elgato EyeTV Diversity' in cold state, will try to load a firmware [ 839.718849][ T30] audit: type=1400 audit(1762685389.658:1196): avc: denied { read } for pid=14371 comm="syz.2.2191" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 839.837968][T11333] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 840.112549][T11333] dib0700: firmware download failed at 7 with -22 [ 840.130788][ T30] audit: type=1400 audit(1762685389.658:1197): avc: denied { open } for pid=14371 comm="syz.2.2191" path="/405/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 840.157493][T11333] usb 6-1: USB disconnect, device number 4 [ 840.247544][ T5894] usb 4-1: USB disconnect, device number 71 [ 840.327419][T14382] FAULT_INJECTION: forcing a failure. [ 840.327419][T14382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.353300][T14382] CPU: 0 UID: 0 PID: 14382 Comm: syz.5.2194 Not tainted syzkaller #0 PREEMPT(full) [ 840.353325][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 840.353335][T14382] Call Trace: [ 840.353341][T14382] [ 840.353348][T14382] dump_stack_lvl+0x16c/0x1f0 [ 840.353380][T14382] should_fail_ex+0x512/0x640 [ 840.353405][T14382] _copy_to_user+0x32/0xd0 [ 840.353435][T14382] simple_read_from_buffer+0xcb/0x170 [ 840.353463][T14382] proc_fail_nth_read+0x197/0x240 [ 840.353485][T14382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 840.353507][T14382] ? rw_verify_area+0xcf/0x6c0 [ 840.353531][T14382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 840.353551][T14382] vfs_read+0x1e4/0xcf0 [ 840.353570][T14382] ? __pfx___mutex_lock+0x10/0x10 [ 840.353588][T14382] ? __pfx_vfs_read+0x10/0x10 [ 840.353610][T14382] ? __fget_files+0x20e/0x3c0 [ 840.353636][T14382] ksys_read+0x12a/0x250 [ 840.353651][T14382] ? __pfx_ksys_read+0x10/0x10 [ 840.353675][T14382] do_syscall_64+0xcd/0xfa0 [ 840.353693][T14382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.353711][T14382] RIP: 0033:0x7ff9fc98e0dc [ 840.353725][T14382] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 840.353742][T14382] RSP: 002b:00007ff9fd7cc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 840.353759][T14382] RAX: ffffffffffffffda RBX: 00007ff9fcbe5fa0 RCX: 00007ff9fc98e0dc [ 840.353770][T14382] RDX: 000000000000000f RSI: 00007ff9fd7cc0a0 RDI: 0000000000000003 [ 840.353781][T14382] RBP: 00007ff9fd7cc090 R08: 0000000000000000 R09: 0000000000000000 [ 840.353791][T14382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.353801][T14382] R13: 00007ff9fcbe6038 R14: 00007ff9fcbe5fa0 R15: 00007ffe6ecf41a8 [ 840.353827][T14382] [ 842.323806][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 842.323822][ T30] audit: type=1400 audit(1762685392.618:1204): avc: denied { read write } for pid=14414 comm="syz.3.2203" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 842.452106][T14416] IPVS: Scheduler module ip_vs_ not found [ 842.542698][T14416] IPVS: length: 1986356271 != 8 [ 842.559712][ T30] audit: type=1400 audit(1762685392.648:1205): avc: denied { open } for pid=14414 comm="syz.3.2203" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 842.648393][ T30] audit: type=1400 audit(1762685392.818:1206): avc: denied { write } for pid=14414 comm="syz.3.2203" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 842.706743][ T30] audit: type=1400 audit(1762685392.828:1207): avc: denied { write } for pid=14414 comm="syz.3.2203" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 842.837758][ T30] audit: type=1400 audit(1762685393.128:1208): avc: denied { ioctl } for pid=14424 comm="syz.4.2207" path="socket:[52335]" dev="sockfs" ino=52335 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 843.673874][ T30] audit: type=1400 audit(1762685393.968:1209): avc: denied { create } for pid=14434 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 843.721224][ T30] audit: type=1400 audit(1762685393.968:1210): avc: denied { write } for pid=14434 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 843.826594][ T5827] Bluetooth: hci6: command 0x1003 tx timeout [ 843.834520][T13789] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 844.574802][ T30] audit: type=1400 audit(1762685394.778:1211): avc: denied { create } for pid=14444 comm="syz.2.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 844.928463][ T30] audit: type=1400 audit(1762685394.878:1212): avc: denied { accept } for pid=14444 comm="syz.2.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 844.949915][ T30] audit: type=1400 audit(1762685395.208:1213): avc: denied { write } for pid=14450 comm="syz.4.2216" path="socket:[52635]" dev="sockfs" ino=52635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 846.644246][T14473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=14473 comm=syz.1.2219 [ 847.025518][T14481] wg1 speed is unknown, defaulting to 1000 [ 847.034561][T14481] lo speed is unknown, defaulting to 1000 [ 847.339195][T14491] dlm: no local IP address has been set [ 847.354085][T14491] dlm: cannot start dlm midcomms -107 [ 847.398633][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 847.398648][ T30] audit: type=1400 audit(1762685397.688:1219): avc: denied { bind } for pid=14486 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 847.447109][T14491] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 847.576955][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 847.606201][ T30] audit: type=1400 audit(1762685397.768:1220): avc: denied { mounton } for pid=14486 comm="syz.3.2225" path="/432/bus" dev="tmpfs" ino=2272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 847.698881][ T30] audit: type=1400 audit(1762685397.768:1221): avc: denied { create } for pid=14486 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 848.057910][T14502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 848.371920][ T30] audit: type=1400 audit(1762685398.578:1222): avc: denied { setopt } for pid=14500 comm="syz.4.2230" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.494681][ T5894] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 848.623285][ T30] audit: type=1400 audit(1762685398.578:1223): avc: denied { connect } for pid=14500 comm="syz.4.2230" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.689631][ T30] audit: type=1400 audit(1762685398.578:1224): avc: denied { write } for pid=14500 comm="syz.4.2230" laddr=172.20.20.18 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.716633][ T30] audit: type=1400 audit(1762685398.588:1225): avc: denied { create } for pid=14500 comm="syz.4.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 848.741561][ T30] audit: type=1400 audit(1762685398.588:1226): avc: denied { write } for pid=14500 comm="syz.4.2230" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 848.765599][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 848.772575][ T30] audit: type=1400 audit(1762685398.878:1227): avc: denied { create } for pid=14496 comm="syz.5.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 848.794164][ T5894] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 848.809718][ T5894] usb 3-1: config 1 interface 0 has no altsetting 0 [ 848.816510][ T30] audit: type=1400 audit(1762685398.878:1228): avc: denied { bind } for pid=14496 comm="syz.5.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 848.839479][ T5894] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 848.849400][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.889851][ T5894] usb 3-1: Product: ᡔ㲩鎶팪臧街室៤â›ä œé˜™éª¦é‰´ì³Ÿï¼€ä¨„粔侌犸湙æ®î™²ê¢’콵钒Q혢蒸ꠂꡭ嚀ꌄ五䅆ç®ë¬”枰藮﷬ì‰éœ·æŸŸì¥—ሬ舉ൃ딴㠡秞袹ଘä”㪉絬뢋쥯磌éºì³¬ç¶á‘†â¡³ì¥”迀泹莉ⱉ䊶î›î«·ê™ î»µá”…ḓç•뚅쉶憡ᦢèŽÏŒç¨‹ã‡²ì€„å’‚å매✹안᪗綥꿊ﵟ鞒⫲﷕欉氆 [ 849.157235][T14510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.211066][ T5894] usb 3-1: Manufacturer: ã  [ 849.308315][ T5894] usb 3-1: SerialNumber: ÐŽ [ 849.500691][T13789] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 849.679286][ T5894] usbhid 3-1:1.0: can't add hid device: -71 [ 849.684773][T14524] wg1 speed is unknown, defaulting to 1000 [ 849.699759][ T5894] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 849.717933][T14524] lo speed is unknown, defaulting to 1000 [ 849.737937][ T5894] usb 3-1: USB disconnect, device number 63 [ 850.379867][T14537] netlink: 'syz.3.2240': attribute type 17 has an invalid length. [ 850.391569][T14537] netlink: 'syz.3.2240': attribute type 16 has an invalid length. [ 850.399514][T14537] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2240'. [ 850.450658][T11333] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 850.633608][T11333] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 851.492806][T11333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.503411][T11333] usb 3-1: Product: syz [ 851.515058][T11333] usb 3-1: Manufacturer: syz [ 851.519696][T11333] usb 3-1: SerialNumber: syz [ 851.540517][T11333] usb 3-1: config 0 descriptor?? [ 851.580823][T11333] usb 3-1: can't set config #0, error -71 [ 851.619845][T11333] usb 3-1: USB disconnect, device number 64 [ 851.626645][T14556] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 851.674691][T14556] overlayfs: overlapping lowerdir path [ 852.112449][T11333] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 852.271766][T11333] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 852.287146][T11333] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 852.311164][T11333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 852.329741][T11333] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 852.355653][T11333] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 852.379115][T11333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.388792][T11333] usb 3-1: Product: syz [ 852.393058][T11333] usb 3-1: Manufacturer: syz [ 852.397885][T11333] usb 3-1: SerialNumber: syz [ 852.404502][T11333] usb 3-1: config 0 descriptor?? [ 852.420134][T11333] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35 [ 852.431762][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 852.431774][ T30] audit: type=1400 audit(1762685402.728:1247): avc: denied { read } for pid=5170 comm="acpid" name="mouse1" dev="devtmpfs" ino=3645 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 852.545539][ T30] audit: type=1400 audit(1762685402.728:1248): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3645 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 852.625116][ T30] audit: type=1400 audit(1762685402.728:1249): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3645 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 852.734948][ T30] audit: type=1400 audit(1762685403.028:1250): avc: denied { mount } for pid=14559 comm="syz.2.2248" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 852.787747][ T30] audit: type=1400 audit(1762685403.058:1251): avc: denied { create } for pid=14559 comm="syz.2.2248" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 852.818675][T11333] usb 3-1: USB disconnect, device number 65 [ 852.960329][ T30] audit: type=1400 audit(1762685403.248:1252): avc: denied { mount } for pid=14530 comm="syz.1.2238" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 853.539521][ T30] audit: type=1400 audit(1762685403.828:1253): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 854.071156][T11333] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 854.257668][T11333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.274803][T11333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.300522][T11333] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 854.312109][T11333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.403109][T11333] usb 6-1: config 0 descriptor?? [ 854.567682][ T30] audit: type=1400 audit(1762685404.858:1254): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 855.848303][T14614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2263'. [ 855.875178][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2263'. [ 856.201830][T11333] usbhid 6-1:0.0: can't add hid device: -71 [ 856.207889][T11333] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 856.248149][ T30] audit: type=1400 audit(1762685406.538:1255): avc: denied { read } for pid=14615 comm="syz.3.2264" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 856.305367][T11333] usb 6-1: USB disconnect, device number 5 [ 856.388885][ T30] audit: type=1400 audit(1762685406.538:1256): avc: denied { open } for pid=14615 comm="syz.3.2264" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 857.703841][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 857.703881][ T30] audit: type=1400 audit(1762685407.948:1259): avc: denied { block_suspend } for pid=14630 comm="syz.5.2268" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 857.705314][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 858.018596][T14636] xt_l2tp: v2 doesn't support IP mode [ 858.026366][ T30] audit: type=1400 audit(1762685408.318:1260): avc: denied { create } for pid=14630 comm="syz.5.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 858.614280][ T30] audit: type=1400 audit(1762685408.838:1261): avc: denied { write } for pid=14630 comm="syz.5.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 859.615822][T14657] sockfs: Unknown parameter 'tracÐÇqVœ·Â:ˆù 5Nn [ 859.615822][T14657] ?7f±u®p$»1vë…Ë?ޝS¸h‰Ù\^ÒÔÒ\ç¯fš·ïFšµô’~°l´Ê´1»b-DTR{kJ°' [ 860.024488][ T30] audit: type=1400 audit(1762685410.318:1262): avc: denied { read write } for pid=14646 comm="syz.3.2272" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 860.129921][T14669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2277'. [ 860.185401][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2277'. [ 860.433190][ T30] audit: type=1400 audit(1762685410.318:1263): avc: denied { open } for pid=14646 comm="syz.3.2272" path="/444/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 860.522418][ T30] audit: type=1400 audit(1762685410.698:1264): avc: denied { mount } for pid=14668 comm="syz.2.2276" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 860.683988][ T30] audit: type=1400 audit(1762685410.708:1265): avc: denied { mounton } for pid=14668 comm="syz.2.2276" path="/420/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 861.503391][ T30] audit: type=1400 audit(1762685410.708:1266): avc: denied { create } for pid=14668 comm="syz.2.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 861.524406][ T30] audit: type=1400 audit(1762685410.948:1267): avc: denied { read } for pid=14668 comm="syz.2.2276" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 861.558483][ T30] audit: type=1400 audit(1762685410.948:1268): avc: denied { open } for pid=14668 comm="syz.2.2276" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 861.560732][T14675] pim6reg: entered allmulticast mode [ 862.963744][T14688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.011093][T14688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.130373][ T30] audit: type=1400 audit(1762685413.408:1269): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 863.384995][T14695] FAULT_INJECTION: forcing a failure. [ 863.384995][T14695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 863.398371][T14695] CPU: 1 UID: 0 PID: 14695 Comm: syz.5.2280 Not tainted syzkaller #0 PREEMPT(full) [ 863.398395][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 863.398405][T14695] Call Trace: [ 863.398412][T14695] [ 863.398419][T14695] dump_stack_lvl+0x16c/0x1f0 [ 863.398450][T14695] should_fail_ex+0x512/0x640 [ 863.398474][T14695] should_fail_alloc_page+0xe7/0x130 [ 863.398496][T14695] prepare_alloc_pages+0x3c2/0x610 [ 863.398519][T14695] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 863.398552][T14695] ? find_held_lock+0x2b/0x80 [ 863.398575][T14695] ? is_bpf_text_address+0x8a/0x1a0 [ 863.398596][T14695] ? bpf_ksym_find+0x127/0x1c0 [ 863.398621][T14695] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 863.398646][T14695] ? is_bpf_text_address+0x94/0x1a0 [ 863.398667][T14695] ? kernel_text_address+0x8d/0x100 [ 863.398686][T14695] ? __kernel_text_address+0xd/0x40 [ 863.398704][T14695] ? unwind_get_return_address+0x59/0xa0 [ 863.398734][T14695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 863.398758][T14695] ? policy_nodemask+0xea/0x4e0 [ 863.398781][T14695] alloc_pages_mpol+0x1fb/0x550 [ 863.398801][T14695] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 863.398821][T14695] ? kasan_save_stack+0x33/0x60 [ 863.398836][T14695] ? kasan_save_track+0x14/0x30 [ 863.398851][T14695] ? __kasan_kmalloc+0xaa/0xb0 [ 863.398866][T14695] ? __get_vm_area_node+0x101/0x330 [ 863.398890][T14695] alloc_pages_noprof+0x131/0x390 [ 863.398911][T14695] get_free_pages_noprof+0x10/0xb0 [ 863.398928][T14695] kasan_populate_vmalloc+0x9f/0x2d0 [ 863.398953][T14695] ? alloc_vmap_area+0x8b5/0x29e0 [ 863.398976][T14695] alloc_vmap_area+0x960/0x29e0 [ 863.399011][T14695] ? __pfx_alloc_vmap_area+0x10/0x10 [ 863.399036][T14695] __get_vm_area_node+0x1ca/0x330 [ 863.399061][T14695] __vmalloc_node_range_noprof+0x271/0x1480 [ 863.399083][T14695] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 863.399104][T14695] ? find_held_lock+0x2b/0x80 [ 863.399125][T14695] ? avc_has_perm_noaudit+0x117/0x3b0 [ 863.399151][T14695] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 863.399181][T14695] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 863.399203][T14695] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 863.399230][T14695] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 863.399248][T14695] __vmalloc_node_noprof+0xad/0xf0 [ 863.399269][T14695] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 863.399292][T14695] bpf_prog_alloc_no_stats+0x58/0x610 [ 863.399310][T14695] ? security_capable+0x7e/0x260 [ 863.399337][T14695] bpf_prog_alloc+0x3b/0x230 [ 863.399355][T14695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 863.399378][T14695] bpf_prog_load+0x1c28/0x2850 [ 863.399408][T14695] ? __pfx_bpf_prog_load+0x10/0x10 [ 863.399435][T14695] ? avc_has_perm_noaudit+0x149/0x3b0 [ 863.399461][T14695] ? avc_has_perm+0x144/0x1f0 [ 863.399496][T14695] ? selinux_bpf+0xde/0x130 [ 863.399518][T14695] ? bpf_lsm_bpf+0x9/0x10 [ 863.399539][T14695] __sys_bpf+0x3e72/0x4980 [ 863.399568][T14695] ? __pfx___sys_bpf+0x10/0x10 [ 863.399592][T14695] ? find_held_lock+0x2b/0x80 [ 863.399618][T14695] ? find_held_lock+0x2b/0x80 [ 863.399645][T14695] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 863.399677][T14695] ? fput+0x9b/0xd0 [ 863.399698][T14695] ? ksys_write+0x1ac/0x250 [ 863.399713][T14695] ? __pfx_ksys_write+0x10/0x10 [ 863.399734][T14695] __x64_sys_bpf+0x78/0xc0 [ 863.399758][T14695] ? lockdep_hardirqs_on+0x7c/0x110 [ 863.399784][T14695] do_syscall_64+0xcd/0xfa0 [ 863.399801][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.399818][T14695] RIP: 0033:0x7ff9fc98f6c9 [ 863.399832][T14695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.399848][T14695] RSP: 002b:00007ff9fd78a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 863.399866][T14695] RAX: ffffffffffffffda RBX: 00007ff9fcbe6180 RCX: 00007ff9fc98f6c9 [ 863.399878][T14695] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 863.399888][T14695] RBP: 00007ff9fd78a090 R08: 0000000000000000 R09: 0000000000000000 [ 863.399898][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.399909][T14695] R13: 00007ff9fcbe6218 R14: 00007ff9fcbe6180 R15: 00007ffe6ecf41a8 [ 863.399934][T14695] [ 863.399977][T14695] syz.5.2280: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 863.827627][T14695] CPU: 0 UID: 0 PID: 14695 Comm: syz.5.2280 Not tainted syzkaller #0 PREEMPT(full) [ 863.827653][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 863.827664][T14695] Call Trace: [ 863.827671][T14695] [ 863.827678][T14695] dump_stack_lvl+0x16c/0x1f0 [ 863.827711][T14695] warn_alloc+0x248/0x3a0 [ 863.827738][T14695] ? __pfx_warn_alloc+0x10/0x10 [ 863.827765][T14695] ? kfree+0x2b8/0x6d0 [ 863.827786][T14695] ? __get_vm_area_node+0x2cd/0x330 [ 863.827812][T14695] ? __get_vm_area_node+0x2cd/0x330 [ 863.827831][T14695] ? __get_vm_area_node+0x208/0x330 [ 863.827856][T14695] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 863.827880][T14695] ? find_held_lock+0x2b/0x80 [ 863.827904][T14695] ? avc_has_perm_noaudit+0x117/0x3b0 [ 863.827936][T14695] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 863.827964][T14695] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 863.827987][T14695] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 863.828014][T14695] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 863.828034][T14695] __vmalloc_node_noprof+0xad/0xf0 [ 863.828055][T14695] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 863.828078][T14695] bpf_prog_alloc_no_stats+0x58/0x610 [ 863.828097][T14695] ? security_capable+0x7e/0x260 [ 863.828125][T14695] bpf_prog_alloc+0x3b/0x230 [ 863.828144][T14695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 863.828166][T14695] bpf_prog_load+0x1c28/0x2850 [ 863.828195][T14695] ? __pfx_bpf_prog_load+0x10/0x10 [ 863.828223][T14695] ? avc_has_perm_noaudit+0x149/0x3b0 [ 863.828250][T14695] ? avc_has_perm+0x144/0x1f0 [ 863.828286][T14695] ? selinux_bpf+0xde/0x130 [ 863.828309][T14695] ? bpf_lsm_bpf+0x9/0x10 [ 863.828329][T14695] __sys_bpf+0x3e72/0x4980 [ 863.828357][T14695] ? __pfx___sys_bpf+0x10/0x10 [ 863.828382][T14695] ? find_held_lock+0x2b/0x80 [ 863.828409][T14695] ? find_held_lock+0x2b/0x80 [ 863.828437][T14695] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 863.828470][T14695] ? fput+0x9b/0xd0 [ 863.828492][T14695] ? ksys_write+0x1ac/0x250 [ 863.828508][T14695] ? __pfx_ksys_write+0x10/0x10 [ 863.828529][T14695] __x64_sys_bpf+0x78/0xc0 [ 863.828554][T14695] ? lockdep_hardirqs_on+0x7c/0x110 [ 863.828580][T14695] do_syscall_64+0xcd/0xfa0 [ 863.828597][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.828614][T14695] RIP: 0033:0x7ff9fc98f6c9 [ 863.828629][T14695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.828646][T14695] RSP: 002b:00007ff9fd78a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 863.828664][T14695] RAX: ffffffffffffffda RBX: 00007ff9fcbe6180 RCX: 00007ff9fc98f6c9 [ 863.828676][T14695] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 863.828687][T14695] RBP: 00007ff9fd78a090 R08: 0000000000000000 R09: 0000000000000000 [ 863.828698][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.828708][T14695] R13: 00007ff9fcbe6218 R14: 00007ff9fcbe6180 R15: 00007ffe6ecf41a8 [ 863.828733][T14695] [ 863.828740][T14695] Mem-Info: [ 864.126735][T14695] active_anon:161215 inactive_anon:0 isolated_anon:0 [ 864.126735][T14695] active_file:11089 inactive_file:51696 isolated_file:0 [ 864.126735][T14695] unevictable:768 dirty:348 writeback:0 [ 864.126735][T14695] slab_reclaimable:13156 slab_unreclaimable:104446 [ 864.126735][T14695] mapped:46989 shmem:145584 pagetables:2900 [ 864.126735][T14695] sec_pagetables:0 bounce:0 [ 864.126735][T14695] kernel_misc_reclaimable:0 [ 864.126735][T14695] free:1127755 free_pcp:11045 free_cma:0 [ 864.172840][T14695] Node 0 active_anon:644860kB inactive_anon:0kB active_file:44356kB inactive_file:206580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:187956kB dirty:1384kB writeback:0kB shmem:580800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14384kB pagetables:11484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 864.205760][T14695] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 864.235704][T14695] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 864.265693][T14695] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 864.271453][T14695] Node 0 DMA32 free:596104kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:644860kB inactive_anon:0kB active_file:44356kB inactive_file:206580kB unevictable:1536kB writepending:1384kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:23464kB local_pcp:12556kB free_cma:0kB [ 864.305327][T14695] lowmem_reserve[]: 0 0 1 1 1 [ 864.310056][T14695] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.339681][T14695] lowmem_reserve[]: 0 0 0 0 0 [ 864.344415][T14695] Node 1 Normal free:3899572kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20720kB local_pcp:10000kB free_cma:0kB [ 864.376742][T14695] lowmem_reserve[]: 0 0 0 0 0 [ 864.381471][T14695] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 864.396247][T14695] Node 0 DMA32: 289*4kB (UE) 134*8kB (U) 61*16kB (U) 197*32kB (UE) 19*64kB (UE) 11*128kB (UE) 75*256kB (UME) 69*512kB (UM) 39*1024kB (UME) 5*2048kB (ME) 117*4096kB (UM) = 596068kB [ 864.414202][T14695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 864.425720][T14695] Node 1 Normal: 225*4kB (UME) 56*8kB (UME) 47*16kB (UE) 236*32kB (UME) 76*64kB (UME) 22*128kB (UME) 5*256kB (UM) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3899572kB [ 864.443678][T14695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.453257][T14695] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 864.462553][T14695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.472114][T14695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 864.481500][T14695] 208365 total pagecache pages [ 864.486580][T14695] 0 pages in swap cache [ 864.490734][T14695] Free swap = 124996kB [ 864.494878][T14695] Total swap = 124996kB [ 864.499038][T14695] 2097051 pages RAM [ 864.502891][T14695] 0 pages HighMem/MovableOnly [ 864.507576][T14695] 428747 pages reserved [ 864.511749][T14695] 0 pages cma reserved [ 864.671568][T14698] kernel profiling enabled (shift: 34) [ 864.677609][T14698] profiling shift: 34 too large [ 864.789069][ T30] audit: type=1400 audit(1762685415.078:1270): avc: denied { connect } for pid=14699 comm="syz.5.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 865.010283][T14698] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 865.138043][T14698] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 865.174948][T14698] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 865.240899][T14698] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 865.296262][T14698] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 865.342067][T14698] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 865.491097][T14698] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 865.509919][T14698] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 865.530642][T14698] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 866.887314][T14723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2288'. [ 866.945183][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'. [ 867.778203][T14729] sit0: Caught tx_queue_len zero misconfig [ 869.046474][T14741] KVM: debugfs: duplicate directory 14741-6 [ 869.664139][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.831550][ T30] audit: type=1400 audit(1762685420.128:1271): avc: denied { read } for pid=14751 comm="syz.2.2296" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 869.935612][ T30] audit: type=1400 audit(1762685420.128:1272): avc: denied { open } for pid=14751 comm="syz.2.2296" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 870.061095][ T30] audit: type=1400 audit(1762685420.158:1273): avc: denied { ioctl } for pid=14751 comm="syz.2.2296" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x4808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 870.097619][ T30] audit: type=1400 audit(1762685420.278:1274): avc: denied { map } for pid=14751 comm="syz.2.2296" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 871.514921][ T30] audit: type=1400 audit(1762685421.808:1275): avc: denied { override_creds } for pid=14776 comm="syz.5.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 871.956333][ T30] audit: type=1400 audit(1762685422.038:1276): avc: denied { map } for pid=14779 comm="syz.3.2303" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 872.048394][ T30] audit: type=1400 audit(1762685422.048:1277): avc: denied { setopt } for pid=14779 comm="syz.3.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 872.052797][T14786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.067903][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.166078][T14805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.178405][T14805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.470609][ T2147] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 873.861452][ T2147] usb 6-1: Using ep0 maxpacket: 16 [ 873.934668][T14816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2312'. [ 874.016613][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2312'. [ 874.184229][ T2147] usb 6-1: unable to get BOS descriptor or descriptor too short [ 874.204247][ T2147] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 874.212208][ T2147] usb 6-1: can't read configurations, error -71 [ 874.374438][T14821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.461084][T14821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.505949][ T30] audit: type=1400 audit(1762685424.798:1278): avc: denied { bind } for pid=14823 comm="syz.3.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 874.704973][T14833] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2317'. [ 874.776170][T14075] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 874.955131][T14075] usb 2-1: Using ep0 maxpacket: 32 [ 874.994667][T14075] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 875.004062][T14075] usb 2-1: config 0 has no interface number 0 [ 875.047738][T14075] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 875.060558][T14075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.068571][T14075] usb 2-1: Product: syz [ 875.097130][T14075] usb 2-1: Manufacturer: syz [ 875.119711][T14075] usb 2-1: SerialNumber: syz [ 875.933614][T14075] usb 2-1: config 0 descriptor?? [ 876.500872][ T30] audit: type=1400 audit(1762685426.678:1279): avc: denied { ioctl } for pid=14842 comm="syz.4.2321" path="socket:[53986]" dev="sockfs" ino=53986 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 876.710278][T14075] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -110 [ 876.718992][T14075] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 876.760351][T14075] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 876.794084][T14075] usb 2-1: USB disconnect, device number 55 [ 876.802268][ T30] audit: type=1400 audit(1762685427.098:1280): avc: denied { read } for pid=14849 comm="syz.2.2323" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 876.840243][ T30] audit: type=1400 audit(1762685427.098:1281): avc: denied { open } for pid=14849 comm="syz.2.2323" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 876.867148][ T30] audit: type=1400 audit(1762685427.128:1282): avc: denied { ioctl } for pid=14849 comm="syz.2.2323" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 877.010770][ T5882] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 877.190615][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 877.238766][T14863] fuse: Bad value for 'fd' [ 877.246608][ T30] audit: type=1400 audit(1762685427.548:1283): avc: denied { write } for pid=14853 comm="syz.5.2325" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 877.502989][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 877.517076][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 877.528756][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 877.538820][ T30] audit: type=1400 audit(1762685427.828:1284): avc: denied { bind } for pid=14861 comm="syz.2.2328" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 877.581886][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 877.595476][ T30] audit: type=1400 audit(1762685427.828:1285): avc: denied { node_bind } for pid=14861 comm="syz.2.2328" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 877.637577][ T5882] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 877.659472][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.763972][ T5882] usb 4-1: Product: syz [ 877.768384][ T5882] usb 4-1: Manufacturer: syz [ 877.773574][ T5882] usb 4-1: SerialNumber: syz [ 877.798256][ T5882] usb 4-1: config 0 descriptor?? [ 879.677515][T14075] usb 4-1: USB disconnect, device number 72 [ 879.722409][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2332'. [ 879.932152][T14886] bridge1: port 1(veth3) entered blocking state [ 879.938645][T14886] bridge1: port 1(veth3) entered disabled state [ 879.946490][T14886] veth3: entered allmulticast mode [ 880.077618][T14886] veth3: entered promiscuous mode [ 880.587878][T14887] bridge1: port 2(veth5) entered blocking state [ 880.594899][T14887] bridge1: port 2(veth5) entered disabled state [ 880.602527][T14887] veth5: entered allmulticast mode [ 880.609908][T14887] veth5: entered promiscuous mode [ 880.617066][T14900] syz_tun: entered allmulticast mode [ 880.840248][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2337'. [ 880.956085][ T30] audit: type=1400 audit(1762685431.248:1286): avc: denied { ioctl } for pid=14906 comm="syz.1.2338" path="socket:[54088]" dev="sockfs" ino=54088 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 881.715698][T14919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.733115][T14919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.753327][ T30] audit: type=1400 audit(1762685432.048:1287): avc: denied { ioctl } for pid=14921 comm="syz.5.2342" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 881.940841][ T976] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 882.213966][ T976] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 882.230618][ T976] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 882.241797][ T976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 882.251884][ T976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 882.271923][ T976] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 882.282327][ T976] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 882.300625][ T976] usb 2-1: Product: syz [ 882.310573][ T976] usb 2-1: Manufacturer: syz [ 882.329776][ T976] cdc_wdm 2-1:1.0: skipping garbage [ 882.342184][ T976] cdc_wdm 2-1:1.0: skipping garbage [ 882.359905][ T976] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 882.374287][ T976] cdc_wdm 2-1:1.0: Unknown control protocol [ 882.395403][ T30] audit: type=1326 audit(1762685432.688:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ef8f6c9 code=0x7ffc0000 [ 882.422542][ T30] audit: type=1326 audit(1762685432.688:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ef8f6c9 code=0x7ffc0000 [ 882.452392][T14931] FAULT_INJECTION: forcing a failure. [ 882.452392][T14931] name failslab, interval 1, probability 0, space 0, times 0 [ 882.465398][T14931] CPU: 1 UID: 0 PID: 14931 Comm: syz.2.2345 Not tainted syzkaller #0 PREEMPT(full) [ 882.465421][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 882.465432][T14931] Call Trace: [ 882.465439][T14931] [ 882.465445][T14931] dump_stack_lvl+0x116/0x1f0 [ 882.465478][T14931] should_fail_ex+0x512/0x640 [ 882.465502][T14931] should_failslab+0xc2/0x120 [ 882.465522][T14931] kmem_cache_alloc_noprof+0x75/0x6e0 [ 882.465548][T14931] ? __send_signal_locked+0x159/0x12c0 [ 882.465571][T14931] ? __send_signal_locked+0x159/0x12c0 [ 882.465587][T14931] __send_signal_locked+0x159/0x12c0 [ 882.465611][T14931] send_sig+0xd7/0x170 [ 882.465632][T14931] ? __pfx_send_sig+0x10/0x10 [ 882.465654][T14931] ? __pfx_woken_wake_function+0x10/0x10 [ 882.465680][T14931] sk_stream_error+0xb8/0x120 [ 882.465701][T14931] tcp_sendmsg_locked+0xea7/0x42e0 [ 882.465723][T14931] ? avc_has_perm+0x144/0x1f0 [ 882.465751][T14931] ? __lock_acquire+0xb8a/0x1c90 [ 882.465785][T14931] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 882.465806][T14931] ? do_raw_spin_lock+0x12c/0x2b0 [ 882.465825][T14931] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 882.465850][T14931] ? __local_bh_enable_ip+0xa4/0x120 [ 882.465876][T14931] tcp_sendmsg+0x2e/0x50 [ 882.465892][T14931] ? __pfx_tcp_sendmsg+0x10/0x10 [ 882.465910][T14931] inet6_sendmsg+0xb9/0x140 [ 882.465937][T14931] ____sys_sendmsg+0x705/0xc70 [ 882.465955][T14931] ? copy_msghdr_from_user+0x10a/0x160 [ 882.465976][T14931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 882.465997][T14931] ? kasan_save_stack+0x42/0x60 [ 882.466018][T14931] ? kasan_save_stack+0x33/0x60 [ 882.466032][T14931] ? kasan_save_track+0x14/0x30 [ 882.466047][T14931] ? __kasan_save_free_info+0x3b/0x60 [ 882.466069][T14931] ? __kasan_slab_free+0x5f/0x80 [ 882.466085][T14931] ? kmem_cache_free+0x2d4/0x6c0 [ 882.466109][T14931] ? audit_log_end+0x1f/0x30 [ 882.466130][T14931] ___sys_sendmsg+0x134/0x1d0 [ 882.466153][T14931] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.466188][T14931] ? find_held_lock+0x2b/0x80 [ 882.466225][T14931] __sys_sendmmsg+0x200/0x420 [ 882.466250][T14931] ? __pfx___sys_sendmmsg+0x10/0x10 [ 882.466280][T14931] ? __seccomp_filter+0x8e7/0x11c0 [ 882.466316][T14931] ? fput+0x9b/0xd0 [ 882.466337][T14931] ? ksys_write+0x1ac/0x250 [ 882.466360][T14931] __x64_sys_sendmmsg+0x9c/0x100 [ 882.466383][T14931] do_syscall_64+0xcd/0xfa0 [ 882.466400][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.466417][T14931] RIP: 0033:0x7f6a1ef8f6c9 [ 882.466431][T14931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.466446][T14931] RSP: 002b:00007f6a1fd59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 882.466463][T14931] RAX: ffffffffffffffda RBX: 00007f6a1f1e5fa0 RCX: 00007f6a1ef8f6c9 [ 882.466474][T14931] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 882.466485][T14931] RBP: 00007f6a1fd59090 R08: 0000000000000000 R09: 0000000000000000 [ 882.466495][T14931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.466504][T14931] R13: 00007f6a1f1e6038 R14: 00007f6a1f1e5fa0 R15: 00007ffe949f2318 [ 882.466529][T14931] [ 882.784662][ T30] audit: type=1326 audit(1762685432.718:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6a1ef8f6c9 code=0x7ffc0000 [ 882.808245][ T30] audit: type=1326 audit(1762685432.718:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ef8f6c9 code=0x7ffc0000 [ 882.832474][ T30] audit: type=1326 audit(1762685432.718:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ef8f6c9 code=0x7ffc0000 [ 882.850619][T14935] FAULT_INJECTION: forcing a failure. [ 882.850619][T14935] name failslab, interval 1, probability 0, space 0, times 0 [ 882.856166][ T30] audit: type=1326 audit(1762685432.748:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a1ef8f6c9 code=0x7ffc0000 [ 882.891531][T14935] CPU: 0 UID: 0 PID: 14935 Comm: syz.5.2347 Not tainted syzkaller #0 PREEMPT(full) [ 882.891555][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 882.891564][T14935] Call Trace: [ 882.891570][T14935] [ 882.891576][T14935] dump_stack_lvl+0x16c/0x1f0 [ 882.891603][T14935] should_fail_ex+0x512/0x640 [ 882.891622][T14935] ? __kmalloc_cache_noprof+0x5f/0x780 [ 882.891653][T14935] should_failslab+0xc2/0x120 [ 882.891671][T14935] __kmalloc_cache_noprof+0x72/0x780 [ 882.891692][T14935] ? raw_open+0x8b/0x500 [ 882.891711][T14935] ? raw_open+0x8b/0x500 [ 882.891724][T14935] raw_open+0x8b/0x500 [ 882.891738][T14935] ? __pfx_raw_open+0x10/0x10 [ 882.891752][T14935] misc_open+0x26d/0x450 [ 882.891769][T14935] ? __pfx_misc_open+0x10/0x10 [ 882.891785][T14935] chrdev_open+0x234/0x6a0 [ 882.891803][T14935] ? __pfx_chrdev_open+0x10/0x10 [ 882.891820][T14935] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 882.891841][T14935] do_dentry_open+0x982/0x1530 [ 882.891856][T14935] ? __pfx_chrdev_open+0x10/0x10 [ 882.891877][T14935] vfs_open+0x82/0x3f0 [ 882.891904][T14935] path_openat+0x1de4/0x2cb0 [ 882.891927][T14935] ? __pfx_path_openat+0x10/0x10 [ 882.891943][T14935] ? __lock_acquire+0xb8a/0x1c90 [ 882.891970][T14935] do_filp_open+0x20b/0x470 [ 882.891985][T14935] ? __pfx_do_filp_open+0x10/0x10 [ 882.892017][T14935] ? alloc_fd+0x471/0x7d0 [ 882.892038][T14935] do_sys_openat2+0x11b/0x1d0 [ 882.892056][T14935] ? __pfx_do_sys_openat2+0x10/0x10 [ 882.892073][T14935] ? find_held_lock+0x2b/0x80 [ 882.892092][T14935] ? handle_mm_fault+0x2ab/0xd10 [ 882.892117][T14935] __x64_sys_openat+0x174/0x210 [ 882.892136][T14935] ? __pfx___x64_sys_openat+0x10/0x10 [ 882.892156][T14935] ? do_user_addr_fault+0x843/0x1370 [ 882.892178][T14935] do_syscall_64+0xcd/0xfa0 [ 882.892194][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.892208][T14935] RIP: 0033:0x7ff9fc98df10 [ 882.892222][T14935] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 882.892236][T14935] RSP: 002b:00007ff9fd7c9ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 882.892251][T14935] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff9fc98df10 [ 882.892261][T14935] RDX: 0000000000000002 RSI: 00007ff9fca11c6c RDI: 00000000ffffff9c [ 882.892271][T14935] RBP: 00007ff9fca11c6c R08: 0000000000000000 R09: 0000000000000000 [ 882.892281][T14935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 882.892290][T14935] R13: 000000000000006e R14: 0000200000001f00 R15: 00007ffe6ecf41a8 [ 882.892316][T14935] [ 883.154770][ T30] audit: type=1326 audit(1762685432.748:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ef8f6c9 code=0x7ffc0000 [ 883.179305][ T30] audit: type=1326 audit(1762685432.748:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ef8f6c9 code=0x7ffc0000 [ 883.204403][ T30] audit: type=1326 audit(1762685432.748:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14930 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a1ef8f6c9 code=0x7ffc0000 [ 883.335926][ T5867] usb 2-1: USB disconnect, device number 56 [ 883.680905][T14948] FAULT_INJECTION: forcing a failure. [ 883.680905][T14948] name failslab, interval 1, probability 0, space 0, times 0 [ 883.693550][T14948] CPU: 0 UID: 0 PID: 14948 Comm: syz.3.2351 Not tainted syzkaller #0 PREEMPT(full) [ 883.693570][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 883.693576][T14948] Call Trace: [ 883.693581][T14948] [ 883.693586][T14948] dump_stack_lvl+0x16c/0x1f0 [ 883.693606][T14948] should_fail_ex+0x512/0x640 [ 883.693619][T14948] ? __kmalloc_cache_noprof+0x5f/0x780 [ 883.693636][T14948] should_failslab+0xc2/0x120 [ 883.693649][T14948] __kmalloc_cache_noprof+0x72/0x780 [ 883.693664][T14948] ? genl_start+0x1e8/0x980 [ 883.693676][T14948] ? genl_start+0x1e8/0x980 [ 883.693684][T14948] genl_start+0x1e8/0x980 [ 883.693697][T14948] __netlink_dump_start+0x60e/0x990 [ 883.693715][T14948] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 883.693727][T14948] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 883.693741][T14948] ? __pfx_genl_get_cmd+0x10/0x10 [ 883.693755][T14948] ? __pfx_genl_start+0x10/0x10 [ 883.693763][T14948] ? __pfx_genl_dumpit+0x10/0x10 [ 883.693772][T14948] ? __pfx_genl_done+0x10/0x10 [ 883.693783][T14948] ? __radix_tree_lookup+0x21f/0x2c0 [ 883.693806][T14948] genl_rcv_msg+0x46e/0x800 [ 883.693825][T14948] ? __pfx_genl_rcv_msg+0x10/0x10 [ 883.693842][T14948] ? __pfx_ethnl_default_start+0x10/0x10 [ 883.693856][T14948] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 883.693869][T14948] ? __pfx_ethnl_default_done+0x10/0x10 [ 883.693886][T14948] netlink_rcv_skb+0x158/0x420 [ 883.693901][T14948] ? __pfx_genl_rcv_msg+0x10/0x10 [ 883.693911][T14948] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 883.693931][T14948] ? netlink_deliver_tap+0x1ae/0xd30 [ 883.693953][T14948] genl_rcv+0x28/0x40 [ 883.693967][T14948] netlink_unicast+0x5aa/0x870 [ 883.693983][T14948] ? __pfx_netlink_unicast+0x10/0x10 [ 883.694003][T14948] netlink_sendmsg+0x8c8/0xdd0 [ 883.694020][T14948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.694040][T14948] ____sys_sendmsg+0xa98/0xc70 [ 883.694050][T14948] ? copy_msghdr_from_user+0x10a/0x160 [ 883.694064][T14948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 883.694080][T14948] ___sys_sendmsg+0x134/0x1d0 [ 883.694094][T14948] ? __pfx____sys_sendmsg+0x10/0x10 [ 883.694106][T14948] ? __lock_acquire+0x622/0x1c90 [ 883.694138][T14948] __sys_sendmsg+0x16d/0x220 [ 883.694154][T14948] ? __pfx___sys_sendmsg+0x10/0x10 [ 883.694187][T14948] do_syscall_64+0xcd/0xfa0 [ 883.694198][T14948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.694209][T14948] RIP: 0033:0x7f00c8b8f6c9 [ 883.694219][T14948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.694229][T14948] RSP: 002b:00007f00c9951038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.694239][T14948] RAX: ffffffffffffffda RBX: 00007f00c8de6090 RCX: 00007f00c8b8f6c9 [ 883.694246][T14948] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000005 [ 883.694252][T14948] RBP: 00007f00c9951090 R08: 0000000000000000 R09: 0000000000000000 [ 883.694258][T14948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.694264][T14948] R13: 00007f00c8de6128 R14: 00007f00c8de6090 R15: 00007ffc216d8648 [ 883.694278][T14948] [ 883.694453][T14075] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 884.208198][ T5867] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 884.359290][T14956] FAULT_INJECTION: forcing a failure. [ 884.359290][T14956] name failslab, interval 1, probability 0, space 0, times 0 [ 884.372487][T14956] CPU: 1 UID: 0 PID: 14956 Comm: syz.5.2354 Not tainted syzkaller #0 PREEMPT(full) [ 884.372511][T14956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 884.372521][T14956] Call Trace: [ 884.372528][T14956] [ 884.372535][T14956] dump_stack_lvl+0x16c/0x1f0 [ 884.372568][T14956] should_fail_ex+0x512/0x640 [ 884.372592][T14956] should_failslab+0xc2/0x120 [ 884.372613][T14956] kmem_cache_alloc_noprof+0x75/0x6e0 [ 884.372640][T14956] ? __pfx_stack_trace_save+0x10/0x10 [ 884.372663][T14956] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 884.372699][T14956] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 884.372720][T14956] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 884.372748][T14956] idr_get_free+0x528/0xa30 [ 884.372782][T14956] idr_alloc_u32+0x190/0x2f0 [ 884.372809][T14956] ? __pfx_idr_alloc_u32+0x10/0x10 [ 884.372831][T14956] ? do_raw_spin_lock+0x12c/0x2b0 [ 884.372851][T14956] ? net_generic+0xea/0x2a0 [ 884.372884][T14956] l2tp_tunnel_register+0xf8/0xbe0 [ 884.372907][T14956] ? __pfx___debug_object_init+0x10/0x10 [ 884.372931][T14956] ? sprintf+0xcc/0x100 [ 884.372954][T14956] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 884.372980][T14956] ? lockdep_init_map_type+0x5c/0x280 [ 884.372998][T14956] ? lockdep_init_map_type+0x5c/0x280 [ 884.373014][T14956] ? l2tp_tunnel_create+0x2cf/0x460 [ 884.373030][T14956] ? l2tp_tunnel_create+0x37d/0x460 [ 884.373049][T14956] l2tp_nl_cmd_tunnel_create+0x44e/0x990 [ 884.373078][T14956] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 884.373112][T14956] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 884.373142][T14956] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 884.373181][T14956] genl_family_rcv_msg_doit+0x209/0x2f0 [ 884.373199][T14956] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 884.373236][T14956] ? bpf_lsm_capable+0x9/0x10 [ 884.373255][T14956] ? security_capable+0x7e/0x260 [ 884.373282][T14956] ? ns_capable+0xd7/0x110 [ 884.373305][T14956] genl_rcv_msg+0x55c/0x800 [ 884.373324][T14956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.373341][T14956] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 884.373376][T14956] netlink_rcv_skb+0x158/0x420 [ 884.373401][T14956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.373419][T14956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 884.373454][T14956] ? netlink_deliver_tap+0x1ae/0xd30 [ 884.373482][T14956] genl_rcv+0x28/0x40 [ 884.373506][T14956] netlink_unicast+0x5aa/0x870 [ 884.373534][T14956] ? __pfx_netlink_unicast+0x10/0x10 [ 884.373569][T14956] netlink_sendmsg+0x8c8/0xdd0 [ 884.373597][T14956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.373632][T14956] ____sys_sendmsg+0xa98/0xc70 [ 884.373651][T14956] ? copy_msghdr_from_user+0x10a/0x160 [ 884.373680][T14956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 884.373710][T14956] ___sys_sendmsg+0x134/0x1d0 [ 884.373734][T14956] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.373754][T14956] ? __lock_acquire+0x622/0x1c90 [ 884.373815][T14956] __sys_sendmsg+0x16d/0x220 [ 884.373838][T14956] ? __pfx___sys_sendmsg+0x10/0x10 [ 884.373878][T14956] do_syscall_64+0xcd/0xfa0 [ 884.373895][T14956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.373912][T14956] RIP: 0033:0x7ff9fc98f6c9 [ 884.373926][T14956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.373943][T14956] RSP: 002b:00007ff9fd7cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.373960][T14956] RAX: ffffffffffffffda RBX: 00007ff9fcbe5fa0 RCX: 00007ff9fc98f6c9 [ 884.373971][T14956] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 884.373981][T14956] RBP: 00007ff9fd7cc090 R08: 0000000000000000 R09: 0000000000000000 [ 884.373991][T14956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.374001][T14956] R13: 00007ff9fcbe6038 R14: 00007ff9fcbe5fa0 R15: 00007ffe6ecf41a8 [ 884.374027][T14956] [ 884.754380][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 884.768557][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 884.780958][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 884.795346][T14075] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 884.814028][T14075] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 884.857054][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 885.030071][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 885.040357][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 885.050721][T14075] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 885.059912][T14075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 885.079823][T14075] usb 3-1: SerialNumber: syz [ 885.334455][ T5867] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 885.353244][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.370324][ T5867] usb 2-1: Product: syz [ 885.375835][T14075] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 885.385668][T14075] usb-storage 3-1:1.0: USB Mass Storage device detected [ 885.396242][ T5867] usb 2-1: Manufacturer: syz [ 885.401647][ T5867] usb 2-1: SerialNumber: syz [ 885.408533][T14075] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 885.418328][T14075] scsi host1: usb-storage 3-1:1.0 [ 885.432437][ T5867] usb 2-1: config 0 descriptor?? [ 886.571782][T14075] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 886.792524][ T55] usb 3-1: USB disconnect, device number 66 [ 886.975216][T14075] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 887.447680][T14075] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.568708][T14075] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 887.579172][T14075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.590370][T14075] usb 4-1: Product: syz [ 887.594789][T14075] usb 4-1: Manufacturer: syz [ 887.599359][T14075] usb 4-1: SerialNumber: syz [ 887.610448][T14978] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 887.646558][T14075] usblp0: Disabling reads from problematic bidirectional printer [ 888.091756][ T5867] usb 2-1: USB disconnect, device number 57 [ 888.100460][T14075] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 888.241066][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 888.241082][ T30] audit: type=1400 audit(1762685438.528:1323): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 888.369677][ T30] audit: type=1400 audit(1762685438.568:1324): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.391022][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.242940][ T30] audit: type=1400 audit(1762685438.568:1325): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.264951][ T30] audit: type=1400 audit(1762685438.568:1326): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.304249][ T30] audit: type=1400 audit(1762685438.568:1327): avc: denied { read } for pid=5480 comm="dhcpcd" name="n105" dev="tmpfs" ino=9920 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 889.327696][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.402781][ T30] audit: type=1400 audit(1762685438.568:1328): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=9920 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 889.425886][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.477049][T15024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2368'. [ 889.489500][ T30] audit: type=1400 audit(1762685438.568:1329): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=9920 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 889.512788][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.562293][ T30] audit: type=1400 audit(1762685438.838:1330): avc: denied { setopt } for pid=15004 comm="syz.4.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 889.592404][ T30] audit: type=1400 audit(1762685439.448:1331): avc: denied { mount } for pid=15010 comm="syz.1.2364" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 889.614948][ T30] audit: type=1400 audit(1762685439.638:1332): avc: denied { ioctl } for pid=15011 comm="syz.2.2365" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 890.300647][ T5894] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 890.381598][T14075] usb 4-1: USB disconnect, device number 73 [ 890.389134][T14075] usblp0: removed [ 890.516212][ T5894] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 891.463933][ T5894] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 891.529644][ T5894] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 891.710582][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.223423][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 892.717782][ T5894] usb 3-1: invalid MIDI out EP 0 [ 893.364738][T15091] wg1 speed is unknown, defaulting to 1000 [ 893.366738][ T5894] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 893.408511][T15091] lo speed is unknown, defaulting to 1000 [ 893.479591][ T5894] usb 3-1: USB disconnect, device number 67 [ 893.488834][T15097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2383'. [ 893.572256][T15102] xt_hashlimit: size too large, truncated to 1048576 [ 893.623440][T15100] block nbd0: server does not support multiple connections per device. [ 893.652629][T15100] block nbd0: shutting down sockets [ 894.413209][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 894.413224][ T30] audit: type=1400 audit(1762685444.708:1343): avc: denied { ioctl } for pid=15114 comm="syz.5.2388" path="socket:[55788]" dev="sockfs" ino=55788 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 894.609409][T15115] netlink: 'syz.5.2388': attribute type 10 has an invalid length. [ 894.690612][ T30] audit: type=1400 audit(1762685444.978:1344): avc: denied { write } for pid=15114 comm="syz.5.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 894.736240][T15115] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 894.749782][T15126] netlink: 'syz.3.2389': attribute type 4 has an invalid length. [ 894.787773][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2389'. [ 894.817663][ T30] audit: type=1400 audit(1762685445.098:1345): avc: denied { create } for pid=15116 comm="syz.3.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 895.822031][T15129] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 895.861075][T15135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2390'. [ 895.957193][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2390'. [ 896.063644][T15145] 9pnet_fd: Insufficient options for proto=fd [ 896.405542][T15155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.084834][T15143] mkiss: ax0: crc mode is auto. [ 897.172716][T15162] FAULT_INJECTION: forcing a failure. [ 897.172716][T15162] name failslab, interval 1, probability 0, space 0, times 0 [ 897.200567][ T30] audit: type=1400 audit(1762685447.458:1346): avc: denied { accept } for pid=15140 comm="syz.2.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 897.203920][T15162] CPU: 1 UID: 0 PID: 15162 Comm: syz.1.2396 Not tainted syzkaller #0 PREEMPT(full) [ 897.203941][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 897.203950][T15162] Call Trace: [ 897.203955][T15162] [ 897.203962][T15162] dump_stack_lvl+0x16c/0x1f0 [ 897.203989][T15162] should_fail_ex+0x512/0x640 [ 897.204006][T15162] ? fs_reclaim_acquire+0xae/0x150 [ 897.204024][T15162] should_failslab+0xc2/0x120 [ 897.204043][T15162] __kmalloc_noprof+0xdd/0x880 [ 897.204063][T15162] ? tomoyo_encode2+0x100/0x3e0 [ 897.204083][T15162] ? tomoyo_encode2+0x100/0x3e0 [ 897.204098][T15162] tomoyo_encode2+0x100/0x3e0 [ 897.204117][T15162] tomoyo_encode+0x29/0x50 [ 897.204132][T15162] tomoyo_realpath_from_path+0x18f/0x6e0 [ 897.204159][T15162] tomoyo_mount_acl+0x1ae/0x850 [ 897.204173][T15162] ? bpf_ksym_find+0x127/0x1c0 [ 897.204195][T15162] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 897.204216][T15162] ? is_bpf_text_address+0x94/0x1a0 [ 897.204235][T15162] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 897.204250][T15162] ? unwind_get_return_address+0x59/0xa0 [ 897.204292][T15162] ? tomoyo_domain+0xbb/0x150 [ 897.204310][T15162] ? tomoyo_profile+0x47/0x60 [ 897.204330][T15162] tomoyo_mount_permission+0x16d/0x420 [ 897.204345][T15162] ? tomoyo_mount_permission+0x14f/0x420 [ 897.204361][T15162] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 897.204391][T15162] security_sb_mount+0x9b/0x260 [ 897.204407][T15162] path_mount+0x158/0x23a0 [ 897.204429][T15162] ? __pfx_path_mount+0x10/0x10 [ 897.204447][T15162] ? kmem_cache_free+0x2d4/0x6c0 [ 897.204467][T15162] ? putname+0x154/0x1a0 [ 897.204488][T15162] ? putname+0x154/0x1a0 [ 897.204503][T15162] ? putname+0x154/0x1a0 [ 897.204522][T15162] ? __x64_sys_mount+0x293/0x310 [ 897.204538][T15162] __x64_sys_mount+0x293/0x310 [ 897.204555][T15162] ? __pfx___x64_sys_mount+0x10/0x10 [ 897.204579][T15162] do_syscall_64+0xcd/0xfa0 [ 897.204594][T15162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.204609][T15162] RIP: 0033:0x7fd0e1f8f6c9 [ 897.204622][T15162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.204637][T15162] RSP: 002b:00007fd0e2e4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 897.204652][T15162] RAX: ffffffffffffffda RBX: 00007fd0e21e5fa0 RCX: 00007fd0e1f8f6c9 [ 897.204661][T15162] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 897.204670][T15162] RBP: 00007fd0e2e4f090 R08: 0000200000000980 R09: 0000000000000000 [ 897.204680][T15162] R10: 0000000000084022 R11: 0000000000000246 R12: 0000000000000001 [ 897.204689][T15162] R13: 00007fd0e21e6038 R14: 00007fd0e21e5fa0 R15: 00007ffcb39e08e8 [ 897.204711][T15162] [ 897.204739][T15162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 897.282103][ T30] audit: type=1400 audit(1762685447.458:1347): avc: denied { connect } for pid=15140 comm="syz.2.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 897.602229][T15164] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 897.707331][ T30] audit: type=1400 audit(1762685447.998:1348): avc: denied { ioctl } for pid=15166 comm="syz.1.2399" path="socket:[55870]" dev="sockfs" ino=55870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 897.788345][ T30] audit: type=1400 audit(1762685448.038:1349): avc: denied { getopt } for pid=15166 comm="syz.1.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 897.839154][T15173] xt_hashlimit: size too large, truncated to 1048576 [ 898.778674][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2403'. [ 898.838304][ T30] audit: type=1400 audit(1762685449.128:1350): avc: denied { shutdown } for pid=15188 comm="syz.3.2404" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 898.868987][ T30] audit: type=1400 audit(1762685449.158:1351): avc: denied { read } for pid=15188 comm="syz.3.2404" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 898.914493][T15190] bridge6: port 1(veth15) entered blocking state [ 898.921462][T15190] bridge6: port 1(veth15) entered disabled state [ 898.928544][T15190] veth15: entered allmulticast mode [ 898.928928][ T30] audit: type=1400 audit(1762685449.218:1352): avc: denied { setopt } for pid=15193 comm="syz.1.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 898.935546][T15190] veth15: entered promiscuous mode [ 898.999809][T15195] bridge6: port 2(veth17) entered blocking state [ 899.007662][T15195] bridge6: port 2(veth17) entered disabled state [ 899.015457][T15195] veth17: entered allmulticast mode [ 899.023064][T15195] veth17: entered promiscuous mode [ 899.180645][ T5827] Bluetooth: hci5: command 0x0405 tx timeout [ 899.287929][T15199] ubi31: attaching mtd0 [ 899.315741][T15199] ubi31: scanning is finished [ 899.764732][ T30] audit: type=1400 audit(1762685450.038:1353): avc: denied { getopt } for pid=15200 comm="syz.3.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 900.204714][ T30] audit: type=1400 audit(1762685450.148:1354): avc: denied { read } for pid=15200 comm="syz.3.2406" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 900.232556][ T30] audit: type=1400 audit(1762685450.148:1355): avc: denied { open } for pid=15200 comm="syz.3.2406" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 900.284340][ T30] audit: type=1400 audit(1762685450.158:1356): avc: denied { ioctl } for pid=15200 comm="syz.3.2406" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 900.284913][T15199] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 900.362645][ T30] audit: type=1400 audit(1762685450.658:1357): avc: denied { write } for pid=15205 comm="syz.2.2407" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 900.419565][T15206] xt_hashlimit: size too large, truncated to 1048576 [ 900.787006][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 901.148914][ T30] audit: type=1400 audit(1762685451.448:1358): avc: denied { setopt } for pid=15209 comm="syz.1.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 901.643385][T15226] wg1 speed is unknown, defaulting to 1000 [ 901.958090][T15226] lo speed is unknown, defaulting to 1000 [ 902.541674][ T30] audit: type=1400 audit(1762685452.838:1359): avc: denied { getopt } for pid=15233 comm="syz.5.2412" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 903.040812][T15241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2413'. [ 903.052864][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'. [ 905.895685][ T30] audit: type=1400 audit(1762685456.188:1360): avc: denied { shutdown } for pid=15287 comm="syz.2.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 905.926351][T15281] wg1 speed is unknown, defaulting to 1000 [ 905.980009][T15281] lo speed is unknown, defaulting to 1000 [ 906.096739][ T30] audit: type=1400 audit(1762685456.388:1361): avc: denied { connect } for pid=15268 comm="syz.4.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 906.219174][T15290] wg1 speed is unknown, defaulting to 1000 [ 906.273922][T15290] lo speed is unknown, defaulting to 1000 [ 906.430978][T15294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15294 comm=syz.2.2427 [ 906.443722][ T30] audit: type=1400 audit(1762685456.718:1362): avc: denied { write } for pid=15293 comm="syz.2.2427" path="socket:[56087]" dev="sockfs" ino=56087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 906.495949][T15294] netlink: 'syz.2.2427': attribute type 1 has an invalid length. [ 906.635023][T15295] bond3: (slave bridge7): making interface the new active one [ 906.652492][T15295] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 906.824468][ T30] audit: type=1400 audit(1762685457.098:1363): avc: denied { mount } for pid=15298 comm="syz.4.2428" name="/" dev="ramfs" ino=56105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 906.889737][T15299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.962988][T15299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.001189][ T30] audit: type=1400 audit(1762685457.108:1364): avc: denied { mounton } for pid=15298 comm="syz.4.2428" path="/560/file0" dev="ramfs" ino=56105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 907.082049][T15299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.086794][T15303] wg1 speed is unknown, defaulting to 1000 [ 907.105274][T15299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.115216][T15303] lo speed is unknown, defaulting to 1000 [ 907.150009][T15299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.176133][T15299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.040127][ T30] audit: type=1400 audit(1762685458.228:1365): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 908.081539][ T30] audit: type=1400 audit(1762685458.368:1366): avc: denied { connect } for pid=15316 comm="syz.4.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 908.103982][T15319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.685475][T15319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.946644][ T30] audit: type=1400 audit(1762685459.238:1367): avc: denied { ioctl } for pid=15325 comm="syz.1.2438" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 908.971512][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.586980][ T5894] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 909.773099][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 909.824892][ T5894] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 909.854351][ T5894] usb 6-1: config 0 has no interface number 0 [ 909.882343][T15333] Process accounting resumed [ 910.063952][ T5894] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 910.233097][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.266583][ T5894] usb 6-1: Product: syz [ 910.375885][T15343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.400580][ T5894] usb 6-1: Manufacturer: syz [ 910.411061][T15343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.848578][ T5894] usb 6-1: SerialNumber: syz [ 910.858724][ T5894] usb 6-1: config 0 descriptor?? [ 911.296220][ T5894] radio-si470x 6-1:0.35: DeviceID=0x5443 ChipID=0x833e [ 911.397979][ T30] audit: type=1400 audit(1762685461.688:1368): avc: denied { ioctl } for pid=15358 comm="syz.2.2445" path="socket:[57447]" dev="sockfs" ino=57447 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 911.510162][ T5894] radio-si470x 6-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 911.528700][ T5894] radio-si470x 6-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 911.541512][ T5894] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 911.591257][ T5894] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 911.629302][ T5894] usb 6-1: USB disconnect, device number 8 [ 912.656167][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'. [ 913.500755][T15384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2450'. [ 913.574911][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 913.820750][ T5825] Bluetooth: hci6: command 0x1003 tx timeout [ 913.828212][T13789] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 914.265410][T15396] batman_adv: batadv0: Adding interface: gretap2 [ 914.277668][T15396] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.303300][T15396] batman_adv: batadv0: Interface activated: gretap2 [ 914.434691][ T5894] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 914.640554][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 914.885732][ T5894] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 914.971260][ T5894] usb 6-1: config 0 has no interface number 0 [ 916.088099][ T5894] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 916.222824][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.386781][T15414] usb usb5: usbfs: process 15414 (syz.3.2459) did not claim interface 0 before use [ 916.402187][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 917.230388][ T5894] usb 6-1: Product: syz [ 917.369029][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 917.436604][T11333] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 917.445869][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 917.453432][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 917.462428][ T5894] usb 6-1: Manufacturer: syz [ 917.467038][ T5894] usb 6-1: SerialNumber: syz [ 917.500602][ T5882] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 917.508168][ T5894] usb 6-1: config 0 descriptor?? [ 917.540654][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 918.630591][T11333] usb 5-1: device descriptor read/64, error -32 [ 918.672051][ T30] audit: type=1326 audit(1762685467.908:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15413 comm="syz.1.2460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0e1f8f6c9 code=0x0 [ 918.751784][ T5894] radio-si470x 6-1:0.35: this is not a si470x device. [ 918.774920][T11333] raw-gadget.3 gadget.4: failed to queue suspend event [ 918.800738][ T5882] usb 4-1: device descriptor read/64, error -71 [ 918.810956][ T5894] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 918.823431][T15426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.838682][ T5894] usb 6-1: USB disconnect, device number 9 [ 918.849499][T15426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.878956][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 918.980607][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 919.495330][ T5882] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 919.503288][T11333] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 919.517625][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 919.526233][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 919.600618][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 919.650988][ T5882] usb 4-1: device descriptor read/64, error -71 [ 919.872079][T11333] usb 5-1: device descriptor read/64, error -32 [ 919.947843][ T30] audit: type=1400 audit(1762685470.238:1370): avc: denied { create } for pid=15443 comm="syz.5.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 919.967419][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.989625][ T30] audit: type=1400 audit(1762685470.268:1371): avc: denied { getopt } for pid=15443 comm="syz.5.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 920.063957][T11333] raw-gadget.3 gadget.4: failed to queue suspend event [ 920.071588][ T5882] usb usb4-port1: attempt power cycle [ 920.083218][T11333] usb usb5-port1: attempt power cycle [ 920.094276][T11333] raw-gadget.3 gadget.4: failed to queue disconnect event [ 920.123205][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 920.212625][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 920.228176][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 920.260581][ T30] audit: type=1400 audit(1762685470.528:1372): avc: denied { shutdown } for pid=15448 comm="syz.1.2467" lport=41722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 920.420779][ T5882] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 920.451088][ T5882] usb 4-1: device descriptor read/8, error -71 [ 920.470627][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 920.540654][T11333] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 920.561945][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 920.583693][T11333] usb 5-1: device descriptor read/8, error -32 [ 920.734986][T11333] raw-gadget.3 gadget.4: failed to queue suspend event [ 921.033172][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 921.146777][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 921.157630][T10001] Bluetooth: hci6: Frame reassembly failed (-84) [ 921.240628][T11333] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 921.390916][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 921.398274][T11333] usb 5-1: device descriptor read/8, error -32 [ 921.510980][T11333] raw-gadget.3 gadget.4: failed to queue suspend event [ 921.519223][T11333] usb usb5-port1: unable to enumerate USB device [ 922.191897][ T30] audit: type=1326 audit(1762685472.148:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15476 comm="syz.3.2473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00c8b8f6c9 code=0x0 [ 923.274337][ T5825] Bluetooth: hci6: command 0x1003 tx timeout [ 923.282130][T13789] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 923.298793][ T30] audit: type=1326 audit(1762685473.108:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.4.2474" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56f3b8f6c9 code=0x0 [ 923.321632][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.421246][T15491] FAULT_INJECTION: forcing a failure. [ 923.421246][T15491] name failslab, interval 1, probability 0, space 0, times 0 [ 923.434152][T15491] CPU: 1 UID: 0 PID: 15491 Comm: syz.2.2475 Not tainted syzkaller #0 PREEMPT(full) [ 923.434175][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 923.434186][T15491] Call Trace: [ 923.434193][T15491] [ 923.434201][T15491] dump_stack_lvl+0x16c/0x1f0 [ 923.434233][T15491] should_fail_ex+0x512/0x640 [ 923.434253][T15491] ? fs_reclaim_acquire+0xae/0x150 [ 923.434275][T15491] should_failslab+0xc2/0x120 [ 923.434296][T15491] __kmalloc_noprof+0xdd/0x880 [ 923.434321][T15491] ? tomoyo_encode2+0x100/0x3e0 [ 923.434345][T15491] ? tomoyo_encode2+0x100/0x3e0 [ 923.434363][T15491] tomoyo_encode2+0x100/0x3e0 [ 923.434387][T15491] tomoyo_encode+0x29/0x50 [ 923.434410][T15491] tomoyo_realpath_from_path+0x18f/0x6e0 [ 923.434438][T15491] tomoyo_path_number_perm+0x245/0x580 [ 923.434464][T15491] ? tomoyo_path_number_perm+0x237/0x580 [ 923.434493][T15491] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 923.434522][T15491] ? find_held_lock+0x2b/0x80 [ 923.434567][T15491] ? find_held_lock+0x2b/0x80 [ 923.434587][T15491] ? hook_file_ioctl_common+0x145/0x410 [ 923.434616][T15491] ? __fget_files+0x20e/0x3c0 [ 923.434638][T15491] security_file_ioctl+0x9b/0x240 [ 923.434659][T15491] __x64_sys_ioctl+0xb7/0x210 [ 923.434686][T15491] do_syscall_64+0xcd/0xfa0 [ 923.434703][T15491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.434721][T15491] RIP: 0033:0x7f6a1ef8f6c9 [ 923.434735][T15491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.434752][T15491] RSP: 002b:00007f6a1d1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.434770][T15491] RAX: ffffffffffffffda RBX: 00007f6a1f1e6180 RCX: 00007f6a1ef8f6c9 [ 923.434781][T15491] RDX: 0000200000000400 RSI: 000000008008551c RDI: 0000000000000006 [ 923.434792][T15491] RBP: 00007f6a1d1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 923.434802][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.434812][T15491] R13: 00007f6a1f1e6218 R14: 00007f6a1f1e6180 R15: 00007ffe949f2318 [ 923.434839][T15491] [ 923.434926][T15491] ERROR: Out of memory at tomoyo_realpath_from_path. [ 923.650539][T15491] usb usb5: usbfs: process 15491 (syz.2.2475) did not claim interface 0 before use [ 923.661385][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 923.760699][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 923.909603][T11333] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 923.919572][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 923.926854][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 923.970613][ T2147] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 924.000631][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 924.730924][T11333] usb 5-1: device descriptor read/64, error -32 [ 924.830847][ T2147] usb 3-1: device descriptor read/64, error -71 [ 924.859928][T11333] raw-gadget.3 gadget.4: failed to queue suspend event [ 924.932011][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 925.010888][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 925.070947][T11333] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 925.079589][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 925.090058][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 925.240584][ T5867] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 925.248210][ T2147] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 925.251013][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 925.321745][T11333] usb 5-1: device descriptor read/64, error -32 [ 925.390651][ T2147] usb 3-1: device descriptor read/64, error -71 [ 925.410551][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 925.417860][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 925.431440][T11333] raw-gadget.3 gadget.4: failed to queue suspend event [ 925.446332][T11333] usb usb5-port1: attempt power cycle [ 925.462785][T11333] raw-gadget.3 gadget.4: failed to queue disconnect event [ 925.475330][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 925.497258][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 925.510951][ T2147] usb usb3-port1: attempt power cycle [ 925.520615][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 925.556650][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 925.588272][ T5867] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 925.600799][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 925.608185][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 925.629357][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.657200][ T5867] usb 2-1: Product: syz [ 925.664676][ T5867] usb 2-1: Manufacturer: syz [ 925.669380][ T5867] usb 2-1: SerialNumber: syz [ 925.688728][ T5867] usb 2-1: config 0 descriptor?? [ 925.902517][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 926.010952][T11333] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 926.057826][T15517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.084171][T15517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.092263][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 926.099537][T11333] usb 5-1: device descriptor read/8, error -32 [ 926.193232][ T30] audit: type=1400 audit(1762685476.478:1375): avc: denied { read } for pid=15518 comm="syz.3.2484" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 926.220890][T11333] raw-gadget.3 gadget.4: failed to queue suspend event [ 926.293317][T11333] raw-gadget.3 gadget.4: failed to queue reset event [ 926.301028][ T30] audit: type=1400 audit(1762685476.478:1376): avc: denied { open } for pid=15518 comm="syz.3.2484" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 926.336240][ T30] audit: type=1400 audit(1762685476.578:1377): avc: denied { create } for pid=15515 comm="syz.4.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 926.370854][T11333] raw-gadget.3 gadget.4: failed to queue resume event [ 926.430905][T11333] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 926.596106][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 926.605795][T11333] usb 5-1: device descriptor read/8, error -32 [ 926.614304][ T30] audit: type=1400 audit(1762685476.578:1378): avc: denied { setopt } for pid=15515 comm="syz.4.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 926.720659][T11333] raw-gadget.3 gadget.4: failed to queue suspend event [ 926.737446][T11333] usb usb5-port1: unable to enumerate USB device [ 927.262820][ T30] audit: type=1400 audit(1762685476.578:1379): avc: denied { write } for pid=15515 comm="syz.4.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 927.298159][ T976] usb 2-1: USB disconnect, device number 58 [ 927.408134][T15538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2487'. [ 927.490123][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'. [ 927.724526][ T30] audit: type=1400 audit(1762685478.008:1380): avc: denied { unlink } for pid=13787 comm="syz-executor" name="file0" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 927.974137][T15545] fuse: Bad value for 'fd' [ 928.067792][ T30] audit: type=1400 audit(1762685478.128:1381): avc: denied { setopt } for pid=15539 comm="syz.2.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 929.687955][T15561] wg1 speed is unknown, defaulting to 1000 [ 929.699806][T15561] lo speed is unknown, defaulting to 1000 [ 929.954066][ T30] audit: type=1400 audit(1762685480.248:1382): avc: denied { ioctl } for pid=15553 comm="syz.3.2491" path="socket:[58857]" dev="sockfs" ino=58857 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 930.180433][ T30] audit: type=1400 audit(1762685480.468:1383): avc: denied { read } for pid=15569 comm="syz.5.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 931.106276][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.205783][T15584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.230895][T15584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.445137][T15590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2500'. [ 932.914875][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 932.985302][T15598] FAULT_INJECTION: forcing a failure. [ 932.985302][T15598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.004634][T15598] CPU: 1 UID: 0 PID: 15598 Comm: syz.5.2502 Not tainted syzkaller #0 PREEMPT(full) [ 933.004661][T15598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 933.004672][T15598] Call Trace: [ 933.004678][T15598] [ 933.004686][T15598] dump_stack_lvl+0x16c/0x1f0 [ 933.004718][T15598] should_fail_ex+0x512/0x640 [ 933.004742][T15598] _copy_to_user+0x32/0xd0 [ 933.004767][T15598] simple_read_from_buffer+0xcb/0x170 [ 933.004796][T15598] proc_fail_nth_read+0x197/0x240 [ 933.004818][T15598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.004840][T15598] ? rw_verify_area+0xcf/0x6c0 [ 933.004865][T15598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.004885][T15598] vfs_read+0x1e4/0xcf0 [ 933.004905][T15598] ? __pfx___mutex_lock+0x10/0x10 [ 933.004923][T15598] ? __pfx_vfs_read+0x10/0x10 [ 933.004945][T15598] ? __fget_files+0x20e/0x3c0 [ 933.004969][T15598] ksys_read+0x12a/0x250 [ 933.004985][T15598] ? __pfx_ksys_read+0x10/0x10 [ 933.005002][T15598] ? fput+0x9b/0xd0 [ 933.005031][T15598] do_syscall_64+0xcd/0xfa0 [ 933.005048][T15598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.005066][T15598] RIP: 0033:0x7ff9fc98e0dc [ 933.005080][T15598] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 933.005098][T15598] RSP: 002b:00007ff9fd7cc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 933.005115][T15598] RAX: ffffffffffffffda RBX: 00007ff9fcbe5fa0 RCX: 00007ff9fc98e0dc [ 933.005127][T15598] RDX: 000000000000000f RSI: 00007ff9fd7cc0a0 RDI: 0000000000000004 [ 933.005137][T15598] RBP: 00007ff9fd7cc090 R08: 0000000000000000 R09: 0000000000000000 [ 933.005147][T15598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.005156][T15598] R13: 00007ff9fcbe6038 R14: 00007ff9fcbe5fa0 R15: 00007ffe6ecf41a8 [ 933.005182][T15598] [ 933.704156][ T30] audit: type=1400 audit(1762685483.998:1384): avc: denied { write } for pid=15608 comm="syz.1.2506" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 933.967002][T15623] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 934.625382][ T30] audit: type=1400 audit(1762685484.918:1385): avc: denied { read } for pid=15629 comm="syz.4.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 934.894777][T15642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 934.906052][T15642] block device autoloading is deprecated and will be removed. [ 934.941443][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 935.059896][ T31] Not tainted syzkaller #0 [ 935.070536][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 935.118918][ T31] task:kworker/0:1 state:D stack:21976 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 935.259234][ T31] Workqueue: usb_hub_wq hub_event [ 935.265108][ T31] Call Trace: [ 935.268524][ T31] [ 935.271907][ T31] __schedule+0x1190/0x5de0 [ 935.278038][ T31] ? __pfx___schedule+0x10/0x10 [ 935.284555][ T31] ? find_held_lock+0x2b/0x80 [ 935.291165][ T31] ? schedule+0x2d7/0x3a0 [ 935.296624][ T31] schedule+0xe7/0x3a0 [ 935.301499][ T31] schedule_timeout+0x257/0x290 [ 935.306421][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 936.141592][ T31] ? mark_held_locks+0x49/0x80 [ 936.146460][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 936.151905][ T31] __wait_for_common+0x2fc/0x4e0 [ 936.163173][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 936.176256][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 936.210968][ T31] ? __pfx_device_del+0x10/0x10 [ 936.243923][ T31] ? kobject_put+0xab/0x5a0 [ 936.261528][ T31] i2c_del_adapter+0x546/0x6f0 [ 936.287218][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 936.304152][ T31] ? kfree+0x2b8/0x6d0 [ 936.318834][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 936.347769][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 936.365764][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 936.401164][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 936.415667][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 936.440916][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 936.459654][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 936.466562][ T31] usb_probe_interface+0x303/0xa40 [ 936.492859][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 936.540580][ T31] really_probe+0x241/0xa90 [ 936.550555][ T31] __driver_probe_device+0x1de/0x440 [ 936.560625][ T31] driver_probe_device+0x4c/0x1b0 [ 936.565718][ T31] __device_attach_driver+0x1df/0x310 [ 936.642151][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 936.680604][ T31] bus_for_each_drv+0x159/0x1e0 [ 936.691397][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 936.707049][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 936.712705][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 936.718624][ T31] __device_attach+0x1e4/0x4b0 [ 936.723708][ T31] ? __pfx___device_attach+0x10/0x10 [ 936.729069][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 936.735581][ T31] bus_probe_device+0x17f/0x1c0 [ 936.740826][ T31] device_add+0x1148/0x1aa0 [ 936.745397][ T31] ? __pfx_device_add+0x10/0x10 [ 936.750332][ T31] usb_set_configuration+0x1187/0x1e20 [ 936.757311][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 936.763631][ T31] usb_generic_driver_probe+0xb1/0x110 [ 936.769115][ T31] usb_probe_device+0xef/0x3e0 [ 936.773930][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 936.779764][ T31] really_probe+0x241/0xa90 [ 936.784601][ T31] __driver_probe_device+0x1de/0x440 [ 936.789904][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 936.795464][ T31] driver_probe_device+0x4c/0x1b0 [ 936.800899][ T31] __device_attach_driver+0x1df/0x310 [ 936.806270][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 936.812255][ T31] bus_for_each_drv+0x159/0x1e0 [ 936.817126][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 936.822563][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 936.827790][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 936.833711][ T31] __device_attach+0x1e4/0x4b0 [ 936.838482][ T31] ? __pfx___device_attach+0x10/0x10 [ 936.843870][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 936.849081][ T31] bus_probe_device+0x17f/0x1c0 [ 936.854071][ T31] device_add+0x1148/0x1aa0 [ 936.858581][ T31] ? __pfx_device_add+0x10/0x10 [ 936.863554][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 936.869296][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 936.875225][ T31] usb_new_device+0xd07/0x1a60 [ 936.879991][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 936.885604][ T31] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 936.891474][ T31] hub_event+0x2f34/0x4fe0 [ 936.895920][ T31] ? __pfx_hub_event+0x10/0x10 [ 936.901272][ T31] ? assoc_array_apply_edit+0x230/0x6c0 [ 936.906852][ T31] ? rcu_is_watching+0x12/0xc0 [ 936.911706][ T31] process_one_work+0x9cf/0x1b70 [ 936.916658][ T31] ? __pfx_process_one_work+0x10/0x10 [ 936.922057][ T31] ? assign_work+0x1a0/0x250 [ 936.926643][ T31] worker_thread+0x6c8/0xf10 [ 936.931288][ T31] ? __pfx_worker_thread+0x10/0x10 [ 936.936406][ T31] kthread+0x3c5/0x780 [ 936.940457][ T31] ? __pfx_kthread+0x10/0x10 [ 936.945084][ T31] ? rcu_is_watching+0x12/0xc0 [ 936.949866][ T31] ? __pfx_kthread+0x10/0x10 [ 936.954485][ T31] ret_from_fork+0x675/0x7d0 [ 936.959068][ T31] ? __pfx_kthread+0x10/0x10 [ 936.963703][ T31] ret_from_fork_asm+0x1a/0x30 [ 936.968494][ T31] [ 936.971850][ T31] INFO: task syz.0.1990:13612 blocked for more than 145 seconds. [ 936.979651][ T31] Not tainted syzkaller #0 [ 936.989794][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 936.998617][ T31] task:syz.0.1990 state:D stack:28984 pid:13612 tgid:13590 ppid:5815 task_flags:0x400040 flags:0x00080002 [ 937.011064][ T31] Call Trace: [ 937.014354][ T31] [ 937.017265][ T31] __schedule+0x1190/0x5de0 [ 937.021831][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 937.027212][ T31] ? __pfx___schedule+0x10/0x10 [ 937.032148][ T31] ? find_held_lock+0x2b/0x80 [ 937.036819][ T31] ? schedule+0x2d7/0x3a0 [ 937.041189][ T31] ? usbdev_ioctl+0x1a8/0x4070 [ 937.045939][ T31] schedule+0xe7/0x3a0 [ 937.050005][ T31] schedule_preempt_disabled+0x13/0x30 [ 937.055464][ T31] __mutex_lock+0x818/0x1060 [ 937.060042][ T31] ? usbdev_ioctl+0x1a8/0x4070 [ 937.064828][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 937.069848][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 937.075093][ T31] ? find_held_lock+0x2b/0x80 [ 937.079776][ T31] ? usbdev_ioctl+0x1a8/0x4070 [ 937.084587][ T31] usbdev_ioctl+0x1a8/0x4070 [ 937.089715][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 937.094822][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 937.100861][ T31] ? do_vfs_ioctl+0x128/0x14f0 [ 937.105960][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 937.111025][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 937.117901][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 937.123614][ T31] ? selinux_file_ioctl+0x180/0x270 [ 937.128801][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 937.133940][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 937.138954][ T31] __x64_sys_ioctl+0x18e/0x210 [ 937.143722][ T31] do_syscall_64+0xcd/0xfa0 [ 937.148240][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.154236][ T31] RIP: 0033:0x7fb2d918f6c9 [ 937.158644][ T31] RSP: 002b:00007fb2d9fc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 937.167077][ T31] RAX: ffffffffffffffda RBX: 00007fb2d93e6090 RCX: 00007fb2d918f6c9 [ 937.175063][ T31] RDX: 00002000000001c0 RSI: 0000000080045519 RDI: 0000000000000006 [ 937.183056][ T31] RBP: 00007fb2d9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 937.191574][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.199564][ T31] R13: 00007fb2d93e6128 R14: 00007fb2d93e6090 R15: 00007fff7c1169e8 [ 937.208040][ T31] [ 937.211263][ T31] [ 937.211263][ T31] Showing all locks held in the system: [ 937.218991][ T31] 5 locks held by kworker/0:1/10: [ 937.226176][ T31] #0: ffff88801b751148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 937.237203][ T31] #1: ffffc900000f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 937.248488][ T31] #2: ffff888029615198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 937.257607][ T31] #3: ffff88807bc8a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 937.267344][ T31] #4: ffff888079708160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 937.276793][ T31] 1 lock held by khungtaskd/31: [ 937.281833][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 937.292852][ T31] 6 locks held by kworker/u8:8/3485: [ 937.298155][ T31] 2 locks held by getty/5572: [ 937.303774][ T31] #0: ffff88814ccb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 937.314318][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 937.324665][ T31] 3 locks held by kworker/u8:15/10008: [ 937.330191][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 937.340268][ T31] #1: ffff888032578a68 (&p->pi_lock){-.-.}-{2:2}, at: process_one_work+0x929/0x1b70 [ 937.351287][ T31] #2: ffff8880b8525b18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6b8/0xd30 [ 937.360272][ T31] 1 lock held by syz.0.1990/13612: [ 937.365420][ T31] #0: ffff888029615198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a8/0x4070 [ 937.374623][ T31] 2 locks held by dhcpcd/15651: [ 937.379456][ T31] #0: ffff88808a444148 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 937.390004][ T31] #1: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 937.400863][ T31] [ 937.403268][ T31] ============================================= [ 937.403268][ T31] [ 937.413353][ T31] NMI backtrace for cpu 1 [ 937.413366][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 937.413385][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 937.413395][ T31] Call Trace: [ 937.413401][ T31] [ 937.413409][ T31] dump_stack_lvl+0x116/0x1f0 [ 937.413440][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 937.413459][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 937.413485][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 937.413512][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 937.413535][ T31] watchdog+0xf3f/0x1170 [ 937.413561][ T31] ? rcu_is_watching+0x12/0xc0 [ 937.413583][ T31] ? __pfx_watchdog+0x10/0x10 [ 937.413601][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 937.413628][ T31] ? __kthread_parkme+0x19e/0x250 [ 937.413654][ T31] ? __pfx_watchdog+0x10/0x10 [ 937.413674][ T31] kthread+0x3c5/0x780 [ 937.413691][ T31] ? __pfx_kthread+0x10/0x10 [ 937.413709][ T31] ? rcu_is_watching+0x12/0xc0 [ 937.413730][ T31] ? __pfx_kthread+0x10/0x10 [ 937.413747][ T31] ret_from_fork+0x675/0x7d0 [ 937.413761][ T31] ? __pfx_kthread+0x10/0x10 [ 937.413777][ T31] ret_from_fork_asm+0x1a/0x30 [ 937.413813][ T31] [ 937.413819][ T31] Sending NMI from CPU 1 to CPUs 0: [ 937.542555][ C0] NMI backtrace for cpu 0 [ 937.542568][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 937.542584][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 937.542592][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 937.542616][ C0] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 86 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 937.542629][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 937.542641][ C0] RAX: 000000000414db3d RBX: 0000000000000000 RCX: ffffffff8b60a2a9 [ 937.542649][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b6a1 RDI: ffffffff8bf070c0 [ 937.542659][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 937.542668][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 937.542676][ C0] R13: ffffffff8e097a00 R14: ffffffff90820cd0 R15: 0000000000000000 [ 937.542686][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 937.542700][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.542709][ C0] CR2: 000055cf9bf16168 CR3: 000000007eef4000 CR4: 00000000003526f0 [ 937.542718][ C0] Call Trace: [ 937.542723][ C0] [ 937.542728][ C0] default_idle+0x13/0x20 [ 937.542742][ C0] default_idle_call+0x6c/0xb0 [ 937.542755][ C0] do_idle+0x38d/0x500 [ 937.542773][ C0] ? __pfx_do_idle+0x10/0x10 [ 937.542788][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 937.542805][ C0] cpu_startup_entry+0x4f/0x60 [ 937.542821][ C0] rest_init+0x16b/0x2b0 [ 937.542835][ C0] ? acpi_subsystem_init+0x133/0x180 [ 937.542854][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 937.542873][ C0] start_kernel+0x3f6/0x4e0 [ 937.542890][ C0] x86_64_start_reservations+0x18/0x30 [ 937.542907][ C0] x86_64_start_kernel+0x130/0x190 [ 937.542925][ C0] common_startup_64+0x13e/0x148 [ 937.542945][ C0] [ 941.341978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)