last executing test programs: 52.008998408s ago: executing program 1 (id=169): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff83f22}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) socket(0x1e, 0x1, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000008340)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}) 49.786271937s ago: executing program 1 (id=172): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x2003, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x4, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x8000000000000001, 0x80000001, 0x0, 0x200000000001, 0x9e9, 0xc9, 0x3, 0x8000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x7) ioctl$TCSETSF2(r0, 0x8926, &(0x7f0000000000)={0x9, 0x8, 0x8, 0x2, 0xc, "a533b6aaf9f659ff35036bf78d8b4c2a246305", 0x100003ff, 0x8}) 48.984234303s ago: executing program 1 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x22003, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x510}, 0x1, 0x0, 0x0, 0x5}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000004c0)=ANY=[@ANYBLOB="0ad98f66ddbc91832514cb0e1ca41886b9ed63218f9f69e9b2244e61136334f56a06c62e6ef1683ca36a4779419822a8ce145352a454161a00"/68, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRESDEC=r3, @ANYBLOB="8100"/20, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES32=r2, @ANYRES64=r0, @ANYRES64=r2], 0x50) mount$overlay(0x0, 0x0, 0x0, 0x800, &(0x7f00000003c0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ptmx\x00'}}, {@subj_role={'subj_role', 0x3d, '('}}, {@hash}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, 'fuse\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x38, 0x62, 0x66, 0x32, 0x38, 0x65, 0x61], 0x2d, [0x39, 0x62, 0x33, 0x50], 0x2d, [0x63, 0x30, 0x65, 0x33], 0x2d, [0x63, 0x30, 0x30, 0x65], 0x2d, [0x36, 0x35, 0x38, 0x62, 0x1, 0x65eb36807aff6bf1, 0x64, 0x64]}}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000300)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050844) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="010400077650c425915203000000000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00'/28], 0x50) socket$netlink(0x10, 0x3, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000280)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c, 0x3) openat$cgroup_pressure(r1, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) 47.757528067s ago: executing program 1 (id=183): setpriority(0x3, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x41, 0x0}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 47.628896305s ago: executing program 1 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000100)) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x56, {"0f20e035000040000f22e0670f01cb440f01c46526420f1b7a00b9a20a00000f3266baf80cb86e313c80ef66bafc0c66b8030066ef410f01c52ef36f66b8b4008ee00f7801"}}], 0x56}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xaa) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, 0x0, 0x0) 46.869315268s ago: executing program 1 (id=187): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000200)={[0x9]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x3b7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x80) r3 = signalfd(r0, &(0x7f0000000140)={[0x8]}, 0x8) r4 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x8, 0x0, 0x205}) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000100)={r0, 0x0, 0xffffffffffffffff, 0x2, 0x7, 0x2}) ioctl$KVM_GET_TSC_KHZ_vm(r3, 0xaea3) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000400)="97660f10b4334a28992ebf1beb178330b9431df31d18a25509faabad98b30eb2215be31e8938684d531671557e95f88928cd14ab49895b9883541d1f11f416cd039ee3051c6da18cc172196c19922770dc47c1323a15a19350b12a53a3f2e1d4d7c19ba52f64875272af70bb6a3e876d1185fa2b3a59a7fa688b994e0a7d1b5c48a422134819d856780daa96799cfd50906b1a610b461b89ccbd5a61af6bc23213f2ab976787169060cbc63e5f036bcd8a76a41756b106539055462b3f110a862baf06ac7996f5824242031086765dfcaf1c57aac9a74487ec6d0c9bd20681234bba468724404f06eb0f00000000", 0xee) 46.457183453s ago: executing program 32 (id=187): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000200)={[0x9]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x3b7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x80) r3 = signalfd(r0, &(0x7f0000000140)={[0x8]}, 0x8) r4 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x8, 0x0, 0x205}) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000100)={r0, 0x0, 0xffffffffffffffff, 0x2, 0x7, 0x2}) ioctl$KVM_GET_TSC_KHZ_vm(r3, 0xaea3) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000400)="97660f10b4334a28992ebf1beb178330b9431df31d18a25509faabad98b30eb2215be31e8938684d531671557e95f88928cd14ab49895b9883541d1f11f416cd039ee3051c6da18cc172196c19922770dc47c1323a15a19350b12a53a3f2e1d4d7c19ba52f64875272af70bb6a3e876d1185fa2b3a59a7fa688b994e0a7d1b5c48a422134819d856780daa96799cfd50906b1a610b461b89ccbd5a61af6bc23213f2ab976787169060cbc63e5f036bcd8a76a41756b106539055462b3f110a862baf06ac7996f5824242031086765dfcaf1c57aac9a74487ec6d0c9bd20681234bba468724404f06eb0f00000000", 0xee) 9.331308874s ago: executing program 3 (id=302): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00') setns(r0, 0x1ce859053a46c7ed) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 8.578142682s ago: executing program 5 (id=306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0xffffffff, 0x4, 0x8003}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x3, 0x10000, 0x2, 0x10000421, 0x5, 0xcc7, 0x7ffffffe, 0xa, 0x5, 0x3ff, 0x0, 0x300, 0x1, 0x1, 0x9, 0x800, 0x40400, 0x8, 0x6, 0x1fe, 0x80000089, 0x40000d, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7fffffe]}) prctl$PR_SET_IO_FLUSHER(0x43, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) name_to_handle_at(r6, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x2}}, &(0x7f0000000240), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0xda2, 0xfffffff7, 0x6}) 8.281865345s ago: executing program 0 (id=308): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.209530815s ago: executing program 3 (id=310): ptrace(0x4206, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socket(0x2b, 0x1, 0x100) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb81, 0x80, 0x8002, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000120013062dbd7000fedbdf2506fc10fc4e204e2701040000f7ffffff06000000090000000700400008000000610000000700000091d00c98348b45efeba4d5591b5318203cce00a092995b75d41d9cf677c2945282775130a80d015ac1508a3ab1c6f4a1aa39e9069d5082df073cd9eb2bef270a0735f201e4a8811c6e4dcba5e11b92199490681451d3dbbd31c25a614900493b06c4cf18eaca38622fca9e", @ANYRES32=0x0, @ANYBLOB="01fcffff030000000100000005800000080001000c354f0e"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x2}}) io_uring_enter(r2, 0x6e2, 0x620, 0x1, 0x0, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x8, 0x0, @fd_index=0xa, 0x0, 0x0, 0x80000001, 0x0, 0x0, {0x0, 0x0, r1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x155f, 0x800, 0xffbffffc, 0x400011c}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r10, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) 6.464282456s ago: executing program 5 (id=311): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x9}}, 0x14}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x131, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x2, 0x4, {0x7, 0x25, 0x1, 0x8, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x93, 0xfa, {0x7, 0x25, 0x1, 0x8, 0x5, 0x5}}}}}}}}]}}, 0x0) bind$x25(r1, &(0x7f0000000780)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) 6.434796611s ago: executing program 0 (id=313): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) write$UHID_DESTROY(r2, &(0x7f00000000c0), 0x4) sendmmsg$inet(r1, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="f14cafdea578ee", 0x7}], 0x1}}], 0x1, 0x4008851) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2f}}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 5.88338994s ago: executing program 0 (id=314): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000240)={0x0, 0x6109, 0x800, 0x0, 0x1a2}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000400)=0xfffffff8, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_io_uring_setup(0x3005, &(0x7f0000000180)={0x0, 0x200089b7, 0x8, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f00000002c0)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) recvfrom(r5, 0x0, 0x0, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x7) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000020000080012000007a18208"], 0x50}}, 0x0) 5.699000467s ago: executing program 4 (id=315): socket$kcm(0xa, 0x5, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r1, &(0x7f0000000000), 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000004c0)=0x2) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x10}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) sched_setaffinity(0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020}, 0x2020) 5.143495898s ago: executing program 4 (id=317): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000080), 0x0}, 0x20) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioprio_set$pid(0x1, r1, 0x0) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f00005e0000/0x2000)=nil, &(0x7f00004a7000/0x2000)=nil, 0x2000, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.753985044s ago: executing program 0 (id=318): r0 = socket$inet(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x60c42, 0x5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x1400) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file1\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) syz_usb_connect(0x2, 0x3f0, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3cef0ffffff93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 4.169857736s ago: executing program 3 (id=321): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x301, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x8, 0xd0, 0x5, "", [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x0, 0x2, 0x80, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd, 0xfc, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.143996963s ago: executing program 2 (id=322): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x50, 0x12, 0xff130e91beb48f99, 0xfffffffd, 0x3, {0x1d, 0x0, 0x0, 0xfa, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7fd, 0xffffffff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x100001, 0x2]}, 0x0, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x44084}, 0x80) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001700090025bd700001dcdf25060000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000842}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x80, 0x24, 0x2, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0xffff, 0x5}, {0xfff1, 0xffff}, {0xc, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x55db}]}}, @qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8000}, @TCA_CAKE_ATM={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0xc0}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)='\f'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r10, 0x60046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, 0x0, 0x4840) 3.937959369s ago: executing program 0 (id=323): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0xb02000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x150, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x6, r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @empty, 0xa}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0x0, 0x16}, @void, @ipv6=@udp={0xb, 0x6, "053d22", 0xfffffe1d, 0x11, 0x1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x62, 0x5, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x7, 0x4, 0xb, 0x1, [0x5, 0x4]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x43bdb855c3cc7452, 0x1, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x7f, [0x8, 0x9, 0x100000000, 0x2, 0x5]}}, @enc_lim={0x4, 0x1, 0x11}, @generic={0x81, 0xee, "6c225333bff0f6d3a2ebf1bbb5ebe4c08f36f42431ed3c0d6e757d62016cfe8266700b7bd9757fa2454816b288a9a55370495f68bc2f4ed40827c41bde43b9b2f814bb3b57326b5488dc8e0abadc2ecc60820c6b07e34f95d3ef41e54903425f005bd601305f6aaae1089527df687f5bb63d07444eda15d3c7772208761f2073c542cc643f96c714ec9201dc3d527e66e0b3992a2f3b8f33a13ecd048f81c84503ca74e10e375cee79d75e943515213b6601e968c95730947941f057d02901136cec8c256e9d735470ff5f8550416710031ce96558d859dfb5f92a69faa2f7863d818cda3b56c5444339284f1062"}]}, @hopopts={0x62, 0x3, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x7, 0x1, [0x5, 0x2]}}]}], {0x4e21, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "51f9b804b1613e86f2b2092ed9bb2734f77b7306e23c9c8e0a9bef072f9809e5", "8fc2a0f38000f4fc06101654a10b243a", {"23fcf94d1ce84e694a0adf5969d62dcc", "8c124dd26c613ebf2f5d04b685e45814"}}}}}}, 0x220) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0xffee, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x4a0232ac, 0x2, 0x0, 0x10000000, 0xd19}, {0x0, 0x200000, 0x7, 0x9}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x110}}, 0x0) 3.908473384s ago: executing program 2 (id=324): r0 = syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x275a, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 3.530024178s ago: executing program 4 (id=325): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x30, 0x804c040}, 0x0) 2.525909554s ago: executing program 2 (id=326): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x24, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x281}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x6, 0x0) syz_emit_vhci(&(0x7f00000016c0)=ANY=[@ANYBLOB="04131505"], 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0044f19, &(0x7f0000000100)=0x52) mprotect(&(0x7f00008e4000/0x2000)=nil, 0x2000, 0x3) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpgid(r0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2.505549552s ago: executing program 5 (id=327): socket$kcm(0xa, 0x5, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r1, &(0x7f0000000000), 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000004c0)=0x2) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x10}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) sched_setaffinity(0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020}, 0x2020) 2.456473234s ago: executing program 4 (id=328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x8f5, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x2e, 0x2, 0x2, {0x6, @tcp_ip4_spec={@multicast2, @multicast1, 0x4e23, 0x4e23, 0xc}, {0x0, @multicast, 0x98, 0x1, [0x29, 0x7]}, @tcp_ip6_spec={@loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4e21, 0x4e22, 0xd}, {0x0, @random="283208566ef1", 0xcc, 0x4eb, [0x3, 0x9]}, 0x40004, 0x100}, 0x1, [0x401]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 2.079387719s ago: executing program 5 (id=329): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1cabe2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x8a883, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x4, 0x4000000}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x4000000000000ffd, 0x0, 0x0, 0x22, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b2f5d187f3f800b2f7b6aa54cc50a1fcaed1e8b1fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000280)) 1.985627943s ago: executing program 5 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 1.978235185s ago: executing program 4 (id=331): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010028bd7000fcdbdf251b000000080001", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000480)=0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES64=r7], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, &(0x7f0000000c40)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x88c, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x40, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x541ec3ed, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r6, 0x8926, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) 1.905551244s ago: executing program 3 (id=332): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xb, &(0x7f0000000140)={0xf, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x60044084) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x501000, 0x0) r5 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000300)=r8, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) lseek(r1, 0x8271, 0x4) io_uring_enter(r5, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 1.240880775s ago: executing program 5 (id=333): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff2bbd7000fbdbdf25000000", @ANYRES32=0x0, @ANYBLOB="14340400212000001c0012800c0001006d6163766c616e000c00028008000300800000003d0800007f2bde24fef7b259d32db06415bae54442571d7edc1ba0f33fad77339dacad032bbc89238ca1", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0xfffe, 0x7fff, 0x2, 0x2}, 0x54, [0x3ff, 0x2, 0x10000, 0x0, 0xd52, 0x9, 0xc2ad, 0x4, 0x9, 0x6, 0x5, 0x9, 0x8, 0xfffffff8, 0x5, 0x5, 0x7, 0x5, 0xfffffff9, 0x6, 0x4000003, 0xfff, 0x70f6, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xfffffc00, 0x3, 0x1, 0x4, 0x8, 0x6, 0x4, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xfffffffc, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x41, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x2, 0x7, 0x208f, 0x1, 0x6, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0xb, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x1, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x2, 0xffff4800, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x4, 0x9, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x2, 0xc1800, 0x4, 0x4, 0xfffffffa, 0x1800, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000003, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x8, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0xfffffffd, 0x2, 0x2, 0x1, 0x8, 0x2, 0x10, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x6, 0x7, 0x29d9, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x12, 0x5e, 0x5, 0x6, 0x8, 0x5, 0x8, 0x45eb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x9, 0x5, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x344, 0x9, 0x2, 0x4, 0x4]}, 0x45c) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000040)=0x8000) r6 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14f00000", @ANYRES16=r6, @ANYBLOB="040026bd7000ffdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000095}, 0x4800) syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = socket$phonet(0x23, 0x2, 0x1) sendto(r7, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) listen(r8, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40081) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r9 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000040)=0x1) keyctl$read(0xb, 0x0, &(0x7f00000002c0)=""/77, 0x4d) 925.698398ms ago: executing program 2 (id=334): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x6, 0x9dc8, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 890.958058ms ago: executing program 4 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='96.:\x00', 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='decodes io'], 0xf) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @multicast1}, 0x1, 0x0, 0x4}}, 0x26) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_context(r7, &(0x7f0000000180)='system_u:object_r:default_context_t:s0\x00', 0x27) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 627.643403ms ago: executing program 0 (id=336): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) ppoll(&(0x7f00000002c0)=[{r3, 0x102}], 0x1, 0x0, 0x0, 0x0) r4 = gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076003008cb89e0ff086dd", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 438.919966ms ago: executing program 2 (id=337): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x367, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0xf000}, 0x14) 321.579218ms ago: executing program 3 (id=338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @private2={0xfc, 0x2, '\x00', 0x1}}, 0xff37) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004084}, 0x840) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c0003800600010000000000080002000200000006080300a7aa0000080001"], 0x5c}}, 0x20000000) 179.745456ms ago: executing program 2 (id=339): socket$kcm(0xa, 0x5, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r1, &(0x7f0000000000), 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000004c0)=0x2) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x10}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"49841ada71cfe011e10532489ef0a3127f9f67568978975321ebdb7108d333a8df648f920da594ae3a327a3f1292465c016dbc5261414bd85acd87473d61390f4bbded57a902b5deb9c23c641914f6b147db6146e946ce31b52ff43219cbc1574ebc8f47d0d2a02b89dc02c49f25471af4f2435dd40d0481fe6f0124e4aa9849c9b8358074976ba0dd502c77e65623e41c8ce041fe7058274e54be3d84f5aa382e9032df7a279d491a51e7480061ebb983305b23e584f6b47af6d615b2f0a182d7c0095f222a4a176472ebbd1021d2eb285ff99ea7601c4e25ecd4c055c59c3964e30b2f8567d69324b6828cc0e9c3528f1f4e27527d98bca370c165bfd88348ca0eb405029367247b738c6cce89e3efd4479d8f2fc7dbd015046860acb8a71106b920b09e661065bf765a03317feb4f54d4382ac41850982313319363b14557a5b8a18d60e425b3db6bcd35b03c810c9d398c9d91902878258419a4b02fc4bdc3b69da6c5c27f5a507005a24a3fef74f0b287c3a4cd1517537dc8cf5cf0efd75c11e803e972ecc24c500cc49001f231f74f7120f55004d5621655ba535c8c8a91d2fec5656526974aef9f08d835f6c3c7c570d047312da759708349121ee9f7078926baa412b4ae8076f6b7f2bf46ffe08878e0281bb42ace8eca796933daf7f65530e30eb6b0695a450e50aea20fcabb5fca187f8ee62b93dee581774cefb953b396e5b8a1e3cc1062b001082aa5a434d9f03407c4239d0fcb779eba5a32f473d142ac92042c2b140f12a0181a4d98a0a5a1c80de2363a80dfc365d26e0332ee63e84500f086fffded2d72500cfb5b3b16aefef5d5808f29e1c572df8af9ca90b714fe6c71a1097e58ccb7945341445d2a0c271f5d15a1462be10d757de7cfd980459469387c5049cebcdb62a24cf04418634944354b4690d4974a26ca113eefe5a71b23aa2fbd989f7b6fcf490ed465f219e70b3397dbc63e21b9d3998c4580570c40a2e75cb6845b34236f5a38dde94ae6fac7a994b21e829bdb618b0910b71608ed7893bc927afa06b1d08d18f684d7972e5467ddfebe1982924658db3e5aee3e443f1cd7017d7a27e6e2620673e9afd67c69ae555ec3e67863f1a9ac7d653d38125f51db870ffa8887c08c455a536d70ea0cae525218e8d06865b553b17bacd52630e4765af1036c834e96c193523d8b3bc399ac296fbe53ed4bd454c669f01cb0915cf9fc03b54d93fbc37ace112d4643c64842b60ee6b979703b6448fe7ddaab8d2fc2d417a12f138d61cc3ca311aa09adbad1a0647a62208ca7f9f2a9e6a6c42e6ae926b15d094886a7d6ae787c8238ab4c235541b1432b9e9407d18a0399dfa98b8ee84ccbe16bf8c30e7cf7071ab10eb8ffb0334d2b91135e3294efd14dd06db46be1032a472cdd54bd015f2937fe3d7d691fa9d0b55a0d5d17a9"}) sched_setaffinity(0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020}, 0x2020) 0s ago: executing program 3 (id=340): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe51) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9000e000a000500190e06"], 0x13) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x800) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$dupfd(r4, 0x406, r4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x400}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x142) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x30000004}) epoll_pwait(r8, &(0x7f0000000600)=[{}], 0x1, 0x7c0e, 0x0, 0x0) kernel console output (not intermixed with test programs): mode [ 58.871265][ T368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.885008][ T30] audit: type=1400 audit(1774694317.516:87): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.fF90o2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.911438][ T30] audit: type=1400 audit(1774694317.516:88): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.938746][ T30] audit: type=1400 audit(1774694317.516:89): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.fF90o2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.941913][ T5806] veth1_macvtap: entered promiscuous mode [ 58.972114][ T30] audit: type=1400 audit(1774694317.526:90): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.fF90o2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.001211][ T30] audit: type=1400 audit(1774694317.526:91): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.035785][ T30] audit: type=1400 audit(1774694317.546:92): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.050869][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.066434][ T30] audit: type=1400 audit(1774694317.546:93): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="gadgetfs" ino=7590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 59.098610][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.109557][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.118191][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.177397][ T5915] tmpfs: Bad value for 'mpol' [ 59.198679][ T5916] tmpfs: Bad value for 'mpol' [ 59.214246][ T368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.229493][ T368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.247669][ T368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.257907][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.274308][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.314420][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 59.326083][ T3526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.906143][ T5915] can0: slcan on ttyS3. [ 59.956150][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.995403][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.122767][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.130789][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.247105][ T5936] Bluetooth: MGMT ver 1.23 [ 60.262522][ T368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.312612][ T368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.399364][ T5819] Bluetooth: hci3: command tx timeout [ 60.405043][ T5816] Bluetooth: hci0: command tx timeout [ 60.410432][ T5816] Bluetooth: hci1: command tx timeout [ 60.416025][ T51] Bluetooth: hci4: command tx timeout [ 60.421405][ T51] Bluetooth: hci2: command tx timeout [ 60.513763][ T5914] can0 (unregistered): slcan off ttyS3. [ 60.555214][ T368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.595824][ T368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.762636][ T5927] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.939411][ T5927] usb 2-1: device descriptor read/64, error -71 [ 61.263476][ T979] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.287507][ T5965] faux_driver vgem: [drm] Unknown color mode 185; guessing buffer size. [ 61.412581][ T5927] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.492575][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 61.499610][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 61.513614][ T979] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.536111][ T979] usb 4-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 61.545451][ T5927] usb 2-1: device descriptor read/64, error -71 [ 61.554325][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.571406][ T979] usb 4-1: Product: syz [ 61.579616][ T979] usb 4-1: Manufacturer: syz [ 61.619215][ T979] usb 4-1: SerialNumber: syz [ 61.662895][ T5927] usb usb2-port1: attempt power cycle [ 62.046539][ T979] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 62.071390][ T979] usb 4-1: 1:1 : unsupported sample bitwidth 1 in 165 bytes [ 62.092732][ T5927] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 62.108398][ T979] usb 4-1: unit 8 not found! [ 62.139497][ T5927] usb 2-1: device descriptor read/8, error -71 [ 62.244742][ T979] usb 4-1: USB disconnect, device number 2 [ 62.333112][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 62.412708][ T5927] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 62.442611][ T5927] usb 2-1: device descriptor read/8, error -71 [ 62.473747][ T5817] Bluetooth: hci1: command tx timeout [ 62.473758][ T5816] Bluetooth: hci2: command tx timeout [ 62.473781][ T5816] Bluetooth: hci3: command tx timeout [ 62.479127][ T5817] Bluetooth: hci4: command tx timeout [ 62.479146][ T5817] Bluetooth: hci0: command tx timeout [ 62.562764][ T5927] usb usb2-port1: unable to enumerate USB device [ 62.742152][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 62.742168][ T30] audit: type=1400 audit(1774694321.476:149): avc: denied { ioctl } for pid=5990 comm="syz.3.13" path="socket:[7744]" dev="sockfs" ino=7744 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.842306][ T30] audit: type=1400 audit(1774694321.476:150): avc: denied { bind } for pid=5990 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.862218][ T30] audit: type=1400 audit(1774694321.516:151): avc: denied { read } for pid=5990 comm="syz.3.13" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.863887][ T5992] FAULT_INJECTION: forcing a failure. [ 62.863887][ T5992] name failslab, interval 1, probability 0, space 0, times 0 [ 62.889974][ T30] audit: type=1400 audit(1774694321.516:152): avc: denied { open } for pid=5990 comm="syz.3.13" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.921621][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 62.921643][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.921653][ T5992] Call Trace: [ 62.921659][ T5992] [ 62.921665][ T5992] dump_stack_lvl+0x100/0x190 [ 62.921696][ T5992] should_fail_ex.cold+0x5/0xa [ 62.921718][ T5992] ? tomoyo_realpath_from_path+0xb6/0x690 [ 62.921742][ T5992] should_failslab+0xc2/0x120 [ 62.921756][ T5992] __kmalloc_noprof+0xe0/0x850 [ 62.921775][ T5992] tomoyo_realpath_from_path+0xb6/0x690 [ 62.921801][ T5992] tomoyo_path_number_perm+0x23c/0x580 [ 62.921815][ T5992] ? tomoyo_path_number_perm+0x22e/0x580 [ 62.921831][ T5992] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 62.921858][ T5992] ? find_held_lock+0x2b/0x80 [ 62.921873][ T5992] ? __fget_files+0x215/0x3d0 [ 62.921885][ T5992] ? hook_file_ioctl_common+0x146/0x410 [ 62.921899][ T5992] ? __fget_files+0x21f/0x3d0 [ 62.921913][ T5992] security_file_ioctl+0xd3/0x230 [ 62.921930][ T5992] __x64_sys_ioctl+0xb7/0x210 [ 62.921948][ T5992] do_syscall_64+0x106/0xf80 [ 62.921964][ T5992] ? clear_bhb_loop+0x40/0x90 [ 62.921977][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.921989][ T5992] RIP: 0033:0x7f661379c799 [ 62.921998][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.922008][ T5992] RSP: 002b:00007f6614700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.922019][ T5992] RAX: ffffffffffffffda RBX: 00007f6613a16090 RCX: 00007f661379c799 [ 62.922025][ T5992] RDX: 00002000000000c0 RSI: 0000000000005412 RDI: 0000000000000007 [ 62.922031][ T5992] RBP: 00007f6614700090 R08: 0000000000000000 R09: 0000000000000000 [ 62.922042][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.922051][ T5992] R13: 00007f6613a16128 R14: 00007f6613a16090 R15: 00007fffbd4de888 [ 62.922073][ T5992] [ 63.242214][ T5992] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.242228][ T30] audit: type=1400 audit(1774694321.896:153): avc: denied { create } for pid=5993 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.259087][ T30] audit: type=1400 audit(1774694321.916:154): avc: denied { getopt } for pid=5993 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.528218][ T30] audit: type=1400 audit(1774694322.266:155): avc: denied { write } for pid=5997 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.584051][ T30] audit: type=1400 audit(1774694322.306:156): avc: denied { read write } for pid=6000 comm="syz.1.18" name="radio6" dev="devtmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 63.637600][ T30] audit: type=1400 audit(1774694322.306:157): avc: denied { open } for pid=6000 comm="syz.1.18" path="/dev/radio6" dev="devtmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 63.697339][ T30] audit: type=1400 audit(1774694322.316:158): avc: denied { ioctl } for pid=6000 comm="syz.1.18" path="/dev/radio6" dev="devtmpfs" ino=996 ioctlcmd=0x5652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 63.883163][ T6017] Zero length message leads to an empty skb [ 64.302822][ T6022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.052630][ T6029] netlink: 'syz.3.22': attribute type 8 has an invalid length. [ 66.019393][ T6037] overlayfs: failed to resolve './file0': -2 [ 66.026360][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.062201][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.388309][ T6057] comedi comedi3: comedi_config --init_data is deprecated [ 67.735706][ T6054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 67.878615][ T6056] tc_dump_action: action bad kind [ 68.042204][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 68.062377][ T30] audit: type=1400 audit(1774694326.716:177): avc: denied { setopt } for pid=6061 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.245186][ T30] audit: type=1400 audit(1774694326.986:178): avc: denied { read write } for pid=6064 comm="syz.1.32" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 68.302207][ T30] audit: type=1400 audit(1774694326.986:179): avc: denied { open } for pid=6064 comm="syz.1.32" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 69.122561][ T30] audit: type=1400 audit(1774694327.846:180): avc: denied { read write } for pid=6066 comm="syz.0.27" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 69.122613][ T30] audit: type=1400 audit(1774694327.846:181): avc: denied { open } for pid=6066 comm="syz.0.27" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 69.122650][ T30] audit: type=1400 audit(1774694327.846:182): avc: denied { ioctl } for pid=6066 comm="syz.0.27" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 69.161128][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 69.162362][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 69.162454][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.187182][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.398120][ T30] audit: type=1400 audit(1774694328.116:183): avc: denied { open } for pid=6070 comm="syz.1.33" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 69.424912][ T30] audit: type=1400 audit(1774694328.166:184): avc: denied { bind } for pid=6061 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.454426][ T30] audit: type=1400 audit(1774694328.196:185): avc: denied { ioctl } for pid=6061 comm="syz.4.31" path="socket:[9327]" dev="sockfs" ino=9327 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.982368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 70.126144][ T30] audit: type=1400 audit(1774694328.866:186): avc: denied { read write } for pid=6080 comm="syz.0.36" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.732119][ T5859] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 71.340037][ T5817] Bluetooth: hci4: SCO packet for unknown connection handle 251 [ 71.359277][ T5859] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.432323][ T5859] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 71.674481][ T5859] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.692890][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.755377][ T5859] usb 2-1: Product: syz [ 71.759574][ T5859] usb 2-1: Manufacturer: syz [ 71.877937][ T5859] usb 2-1: SerialNumber: syz [ 71.888987][ T6092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 71.984552][ T6108] process 'syz.0.40' launched './file1' with NULL argv: empty string added [ 71.998722][ T6111] syz.2.35 (6111): attempted to duplicate a private mapping with mremap. This is not supported. [ 72.554627][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.578535][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.642094][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.650224][ T5859] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 72.682465][ T5859] usb 2-1: USB disconnect, device number 6 [ 72.835466][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 72.851050][ T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 73.142396][ T29] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 73.151522][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.180844][ T29] usb 4-1: Product: syz [ 73.192099][ T29] usb 4-1: Manufacturer: syz [ 73.202222][ T29] usb 4-1: SerialNumber: syz [ 73.232148][ T5859] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 73.422186][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 73.454588][ T5859] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 73.462923][ T5859] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 73.495590][ T5859] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.536388][ T5859] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.546308][ T5859] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 73.558709][ T5859] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 73.564944][ T29] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 73.635980][ T29] usb 4-1: unit 6 not found! [ 73.640603][ T29] usb 4-1: unit 4 not found! [ 73.669928][ T5859] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25616, setting to 1024 [ 73.695965][ T5859] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.696135][ T29] usb 4-1: USB disconnect, device number 3 [ 73.722390][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.763846][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 73.763860][ T30] audit: type=1400 audit(1774694332.506:199): avc: denied { block_suspend } for pid=6121 comm="syz.4.44" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.765738][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.823888][ T6082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.865656][ T5859] usb 2-1: can't set config #16, error -71 [ 73.885177][ T5859] usb 2-1: USB disconnect, device number 7 [ 73.903373][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 73.918565][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 73.929583][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 73.951549][ T10] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 73.954826][ T30] audit: type=1400 audit(1774694332.696:200): avc: denied { unlink } for pid=5805 comm="syz-executor" name="file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.961092][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.992755][ T10] usb 1-1: Product: syz [ 73.996974][ T10] usb 1-1: Manufacturer: syz [ 74.001607][ T10] usb 1-1: SerialNumber: syz [ 74.019982][ T10] usb 1-1: config 0 descriptor?? [ 74.159357][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 74.166039][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 74.175133][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.303158][ T10] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 74.334011][ T30] audit: type=1400 audit(1774694333.066:201): avc: denied { create } for pid=6126 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.393486][ T10] usb 1-1: USB disconnect, device number 2 [ 74.403795][ T6138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 74.434124][ T6139] udevd[6139]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.437940][ T6138] openvswitch: netlink: Flow key attr not present in new flow. [ 74.883673][ T30] audit: type=1400 audit(1774694333.626:202): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.913692][ T30] audit: type=1400 audit(1774694333.656:203): avc: denied { getopt } for pid=6146 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.196058][ T6156] FAULT_INJECTION: forcing a failure. [ 75.196058][ T6156] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.209677][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(full) [ 75.209698][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.209708][ T6156] Call Trace: [ 75.209714][ T6156] [ 75.209720][ T6156] dump_stack_lvl+0x100/0x190 [ 75.209751][ T6156] should_fail_ex.cold+0x5/0xa [ 75.209774][ T6156] _copy_from_user+0x2e/0xd0 [ 75.209793][ T6156] __sys_bpf+0x243/0x4b90 [ 75.209816][ T6156] ? __pfx___sys_bpf+0x10/0x10 [ 75.209833][ T6156] ? finish_task_switch.isra.0+0x200/0xb80 [ 75.209859][ T6156] ? rcu_is_watching+0x12/0xc0 [ 75.209880][ T6156] ? finish_task_switch.isra.0+0x205/0xb80 [ 75.209903][ T6156] ? lockdep_hardirqs_on+0x78/0x100 [ 75.209929][ T6156] ? finish_task_switch.isra.0+0x205/0xb80 [ 75.209954][ T6156] ? rcu_is_watching+0x12/0xc0 [ 75.209974][ T6156] ? trace_sched_exit_tp+0x13a/0x180 [ 75.210001][ T6156] ? __schedule+0x1000/0x6120 [ 75.210052][ T6156] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 75.210069][ T6156] ? rcu_is_watching+0x12/0xc0 [ 75.210091][ T6156] __x64_sys_bpf+0x7b/0xc0 [ 75.210109][ T6156] ? lockdep_hardirqs_on+0x78/0x100 [ 75.210134][ T6156] do_syscall_64+0x106/0xf80 [ 75.210157][ T6156] ? clear_bhb_loop+0x40/0x90 [ 75.210178][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.210195][ T6156] RIP: 0033:0x7f97ca39c799 [ 75.210209][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.210224][ T6156] RSP: 002b:00007f97c85d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.210241][ T6156] RAX: ffffffffffffffda RBX: 00007f97ca616180 RCX: 00007f97ca39c799 [ 75.210252][ T6156] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 75.210262][ T6156] RBP: 00007f97c85d5090 R08: 0000000000000000 R09: 0000000000000000 [ 75.210271][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.210280][ T6156] R13: 00007f97ca616218 R14: 00007f97ca616180 R15: 00007ffe2bc022e8 [ 75.210303][ T6156] [ 75.642183][ T30] audit: type=1400 audit(1774694334.366:204): avc: denied { connect } for pid=6135 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.668875][ T6155] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 75.786067][ T5927] hid-generic 0005:10CF:5505.0001: item fetching failed at offset 0/1 [ 75.814733][ T5927] hid-generic 0005:10CF:5505.0001: probe with driver hid-generic failed with error -22 [ 75.907905][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'. [ 75.934626][ T5859] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.945490][ T30] audit: type=1400 audit(1774694334.686:205): avc: denied { read } for pid=6161 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.042218][ T5927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.183604][ T881] cfg80211: failed to load regulatory.db [ 76.207316][ T5859] usb 5-1: Invalid ep0 maxpacket: 9 [ 76.332216][ T5927] usb 3-1: device descriptor read/64, error -71 [ 76.367716][ T30] audit: type=1400 audit(1774694335.066:206): avc: denied { name_bind } for pid=6165 comm="syz.1.55" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 76.450413][ T30] audit: type=1400 audit(1774694335.066:207): avc: denied { node_bind } for pid=6165 comm="syz.1.55" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 76.464258][ T5859] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.622289][ T5927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.672159][ T5859] usb 5-1: Invalid ep0 maxpacket: 9 [ 76.678231][ T5859] usb usb5-port1: attempt power cycle [ 76.768344][ T5927] usb 3-1: device descriptor read/64, error -71 [ 76.837016][ T30] audit: type=1400 audit(1774694335.576:208): avc: denied { create } for pid=6172 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.969262][ T5927] usb usb3-port1: attempt power cycle [ 77.172174][ T979] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.190539][ T6179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 77.402198][ T5859] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.432504][ T5859] usb 5-1: Invalid ep0 maxpacket: 9 [ 77.539146][ T6182] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 77.573240][ T5859] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.602300][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 77.610678][ T979] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 77.624028][ T5859] usb 5-1: Invalid ep0 maxpacket: 9 [ 77.629216][ T979] usb 1-1: config 0 has no interface number 0 [ 77.629252][ T979] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.650414][ T5859] usb usb5-port1: unable to enumerate USB device [ 77.664104][ T979] usb 1-1: config 0 interface 85 has no altsetting 0 [ 77.709640][ T979] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 77.757725][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.770256][ T979] usb 1-1: Product: syz [ 77.778166][ T979] usb 1-1: Manufacturer: syz [ 77.792090][ T979] usb 1-1: SerialNumber: syz [ 77.823921][ T979] usb 1-1: config 0 descriptor?? [ 78.102127][ T29] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 78.393298][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 78.406657][ T29] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 78.417644][ T29] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 78.445017][ T29] usb 2-1: string descriptor 0 read error: -22 [ 78.451924][ T979] appletouch 1-1:0.85: Geyser mode initialized. [ 78.458254][ T29] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 78.469397][ T979] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5 [ 78.479119][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.768349][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.777905][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 78.777918][ T30] audit: type=1400 audit(1774694337.516:222): avc: denied { write } for pid=6175 comm="syz.0.57" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.778761][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.808231][ T6176] netlink: 'syz.0.57': attribute type 1 has an invalid length. [ 78.823905][ T30] audit: type=1400 audit(1774694337.516:223): avc: denied { open } for pid=6175 comm="syz.0.57" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.855434][ T6176] netlink: 280 bytes leftover after parsing attributes in process `syz.0.57'. [ 78.893308][ T29] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 78.939036][ T29] usb 2-1: USB disconnect, device number 8 [ 78.949486][ T30] audit: type=1400 audit(1774694337.616:224): avc: denied { write } for pid=6208 comm="syz.2.66" name="ip6_flowlabel" dev="proc" ino=4026532916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.013039][ T5859] usb 1-1: USB disconnect, device number 3 [ 79.099901][ T5859] appletouch 1-1:0.85: input: appletouch disconnected [ 79.236393][ T6214] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 79.246085][ T6214] overlayfs: overlapping lowerdir path [ 79.448305][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.633739][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 79.678352][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.698616][ T5927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.720066][ T30] audit: type=1400 audit(1774694338.436:225): avc: denied { read write } for pid=6217 comm="syz.0.69" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.754615][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.767037][ T5927] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.786806][ T29] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 79.809022][ T30] audit: type=1400 audit(1774694338.436:226): avc: denied { open } for pid=6217 comm="syz.0.69" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.853698][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.059510][ T29] usb 5-1: config 0 descriptor?? [ 80.074311][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.70'. [ 80.097665][ T30] audit: type=1400 audit(1774694338.446:227): avc: denied { read } for pid=6217 comm="syz.0.69" path="socket:[10275]" dev="sockfs" ino=10275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.188280][ T30] audit: type=1400 audit(1774694338.766:228): avc: denied { ioctl } for pid=6217 comm="syz.0.69" path="socket:[9706]" dev="sockfs" ino=9706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.287841][ T30] audit: type=1400 audit(1774694338.886:229): avc: denied { write } for pid=6220 comm="syz.3.70" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.328001][ T6224] fido_id[6224]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.341674][ T30] audit: type=1400 audit(1774694338.976:230): avc: denied { execute } for pid=6220 comm="syz.3.70" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 80.477438][ T29] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 80.493535][ T6226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.71'. [ 80.511381][ T6226] openvswitch: netlink: Flow actions attr not present in new flow. [ 80.523241][ T29] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 80.676031][ T29] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 80.887105][ T29] ft260 0003:0403:6030.0003: failed to retrieve system status [ 80.905629][ T30] audit: type=1400 audit(1774694339.646:231): avc: denied { getopt } for pid=6237 comm="syz.0.75" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.914077][ T29] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71 [ 80.969671][ T29] usb 5-1: USB disconnect, device number 6 [ 82.332358][ T881] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.504749][ T6253] usb usb7: usbfs: process 6253 (syz.4.79) did not claim interface 0 before use [ 82.762218][ T881] usb 1-1: Using ep0 maxpacket: 16 [ 82.768811][ T881] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 82.795092][ T881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.822086][ T881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 82.842076][ T881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 82.942129][ T881] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.974255][ T881] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 83.096121][ T881] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 83.131967][ T881] usb 1-1: Manufacturer: syz [ 83.152905][ T881] usb 1-1: config 0 descriptor?? [ 83.253493][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'. [ 83.317079][ T6268] openvswitch: netlink: Flow actions attr not present in new flow. [ 83.494286][ T881] rc_core: IR keymap rc-hauppauge not found [ 83.506498][ T881] Registered IR keymap rc-empty [ 83.516885][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 83.557194][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 83.593772][ T881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 83.623708][ T881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 83.706423][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 83.762098][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 83.790234][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 83.833127][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 83.856213][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 83.856227][ T30] audit: type=1400 audit(1774694342.596:247): avc: denied { getopt } for pid=6281 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.892356][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 83.920379][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 83.994399][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 84.119773][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 84.167551][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 84.204854][ T881] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 84.232129][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.240627][ T30] audit: type=1400 audit(1774694342.976:248): avc: denied { write } for pid=6290 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.266572][ T881] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 84.288505][ T881] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 84.452303][ T881] usb 1-1: USB disconnect, device number 4 [ 84.577189][ T29] usb 4-1: device descriptor read/64, error -71 [ 84.707695][ T30] audit: type=1400 audit(1774694343.006:249): avc: denied { nlmsg_write } for pid=6290 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.784034][ T30] audit: type=1400 audit(1774694343.016:250): avc: denied { read } for pid=6290 comm="syz.0.92" name="usbmon9" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.002008][ T30] audit: type=1400 audit(1774694343.016:251): avc: denied { open } for pid=6290 comm="syz.0.92" path="/dev/usbmon9" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.052130][ T29] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.142128][ T30] audit: type=1400 audit(1774694343.026:252): avc: denied { create } for pid=6287 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 85.251766][ T29] usb 4-1: device descriptor read/64, error -71 [ 85.312100][ T30] audit: type=1400 audit(1774694343.056:253): avc: denied { write } for pid=6287 comm="syz.1.90" path="socket:[10692]" dev="sockfs" ino=10692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 85.362715][ T29] usb usb4-port1: attempt power cycle [ 85.742208][ T30] audit: type=1400 audit(1774694343.416:254): avc: denied { create } for pid=6287 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.782137][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 85.842550][ T29] usb 4-1: device descriptor read/8, error -71 [ 85.961570][ T30] audit: type=1400 audit(1774694344.126:255): avc: denied { lock } for pid=6281 comm="syz.2.86" path="socket:[10665]" dev="sockfs" ino=10665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 86.325093][ T30] audit: type=1400 audit(1774694344.646:256): avc: denied { create } for pid=6303 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.436245][ T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.482852][ T29] usb 4-1: device descriptor read/8, error -71 [ 86.489746][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95'. [ 86.523627][ T6308] openvswitch: netlink: Flow actions attr not present in new flow. [ 86.635810][ T29] usb usb4-port1: unable to enumerate USB device [ 86.726128][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.97'. [ 87.075072][ T6320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.99'. [ 88.666262][ T6342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.103'. [ 89.087383][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 89.087395][ T30] audit: type=1400 audit(1774694347.516:269): avc: denied { mounton } for pid=6339 comm="syz.4.104" path="/20/bus" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.561353][ T30] audit: type=1400 audit(1774694348.056:270): avc: denied { read } for pid=6344 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.632746][ T30] audit: type=1400 audit(1774694348.056:271): avc: denied { create } for pid=6344 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.689773][ T30] audit: type=1400 audit(1774694348.076:272): avc: denied { setopt } for pid=6344 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.749856][ T30] audit: type=1400 audit(1774694348.086:273): avc: denied { sqpoll } for pid=6344 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.806507][ T30] audit: type=1400 audit(1774694348.106:274): avc: denied { write } for pid=6344 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.879267][ T30] audit: type=1400 audit(1774694348.516:275): avc: denied { write } for pid=6348 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.922327][ T6357] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 89.928682][ T30] audit: type=1400 audit(1774694348.666:276): avc: denied { create } for pid=6358 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.044283][ T30] audit: type=1400 audit(1774694348.786:277): avc: denied { ioctl } for pid=6363 comm="syz.0.110" path="socket:[9990]" dev="sockfs" ino=9990 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.285198][ T30] audit: type=1400 audit(1774694348.946:278): avc: denied { write } for pid=6358 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.572490][ T881] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.747877][ T881] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 90.757096][ T881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 90.766832][ T881] usb 5-1: Product: syz [ 90.773071][ T881] usb 5-1: Manufacturer: syz [ 90.777661][ T881] usb 5-1: SerialNumber: syz [ 90.792598][ T881] usb 5-1: config 0 descriptor?? [ 90.800392][ T881] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 90.816697][ T881] dvb-usb: bulk message failed: -22 (2/0) [ 90.838615][ T881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.849351][ T881] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 90.903437][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 90.921682][ T881] usb 5-1: media controller created [ 90.957876][ T881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.217627][ T881] cxusb: set interface failed [ 92.224500][ T881] dvb-usb: bulk message failed: -22 (1/0) [ 92.263884][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.282166][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.291955][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 92.303028][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.321669][ T10] usb 1-1: config 0 descriptor?? [ 92.333022][ T881] DVB: Unable to find symbol mt352_attach() [ 92.344297][ T881] dvb-usb: bulk message failed: -22 (5/0) [ 92.350690][ T881] zl10353_read_register: readreg error (reg=127, ret==-121) [ 92.358389][ T881] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 92.443905][ T881] rc_core: IR keymap rc-dvico-mce not found [ 92.449865][ T881] Registered IR keymap rc-empty [ 92.469457][ T881] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 92.480357][ T881] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8 [ 92.511063][ T881] dvb-usb: schedule remote query interval to 100 msecs. [ 92.528303][ T881] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 92.574557][ T881] usb 5-1: USB disconnect, device number 7 [ 92.647538][ T881] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 92.758956][ T10] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 92.796773][ T10] playstation 0003:054C:0BA0.0004: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 93.004979][ T10] playstation 0003:054C:0BA0.0004: Failed to retrieve feature with reportID 18: -71 [ 93.040648][ T10] playstation 0003:054C:0BA0.0004: Failed to retrieve DualShock4 pairing info: -71 [ 93.065411][ T10] playstation 0003:054C:0BA0.0004: Failed to get MAC address from DualShock4 [ 93.491543][ T10] playstation 0003:054C:0BA0.0004: Failed to create dualshock4. [ 93.512134][ T10] playstation 0003:054C:0BA0.0004: probe with driver playstation failed with error -71 [ 93.536226][ T10] usb 1-1: USB disconnect, device number 5 [ 93.664661][ T6401] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 94.053804][ T6410] bond1: entered allmulticast mode [ 94.233357][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 94.233372][ T30] audit: type=1400 audit(1774694352.976:284): avc: denied { ioctl } for pid=6405 comm="syz.4.123" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.254569][ T6427] syz.0.129 uses obsolete (PF_INET,SOCK_PACKET) [ 94.278707][ T30] audit: type=1400 audit(1774694353.016:285): avc: denied { mount } for pid=6428 comm="syz.2.130" name="/" dev="configfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 94.378480][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 94.601068][ T30] audit: type=1400 audit(1774694353.036:286): avc: denied { execmem } for pid=6428 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 94.661820][ T30] audit: type=1400 audit(1774694353.296:287): avc: denied { create } for pid=6426 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.703081][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 94.710665][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 94.718928][ T10] usb 5-1: config 0 has no interface number 0 [ 94.732683][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.745809][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 94.758411][ T30] audit: type=1400 audit(1774694353.326:288): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.794628][ T6438] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 94.804499][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.821424][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.838013][ T6427] Bluetooth: hci0: service_discovery: too big uuid_count value 29743 [ 94.848460][ T30] audit: type=1400 audit(1774694353.326:289): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.178887][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 95.190527][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.207384][ T30] audit: type=1400 audit(1774694353.326:290): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.225147][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.134'. [ 95.332625][ T6446] netlink: 'syz.1.134': attribute type 6 has an invalid length. [ 95.383846][ T6445] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.478618][ T10] usb 5-1: config 0 descriptor?? [ 95.497186][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 95.507794][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 95.533060][ T6444] netlink: 60 bytes leftover after parsing attributes in process `syz.1.134'. [ 95.533149][ T30] audit: type=1400 audit(1774694353.356:291): avc: denied { read } for pid=6434 comm="syz.2.131" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 95.571150][ T30] audit: type=1400 audit(1774694353.356:292): avc: denied { open } for pid=6434 comm="syz.2.131" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 95.581525][ T6444] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 95.601805][ T6444] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 95.630010][ T30] audit: type=1400 audit(1774694353.356:293): avc: denied { ioctl } for pid=6434 comm="syz.2.131" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.161685][ T6450] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 96.689990][ T5873] usb 5-1: USB disconnect, device number 8 [ 96.731043][ T5873] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 96.758360][ T6459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.812957][ T6459] tmpfs: Bad value for 'mpol' [ 97.031106][ T6478] warning: `syz.3.141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.113644][ T6481] netlink: 220 bytes leftover after parsing attributes in process `syz.0.143'. [ 97.572129][ T881] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 97.760682][ T6482] CUSE: unknown device info "" [ 97.765608][ T6482] CUSE: unknown device info "" [ 97.770444][ T6482] CUSE: unknown device info "" [ 97.775336][ T6482] CUSE: unknown device info "" [ 97.780172][ T6482] CUSE: unknown device info "" [ 97.785089][ T6482] CUSE: unknown device info "" [ 97.789905][ T6482] CUSE: unknown device info "" [ 97.794750][ T6482] CUSE: unknown device info "" [ 97.799653][ T6482] CUSE: DEVNAME unspecified [ 97.827768][ T881] usb 2-1: config index 0 descriptor too short (expected 61796, got 100) [ 97.837762][ T881] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 97.866865][ T6473] ipt_rpfilter: unknown options [ 97.907813][ T881] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 97.929513][ T881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.951322][ T881] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 97.971562][ T881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.002239][ T881] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x2F, changing to 0xF [ 98.034778][ T881] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 98.065039][ T6489] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 98.104583][ T881] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.123837][ T881] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.133428][ T881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.144320][ T881] usb 2-1: Product: syz [ 98.153364][ T881] usb 2-1: Manufacturer: syz [ 98.162637][ T881] usb 2-1: SerialNumber: syz [ 98.552149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 98.708611][ T6496] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.717149][ T6496] overlayfs: failed to set xattr on upper [ 98.723154][ T6496] overlayfs: ...falling back to redirect_dir=nofollow. [ 98.730199][ T6496] overlayfs: ...falling back to index=off. [ 98.736243][ T6496] overlayfs: ...falling back to uuid=null. [ 98.743915][ T6496] overlayfs: failed to clone lowerpath [ 99.297714][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 99.297725][ T30] audit: type=1400 audit(1774694358.036:370): avc: denied { map } for pid=6487 comm="syz.4.147" path="pipe:[11389]" dev="pipefs" ino=11389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 99.351522][ T30] audit: type=1400 audit(1774694358.066:371): avc: denied { execute } for pid=6487 comm="syz.4.147" path="pipe:[11389]" dev="pipefs" ino=11389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 99.412260][ T30] audit: type=1400 audit(1774694358.076:372): avc: denied { create } for pid=6507 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.549670][ T30] audit: type=1400 audit(1774694358.076:373): avc: denied { connect } for pid=6507 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.549939][ T30] audit: type=1400 audit(1774694358.116:374): avc: denied { create } for pid=6500 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.583178][ T5873] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 99.732345][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 99.765025][ T5873] usb 4-1: too many configurations: 121, using maximum allowed: 8 [ 99.774706][ T30] audit: type=1400 audit(1774694358.516:375): avc: denied { read } for pid=6479 comm="syz.1.144" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 99.805697][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 99.813406][ T5873] usb 4-1: can't read configurations, error -61 [ 99.837665][ T30] audit: type=1400 audit(1774694358.516:376): avc: denied { open } for pid=6479 comm="syz.1.144" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 99.898149][ T30] audit: type=1400 audit(1774694358.516:377): avc: denied { ioctl } for pid=6479 comm="syz.1.144" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 99.965292][ T5873] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 100.021269][ T5913] IPVS: starting estimator thread 0... [ 100.029611][ T6511] netlink: 'syz.4.151': attribute type 1 has an invalid length. [ 100.141276][ T30] audit: type=1400 audit(1774694358.686:378): avc: denied { perfmon } for pid=6509 comm="syz.4.151" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.162563][ T6512] IPVS: using max 43 ests per chain, 103200 per kthread [ 100.227486][ T881] cdc_ncm 2-1:1.0: bind() failure [ 100.245243][ T881] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 100.258118][ T881] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 100.327264][ T30] audit: type=1400 audit(1774694358.686:379): avc: denied { prog_run } for pid=6509 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.336571][ T881] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 100.439531][ T881] usb 2-1: USB disconnect, device number 9 [ 100.447167][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 100.489715][ T5873] usb 4-1: too many configurations: 121, using maximum allowed: 8 [ 100.515342][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 100.828478][ T5873] usb 4-1: can't read configurations, error -61 [ 100.896148][ T5873] usb usb4-port1: attempt power cycle [ 101.272382][ T5873] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 101.292516][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 101.298306][ T5873] usb 4-1: too many configurations: 121, using maximum allowed: 8 [ 101.321489][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 101.349799][ T5873] usb 4-1: can't read configurations, error -61 [ 101.522258][ T5873] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 101.552697][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 101.575657][ T5873] usb 4-1: too many configurations: 121, using maximum allowed: 8 [ 101.608849][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 101.630115][ T5873] usb 4-1: can't read configurations, error -61 [ 101.643319][ T5873] usb usb4-port1: unable to enumerate USB device [ 101.668461][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 101.907360][ T6528] IPVS: Unknown mcast interface: nicvf0 [ 102.082121][ T5913] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.242170][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 102.250491][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.266713][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.296548][ T5913] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.337008][ T5913] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 102.372114][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.392196][ T5913] usb 1-1: Product: syz [ 102.403746][ T5913] usb 1-1: Manufacturer: syz [ 102.413558][ T5913] usb 1-1: SerialNumber: syz [ 102.568318][ T6547] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 102.579686][ T6547] binder: 6546:6547 ioctl c0306201 200000000540 returned -14 [ 102.666992][ T5913] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.682882][ T5913] usb 1-1: MIDIStreaming interface descriptor not found [ 102.774523][ T5913] usb 1-1: USB disconnect, device number 6 [ 103.147621][ T6556] netlink: 112 bytes leftover after parsing attributes in process `syz.1.166'. [ 103.163863][ T6556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 103.172751][ T6556] openvswitch: netlink: Flow key attr not present in new flow. [ 103.784817][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 103.985376][ T5859] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.135889][ T5913] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 104.165423][ T6570] ======================================================= [ 104.165423][ T6570] WARNING: The mand mount option has been deprecated and [ 104.165423][ T6570] and is ignored by this kernel. Remove the mand [ 104.165423][ T6570] option from the mount to silence this warning. [ 104.165423][ T6570] ======================================================= [ 104.376786][ T6570] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.073268][ T6570] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 105.073899][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 105.073911][ T30] audit: type=1400 audit(1774694362.946:411): avc: denied { mount } for pid=6564 comm="syz.1.169" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 105.090727][ T6570] overlayfs: failed to look up (tracing) for ino (-66) [ 105.671305][ T5817] Bluetooth: hci4: Malformed HCI Event [ 105.827723][ T30] audit: type=1400 audit(1774694363.086:412): avc: denied { mounton } for pid=6564 comm="syz.1.169" path="/35/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 105.855017][ T30] audit: type=1400 audit(1774694363.086:413): avc: denied { mount } for pid=6564 comm="syz.1.169" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.880684][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.891624][ T30] audit: type=1400 audit(1774694363.766:414): avc: denied { create } for pid=6564 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.929744][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.940020][ T30] audit: type=1400 audit(1774694364.596:415): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.959718][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.973191][ T5859] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.982765][ T30] audit: type=1400 audit(1774694364.686:416): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 106.003120][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.014230][ T5859] usb 5-1: config 0 descriptor?? [ 106.030104][ T30] audit: type=1400 audit(1774694364.766:417): avc: denied { create } for pid=6578 comm="syz.1.172" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.032529][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 106.051240][ T30] audit: type=1400 audit(1774694364.766:418): avc: denied { mounton } for pid=6578 comm="syz.1.172" path="/36/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.065077][ T5913] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 106.090619][ T6580] fuse: Unknown parameter 'fP0x0000000000000008' [ 106.092128][ T5913] usb 4-1: config 0 has no interface number 0 [ 106.106493][ T5913] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 106.121916][ T6579] sp0: Synchronizing with TNC [ 106.123379][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.136960][ T30] audit: type=1400 audit(1774694364.796:419): avc: denied { mount } for pid=6578 comm="syz.1.172" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 106.208612][ T30] audit: type=1400 audit(1774694364.826:420): avc: denied { create } for pid=6576 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.220581][ T5859] usbhid 5-1:0.0: can't add hid device: -71 [ 106.235548][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.245062][ T5859] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.255958][ T5913] usb 4-1: Product: syz [ 106.264878][ T5913] usb 4-1: Manufacturer: syz [ 106.311097][ T5913] usb 4-1: SerialNumber: syz [ 106.326444][ T5873] usb 3-1: no configurations [ 106.331129][ T5873] usb 3-1: can't read configurations, error -22 [ 106.332368][ T5859] usb 5-1: USB disconnect, device number 9 [ 106.482790][ T5873] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.483115][ T5913] usb 4-1: config 0 descriptor?? [ 106.639377][ T5913] usb 4-1: can't set config #0, error -71 [ 106.659954][ T5913] usb 4-1: USB disconnect, device number 12 [ 106.671215][ T5873] usb 3-1: no configurations [ 106.688558][ T5873] usb 3-1: can't read configurations, error -22 [ 106.719202][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 106.722321][ T5873] usb usb3-port1: attempt power cycle [ 106.817348][ T6588] fuse: Unknown parameter ' [ 106.817348][ T6588] ُfݼ%c!i$Nac4j.nh [ 109.874870][ T6672] dump_stack_lvl+0x100/0x190 [ 109.874891][ T6672] should_fail_ex.cold+0x5/0xa [ 109.874907][ T6672] _copy_from_user+0x2e/0xd0 [ 109.874919][ T6672] ksys_shmctl.constprop.0+0x27e/0x390 [ 109.874938][ T6672] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 109.874956][ T6672] ? irqentry_exit+0x180/0x670 [ 109.874978][ T6672] ? ksys_write+0x1a2/0x250 [ 109.874988][ T6672] ? ksys_write+0x20e/0x250 [ 109.874998][ T6672] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 109.875021][ T6672] do_syscall_64+0x106/0xf80 [ 109.875037][ T6672] ? clear_bhb_loop+0x40/0x90 [ 109.875052][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.875063][ T6672] RIP: 0033:0x7f8ff379c799 [ 109.875073][ T6672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.875083][ T6672] RSP: 002b:00007f8ff45c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 109.875093][ T6672] RAX: ffffffffffffffda RBX: 00007f8ff3a16180 RCX: 00007f8ff379c799 [ 109.875100][ T6672] RDX: 000020000001f700 RSI: 0000000000000001 RDI: 0000000000000000 [ 109.875106][ T6672] RBP: 00007f8ff45c0090 R08: 0000000000000000 R09: 0000000000000000 [ 109.875112][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.875118][ T6672] R13: 00007f8ff3a16218 R14: 00007f8ff3a16180 R15: 00007ffc8bc85cb8 [ 109.875131][ T6672] [ 110.294588][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.304715][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 110.304748][ T30] audit: type=1400 audit(1774694369.026:460): avc: denied { ioctl } for pid=6675 comm="syz-executor" path="socket:[12374]" dev="sockfs" ino=12374 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.363508][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.421848][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.556831][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.569324][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.634427][ T30] audit: type=1400 audit(1774694369.346:461): avc: denied { mounton } for pid=6675 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 110.673342][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.982089][ T5873] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 112.155080][ T5873] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 112.181705][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.242983][ T5873] usb 4-1: config 0 descriptor?? [ 112.270171][ T5873] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 112.280568][ T6675] chnl_net:caif_netlink_parms(): no params data found [ 112.302925][ T30] audit: type=1326 audit(1774694371.046:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.4.199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbff219c799 code=0x0 [ 112.386085][ T12] bridge_slave_1: left allmulticast mode [ 112.392566][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 112.397778][ T12] bridge_slave_1: left promiscuous mode [ 112.418302][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.436854][ T12] bridge_slave_0: left allmulticast mode [ 112.442917][ T12] bridge_slave_0: left promiscuous mode [ 112.448657][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.554401][ T5913] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 112.562855][ T5913] usb 3-1: config 0 has no interface number 0 [ 112.568979][ T5913] usb 3-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 112.581453][ T5913] usb 3-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 112.595167][ T5913] usb 3-1: config 0 interface 153 has no altsetting 0 [ 112.607590][ T5913] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 112.622083][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.632537][ T5817] Bluetooth: hci2: command tx timeout [ 112.638560][ T5913] usb 3-1: Product: syz [ 112.642851][ T5913] usb 3-1: Manufacturer: syz [ 112.647514][ T5913] usb 3-1: SerialNumber: syz [ 112.661333][ T5913] usb 3-1: config 0 descriptor?? [ 112.672387][ T5913] hub 3-1:0.153: bad descriptor, ignoring hub [ 112.678553][ T5913] hub 3-1:0.153: probe with driver hub failed with error -5 [ 112.687950][ T5913] sierra 3-1:0.153: Sierra USB modem converter detected [ 112.756456][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.774379][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.803461][ T12] bond0 (unregistering): Released all slaves [ 112.813937][ T12] bond1 (unregistering): Released all slaves [ 112.924019][ T5913] usb 3-1: USB disconnect, device number 9 [ 113.013900][ T6675] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.021180][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.028636][ T6675] bridge_slave_0: entered allmulticast mode [ 113.036692][ T6675] bridge_slave_0: entered promiscuous mode [ 113.049041][ T6675] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.059379][ T5913] sierra 3-1:0.153: device disconnected [ 113.070973][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.080791][ T6675] bridge_slave_1: entered allmulticast mode [ 113.095681][ T6675] bridge_slave_1: entered promiscuous mode [ 113.187356][ T6720] can0: slcan on ttyS3. [ 113.193429][ T6720] capability: warning: `syz.0.201' uses deprecated v2 capabilities in a way that may be insecure [ 113.204467][ T6720] FAULT_INJECTION: forcing a failure. [ 113.204467][ T6720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.218356][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT(full) [ 113.218377][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.218387][ T6720] Call Trace: [ 113.218393][ T6720] [ 113.218400][ T6720] dump_stack_lvl+0x100/0x190 [ 113.218431][ T6720] should_fail_ex.cold+0x5/0xa [ 113.218455][ T6720] _copy_to_user+0x32/0xd0 [ 113.218476][ T6720] simple_read_from_buffer+0xcb/0x170 [ 113.218496][ T6720] proc_fail_nth_read+0x1af/0x230 [ 113.218522][ T6720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.218547][ T6720] ? rw_verify_area+0xce/0x6d0 [ 113.218571][ T6720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.218595][ T6720] vfs_read+0x1e4/0xb30 [ 113.218624][ T6720] ? __pfx_vfs_read+0x10/0x10 [ 113.218649][ T6720] ? __fget_files+0x215/0x3d0 [ 113.218674][ T6720] ? __fget_files+0x21f/0x3d0 [ 113.218699][ T6720] ksys_read+0x12a/0x250 [ 113.218714][ T6720] ? __pfx_ksys_read+0x10/0x10 [ 113.218735][ T6720] do_syscall_64+0x106/0xf80 [ 113.218761][ T6720] ? clear_bhb_loop+0x40/0x90 [ 113.218783][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.218800][ T6720] RIP: 0033:0x7f8ff375cfce [ 113.218814][ T6720] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.218829][ T6720] RSP: 002b:00007f8ff45bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.218845][ T6720] RAX: ffffffffffffffda RBX: 00007f8ff45c06c0 RCX: 00007f8ff375cfce [ 113.218856][ T6720] RDX: 000000000000000f RSI: 00007f8ff45c00a0 RDI: 0000000000000007 [ 113.218866][ T6720] RBP: 00007f8ff45c0090 R08: 0000000000000000 R09: 0000000000000000 [ 113.218875][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.218885][ T6720] R13: 00007f8ff3a16218 R14: 00007f8ff3a16180 R15: 00007ffc8bc85cb8 [ 113.218908][ T6720] [ 113.411265][ T30] audit: type=1400 audit(1774694371.906:463): avc: denied { write } for pid=6716 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.430548][ T30] audit: type=1400 audit(1774694371.906:464): avc: denied { read } for pid=6716 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.514384][ T6718] can0 (unregistered): slcan off ttyS3. [ 113.617225][ T5873] usb 4-1: USB disconnect, device number 13 [ 113.673229][ T6675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.716135][ T6675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.741789][ T12] hsr_slave_0: left promiscuous mode [ 113.748503][ T12] hsr_slave_1: left promiscuous mode [ 113.756744][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.764296][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.773325][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.780773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.795418][ T30] audit: type=1400 audit(1774694372.536:465): avc: denied { watch } for pid=6732 comm="syz.4.204" path="/36" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.839070][ T12] veth1_macvtap: left promiscuous mode [ 113.852431][ T12] veth0_macvtap: left promiscuous mode [ 113.858069][ T12] veth1_vlan: left promiscuous mode [ 113.868110][ T12] veth0_vlan: left promiscuous mode [ 113.872129][ T5913] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 113.890867][ T30] audit: type=1400 audit(1774694372.626:466): avc: denied { name_bind } for pid=6741 comm="syz.2.205" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 113.919642][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 113.929548][ T30] audit: type=1400 audit(1774694372.626:467): avc: denied { node_bind } for pid=6741 comm="syz.2.205" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 114.084506][ T6733] "syz.4.204" (6733) uses obsolete ecb(arc4) skcipher [ 114.113685][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.124829][ T5913] usb 1-1: config 0 has no interfaces? [ 114.132260][ T5913] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 114.142121][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.150254][ T5913] usb 1-1: Product: syz [ 114.167934][ T5913] usb 1-1: Manufacturer: syz [ 114.174159][ T5913] usb 1-1: SerialNumber: syz [ 114.184702][ T5913] usb 1-1: config 0 descriptor?? [ 114.227741][ T30] audit: type=1400 audit(1774694372.966:468): avc: denied { read } for pid=6749 comm="syz.3.206" path="socket:[12806]" dev="sockfs" ino=12806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.300819][ T12] team0 (unregistering): Port device team_slave_1 removed [ 114.327096][ T12] team0 (unregistering): Port device team_slave_0 removed [ 114.433468][ T6675] team0: Port device team_slave_0 added [ 114.456157][ T6675] team0: Port device team_slave_1 added [ 114.510436][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.518969][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.549196][ T6675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.552226][ T5873] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 114.568689][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.579548][ T6756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.629534][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.691901][ T6675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.715465][ T6760] sp0: Synchronizing with TNC [ 114.719427][ T5817] Bluetooth: hci2: command tx timeout [ 114.807088][ T5873] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.838691][ T5873] usb 4-1: config 0 has no interface number 0 [ 114.867072][ T5873] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.879696][ T6675] hsr_slave_0: entered promiscuous mode [ 114.893845][ T6675] hsr_slave_1: entered promiscuous mode [ 114.905652][ T5873] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.916231][ T6675] debugfs: 'hsr0' already exists in 'hsr' [ 114.921955][ T6675] Cannot create hsr debugfs directory [ 115.024825][ T5873] usb 4-1: config 0 interface 1 has no altsetting 0 [ 115.044049][ T5873] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 115.072123][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.229566][ T30] audit: type=1400 audit(1774694373.946:469): avc: denied { name_bind } for pid=6763 comm="syz.4.209" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 115.484036][ T5873] usb 4-1: config 0 descriptor?? [ 115.828391][ T30] audit: type=1400 audit(1774694374.566:470): avc: denied { read } for pid=6778 comm="syz.4.210" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.917933][ T30] audit: type=1400 audit(1774694374.566:471): avc: denied { open } for pid=6778 comm="syz.4.210" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 116.008863][ T30] audit: type=1400 audit(1774694374.566:472): avc: denied { ioctl } for pid=6778 comm="syz.4.210" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 116.060158][ T6786] FAULT_INJECTION: forcing a failure. [ 116.060158][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 116.115825][ T5873] uclogic 0003:2179:0053.0005: pen parameters not found [ 116.132155][ T5873] uclogic 0003:2179:0053.0005: interface is invalid, ignoring [ 116.137525][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.2.211 Not tainted syzkaller #0 PREEMPT(full) [ 116.137546][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.137555][ T6786] Call Trace: [ 116.137561][ T6786] [ 116.137567][ T6786] dump_stack_lvl+0x100/0x190 [ 116.137595][ T6786] should_fail_ex.cold+0x5/0xa [ 116.137615][ T6786] ? tomoyo_realpath_from_path+0xb6/0x690 [ 116.137638][ T6786] should_failslab+0xc2/0x120 [ 116.137655][ T6786] __kmalloc_noprof+0xe0/0x850 [ 116.137681][ T6786] tomoyo_realpath_from_path+0xb6/0x690 [ 116.137708][ T6786] tomoyo_path_number_perm+0x23c/0x580 [ 116.137755][ T6786] ? tomoyo_path_number_perm+0x22e/0x580 [ 116.137776][ T6786] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.137817][ T6786] ? find_held_lock+0x2b/0x80 [ 116.137837][ T6786] ? __fget_files+0x215/0x3d0 [ 116.137852][ T6786] ? hook_file_ioctl_common+0x146/0x410 [ 116.137872][ T6786] ? __fget_files+0x21f/0x3d0 [ 116.137892][ T6786] security_file_ioctl+0xd3/0x230 [ 116.137915][ T6786] __x64_sys_ioctl+0xb7/0x210 [ 116.137939][ T6786] do_syscall_64+0x106/0xf80 [ 116.137960][ T6786] ? clear_bhb_loop+0x40/0x90 [ 116.137978][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.137994][ T6786] RIP: 0033:0x7f187219c799 [ 116.138006][ T6786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.138020][ T6786] RSP: 002b:00007f187305d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.138035][ T6786] RAX: ffffffffffffffda RBX: 00007f1872416090 RCX: 00007f187219c799 [ 116.138044][ T6786] RDX: 0000200000000080 RSI: 000000004070aea0 RDI: 0000000000000005 [ 116.138053][ T6786] RBP: 00007f187305d090 R08: 0000000000000000 R09: 0000000000000000 [ 116.138062][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.138070][ T6786] R13: 00007f1872416128 R14: 00007f1872416090 R15: 00007ffd6bbdcc88 [ 116.138091][ T6786] [ 116.138097][ T6786] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.162841][ T5873] usb 4-1: USB disconnect, device number 14 [ 116.357085][ T30] audit: type=1400 audit(1774694374.656:473): avc: denied { shutdown } for pid=6782 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.435492][ T6675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.463438][ T6675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.504736][ T6675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.522093][ T979] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.566909][ T6675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.805999][ T5817] Bluetooth: hci2: command tx timeout [ 116.824620][ T5927] usb 1-1: USB disconnect, device number 7 [ 116.871454][ T979] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 116.939384][ T30] audit: type=1400 audit(1774694375.666:474): avc: denied { create } for pid=6803 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.959982][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.023492][ T979] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 117.045878][ T979] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 117.073090][ T6809] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 117.105285][ T979] usb 5-1: Manufacturer: syz [ 117.107559][ T30] audit: type=1400 audit(1774694375.836:475): avc: denied { read write } for pid=6810 comm="syz.2.216" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.147178][ T979] usb 5-1: config 0 descriptor?? [ 117.184886][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 117.206829][ T30] audit: type=1400 audit(1774694375.836:476): avc: denied { open } for pid=6810 comm="syz.2.216" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.256082][ T6814] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 117.312955][ T979] rc_core: IR keymap rc-hauppauge not found [ 117.318867][ T979] Registered IR keymap rc-empty [ 117.333142][ T979] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 117.354878][ T6812] bridge0: entered promiscuous mode [ 117.362225][ T6812] bridge0: port 3(vlan2) entered blocking state [ 117.372251][ T6812] bridge0: port 3(vlan2) entered disabled state [ 117.404190][ T6812] vlan2: entered allmulticast mode [ 117.412240][ T6812] bridge0: entered allmulticast mode [ 117.425204][ T6812] vlan2: left allmulticast mode [ 117.430096][ T6812] bridge0: left allmulticast mode [ 117.445436][ T6812] bridge0: left promiscuous mode [ 117.452783][ T979] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 117.471380][ T30] audit: type=1400 audit(1774694376.206:477): avc: denied { read } for pid=5164 comm="acpid" name="event4" dev="devtmpfs" ino=2897 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.472754][ T6817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.506671][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 117.583604][ T30] audit: type=1400 audit(1774694376.206:478): avc: denied { open } for pid=5164 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2897 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.584019][ T6675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.643337][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 117.679281][ T30] audit: type=1400 audit(1774694376.206:479): avc: denied { ioctl } for pid=5164 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2897 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.708344][ T6675] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.899811][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.906903][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.955949][ T6835] evm: overlay not supported [ 118.472047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.644320][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.651429][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.028666][ T5817] Bluetooth: hci2: command tx timeout [ 119.571294][ T6854] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 120.612044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.632046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.919653][ T6675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.043994][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 121.044008][ T30] audit: type=1400 audit(1774694379.786:486): avc: denied { read } for pid=6857 comm="syz.0.220" name="file0" dev="fuse" ino=36028797018963968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 121.113271][ T30] audit: type=1400 audit(1774694379.786:487): avc: denied { open } for pid=6857 comm="syz.0.220" path="/51/file0/file0" dev="fuse" ino=36028797018963968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 121.189609][ T30] audit: type=1400 audit(1774694379.816:488): avc: denied { ioctl } for pid=6857 comm="syz.0.220" path="/51/file0/file0" dev="fuse" ino=36028797018963968 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 121.224164][ T979] usb 5-1: USB disconnect, device number 10 [ 121.302149][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 121.321029][ T30] audit: type=1400 audit(1774694380.056:489): avc: denied { create } for pid=6873 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.359915][ T30] audit: type=1400 audit(1774694380.096:490): avc: denied { bind } for pid=6873 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.412292][ T30] audit: type=1400 audit(1774694380.096:491): avc: denied { connect } for pid=6873 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.452918][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 121.454409][ T30] audit: type=1400 audit(1774694380.096:492): avc: denied { write } for pid=6873 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.473767][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.477673][ T30] audit: type=1400 audit(1774694380.106:493): avc: denied { write } for pid=6873 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.529800][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.548989][ T6675] veth0_vlan: entered promiscuous mode [ 121.568900][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.590116][ T6675] veth1_vlan: entered promiscuous mode [ 121.609369][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.641366][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.652213][ T6675] veth0_macvtap: entered promiscuous mode [ 121.659904][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.674386][ T6675] veth1_macvtap: entered promiscuous mode [ 121.791453][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.821797][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.867092][ T1039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.905158][ T1039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.928776][ T1039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.953067][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 121.969077][ T9] usbtmc 3-1:16.0: can't read capabilities [ 121.997990][ T1039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.160641][ T30] audit: type=1400 audit(1774694380.766:494): avc: denied { create } for pid=6893 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.236623][ T6865] input: syz0 as /devices/virtual/input/input11 [ 122.245407][ T30] audit: type=1400 audit(1774694380.966:495): avc: denied { write } for pid=6864 comm="syz.2.222" name="usbtmc0" dev="devtmpfs" ino=2905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.363182][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.380680][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.473440][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.489313][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.552180][ T5913] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 123.722510][ T6933] FAULT_INJECTION: forcing a failure. [ 123.722510][ T6933] name failslab, interval 1, probability 0, space 0, times 0 [ 123.759932][ T5859] usb 3-1: USB disconnect, device number 10 [ 123.770595][ T6933] CPU: 0 UID: 0 PID: 6933 Comm: syz.3.233 Not tainted syzkaller #0 PREEMPT(full) [ 123.770617][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.770628][ T6933] Call Trace: [ 123.770633][ T6933] [ 123.770640][ T6933] dump_stack_lvl+0x100/0x190 [ 123.770673][ T6933] should_fail_ex.cold+0x5/0xa [ 123.770697][ T6933] ? tomoyo_realpath_from_path+0xb6/0x690 [ 123.770730][ T6933] should_failslab+0xc2/0x120 [ 123.770749][ T6933] __kmalloc_noprof+0xe0/0x850 [ 123.770780][ T6933] tomoyo_realpath_from_path+0xb6/0x690 [ 123.770813][ T6933] tomoyo_path_number_perm+0x23c/0x580 [ 123.770835][ T6933] ? tomoyo_path_number_perm+0x22e/0x580 [ 123.770860][ T6933] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.770909][ T6933] ? find_held_lock+0x2b/0x80 [ 123.770931][ T6933] ? __fget_files+0x215/0x3d0 [ 123.770949][ T6933] ? hook_file_ioctl_common+0x146/0x410 [ 123.770972][ T6933] ? __fget_files+0x21f/0x3d0 [ 123.770995][ T6933] security_file_ioctl+0xd3/0x230 [ 123.771021][ T6933] __x64_sys_ioctl+0xb7/0x210 [ 123.771049][ T6933] do_syscall_64+0x106/0xf80 [ 123.771075][ T6933] ? clear_bhb_loop+0x40/0x90 [ 123.771097][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.771115][ T6933] RIP: 0033:0x7f661379c799 [ 123.771130][ T6933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.771146][ T6933] RSP: 002b:00007f6614721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.771163][ T6933] RAX: ffffffffffffffda RBX: 00007f6613a15fa0 RCX: 00007f661379c799 [ 123.771174][ T6933] RDX: 0000200000000600 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 123.771185][ T6933] RBP: 00007f6614721090 R08: 0000000000000000 R09: 0000000000000000 [ 123.771195][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.771204][ T6933] R13: 00007f6613a16038 R14: 00007f6613a15fa0 R15: 00007fffbd4de888 [ 123.771229][ T6933] [ 123.771236][ T6933] ERROR: Out of memory at tomoyo_realpath_from_path. [ 124.176671][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 124.232319][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 124.250556][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 124.301072][ T5913] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 124.321417][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.412813][ T5913] usb 5-1: Product: syz [ 124.417582][ T5913] usb 5-1: Manufacturer: syz [ 124.423303][ T5913] usb 5-1: SerialNumber: syz [ 124.434792][ T5913] usb 5-1: config 0 descriptor?? [ 124.562462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.112442][ T6959] binder: 6956:6959 ioctl 4 200000000480 returned -22 [ 126.497523][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 126.497539][ T30] audit: type=1400 audit(1774694385.106:505): avc: denied { firmware_load } for pid=6955 comm="syz.4.240" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 126.895213][ T30] audit: type=1400 audit(1774694385.636:506): avc: denied { setopt } for pid=6966 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.920111][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 126.931435][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 126.943914][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 126.950667][ T30] audit: type=1400 audit(1774694385.656:507): avc: denied { write } for pid=6966 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.972590][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 126.980173][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 126.988171][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.013758][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.201980][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.203689][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.208616][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.216893][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.230915][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.241572][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.298188][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.316255][ T30] audit: type=1400 audit(1774694386.046:508): avc: denied { write } for pid=6965 comm="syz.0.242" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.347723][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.358417][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.368964][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.416476][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.432517][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.444448][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.456356][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.484886][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.509568][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.528942][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.540992][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.554260][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.567167][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.581315][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.590689][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.600417][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.649696][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.673529][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 127.684642][ T6968] NILFS (nullb0): couldn't find nilfs on the device [ 128.041134][ T30] audit: type=1400 audit(1774694386.776:509): avc: denied { write } for pid=6985 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.063073][ T6987] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 128.913916][ T29] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 128.956655][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e294400: rx timeout, send abort [ 128.972100][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e294400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.991941][ T6961] syz.4.240 (6961) used greatest stack depth: 19208 bytes left [ 129.055492][ T30] audit: type=1400 audit(1774694387.766:510): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 129.165057][ T30] audit: type=1400 audit(1774694387.766:511): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.272357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.342115][ T30] audit: type=1400 audit(1774694387.766:512): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.352045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 129.372900][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 129.392045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 129.402076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.517233][ T29] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 129.530386][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.542732][ T30] audit: type=1400 audit(1774694387.766:513): avc: denied { add_name } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.563571][ T29] usb 4-1: Product: syz [ 129.567728][ T29] usb 4-1: Manufacturer: syz [ 129.586537][ T29] usb 4-1: SerialNumber: syz [ 129.602732][ T30] audit: type=1400 audit(1774694387.766:514): avc: denied { create } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.603150][ T29] usb 4-1: config 0 descriptor?? [ 129.683065][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 129.691492][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.725038][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.775342][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.827407][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.851871][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.905143][ T24] usb 6-1: config 0 descriptor?? [ 129.934146][ T29] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 129.956033][ T29] peak_usb 4-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 130.053108][ T29] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 130.080253][ T29] usb 4-1: USB disconnect, device number 15 [ 130.204271][ T6994] netlink: 56 bytes leftover after parsing attributes in process `syz.5.250'. [ 130.218687][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 130.225494][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 130.236331][ T24] usb 6-1: USB disconnect, device number 2 [ 130.252099][ T5927] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.462779][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 130.473405][ T5927] usb 3-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 130.482560][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.490553][ T5927] usb 3-1: Product: syz [ 130.520559][ T5927] usb 3-1: Manufacturer: syz [ 130.549210][ T5927] usb 3-1: SerialNumber: syz [ 131.382142][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 131.547049][ T9] usb 4-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 131.595128][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 131.662845][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 131.695212][ T9] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 131.769337][ T7046] tipc: Started in network mode [ 131.784983][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.809088][ T7046] tipc: Node identity 7229df8dd5f, cluster identity 4711 [ 131.831750][ T9] usb 4-1: Manufacturer: ‰ [ 133.056052][ T7046] tipc: Enabled bearer , priority 0 [ 133.084819][ T9] usb 4-1: SerialNumber: syz [ 134.695731][ T9] usb 4-1: config 0 descriptor?? [ 134.752818][ T7050] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.261'. [ 134.774898][ T5927] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 134.790014][ T9] usb 4-1: can't set config #0, error -71 [ 134.831939][ T9] usb 4-1: USB disconnect, device number 16 [ 134.878050][ T5927] usb 3-1: USB disconnect, device number 11 [ 135.116853][ T10] tipc: Node number set to 2816073613 [ 135.126936][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.649395][ T7063] netlink: 'syz.4.266': attribute type 1 has an invalid length. [ 135.845219][ T7068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.266'. [ 135.954999][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 135.955019][ T30] audit: type=1400 audit(1774694394.696:522): avc: denied { read write } for pid=7062 comm="syz.4.266" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 136.054932][ T30] audit: type=1400 audit(1774694394.736:523): avc: denied { open } for pid=7062 comm="syz.4.266" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 136.110264][ T7046] tipc: Disabling bearer [ 136.402232][ T7084] netlink: 'syz.3.268': attribute type 20 has an invalid length. [ 136.635228][ T7079] vlan2: entered promiscuous mode [ 136.660933][ T7079] bond0: entered promiscuous mode [ 136.678712][ T7079] bond_slave_0: entered promiscuous mode [ 136.709531][ T7079] bond_slave_1: entered promiscuous mode [ 137.223203][ T7102] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.272'. [ 137.302284][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.497553][ T30] audit: type=1400 audit(1774694396.226:524): avc: denied { create } for pid=7101 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.033866][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 138.044574][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.168242][ T10] usb 1-1: config 0 descriptor?? [ 138.211337][ T10] cp210x 1-1:0.0: cp210x converter detected [ 138.237980][ T30] audit: type=1400 audit(1774694396.976:525): avc: denied { getopt } for pid=7115 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.629329][ T7097] overlayfs: missing 'lowerdir' [ 138.707017][ T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 139.362190][ T10] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 139.370138][ T10] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 139.503626][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 139.561899][ T10] usb 1-1: USB disconnect, device number 8 [ 139.562811][ T7134] netlink: 'syz.4.278': attribute type 10 has an invalid length. [ 139.592090][ T29] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 139.592907][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 139.671036][ T10] cp210x 1-1:0.0: device disconnected [ 139.722000][ T7134] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 139.752194][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 139.795041][ T29] usb 4-1: config 72 has an invalid interface number: 220 but max is 1 [ 139.803526][ T29] usb 4-1: config 72 has an invalid descriptor of length 0, skipping remainder of the config [ 139.830440][ T29] usb 4-1: config 72 has 1 interface, different from the descriptor's value: 2 [ 139.882367][ T29] usb 4-1: config 72 has no interface number 0 [ 139.889895][ T29] usb 4-1: config 72 interface 220 has no altsetting 0 [ 140.025741][ T29] usb 4-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 140.037425][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.045512][ T29] usb 4-1: Product: syz [ 140.049745][ T29] usb 4-1: Manufacturer: syz [ 140.054746][ T29] usb 4-1: SerialNumber: syz [ 140.806323][ T7164] misc userio: Can't change port type on an already running userio instance [ 140.822369][ T30] audit: type=1400 audit(1774694399.546:526): avc: denied { remount } for pid=7154 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.682222][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 142.063360][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 142.080336][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 142.102994][ T24] usb 6-1: config 1 interface 0 altsetting 235 bulk endpoint 0x2 has invalid maxpacket 8 [ 142.122769][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 142.140021][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 142.171063][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.194191][ T24] usb 6-1: Product: syz [ 142.206241][ T24] usb 6-1: Manufacturer: syz [ 142.214003][ T24] usb 6-1: SerialNumber: syz [ 142.236038][ T7174] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 142.408027][ T7190] FAULT_INJECTION: forcing a failure. [ 142.408027][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 142.420738][ T7190] CPU: 0 UID: 0 PID: 7190 Comm: syz.4.283 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.420764][ T7190] Tainted: [L]=SOFTLOCKUP [ 142.420770][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.420779][ T7190] Call Trace: [ 142.420785][ T7190] [ 142.420791][ T7190] dump_stack_lvl+0x100/0x190 [ 142.420825][ T7190] should_fail_ex.cold+0x5/0xa [ 142.420852][ T7190] should_failslab+0xc2/0x120 [ 142.420871][ T7190] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 142.420898][ T7190] ? __alloc_skb+0x140/0x710 [ 142.420923][ T7190] __alloc_skb+0x140/0x710 [ 142.420948][ T7190] ? __alloc_skb+0x5b7/0x710 [ 142.420970][ T7190] ? __pfx___alloc_skb+0x10/0x10 [ 142.421000][ T7190] netlink_alloc_large_skb+0x69/0x150 [ 142.421029][ T7190] netlink_sendmsg+0x680/0xda0 [ 142.421057][ T7190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.421083][ T7190] ? __might_fault+0xa0/0x140 [ 142.421115][ T7190] ____sys_sendmsg+0x9e1/0xb70 [ 142.421132][ T7190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.421160][ T7190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.421188][ T7190] ___sys_sendmsg+0x190/0x1e0 [ 142.421208][ T7190] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.421256][ T7190] __sys_sendmsg+0x170/0x220 [ 142.421281][ T7190] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.421319][ T7190] do_syscall_64+0x106/0xf80 [ 142.421345][ T7190] ? clear_bhb_loop+0x40/0x90 [ 142.421367][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.421385][ T7190] RIP: 0033:0x7fbff219c799 [ 142.421400][ T7190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.421416][ T7190] RSP: 002b:00007fbff30ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.421433][ T7190] RAX: ffffffffffffffda RBX: 00007fbff2416090 RCX: 00007fbff219c799 [ 142.421445][ T7190] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 142.421454][ T7190] RBP: 00007fbff30ee090 R08: 0000000000000000 R09: 0000000000000000 [ 142.421464][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.421474][ T7190] R13: 00007fbff2416128 R14: 00007fbff2416090 R15: 00007ffddac26b98 [ 142.421497][ T7190] [ 142.708835][ T29] usb 4-1: USB disconnect, device number 17 [ 142.910257][ T24] usb 6-1: USB disconnect, device number 3 [ 143.326277][ T30] audit: type=1400 audit(1774694402.056:527): avc: denied { map } for pid=7206 comm="syz.3.289" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.472315][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.502163][ T30] audit: type=1400 audit(1774694402.126:528): avc: denied { execute } for pid=7206 comm="syz.3.289" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.709191][ T24] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 5292, setting to 1024 [ 143.866024][ T24] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 143.992301][ T24] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.171312][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 144.267519][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.322060][ T24] usb 1-1: Product: syz [ 144.358699][ T24] usb 1-1: Manufacturer: syz [ 144.392840][ T24] usb 1-1: SerialNumber: syz [ 144.441458][ T7204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.519721][ T24] usblp0: Disabling reads from problematic bidirectional printer [ 144.612593][ T7226] mmap: syz.4.296 (7226): VmData 37593088 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 144.890521][ T24] usblp 1-1:4.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 145.202187][ T5913] iguanair 5-1:0.0: failed to get version [ 145.219693][ C1] usblp0: nonzero write bulk status received: -71 [ 146.223296][ T29] usb 1-1: USB disconnect, device number 9 [ 146.223331][ T5913] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 146.239339][ T30] audit: type=1400 audit(1774694403.956:529): avc: denied { read write } for pid=7202 comm="syz.0.290" name="lp0" dev="devtmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 146.355455][ T5913] usb 5-1: USB disconnect, device number 11 [ 146.374971][ T29] usblp0: removed [ 146.493921][ T30] audit: type=1400 audit(1774694403.956:530): avc: denied { open } for pid=7202 comm="syz.0.290" path="/dev/usb/lp0" dev="devtmpfs" ino=2934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 146.665156][ T30] audit: type=1400 audit(1774694403.956:531): avc: denied { ioctl } for pid=7202 comm="syz.0.290" path="/dev/usb/lp0" dev="devtmpfs" ino=2934 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 147.090840][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 147.141005][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 147.192464][ T5913] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 147.317746][ T7272] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 147.341086][ T30] audit: type=1400 audit(1774694406.076:532): avc: denied { setopt } for pid=7258 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.402769][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 147.427227][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.436150][ T30] audit: type=1400 audit(1774694406.176:533): avc: denied { mount } for pid=7277 comm="syz.2.309" name="/" dev="autofs" ino=14317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 147.462128][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=a1.8c [ 147.522089][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.588769][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.596426][ T7282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.630516][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.638044][ T7282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.741863][ T5913] usb 5-1: config 0 descriptor?? [ 147.916073][ T5913] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 147.998557][ T5913] gspca_stv06xx: st6422 sensor detected [ 148.426495][ T5913] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 148.742095][ T5913] usb 5-1: USB disconnect, device number 12 [ 149.279913][ T7288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.312'. [ 149.432422][ T30] audit: type=1400 audit(1774694408.166:534): avc: denied { ioctl } for pid=7287 comm="syz.4.312" path="socket:[15184]" dev="sockfs" ino=15184 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.622154][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 149.671518][ T7292] SELinux: policydb magic number 0x44 does not match expected magic number 0xf97cff8c [ 149.681392][ T30] audit: type=1400 audit(1774694408.406:535): avc: denied { read write } for pid=7291 comm="syz.0.313" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 149.705273][ T7292] SELinux: failed to load policy [ 149.790498][ T30] audit: type=1400 audit(1774694408.406:536): avc: denied { open } for pid=7291 comm="syz.0.313" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 149.850109][ T24] usb 6-1: device descriptor read/64, error -71 [ 149.957146][ T30] audit: type=1400 audit(1774694408.406:537): avc: denied { load_policy } for pid=7291 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 150.462190][ T30] audit: type=1400 audit(1774694408.796:538): avc: denied { read } for pid=7298 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 150.492962][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 150.510702][ T30] audit: type=1400 audit(1774694409.246:539): avc: denied { create } for pid=7305 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 150.564661][ T30] audit: type=1400 audit(1774694409.246:540): avc: denied { ioctl } for pid=7305 comm="syz.2.316" path="socket:[15203]" dev="sockfs" ino=15203 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 150.717828][ T7305] delete_channel: no stack [ 151.225238][ T24] usb 6-1: device descriptor read/64, error -71 [ 151.343106][ T24] usb usb6-port1: attempt power cycle [ 151.356706][ T7318] syzkaller1: entered promiscuous mode [ 151.362398][ T7318] syzkaller1: entered allmulticast mode [ 151.607221][ T7323] binder: 7322:7323 ioctl 4018620d 0 returned -22 [ 151.641539][ T7323] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 151.658738][ T7323] bond1: (slave lo): Enslaving as an active interface with an up link [ 151.669222][ T7323] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 151.693329][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 151.712739][ T5859] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 151.742498][ T24] usb 6-1: device descriptor read/8, error -71 [ 151.873516][ T5859] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.892092][ T5859] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.913803][ T5859] usb 4-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 151.923812][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.942895][ T30] audit: type=1400 audit(1774694410.676:541): avc: denied { ioctl } for pid=7327 comm="syz.0.323" path="socket:[15407]" dev="sockfs" ino=15407 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.095841][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 152.985999][ T5859] usb 4-1: config 0 descriptor?? [ 153.024705][ T30] audit: type=1400 audit(1774694410.676:542): avc: denied { bind } for pid=7327 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.124783][ T24] usb 6-1: device descriptor read/8, error -71 [ 153.159741][ T30] audit: type=1400 audit(1774694411.856:543): avc: denied { bind } for pid=7336 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.206852][ T5859] usb 4-1: string descriptor 0 read error: -71 [ 153.269218][ T24] usb usb6-port1: unable to enumerate USB device [ 153.282532][ T5859] usbhid 4-1:0.0: can't add hid device: -71 [ 153.299739][ T5859] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 153.410548][ T5859] usb 4-1: USB disconnect, device number 18 [ 153.542764][ T7344] Bluetooth: hci0: service_discovery: too big uuid_count value 29743 [ 154.496057][ T7364] netlink: 36 bytes leftover after parsing attributes in process `syz.5.333'. [ 154.822501][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 155.024438][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.062607][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 155.104874][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 155.142353][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 155.165738][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 32770, setting to 64 [ 155.200187][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.256122][ T10] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 155.275600][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.294690][ T10] usb 6-1: Product: syz [ 155.310537][ T10] usb 6-1: Manufacturer: syz [ 155.315255][ T10] usb 6-1: SerialNumber: syz [ 155.323496][ T10] usb 6-1: config 0 descriptor?? [ 155.332669][ T7364] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 155.610015][ T7392] libceph: resolve '96.' (ret=-3): failed [ 155.630975][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 155.631009][ T30] audit: type=1400 audit(1774694414.356:546): avc: denied { create } for pid=7363 comm="syz.5.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 155.640497][ T5817] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 155.660241][ T7392] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 155.684789][ T7392] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.725823][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.725855][ T5817] Tainted: [L]=SOFTLOCKUP [ 155.725862][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.725875][ T5817] Workqueue: hci2 hci_rx_work [ 155.725910][ T5817] Call Trace: [ 155.725916][ T5817] [ 155.725924][ T5817] dump_stack_lvl+0x100/0x190 [ 155.725957][ T5817] sysfs_warn_dup.cold+0x1c/0x28 [ 155.725985][ T5817] sysfs_create_dir_ns+0x24b/0x2b0 [ 155.726013][ T5817] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 155.726038][ T5817] ? find_held_lock+0x2b/0x80 [ 155.726063][ T5817] ? kobject_add_internal+0x25f/0x930 [ 155.726083][ T5817] ? kobject_add_internal+0x25f/0x930 [ 155.726105][ T5817] ? do_raw_spin_unlock+0x145/0x1e0 [ 155.726130][ T5817] kobject_add_internal+0x2c8/0x930 [ 155.726153][ T5817] kobject_add+0x16a/0x1e0 [ 155.726172][ T5817] ? __pfx_kobject_add+0x10/0x10 [ 155.726190][ T5817] ? class_to_subsys+0x10f/0x150 [ 155.726217][ T5817] ? kobject_put+0xb9/0x640 [ 155.726232][ T5817] ? _raw_spin_unlock+0x28/0x50 [ 155.726262][ T5817] device_add+0x294/0x1950 [ 155.726283][ T5817] ? __pfx_dev_set_name+0x10/0x10 [ 155.726307][ T5817] ? __pfx_device_add+0x10/0x10 [ 155.726328][ T5817] ? mgmt_send_event_skb+0x2fb/0x460 [ 155.726359][ T5817] hci_conn_add_sysfs+0x1a3/0x260 [ 155.726387][ T5817] le_conn_complete_evt+0x11cb/0x1f40 [ 155.726418][ T5817] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 155.726449][ T5817] hci_le_conn_complete_evt+0x23c/0x3a0 [ 155.726474][ T5817] ? skb_pull_data+0x15f/0x1e0 [ 155.726496][ T5817] hci_le_meta_evt+0x34a/0x5f0 [ 155.726522][ T5817] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 155.726550][ T5817] hci_event_packet+0x682/0x11c0 [ 155.726575][ T5817] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 155.726602][ T5817] ? __pfx_hci_event_packet+0x10/0x10 [ 155.726629][ T5817] ? kcov_remote_start+0x374/0x660 [ 155.726653][ T5817] ? lockdep_hardirqs_on+0x78/0x100 [ 155.726686][ T5817] hci_rx_work+0x451/0xfc0 [ 155.726714][ T5817] process_one_work+0xa23/0x19a0 [ 155.726747][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 155.726776][ T5817] ? __pfx_hci_rx_work+0x10/0x10 [ 155.726802][ T5817] worker_thread+0x5ef/0xe50 [ 155.726832][ T5817] ? kthread+0x13a/0x450 [ 155.726849][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 155.726868][ T5817] kthread+0x370/0x450 [ 155.726885][ T5817] ? __pfx_kthread+0x10/0x10 [ 155.726911][ T5817] ret_from_fork+0x754/0xd80 [ 155.726932][ T5817] ? __pfx_ret_from_fork+0x10/0x10 [ 155.726955][ T5817] ? __switch_to+0x7b4/0x1120 [ 155.726980][ T5817] ? __pfx_kthread+0x10/0x10 [ 155.727001][ T5817] ret_from_fork_asm+0x1a/0x30 [ 155.727041][ T5817] [ 155.730633][ T5817] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 156.025677][ T5817] Bluetooth: hci2: failed to register connection device [ 156.053460][ T5817] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 156.065532][ T5817] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 156.073935][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.084937][ T5817] Tainted: [L]=SOFTLOCKUP [ 156.089236][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.099268][ T5817] Workqueue: hci2 hci_rx_work [ 156.103934][ T5817] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 156.109812][ T5817] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 156.129397][ T5817] RSP: 0000:ffffc90002f77748 EFLAGS: 00010282 [ 156.135441][ T5817] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 156.143390][ T5817] RDX: 0000000000000000 RSI: ffffffff89584d91 RDI: dffffc000000004c [ 156.151339][ T5817] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 156.159287][ T5817] R10: ffffc90002f77838 R11: 0000000000000000 R12: ffffffff89584d91 [ 156.167234][ T5817] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 156.175181][ T5817] FS: 0000000000000000(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 156.184089][ T5817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.190652][ T5817] CR2: 0000000000000000 CR3: 000000003570f000 CR4: 00000000003526f0 [ 156.198614][ T5817] Call Trace: [ 156.201871][ T5817] [ 156.204782][ T5817] __kasan_check_byte+0x13/0x50 [ 156.209614][ T5817] lock_acquire+0x148/0x380 [ 156.214097][ T5817] lock_sock_nested+0x41/0xf0 [ 156.218758][ T5817] ? l2cap_sock_new_connection_cb+0x4c/0x260 [ 156.224730][ T5817] l2cap_sock_new_connection_cb+0x4c/0x260 [ 156.230522][ T5817] l2cap_connect_cfm+0x4e2/0xf80 [ 156.235456][ T5817] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 156.240901][ T5817] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 156.246338][ T5817] le_conn_complete_evt+0x195c/0x1f40 [ 156.251691][ T5817] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 156.257391][ T5817] hci_le_conn_complete_evt+0x23c/0x3a0 [ 156.262919][ T5817] ? skb_pull_data+0x15f/0x1e0 [ 156.267663][ T5817] hci_le_meta_evt+0x34a/0x5f0 [ 156.272410][ T5817] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 156.278459][ T5817] hci_event_packet+0x682/0x11c0 [ 156.283374][ T5817] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 156.288650][ T5817] ? __pfx_hci_event_packet+0x10/0x10 [ 156.294004][ T5817] ? kcov_remote_start+0x374/0x660 [ 156.299097][ T5817] ? lockdep_hardirqs_on+0x78/0x100 [ 156.304283][ T5817] hci_rx_work+0x451/0xfc0 [ 156.308681][ T5817] process_one_work+0xa23/0x19a0 [ 156.313604][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 156.318959][ T5817] ? __pfx_hci_rx_work+0x10/0x10 [ 156.323879][ T5817] worker_thread+0x5ef/0xe50 [ 156.328455][ T5817] ? kthread+0x13a/0x450 [ 156.332689][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 156.337779][ T5817] kthread+0x370/0x450 [ 156.341825][ T5817] ? __pfx_kthread+0x10/0x10 [ 156.346400][ T5817] ret_from_fork+0x754/0xd80 [ 156.350970][ T5817] ? __pfx_ret_from_fork+0x10/0x10 [ 156.356058][ T5817] ? __switch_to+0x7b4/0x1120 [ 156.360716][ T5817] ? __pfx_kthread+0x10/0x10 [ 156.365282][ T5817] ret_from_fork_asm+0x1a/0x30 [ 156.370029][ T5817] [ 156.373025][ T5817] Modules linked in: [ 156.378154][ T5817] ---[ end trace 0000000000000000 ]--- [ 156.389637][ T5817] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 156.396418][ T5817] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 156.419812][ T5817] RSP: 0000:ffffc90002f77748 EFLAGS: 00010282 [ 156.427052][ T5817] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 156.431842][ T5817] RDX: 0000000000000000 RSI: ffffffff89584d91 RDI: dffffc000000004c [ 156.432049][ T5817] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 156.432107][ T5817] R10: ffffc90002f77838 R11: 0000000000000000 R12: ffffffff89584d91 [ 156.432120][ T5817] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 156.432397][ T5817] FS: 0000000000000000(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 156.432974][ T5817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.433147][ T5817] CR2: 0000000000000000 CR3: 000000003570f000 CR4: 00000000003526f0 [ 156.433621][ T5817] Kernel panic - not syncing: Fatal exception [ 156.433915][ T5817] Kernel Offset: disabled