last executing test programs: 4.184299574s ago: executing program 3 (id=458): open_tree(0xffffffffffffff9c, &(0x7f0000019300)='./file0\x00', 0x900) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r0, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 4.106444016s ago: executing program 3 (id=459): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0cf3ae7be46acac4da3896257306be8f42"], 0xf) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="f7f36935175b27a2cb43a14440", 0xd}], 0x1) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x20f, 0x0, 0x0) 3.812171914s ago: executing program 4 (id=461): syz_clone(0xc8000000, &(0x7f0000000040)="e7f237", 0x3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000340)="ca55c69350ceeec5213cc0e075bc6314b665f077c0bd5516fd27ccf103cdb8e97f4fac577918507cd26a3b0668d8846ce71b2845c10a8895a1e9640d342b0f3015314a07f59fe62b1365ca31587e1bc987dab1257e3438f34e4e79c589438e39d2644439c006b33245271daddf7f176612261bbdeb710a5779fa90c570a406dacc97bf299e27a1c8775ac420394924d42e39a9e1cdf138f1cc993e89373168a1ba2169919632629b7267ac2e9e5f59110bfd893a0e73088da3e25c9ae6c263f5359fa502118d") ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x73a, 0x1, 0x2}, &(0x7f0000000440)=[{}, {}]) r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14) sendto$inet6(r0, &(0x7f0000000200)="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", 0x107, 0x0, &(0x7f00000001c0)={0xa, 0xffff, 0x40c5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 3.345857791s ago: executing program 4 (id=467): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x80047437, &(0x7f0000000140)=0xffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r5, 0x0, 0x0, 0x3b0}]) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r9 = socket(0x28, 0x5, 0x0) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3fd, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x2004, 0x8000000, 0x5]}) connect$vsock_stream(r9, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 3.294787243s ago: executing program 2 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000200)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffff9, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x7, '\x00', 0x4b}, {0xd, 0x7, 0x7, '\x00', 0xd6}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x5, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0xe, 0xe, 0x47, '\x00', 0x6}, {0xd, 0x90, 0x4, '\x00', 0xe9}, {0x8, 0x6, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x14, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x5}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x6, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x7, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x8, 0x54, '\x00', 0xbb}, {0x1, 0x4, 0x4, '\x00', 0x6}, {0xd, 0x40, 0x2, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x5, 0x6, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 3.0683704s ago: executing program 1 (id=469): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"34e3f2de7715db2c313d2e4fd1e3331c", 0x0, r0, {0x40, 0x6}, {0x0, 0x81}, 0x32d, [0x1, 0x3, 0x8, 0x6, 0x3, 0x9, 0x3ff, 0xfffffffffffff20d, 0x0, 0x100, 0x8, 0x1, 0x0, 0x1, 0x3, 0x400000000]}) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file1\x00', 0x0, 0x4008, r1}, 0x18) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000340)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x10) 3.067940445s ago: executing program 2 (id=470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="66baf80cb8e44c018cef66bafc0cb800000000ef3665660fe2260f01c40f308fc800853414080f070f09b8e35100000f23c80f21f8350c0090000f23f80f0f130c3666f30f7f741900", 0x49}], 0x1, 0xe8, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x2, 0xfff, 0xfffffffe, 0x880}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c0001000000000000e000000e"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x5c) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0x7ffd}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x3000, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0xb, 0x800000000004, @thr={&(0x7f0000000340)="2d20d95c76a91dd02b047e519e3f11a18ee8f0b3f8a737", &(0x7f0000000440)="96dec18dea1820b2229841098ab79317bc045dd547d98560ae803690bb1785d820786d58a09b8e82cae473279f956f062713a766a6c2e4edf94926d2b0218f321ec24ccfe7f0cd93f4e910f60584a8b916e0d295859b162ef54ceb6fa1b443fcb41c3edfee90c74a8cdf702e2c6138d2747efbc04dcede641c26ad8910cbb28aba2061581792fc5c618cb08063f15a6b81face67fee6eda18674155b2208b9eca66e64f0f595fad5982b2d5110203471"}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sndctrl(0x0, 0x84, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$can_bcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/22, 0x16}], 0x1}, 0x12100) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000180)="0f23ed640f011bb98d0400000f32c4c17dfe75df660fc77407d4c4e17f2d0b3e0f09640f09c744240000480000c744240200000100c7442406000000000f0114243e0f01d1", 0x45}], 0x1, 0x52, 0x0, 0x0) 2.927280888s ago: executing program 1 (id=471): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r4, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 2.862617966s ago: executing program 2 (id=472): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000405804165000000000000109022400010000200009040000010300010009210000000122050009058103000005000007731a0588cc8cfd862ce8f5b0bce2a42f2ff74dbe4c9e93ba9000"/95], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x1, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a2a255cd7f60"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xd, 0x9, 0x67}, {0x6, 0x24, 0x1a, 0x5, 0x18}, [@country_functional={0x10, 0x24, 0x7, 0x8, 0x8, [0x5, 0x1, 0x8, 0xffff, 0x9]}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xb, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xc, 0x0, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x8, 0x3, 0x6, 0x8, 0xfc}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x5, 0xe}]}, 0x4, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x408}}, {0x39, &(0x7f00000006c0)=@string={0x39, 0x3, "756196493e9c0aab4a37ed57773f75a0f08d265a28d186436fa0c10ec8f6a72a21597de79c3a5962286373e5fb20d43a6653c717196d9a"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x430}}]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ftruncate(r1, 0x0) r2 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x84084) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0xfe96, 0x0}, 0x0, 0x20042, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0xffffffff, 0xbfe00000}, &(0x7f0000000240), &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) r8 = io_uring_setup(0x40001b7c, &(0x7f0000000040)={0x0, 0xe337, 0x2000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x0, 0x5c8c, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0x0, 0x1ff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x4001af84, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0xe0, 0xd0, &(0x7f0000000440)="3855965a08678d0d19e3a02bba7a4662212bd8be61c54481849ca5a87a76358eef6ac2f59d1ddf1df9236bf233a59bf310202aa27c054f6a4d9f86897b3b11dae1e473703b0aff4fdcb9f3e0b4ce08e5e31cbb2be1de728c5771e3f417b6f099db6291a8f8dbe45b90f869a070be7e7eab3695ed3255c6c46a3d63c4289d38de74e77ad48c44da797a4b8b45a7f1d32b98f88e9836bfeb5387d8e6bf79488d8bbebc35a798bc9c4880ecfe07a059a6dd150a386b3cc6da4336e8d1b71c2b9a59908c602f3a8ac02f2d92b0ecd6c880d5") sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r10, 0x40206417, &(0x7f00000001c0)={0xfffffffe, 0xb5b8, 0x50, 0x4, 0x19, 0x5}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="20231f0000001f0aa7ea3163fd3bd2841ef4f6a3027c59ccb73e35232c83ebe9e39868f040d761a52a0331e053202e29ce79f97f854aeb391dd10d24f504f4970419dc23b0bfc6e3cfd8bc6def04927a86c48e6dfb0d060000002e852678dc130a6ce1fddb6c4a50d0bc295b8622c0d1efb6d53a7e801c9c9d5ced17b85928285373a38d470bc25075205153e2e9e50595c0e64c4d2a686ed608b2a4319e555b04665263b2f8318ba1b8d99deda97e40d484c47e52ab681f2b62a1b4057cd11efde75565"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.376414704s ago: executing program 1 (id=473): close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) mkdir(0x0, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x2, 0x80805, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008845}, 0x14) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r3, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r4, 0x32dc, 0x0, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.202337476s ago: executing program 4 (id=474): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) io_setup(0x4, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0}]) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xff80, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0xf0f041, 0x0, '\x00', @value=0x7ff}}) 2.102279536s ago: executing program 2 (id=475): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'lo\x00', @random="c5aec1fadb18"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_setup(0x2, &(0x7f0000000200)) (async) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, r0, 0x0}]) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xe3, 0x2d, 0x5f, 0x40, 0x64b, 0x7825, 0xd204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0x9, 0x70, 0x7, [{{0x9, 0x4, 0xa1, 0x9c, 0x0, 0xd7, 0x42, 0xe9, 0x6}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 1.804503773s ago: executing program 4 (id=479): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(r2, r2) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="ce407a21601faac29a5832d81cb42eb2e20559b3d51251cd080a889910e1ba5aeae19e2a6fe9d59e2a42efdd42ba111d39aa2f428359bf580183ac9e8ed27f5497", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) 1.804136394s ago: executing program 1 (id=480): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000019380)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, 0x0) 1.660441164s ago: executing program 1 (id=483): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r4, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 1.269133294s ago: executing program 2 (id=485): prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r0 = io_uring_setup(0x32c1, &(0x7f0000000000)={0x0, 0xc0cb, 0x800, 0x3, 0x190}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x1, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x3}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x2) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x3, 0x6e92bedb, 0x0, 0x22a, 0x0, 0x1}) connect$unix(r1, &(0x7f0000000380)=@abs={0x91166ff8afe7efa2, 0x0, 0x4e24}, 0x6e) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.188072129s ago: executing program 3 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$unix(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="632e28fe5dfb72cf911fa8e0f6316704c08124f7e5787fad6dbcdf7a3cb6813ffdfef36e46b137b39304745ddd051b6ee9e08580b79064e1bbc89a6b109d699989dd73b9a0db7e025dfa338dfe32c80c57ff6e21861b7a", 0x57}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r3]}}], 0x38, 0x1}}], 0x1, 0xc000) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="100000402a2f67a906db46b56d8e96aad04c27c21b"], 0x10}, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$can_raw(0x1d, 0x3, 0x1) unlink(&(0x7f0000000580)='./file0\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}]}, 0x2c}}, 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000013c0)="0617d2d503b14bbc2737ddc1796a5b1f7702ffe273f1ba3add98a39ff0e30f9de584b4f78af7f5fdd34db9395be6fb99cb9806faab593b55a010b9b22ebb3088c42e96f2e4de49ef5974dda9d9e8d2afde7d0a41e4ff1674cb04196502c858be537c9f0cb8f1ef6d3725f61de0e08ce21763a064fb5df7fdac89da0d005cf7d6bc7e01e6cf4e662fb7e63052891e8d1bcc7b6cc3c395235a24e56c9ccde678329c3faa829b807f6a14c8e3cebb488ed024a8c07460b2c42a39417b30652d6b47e7c3982c71616d1b5a0fa195292509d8a0111c6d400422199776ca0ff0e44719828f112069b4ad37df284cdbd2766f645463f4130ba65af0db60fa919be089fb13e89194f9e193081cfc730966685a98b69e3b91fa42a940f0ab2026d4c5b7bd8d7a5094a17b5a4f261b1b8a384339ae968557ab460d1a5cdadc0332664b1ebbbd914538d90e7505f7f0cc9af9102280ef2c580c910e3b1b23b13c8d4a868ccaa9de65d98ac801a78baba602fafeeb6d55bb53656746b01e4258da2d88dffc1140d5ccb6348d12389ee21c5f16180fc6cb7890ad409240bd82733bc6c403512c59ba0cd2d92682bbce7b61487fadd2c2edee21cc9d12f4848a954880b183dcff076b0fe064aafc9c766db199fd80e14036a511d2f3d601990b864994081d13b1b0ea2f40f3b0dd979e9eb11e666f4b1c2e1fe52269158040c51b1d89c1b679b664d7c691ada7bd4d9ebce504e38a410db9cbcfb28033eb865cd00bd424a300fa60ec30af4f27ae3b60392a29a34f4439c0171e59e962b19b3814ed3e961ebfd7fa6228c217fa7d5045c4eab1573790b217dc7450ced4901eac5a546cf9575a2997c2025bbdddca62520072b5f8a6a603cca8c1d8cb4502df3f2f4a96e5099cd0f20ab3dd5d5d44846cfc9135138378c8a946d0770f70e2b34858944b1b46a0d3f4626a748b8a829a315f1d14af97b22fa964fbf1d1f09a4ec0e7e06311d76c253e8cfad9be8d7f2baa80b328613d65f463a7d00b3d5ba7a825507bb1f6f5569dbf388ce0215905b97f3bd8d2b39638e02c1cadf2d5170a017d0b3b7f04dfa2e85bd8a280a3e8809408a9e9d8d250869d5e254b274472d1f68f19ed4b324ed228d052f74114ee4e4595fe6534f92d7ba10b7d5971b4714045b22a481b0dea68c7c8d238870d979a91c384f0bfb50582143aef76346972eb58b040568691e133a39aa9716d3262ddac1a1f64bbd554f010c7d354fc9e671dbb0e7327467baf64337d1d3d6254259529fa5bb982da1eb8335649b6f9eb78b91e60702ef781323f3659ee7faa868575daa315f28d5b3dc790004c6efc83c7a5a54b6eed679a3b615b0e0e3e86b9d39726f966e9db62fc45c2e192f2621f6eabc28484ae3b075d4ea6c92f5e04985094458a42b091c906bb22164fe6cc736217872dbb019dd605c2929a39ef871858d2d87dde53ba2dd6a290d67da54092976d0a2a512a9b5cae4f8e096e05b0d2400e486340b3ebcb138f08cee224ea17158759cbdf936e510dde2b8c3abd4d219209dfe46448af8a580797e7adf4a29d8dd860ace10eb1752ebbe7eb018023db26bf891596443910d3eeec6e6a5bf2a11de9397c26f4895ed54e50fdf883a4234ca37df5389cca96c0e9244b9b7627c505c1cd3de89a4fa19af5b3957e0bcef468c8ffe24a22862f11e45713cd3f4d7e17a32235f881ebe5b6675e5302a82cd94e2af8a6bd24e50e403e2e03d0e709cbbcb2d75544fdcfe5fecd37cd946f4fbf63f218be16bac2bf8026f8ed9aa76d757b03dc9d1e8dcbd869daaf8481c47256f5fc48e74acfb03488356cf6962ac077b3a792c05d42649299fce11cd15663cd12c3188bdd7a8bd9c1a2b236d97a430c79e93399dff1aae022b14e415ac346441dcf0794a4b146058aed0b48392d93652c9386ea1fe34c8e2c40636f892e978b1e22e00996b9e001fccc1a0c3729c496ad1c4fa303e17788e2fcbf3f66ab6fe0f0627e38e25aedb7d97759cd57693816649256a73e54a9b5fe87b2f6832384be609685522ea74f5524ae30a20bb37440dfc1793f39d1b46762b47e00843b71b05cc4bd429ab35740d5c62f32a7fe4693f609386cce049f957274bb4b41333b2f60e5ad330fc7d7ed9d322381838e5ac879815288ec0e3bf4feb67fe76c442ef3eb56a7f28face9099ffadafcf27d4839fc9b47b7d4b26aec96e3437b351ce3930edaa1f9aa39a461d75bdd730f3376d178d4489d3a1981e927686ce294dd1393a0bf73764970bbb09b44c79e272736a85ba4fcc29641874cc81c884437c146ec380511653eda102330bc17e015c9c02ff8294c323332158f518bd58811e8fb05a4f5808f57eead8b17ebcaa16351c38568492e5dcb51acfb950503948ba48bca1f4376baefedde02bc966f60eb25c01196c0436660df1d7e110c9a32222f8e9b0068d60f8472e187564f22e85b76dd8e999641e43623112d8e26c427b54c22923773fe7108989a607f97bf56c268f841f02e2395cd5e6972e350c7a28d5282c39079649dab733d4dd856c94d26bac345960d8c9f747b919f70fe4ddca41e569663f44205dbbac1aa2ac5e714633fe89f46e62fe5f6791ea32e0f2872e25ff3dac391925e57fcd8020f2055078a02538e967d5d92031449258a4bc84963997d2ca4a48b47924776108134131e6ef838fa93cac56ea7a36ca91f11d9e8377896d2f311b52aacbf0bd73103c1ae0354f475eed88f5f8101cfcf3c662c2565aa95e15570ded30f125637e8a14e3dc21f0ab85ea52e969e3c7c0b431f05f88e82b1df3477cada2041e1194a2b18d25be7c53cb74f0cdaf1fcfac483158e8994cb57cdf118ce233e24daeba4e8f31b91ee6286248d1a3cc5b24e99e8318e4379462658d87680513d1cb48d2114f2d355029262840ab99e6e5fdaa00157564e89986a1f0954502652cbbb66669f30f5daebb24ca09c6010097b50341fe51128479f6e4985f3193faccd67bbd55290ac003d276d5c161a7f6c93f0d7b98f07c24bb8f53ee53e6fed3eec1de81f6548bac6abd379c8ec5c60f9fc330cf4c5b0483b528b47d434c470a74c044405fc85e91cad490fa63baeef432ea933409ee6568c16e89434624ed8d03db26a130405544c9c52f18551327515975e1e5371e585fe080c42bd6f0b6c70af5fadc85a001ac24eb2a90881a9fd0c36d032a420b42aba56ed6a3137df63c89e8712af4eb7f2da5851c01720759975eb1f70f1a87d7fc01db882ca9b470a2aa4b40a2f579179693a58bc191bdce1315a9bc59abb461503e49d92cb5b193e1050e630f02440b2c5662603b64b38874a64f94a8c2ac6e641fd7ee9c09f0d69a9a4dbcfcbde3cd39040e05f77a889e69e16404a0c9df41dfe8300b8e7c1b3c5f2aae0c92d82dd2e7c0ffe8c4c71dde369d08c8de66d41ecd91d42376e0af2371bbaa65ed2dcd9138723f2d12d041abae9c5f032542d6f674810880ca1399906eb1b30b85396a57059dfa57e1192f452ec19623db6db4d68eecac8f7961198c4bd8ba8e053678f537d36039f0d83deb20fdc597fbfa14337935921a5bbbdab55bd170e023666cfb77faecbdc43c0976164986ec478dc731c9c6f39a631f6f485abcb2208113fe53f9fcad51728f931e646a7aff82a35501ffc1a198c34e3f5fc221274e6f0b28ea2fdc92054e2d7350b3a0b146a467eadd47d1d34181b846e77ab25509d33804658d4a384a276dbdcd31cf73dc4005922b61ab798b8d6f8f9c60352a4615efe70491f90e685c2a05f2225cd4ae22083d166c6e72f08e09c9730af2537f22c16621cd88b69e2d3cf1afbb26beec644e30420b2f66d77c54743c7885081c685e5da70a5707de423bcb9059adcf3e9485b58f1294e1e8abd807f333f0a0182a2fe961414c14491e3f27292c1f1989ca503afcba6097dd7d4d1f386ff14215e7c448b5fe4dc69c8e06aacee84664b4ea01cbc5bcd6743003e9299679e170282c97d31c0b8ef61bff8646c091d0aea7679f6c4e348ab0c93873365a195a65477522a50126eaec4220ddde00233f3441906a4dd49f8ea33528cc13afeaac21dc4b9fd71872ccfde4c39911de463ca954145b00007758d254e3ebee50677d0016c1b92d28bf17274b2d3b2d92a209e173e1da514732ebd23b1e0dcdf6f720cfd3a06613597cdedebe5531823e295a86fc41df3fda31956742a81e039c3a08e3abaa580b695619256e41f4e2ee1ddc89b8d637902d8f3a62865a5d681acaf7aa6206c2589d50128da6afc9a64e804cb98e8efe3eb6f3156f8b29bd6298d4d684f6a787f1737ef98dbabdbef8bdd4cef47768cebacd3706ce90a017a70980ab41f9fe4468d153b73e6549233e586810054b85d17e61f8a81e6f7d090292994c5ea3edd094a421a4b4b1a1765e5757eee2513199561e36c8f537fdfb9339e1a41f57a7fd55b5cf8c4c6771223229f96188696a12c190df766750f422d17c9b086d3a7812befa0d14ba54d486fa42cad27c92ca16bb1cfa60bffa895c9affb3d948407f1ab47113c4e11058815e71a7b877643b9b435b3b401050769c290ce07e546a345634cd2469df9eb055eb455bbdd523b13c737d04cf94b2cdc191432338129f98cd4c32269d92beb0604f8a779fa5dc7a43e8b4fbc3030bb0694ca140e3bbec5fe51ffc3fa9b39cb82b6d2dcf83b2e934d7da0c92e5c0fa0f31fb6142ecdb5cc5b665b5144ed510cc6bb7f0a74fd9e67fa3d37b6645afea3d5126724908283f7b7f42bfbe1ce12caea4323ea1a2d6290418dd4f14c982220eb0aebe589a04ca157a4f546c0d55734e98ba7b804658f96973c3129c33bc5050aac8bc0b6999a5013d2edd1fd58256d73ae3635d49afc4c9d460f384cdede2c80ae1139d2029f1b56f17e207d6b2d0d8676cce2ee81ae8babcef53ffc70a09ec6c21492dc984b30412a3c6283924e3f9987a6f3999c278c53466bc15f6cec37a9ea642b26bd4a6ecde6532843c1ac1fdfb64335d14abf469ea048f1df8c8b0cc8e5746bb377356428dad5593ca81684d42a7660bd7effdbb8fcf419196fc5baacbb7a726b33f5d3140412015c85412fee210093dcc95b19455e3f4ff86d53f6e348672f851a1d0b8d831239df3fc4fa3d3afb6bf0286a72daa2635d51da81aea014d070526a97db0f58c5c3892744fe0f77e838d4d016d98c047865b3a9e059ae5a24b16c230474dc24526d9caa8f5838ef320cc10a52f867faf17853e350f6fe9cd8cbfbbfd8da55e888298397f8f69266238f28f815b8b1b8d5ebafd1ea0cc6ba14e623e4fc2d61072bed04c3e8b3c2e961aaab632eed5c5a3833c9f9a2906cb15156796d44a8b743e63c0c05ba34a64d171252efe9ecda7fb5fa33426941e88eb280ca5652b0f2e5b2853ff1921321b0ffeff22abbee185d8e895b42af804764f87d460321453f04ce3bb6125acb186010364fbe6f099b4bd55ffba7b21e480353341506c3e7ed0980a828235859fbdbefe02ae2e1c24919d3cf6910fbcb8e084e09a7aeed69c4da655ef88aa5036572f0c9ab80fde558af22f42099c7371ec68b16058a9d7140e855bd5304b6a7142e6598ae0b8bffb114dbb7c79a4d656a9f13c38f450209ed93f5d34666ae3a392186f3f85d4f1a672ad9d4c2a6b8e3017e4bad2f759a6d5da7fe95c00705d4986d72184cb37a936a9231ef28c9c8f25f4daa184346b342bf4a2c358bee66153fa3e626f176b9e2eec77b321beb313ae2b887e915f20b3fde59a033656050f0b8b471a00278e1fe7fe725", 0x1000}, {&(0x7f00000006c0)="9059d63642dc873e5afc1954c0111ca9814807ee58921a6d8f748baac62ea8a24a04b57d8c37f3992d3df0ee741820a7c691d48c38247fd44c618835fb6035b42f213f7047a3575f46099c1e7210777f95cff505690c87a68aa665b8f37fcebe4552bfe0e55cfda15312e96bb07e7961c9b6581e5967df61a4e3cf7f374e2aa6fb9af07c5eeab3cc161882c34dbaf68c958b9f650b04ebfab8dcab50f047adc8144e4e0991d85d8f395e732dee63fb06a5c85ae9b6207e464e2771d60cb23fa160b32fbc1fdf3c502757b8bc00ce99b82101e1915a6c23963e1a3db1c27f19dc", 0xe0}], 0x2, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0xfffffffd}], 0x18, 0x81}, 0x40011) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) 1.033905208s ago: executing program 3 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000300)=""/131, 0x83) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003e00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000a80)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x7, 0xff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x1}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffffff, 0x0, 0x112) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0x0, 0xfffffffc, 'syz1\x00', 0xffffff7e}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc1105511, &(0x7f0000000040)={0x9}) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0xc1105511, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0x80000300, 0x0, 0x0) 787.941209ms ago: executing program 0 (id=489): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) r1 = getpid() capget(&(0x7f0000000080)={0x20080522, r1}, &(0x7f00000001c0)={0x4, 0x6, 0x4, 0xffffffff, 0x7, 0xc}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r3, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="98010e809d00020028dcf592728f659139af3af4920599f75e816cc6592de26df3f2cd7f0ed764453daae0fde90b9990f1d005f21b34c98da050764b00f4e4ec53cf501fafecead5978e55b06e75e44838f8c9b60ea8514bd60ebfef21ab723fc73a99214d7e63779846ff7ab439864dbe274e834b3beb89d911ad55be3879129414c8e7fbd48db4e50e825bbbcfbef3e69d837bdfb537c3e2d406e9879672d0ef000000a30003000b697a51df889c8390a4c0a8969e42efa353b5b178353fd6e5b88c797e8000f76dc44723fa0ba2cc4c78485b094cd34474193694a76c39ab95484b7b048dfea97349e1385aa5a4fb0d9331265931236c7c35dd6d0986e6532588514a55fdaf5ad071cea78d112c037d4af930b22a2dd1c2c1e84804c36db4a3b27b52541a03b2e54afe00a6ca0eb181b4a3683a3b277166d9b7a4f303128561e3eaca27afc2004d000300172e8af2db1311c6ee7d4fba0247a7c5e6c89633979c9a60f2d9d4926200768837fb6a46e82de6077e3dfa378edde0103ab6dda487cffcfa7679654b881a9fdb73e9cf656aa323f5b90000002f810fb0b015f18ea140151e4d74"], 0x1b4}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r5, 0x6419aa27cadae9f1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4004800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x6, 0x0, {0x9, 0xbfc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x4, 0x8}}, @NL80211_ATTR_SSID={0x4}]}, 0x40}}, 0x4000c50) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4001080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x29}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x30}}, 0x4840) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r11, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='grpquota_inode_hardlImit=g7,\x00']) sendmsg$IPSET_CMD_GET_BYINDEX(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"/664], 0x24}, 0x1, 0x0, 0x0, 0x4008099}, 0x20000001) 735.150475ms ago: executing program 0 (id=490): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8cc}, 0x4000004) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8cc}, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) getpid() 567.155795ms ago: executing program 4 (id=491): openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x6a, 0x8, 0x5, 0x3}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4128000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c0002"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 408.087401ms ago: executing program 4 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x8400, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) rmdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') socket$unix(0x1, 0x1, 0x0) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000680)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000500) 407.618032ms ago: executing program 0 (id=493): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) fremovexattr(r2, &(0x7f0000000180)=@random={'trusted.', '*^$%\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x81, 0x4) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000180)="2865d7c5b84f") syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e246ae7f49f5b6461b888a3d353362c2ec9bed1f7d4d3a0200e3af42fcf36f4c09bc095b3fd391a23faad86bfa29696b80093da6a97d6c4a54eca89d4979f12acbf89bca0c8cc5f490737b09fd77b8b7fcfa7b94787f81cff59ae583b5309bdb82ff76ceaf739cd254b32cc8e289541b8921aa2aedac4bf6c91c2aab801c459", 0x2ea}], 0x4, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @noop, @rr={0x7, 0x17, 0x22, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @rand_addr, @dev]}, @generic={0x82, 0xc, "3a047e2aae56e4b9eab8"}]}}}], 0x58}, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x212083, 0x0) ioctl$FBIOGET_FSCREENINFO(r8, 0x4602, &(0x7f0000000500)) r9 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x414}, 0x1}) syz_io_uring_setup(0x5577, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r11, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0x78}}, 0x0) io_uring_enter(r3, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 348.75678ms ago: executing program 2 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000068000100020000010000000000000000000000000c000200010000000400000004000b00"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006001d000200000000000004000000000041615f2e00a8bb8043ab40e15fc33db9bf41904ce13b220c2fb25d3297da61590e9dded30d7ef581af13bbc9c2dff7820f323d311c56071331430d05c939582220198f6072adbad9c837d4c17fca891c37fd73eee66a5d75cdaed95390e0bd62c1f2c532b88a4b19d002eb95213ee75b771d8eba6e5c392c19839a11b236e13f8e383117"], &(0x7f0000002200)=""/4110, 0x2a, 0x100e, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)=0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@initdev, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000480)={&(0x7f0000000040), 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000df17f089ae9625694c8acfe598a4e596e8ee0863e53f76eaa9aa506c1ebac17b0c5586b9dd078c42b18abbcd203cee3db6aeaf1942a23b27f51d1630530dd1f3e999e83c829a6deb21ae9ed90faacd6d2bc99b2c1d38a630eba0e39e54eeed58323442e49b330eb105ba6fbfc6e09f787e56b696ea10e851b33642807302a06e2d7ae38e07b4b612ab22c1c84b387aec948ea8", @ANYRES16=r1, @ANYBLOB="000025bd7000fddbdf2518000000a800028051000400db273e141edc05baf935c090fb0e06fe89588269845b6bd6baa38bc65767daf7cdae8536f01967955ee60bdc1dd2f1d620f1ea195c17bc430e6a9efceba1bc17db0e65c79845f231f189fa771e0000004f000500145738ead781168660f2055422300a12a6c94859c1a4ac7aefa0845b9eaacd99e2f2a9c5579e1ccea8778c7bb900da847c1c6fb0d23a7480b30f19b974341fc149bba87e724fd50d86a1db000800070007000000500001801400020069703667726574617030000000000000080003000000000008000100", @ANYRES32=r6, @ANYBLOB="140002006e723000000000000000000000000000140002006970365f7674693000000000000000000800070006000000"], 0x11c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'gretap0\x00'}) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) 291.474129ms ago: executing program 0 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) syz_io_uring_setup(0xb7f, 0x0, &(0x7f0000000340), &(0x7f0000000600)) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}}, 0x8084) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 172.326427ms ago: executing program 0 (id=496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) gettid() r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) close(r4) 171.833076ms ago: executing program 1 (id=497): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000088ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000006792e5283c7bdef5c0dd"]}, 0x112) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12ff0000000000205727000a00000000000109022d00010000000009040000c403000b050d21090000012243000905810320000d20400905020300042cef06"], 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x84201, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x5, 0x369421, 0x11474d}) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) set_mempolicy(0x6, &(0x7f0000000300)=0x8000000000000001, 0x2e0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01022abd7000fbdbdf25030000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8800) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x4b52, &(0x7f0000000000)={0x2, {0xc, 0x6, 0x6, 0x101, 0x100}}) syz_emit_ethernet(0x0, 0x0, 0x0) timerfd_create(0x9, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0x8, "5b7a7af7"}, @main=@item_012={0x1, 0x0, 0x8, "e0"}, @local=@item_012={0x0, 0x2, 0x1}]}}, 0x0}, 0x0) 58.423336ms ago: executing program 0 (id=498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b, 0x3}}}}]}]}, 0x48}}, 0x24048040) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000600)="f30f22a2f2363e0f3066baf80cb8edc6aa86ef66bafc0cb0afee673e360f73d41cd3dd3e65660fd563a766baf80cb8ca2dca87ef66bafc0c66ed670f38c87332653e36650f350f32", 0x48}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf000, 0xffc5}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 57.878964ms ago: executing program 3 (id=499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvfrom$inet_nvme(r1, &(0x7f00000004c0)=""/110, 0x6e, 0x40000001, 0x0, 0x0) 0s ago: executing program 3 (id=500): clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) (async) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) syz_emit_ethernet(0x66, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x2, 0x58, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xc, 0x3, 0x0, 0x1, 0x5, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x4, 0x1, 0x0, 0x3, 0x1, 0xfc}, 0x2, {0x10, 0x8, 0x3, 0x1e, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) kernel console output (not intermixed with test programs): t 1(bridge_slave_0) entered blocking state [ 65.496261][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.524765][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.533876][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.540993][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.583902][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.599538][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.606634][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.646551][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 65.646561][ T30] audit: type=1400 audit(1766086758.918:84): avc: denied { sys_module } for pid=5811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.679631][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.686756][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.712116][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.780863][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.801080][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.835711][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.842848][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.871134][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.878239][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.929137][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.945690][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.029264][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.047293][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.074895][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.082037][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.095505][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.102627][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.161093][ T5811] veth0_vlan: entered promiscuous mode [ 66.176860][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.192555][ T5811] veth1_vlan: entered promiscuous mode [ 66.342545][ T5811] veth0_macvtap: entered promiscuous mode [ 66.365597][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.383252][ T5821] veth0_vlan: entered promiscuous mode [ 66.403898][ T5821] veth1_vlan: entered promiscuous mode [ 66.422402][ T5811] veth1_macvtap: entered promiscuous mode [ 66.486495][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.512139][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.522856][ T5818] Bluetooth: hci4: command tx timeout [ 66.528319][ T5830] Bluetooth: hci3: command tx timeout [ 66.540106][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.552062][ T5812] veth0_vlan: entered promiscuous mode [ 66.561110][ T5827] veth0_vlan: entered promiscuous mode [ 66.574180][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.586933][ T5821] veth0_macvtap: entered promiscuous mode [ 66.593999][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.603471][ T5818] Bluetooth: hci0: command tx timeout [ 66.603760][ T5825] Bluetooth: hci1: command tx timeout [ 66.610655][ T5830] Bluetooth: hci2: command tx timeout [ 66.626464][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.635518][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.648688][ T5827] veth1_vlan: entered promiscuous mode [ 66.656989][ T5812] veth1_vlan: entered promiscuous mode [ 66.673302][ T5821] veth1_macvtap: entered promiscuous mode [ 66.747823][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.763134][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.769731][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.790556][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.804357][ T5827] veth0_macvtap: entered promiscuous mode [ 66.830083][ T2942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.830390][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.838975][ T2942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.855816][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.863755][ T5827] veth1_macvtap: entered promiscuous mode [ 66.871336][ T5813] veth0_vlan: entered promiscuous mode [ 66.878699][ T2942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.888088][ T2942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.903471][ T5812] veth0_macvtap: entered promiscuous mode [ 66.909516][ T30] audit: type=1400 audit(1766086760.178:85): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.cu3HBk/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.937669][ T30] audit: type=1400 audit(1766086760.178:86): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.952010][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.971103][ T30] audit: type=1400 audit(1766086760.178:87): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.cu3HBk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.999521][ T30] audit: type=1400 audit(1766086760.178:88): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.016482][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.021635][ T30] audit: type=1400 audit(1766086760.178:89): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.cu3HBk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.068289][ T30] audit: type=1400 audit(1766086760.178:90): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.cu3HBk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.071952][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.105120][ T30] audit: type=1400 audit(1766086760.178:91): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.127681][ T30] audit: type=1400 audit(1766086760.208:92): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.160295][ T30] audit: type=1400 audit(1766086760.208:93): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="gadgetfs" ino=6942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.185136][ T5812] veth1_macvtap: entered promiscuous mode [ 67.218644][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.227961][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.251460][ T5813] veth1_vlan: entered promiscuous mode [ 67.264938][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.278088][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.357775][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.398923][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.450241][ T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.487034][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.508442][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.510115][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.527990][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.528868][ T5943] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 33554432, id = 0 [ 67.535543][ T150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.537541][ T150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.550428][ T5942] IPVS: stopping master sync thread 5943 ... [ 67.572207][ T150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.599160][ T5813] veth0_macvtap: entered promiscuous mode [ 67.623001][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.634396][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.647897][ T5813] veth1_macvtap: entered promiscuous mode [ 67.746461][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.756137][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.760780][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.774590][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.786910][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.815590][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.877885][ T3832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.918698][ T3832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.952278][ T3832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.007509][ T3832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.034962][ T5949] tipc: Started in network mode [ 68.041310][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.051298][ T5949] tipc: Node identity aef682fae667, cluster identity 4711 [ 68.058721][ T5949] tipc: Enabled bearer , priority 0 [ 68.065485][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.120290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.128746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.137329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.183217][ T5949] syzkaller0: entered promiscuous mode [ 68.206787][ T5949] syzkaller0: entered allmulticast mode [ 68.315662][ T5955] tipc: Resetting bearer [ 68.440336][ T5948] tipc: Resetting bearer [ 68.479341][ T5948] tipc: Disabling bearer [ 68.534817][ T3832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.559121][ T3832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.611762][ T5830] Bluetooth: hci3: command tx timeout [ 68.611770][ T5825] Bluetooth: hci4: command tx timeout [ 68.679645][ T3937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.690611][ T5830] Bluetooth: hci2: command tx timeout [ 68.691047][ T5825] Bluetooth: hci0: command tx timeout [ 68.696176][ T5818] Bluetooth: hci1: command tx timeout [ 68.711393][ T3937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.841056][ T5954] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.112273][ T5954] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 69.129784][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.141613][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.810655][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 69.823788][ T5954] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 69.834685][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.854441][ T5954] usb 2-1: config 0 descriptor?? [ 70.070259][ T5987] netlink: 'syz.4.18': attribute type 4 has an invalid length. [ 70.139974][ T5929] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.294556][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.306210][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.322827][ T5954] hid-picolcd 0003:04D8:F002.0001: item fetching failed at offset 5/7 [ 70.333844][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.350308][ T5954] hid-picolcd 0003:04D8:F002.0001: device report parse failed [ 70.357794][ T5954] hid-picolcd 0003:04D8:F002.0001: probe with driver hid-picolcd failed with error -22 [ 70.367571][ T5929] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.383486][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.416066][ T5929] usb 1-1: config 0 descriptor?? [ 70.548261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.557253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.680864][ T5830] Bluetooth: hci3: command tx timeout [ 70.709753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.759671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 70.799056][ T5825] Bluetooth: hci1: command tx timeout [ 70.804553][ T5825] Bluetooth: hci2: command tx timeout [ 70.820137][ T5825] Bluetooth: hci0: command tx timeout [ 70.832895][ T5818] Bluetooth: hci4: command tx timeout [ 70.940349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 70.948717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.965766][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.972218][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.056140][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 71.056155][ T30] audit: type=1400 audit(1766086764.328:160): avc: denied { read write } for pid=6003 comm="syz.2.22" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.093782][ T6004] Zero length message leads to an empty skb [ 71.103979][ T30] audit: type=1400 audit(1766086764.328:161): avc: denied { open } for pid=6003 comm="syz.2.22" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.127685][ T30] audit: type=1400 audit(1766086764.328:162): avc: denied { accept } for pid=6003 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.147319][ T30] audit: type=1400 audit(1766086764.368:163): avc: denied { read write } for pid=6003 comm="syz.2.22" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.173481][ T30] audit: type=1400 audit(1766086764.368:164): avc: denied { open } for pid=6003 comm="syz.2.22" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.202371][ T5929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.210333][ T5929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.218111][ T5929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.229557][ T5929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.237104][ T5929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.244885][ T5929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.252416][ T30] audit: type=1400 audit(1766086764.378:165): avc: denied { ioctl } for pid=6003 comm="syz.2.22" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.278251][ T5929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.285693][ T5929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.297920][ T5929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.305567][ T30] audit: type=1400 audit(1766086764.378:166): avc: denied { create } for pid=6003 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.329398][ T5929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.352212][ T30] audit: type=1400 audit(1766086764.398:167): avc: denied { bind } for pid=6003 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.397074][ T5929] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 71.504033][ T5929] usb 1-1: USB disconnect, device number 2 [ 72.156015][ T30] audit: type=1400 audit(1766086765.368:168): avc: denied { append } for pid=6007 comm="syz.0.23" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.310425][ T30] audit: type=1400 audit(1766086765.588:169): avc: denied { setattr } for pid=6007 comm="syz.0.23" path="pipe:[8074]" dev="pipefs" ino=8074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 72.342951][ T6006] usb 2-1: USB disconnect, device number 2 [ 72.760176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.768860][ T6025] input: syz1 as /devices/virtual/input/input6 [ 75.069807][ T5956] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.252995][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 75.261136][ T5956] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.282261][ T5956] usb 2-1: config 0 has no interface number 0 [ 75.340214][ T5956] usb 2-1: config 0 interface 1 has no altsetting 0 [ 75.369261][ T5956] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 75.397054][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.438170][ T5956] usb 2-1: Product: syz [ 75.453766][ T5956] usb 2-1: Manufacturer: syz [ 75.465598][ T5956] usb 2-1: SerialNumber: syz [ 75.917805][ T5956] usb 2-1: config 0 descriptor?? [ 75.983220][ T89] cfg80211: failed to load regulatory.db [ 76.135276][ T5956] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 76.248516][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 76.248531][ T30] audit: type=1400 audit(1766086769.518:181): avc: denied { create } for pid=6052 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.352693][ T89] usb 2-1: USB disconnect, device number 3 [ 76.442632][ T30] audit: type=1400 audit(1766086769.718:182): avc: denied { read write } for pid=6054 comm="syz.3.37" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.547976][ T30] audit: type=1400 audit(1766086769.718:183): avc: denied { open } for pid=6054 comm="syz.3.37" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.600142][ T5823] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 76.696620][ T6057] x_tables: ip_tables: osf match: only valid for protocol 6 [ 77.060157][ T30] audit: type=1400 audit(1766086770.048:184): avc: denied { connect } for pid=6054 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.137764][ T5823] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 77.162119][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.192822][ T5823] usb 3-1: config 0 descriptor?? [ 77.226468][ T5823] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 77.384176][ T30] audit: type=1400 audit(1766086770.658:185): avc: denied { ioctl } for pid=6059 comm="syz.0.38" path="socket:[8131]" dev="sockfs" ino=8131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.565002][ T30] audit: type=1400 audit(1766086770.838:186): avc: denied { write } for pid=6052 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.590117][ T5823] pwc: Failed to set LED on/off time (-71) [ 77.611559][ T5823] pwc: send_video_command error -71 [ 77.636858][ T5823] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 77.652795][ T30] audit: type=1400 audit(1766086770.908:187): avc: denied { mounton } for pid=6064 comm="syz.3.40" path="/7/bus" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.683758][ T5823] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 77.698402][ T5823] usb 3-1: USB disconnect, device number 2 [ 77.724646][ T30] audit: type=1400 audit(1766086770.908:188): avc: denied { unlink } for pid=6064 comm="syz.3.40" name="#1" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.779184][ T30] audit: type=1400 audit(1766086770.908:189): avc: denied { mount } for pid=6064 comm="syz.3.40" name="/" dev="overlay" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.884835][ T5818] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 77.894029][ T5818] Bluetooth: hci0: Injecting HCI hardware error event [ 77.902472][ T5818] Bluetooth: hci0: hardware error 0x00 [ 78.007245][ T30] audit: type=1400 audit(1766086770.968:190): avc: denied { wake_alarm } for pid=6064 comm="syz.3.40" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.100180][ T5894] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.281534][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.294180][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.306234][ T5894] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 78.316355][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.324569][ T6062] netlink: 'syz.1.39': attribute type 4 has an invalid length. [ 78.338753][ T5894] usb 5-1: config 0 descriptor?? [ 78.369748][ T935] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 80.000060][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.038375][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.048954][ T5818] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 80.055526][ T935] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 80.064616][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.081403][ T935] usb 1-1: config 0 descriptor?? [ 80.340911][ T5894] hid_parser_main: 5 callbacks suppressed [ 80.341072][ T5894] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 80.534720][ T5894] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 80.542217][ T5894] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 80.549612][ T5894] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 80.557053][ T5894] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 80.581523][ T5894] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 80.661617][ T5894] playstation 0003:054C:0DF2.0003: Invalid byte count transferred, expected 20 got 0 [ 80.753015][ T5894] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 80.778169][ T935] isku 0003:1E7D:319C.0004: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 80.797097][ T5894] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 80.815957][ T5894] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 80.847448][ T5894] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -22 [ 80.883457][ T5894] usb 5-1: USB disconnect, device number 2 [ 80.987613][ T6078] usb 1-1: USB disconnect, device number 3 [ 81.172667][ T6092] fido_id[6092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 81.395533][ T6099] x_tables: ip_tables: osf match: only valid for protocol 6 [ 82.384547][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 82.384561][ T30] audit: type=1400 audit(1766086775.658:199): avc: denied { append } for pid=6105 comm="syz.2.52" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.701023][ T30] audit: type=1400 audit(1766086775.758:200): avc: denied { create } for pid=6105 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.126088][ T30] audit: type=1400 audit(1766086775.948:201): avc: denied { mounton } for pid=6105 comm="syz.2.52" path="/9/file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.593361][ T5894] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.996685][ T6103] netlink: 'syz.4.54': attribute type 4 has an invalid length. [ 85.143429][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.239933][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.279850][ T5894] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.354796][ T5894] usb 2-1: config 1 interface 0 has no altsetting 0 [ 85.481351][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.495730][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.525371][ T5894] usb 2-1: Product: syz [ 85.559191][ T30] audit: type=1400 audit(1766086778.828:202): avc: denied { append } for pid=6128 comm="syz.4.58" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.586913][ T5894] usb 2-1: Manufacturer: syz [ 85.634539][ T5894] usb 2-1: SerialNumber: syz [ 85.650139][ T30] audit: type=1400 audit(1766086778.828:203): avc: denied { ioctl } for pid=6128 comm="syz.4.58" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.748389][ T30] audit: type=1400 audit(1766086779.018:204): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 86.151833][ T30] audit: type=1400 audit(1766086779.428:205): avc: denied { create } for pid=6120 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 86.154487][ T6121] ALSA: mixer_oss: invalid OSS volume '' [ 86.236647][ T30] audit: type=1400 audit(1766086779.428:206): avc: denied { write } for pid=6120 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 86.324947][ T5894] usb 2-1: bad CDC descriptors [ 86.365555][ T5894] usb 2-1: USB disconnect, device number 4 [ 86.639741][ T935] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.825771][ T6148] x_tables: ip_tables: osf match: only valid for protocol 6 [ 86.855388][ T935] usb 3-1: Using ep0 maxpacket: 8 [ 87.216017][ T935] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 87.227596][ T935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.238019][ T935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.252126][ T935] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.265512][ T935] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.274731][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.008770][ T935] usb 3-1: usb_control_msg returned -32 [ 88.036596][ T935] usbtmc 3-1:16.0: can't read capabilities [ 89.793993][ T935] usb 3-1: USB disconnect, device number 3 [ 89.808226][ T30] audit: type=1400 audit(1766086783.078:207): avc: denied { append } for pid=6167 comm="syz.0.68" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.019560][ T30] audit: type=1400 audit(1766086783.188:208): avc: denied { create } for pid=6169 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.039457][ T30] audit: type=1400 audit(1766086783.188:209): avc: denied { ioctl } for pid=6169 comm="syz.3.69" path="socket:[9462]" dev="sockfs" ino=9462 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.212306][ T30] audit: type=1400 audit(1766086783.468:210): avc: denied { map } for pid=6171 comm="syz.4.70" path="socket:[10333]" dev="sockfs" ino=10333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 90.649150][ T30] audit: type=1400 audit(1766086783.918:211): avc: denied { execmod } for pid=6175 comm="syz.2.71" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 90.695827][ T30] audit: type=1400 audit(1766086783.938:212): avc: denied { execute } for pid=6175 comm="syz.2.71" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 90.735833][ T30] audit: type=1326 audit(1766086783.998:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.4.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a39f8f749 code=0x7fc00000 [ 90.839746][ T30] audit: type=1400 audit(1766086784.098:214): avc: denied { write } for pid=6175 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.919796][ T6014] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.100050][ T6014] usb 4-1: device descriptor read/64, error -71 [ 91.409323][ T30] audit: type=1400 audit(1766086784.678:215): avc: denied { mount } for pid=6197 comm="syz.1.75" name="/" dev="ramfs" ino=9488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 91.450117][ T6014] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.516898][ T30] audit: type=1400 audit(1766086784.768:216): avc: denied { node_bind } for pid=6198 comm="syz.2.76" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 91.599791][ T6014] usb 4-1: device descriptor read/64, error -71 [ 91.739943][ T6014] usb usb4-port1: attempt power cycle [ 91.890265][ T6210] x_tables: ip_tables: osf match: only valid for protocol 6 [ 91.929861][ T935] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.360831][ T6014] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.450979][ T6014] usb 4-1: device descriptor read/8, error -71 [ 92.525823][ T935] usb 2-1: Using ep0 maxpacket: 8 [ 92.561828][ T935] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 92.574842][ T935] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.585029][ T935] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.595965][ T935] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.610398][ T935] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.619975][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.689828][ T6014] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.720370][ T6014] usb 4-1: device descriptor read/8, error -71 [ 92.847122][ T6014] usb usb4-port1: unable to enumerate USB device [ 92.976451][ T935] usb 2-1: usb_control_msg returned -32 [ 92.982348][ T935] usbtmc 2-1:16.0: can't read capabilities [ 93.505216][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 94.273214][ T6233] NILFS (loop3): device size too small [ 95.317132][ T6238] NILFS (loop4): device size too small [ 95.826375][ T55] usb 2-1: USB disconnect, device number 5 [ 95.960736][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 95.960750][ T30] audit: type=1400 audit(1766086789.238:224): avc: denied { create } for pid=6239 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.000253][ T30] audit: type=1400 audit(1766086789.268:225): avc: denied { write } for pid=6239 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.020754][ T30] audit: type=1400 audit(1766086789.268:226): avc: denied { nlmsg_write } for pid=6239 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.269828][ T55] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.451292][ T55] usb 3-1: device descriptor read/64, error -71 [ 96.868302][ T55] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.210167][ T6257] x_tables: ip_tables: osf match: only valid for protocol 6 [ 97.634168][ T55] usb 3-1: device descriptor read/64, error -71 [ 97.750672][ T55] usb usb3-port1: attempt power cycle [ 97.820087][ T6261] ======================================================= [ 97.820087][ T6261] WARNING: The mand mount option has been deprecated and [ 97.820087][ T6261] and is ignored by this kernel. Remove the mand [ 97.820087][ T6261] option from the mount to silence this warning. [ 97.820087][ T6261] ======================================================= [ 98.026499][ T30] audit: type=1400 audit(1766086791.138:227): avc: denied { remount } for pid=6250 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.252819][ T6275] openvswitch: netlink: IP tunnel TTL not specified. [ 98.284449][ T30] audit: type=1400 audit(1766086791.558:228): avc: denied { setopt } for pid=6268 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.329888][ T55] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 98.428582][ T55] usb 3-1: device descriptor read/8, error -71 [ 98.428589][ T30] audit: type=1400 audit(1766086791.588:229): avc: denied { write } for pid=6268 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.571999][ T6264] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.819692][ T6264] usb 2-1: Using ep0 maxpacket: 16 [ 98.902441][ T6287] netlink: 'syz.0.92': attribute type 2 has an invalid length. [ 98.943996][ T6264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.159801][ T6264] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 99.168852][ T6264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.187778][ T55] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.227956][ T6264] usb 2-1: config 0 descriptor?? [ 99.319767][ T30] audit: type=1400 audit(1766086792.588:230): avc: denied { bind } for pid=6292 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.369761][ T5954] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.419771][ T55] usb 3-1: device not accepting address 7, error -71 [ 99.447933][ T55] usb usb3-port1: unable to enumerate USB device [ 99.571837][ T5954] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 99.585687][ T5954] usb 1-1: config 0 has no interface number 0 [ 99.612397][ T6293] kvm: pic: non byte write [ 99.617282][ T5954] usb 1-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 99.638887][ T6293] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 99.649684][ T5954] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 99.665423][ T6264] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 99.672219][ T6264] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 99.696816][ T6264] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 99.704251][ T5954] usb 1-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.718652][ T6264] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 99.736388][ T5954] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 99.751619][ T6264] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 99.762406][ T5954] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.774157][ T6264] elan 0003:04F3:0755.0005: hidraw0: USB HID v0.05 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 99.807348][ T5954] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 99.845332][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.877760][ T5954] usb 1-1: Product: syz [ 99.886897][ T5954] usb 1-1: Manufacturer: syz [ 99.896767][ T5954] usb 1-1: SerialNumber: syz [ 99.910195][ T5954] usb 1-1: config 0 descriptor?? [ 99.917779][ T6285] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 99.931853][ T5954] iguanair 1-1:0.255: probe with driver iguanair failed with error -12 [ 100.115283][ T6264] usb 2-1: USB disconnect, device number 6 [ 100.189899][ T55] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.337189][ T30] audit: type=1400 audit(1766086793.608:231): avc: denied { name_bind } for pid=6306 comm="syz.4.96" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 100.366510][ T30] audit: type=1400 audit(1766086793.638:232): avc: denied { connect } for pid=6306 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.373246][ T6307] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.396535][ T6307] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 100.418424][ T30] audit: type=1400 audit(1766086793.638:233): avc: denied { read } for pid=6306 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.441176][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 100.450953][ T55] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.459380][ T55] usb 4-1: config 0 has no interface number 0 [ 100.471842][ T55] usb 4-1: config 0 interface 1 has no altsetting 0 [ 100.481117][ T55] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 100.491432][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.499457][ T55] usb 4-1: Product: syz [ 100.504478][ T55] usb 4-1: Manufacturer: syz [ 100.518263][ T55] usb 4-1: SerialNumber: syz [ 100.525817][ T55] usb 4-1: config 0 descriptor?? [ 100.878883][ T55] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 101.520608][ T6264] usb 1-1: USB disconnect, device number 4 [ 101.534757][ T55] usb 4-1: USB disconnect, device number 6 [ 102.128991][ T6327] Bluetooth: MGMT ver 1.23 [ 102.396611][ T30] audit: type=1400 audit(1766086795.088:234): avc: denied { create } for pid=6322 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.431395][ T30] audit: type=1400 audit(1766086795.088:235): avc: denied { connect } for pid=6322 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.693609][ T30] audit: type=1400 audit(1766086795.308:236): avc: denied { mounton } for pid=6322 comm="syz.0.101" path="/22/file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 102.717638][ T30] audit: type=1400 audit(1766086795.318:237): avc: denied { mount } for pid=6322 comm="syz.0.101" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 102.771056][ T30] audit: type=1400 audit(1766086795.398:238): avc: denied { write } for pid=6322 comm="syz.0.101" path="socket:[10572]" dev="sockfs" ino=10572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.926988][ T6331] x_tables: ip_tables: osf match: only valid for protocol 6 [ 103.276941][ T30] audit: type=1400 audit(1766086795.658:239): avc: denied { name_connect } for pid=6320 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 103.296980][ T30] audit: type=1400 audit(1766086795.708:240): avc: denied { listen } for pid=6320 comm="syz.1.100" lport=39007 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.357389][ T30] audit: type=1400 audit(1766086795.708:241): avc: denied { accept } for pid=6320 comm="syz.1.100" lport=39007 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.380669][ T30] audit: type=1400 audit(1766086795.708:242): avc: denied { write } for pid=6320 comm="syz.1.100" lport=39007 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 103.409318][ T30] audit: type=1400 audit(1766086795.708:243): avc: denied { setopt } for pid=6320 comm="syz.1.100" lport=39007 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 105.409787][ T5880] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.699839][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 105.740702][ T5880] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 105.787106][ T5880] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.065767][ T5880] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.239492][ T5880] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.330904][ T5880] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.384795][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.656803][ T5880] usb 2-1: usb_control_msg returned -32 [ 106.677962][ T5880] usbtmc 2-1:16.0: can't read capabilities [ 107.332323][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 107.735833][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 107.735848][ T30] audit: type=1400 audit(1766086801.008:249): avc: denied { name_bind } for pid=6380 comm="syz.4.117" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 107.801319][ T30] audit: type=1400 audit(1766086801.038:250): avc: denied { name_connect } for pid=6380 comm="syz.4.117" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 107.856904][ T30] audit: type=1400 audit(1766086801.048:251): avc: denied { setopt } for pid=6382 comm="syz.3.118" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.860383][ T6387] 9p: Bad value for 'rfdno' [ 107.879876][ T30] audit: type=1400 audit(1766086801.058:252): avc: denied { ioctl } for pid=6382 comm="syz.3.118" path="socket:[9744]" dev="sockfs" ino=9744 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.958885][ T30] audit: type=1400 audit(1766086801.218:253): avc: denied { create } for pid=6388 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.008811][ T30] audit: type=1400 audit(1766086801.218:254): avc: denied { read } for pid=6388 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.039598][ T30] audit: type=1400 audit(1766086801.218:255): avc: denied { getopt } for pid=6388 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.067727][ T6392] FAULT_INJECTION: forcing a failure. [ 108.067727][ T6392] name failslab, interval 1, probability 0, space 0, times 0 [ 108.080488][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.0.122 Not tainted syzkaller #0 PREEMPT(full) [ 108.080508][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.080529][ T6392] Call Trace: [ 108.080535][ T6392] [ 108.080541][ T6392] dump_stack_lvl+0x16c/0x1f0 [ 108.080567][ T6392] should_fail_ex+0x512/0x640 [ 108.080590][ T6392] ? __kvmalloc_node_noprof+0x129/0xa40 [ 108.080613][ T6392] should_failslab+0xc2/0x120 [ 108.080634][ T6392] __kvmalloc_node_noprof+0x14a/0xa40 [ 108.080651][ T6392] ? rcu_is_watching+0x12/0xc0 [ 108.080667][ T6392] ? trace_sched_exit_tp+0xd1/0x110 [ 108.080684][ T6392] ? bpf_test_run_xdp_live+0x139/0x770 [ 108.080701][ T6392] ? __schedule+0x114c/0x6150 [ 108.080723][ T6392] ? bpf_test_run_xdp_live+0x139/0x770 [ 108.080740][ T6392] bpf_test_run_xdp_live+0x139/0x770 [ 108.080758][ T6392] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 108.080779][ T6392] ? __pfx___schedule+0x10/0x10 [ 108.080795][ T6392] ? find_held_lock+0x2b/0x80 [ 108.080824][ T6392] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 108.080858][ T6392] ? 0xffffffffa0205540 [ 108.080873][ T6392] ? 0xffffffffa0205540 [ 108.080887][ T6392] ? 0xffffffffa0205540 [ 108.080904][ T6392] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 108.080932][ T6392] bpf_prog_test_run_xdp+0xd3d/0x1660 [ 108.080956][ T6392] ? __fget_files+0x204/0x3c0 [ 108.080981][ T6392] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 108.081002][ T6392] ? __might_fault+0xb0/0x190 [ 108.081023][ T6392] ? fput+0x70/0xf0 [ 108.081038][ T6392] ? __bpf_prog_get+0x97/0x2a0 [ 108.081057][ T6392] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 108.081076][ T6392] __sys_bpf+0x1035/0x4980 [ 108.081104][ T6392] ? __pfx___sys_bpf+0x10/0x10 [ 108.081125][ T6392] ? find_held_lock+0x2b/0x80 [ 108.081153][ T6392] ? find_held_lock+0x2b/0x80 [ 108.081181][ T6392] ? __mutex_unlock_slowpath+0x161/0x790 [ 108.081216][ T6392] ? fput+0x70/0xf0 [ 108.081230][ T6392] ? ksys_write+0x1ac/0x250 [ 108.081249][ T6392] ? __pfx_ksys_write+0x10/0x10 [ 108.081273][ T6392] __x64_sys_bpf+0x78/0xc0 [ 108.081295][ T6392] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.081315][ T6392] do_syscall_64+0xcd/0xf80 [ 108.081337][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.081354][ T6392] RIP: 0033:0x7f913938f749 [ 108.081366][ T6392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.081381][ T6392] RSP: 002b:00007f913a1b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.081397][ T6392] RAX: ffffffffffffffda RBX: 00007f91395e5fa0 RCX: 00007f913938f749 [ 108.081407][ T6392] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 108.081417][ T6392] RBP: 00007f913a1b3090 R08: 0000000000000000 R09: 0000000000000000 [ 108.081426][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.081435][ T6392] R13: 00007f91395e6038 R14: 00007f91395e5fa0 R15: 00007ffd27695d28 [ 108.081459][ T6392] [ 108.189714][ T5880] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 108.576340][ T30] audit: type=1400 audit(1766086801.848:256): avc: denied { ioctl } for pid=6398 comm="syz.0.123" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 108.629767][ T5880] usb 3-1: device descriptor read/64, error -71 [ 108.719501][ T6405] FAULT_INJECTION: forcing a failure. [ 108.719501][ T6405] name failslab, interval 1, probability 0, space 0, times 0 [ 108.740884][ T6405] CPU: 1 UID: 0 PID: 6405 Comm: syz.4.125 Not tainted syzkaller #0 PREEMPT(full) [ 108.740898][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.740904][ T6405] Call Trace: [ 108.740907][ T6405] [ 108.740911][ T6405] dump_stack_lvl+0x16c/0x1f0 [ 108.740927][ T6405] should_fail_ex+0x512/0x640 [ 108.740943][ T6405] ? fs_reclaim_acquire+0xae/0x150 [ 108.740958][ T6405] should_failslab+0xc2/0x120 [ 108.740978][ T6405] __kmalloc_noprof+0xeb/0x910 [ 108.740995][ T6405] ? tomoyo_encode2+0x100/0x3e0 [ 108.741012][ T6405] ? tomoyo_encode2+0x100/0x3e0 [ 108.741025][ T6405] tomoyo_encode2+0x100/0x3e0 [ 108.741040][ T6405] tomoyo_encode+0x29/0x50 [ 108.741053][ T6405] tomoyo_realpath_from_path+0x18f/0x6e0 [ 108.741071][ T6405] tomoyo_path_number_perm+0x245/0x580 [ 108.741082][ T6405] ? tomoyo_path_number_perm+0x237/0x580 [ 108.741095][ T6405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.741108][ T6405] ? find_held_lock+0x2b/0x80 [ 108.741135][ T6405] ? find_held_lock+0x2b/0x80 [ 108.741150][ T6405] ? hook_file_ioctl_common+0x144/0x410 [ 108.741169][ T6405] ? __fget_files+0x20e/0x3c0 [ 108.741186][ T6405] security_file_ioctl+0x9b/0x240 [ 108.741201][ T6405] __x64_sys_ioctl+0xb7/0x210 [ 108.741213][ T6405] do_syscall_64+0xcd/0xf80 [ 108.741227][ T6405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.741237][ T6405] RIP: 0033:0x7f9a39f8f749 [ 108.741246][ T6405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.741255][ T6405] RSP: 002b:00007f9a3aefe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.741265][ T6405] RAX: ffffffffffffffda RBX: 00007f9a3a1e5fa0 RCX: 00007f9a39f8f749 [ 108.741271][ T6405] RDX: 0000200000000080 RSI: 00000000c058565d RDI: 0000000000000003 [ 108.741276][ T6405] RBP: 00007f9a3aefe090 R08: 0000000000000000 R09: 0000000000000000 [ 108.741282][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.741287][ T6405] R13: 00007f9a3a1e6038 R14: 00007f9a3a1e5fa0 R15: 00007ffc2c9fed48 [ 108.741301][ T6405] [ 108.741309][ T6405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.031940][ T5954] usb 2-1: USB disconnect, device number 7 [ 109.056421][ T5880] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 109.291395][ T6412] xt_l2tp: v2 doesn't support IP mode [ 109.299832][ T5880] usb 3-1: device descriptor read/64, error -71 [ 109.400527][ T6419] capability: warning: `syz.1.130' uses deprecated v2 capabilities in a way that may be insecure [ 109.411812][ T5880] usb usb3-port1: attempt power cycle [ 109.439597][ T5818] Bluetooth: hci3: ACL packet for unknown connection handle 2505 [ 109.735799][ T6014] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.791550][ T30] audit: type=1400 audit(1766086802.938:257): avc: denied { write } for pid=6417 comm="syz.0.132" name="ptype" dev="proc" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 109.819940][ T5880] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 110.020795][ T5880] usb 3-1: device descriptor read/8, error -71 [ 110.140550][ T55] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.154347][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.158961][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 110.171591][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.185735][ T6427] veth0_macvtap: left promiscuous mode [ 110.193583][ T6014] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 110.204548][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.217450][ T6014] usb 5-1: config 0 descriptor?? [ 110.259863][ T5880] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 110.310371][ T5880] usb 3-1: device descriptor read/8, error -71 [ 110.333447][ T55] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 110.344023][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.354973][ T55] usb 2-1: config 0 descriptor?? [ 110.398961][ T30] audit: type=1400 audit(1766086803.668:258): avc: denied { create } for pid=6432 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.420296][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 110.430761][ T5880] usb usb3-port1: unable to enumerate USB device [ 110.481633][ T6433] 9p: Bad value for 'wfdno' [ 110.813202][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.829526][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.009752][ T55] ath6kl: Failed to submit usb control message: -71 [ 111.016466][ T55] ath6kl: unable to send the bmi data to the device: -71 [ 111.023569][ T55] ath6kl: Unable to send get target info: -71 [ 111.031026][ T55] ath6kl: Failed to init ath6kl core: -71 [ 111.046575][ T55] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 111.113520][ T55] usb 2-1: USB disconnect, device number 8 [ 111.260670][ T6452] FAULT_INJECTION: forcing a failure. [ 111.260670][ T6452] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 111.276078][ T6452] CPU: 0 UID: 0 PID: 6452 Comm: syz.2.142 Not tainted syzkaller #0 PREEMPT(full) [ 111.276099][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.276109][ T6452] Call Trace: [ 111.276114][ T6452] [ 111.276120][ T6452] dump_stack_lvl+0x16c/0x1f0 [ 111.276145][ T6452] should_fail_ex+0x512/0x640 [ 111.276175][ T6452] should_fail_alloc_page+0xe7/0x130 [ 111.276197][ T6452] prepare_alloc_pages+0x401/0x670 [ 111.276221][ T6452] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 111.276240][ T6452] ? __lock_acquire+0x436/0x2890 [ 111.276265][ T6452] ? __lock_acquire+0x436/0x2890 [ 111.276281][ T6452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.276297][ T6452] ? mtree_range_walk+0x718/0xc00 [ 111.276311][ T6452] ? register_lock_class+0x41/0x4b0 [ 111.276322][ T6452] ? lock_vma_under_rcu+0x117/0x580 [ 111.276340][ T6452] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.276356][ T6452] ? policy_nodemask+0xea/0x4e0 [ 111.276378][ T6452] alloc_pages_mpol+0x1fb/0x550 [ 111.276399][ T6452] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 111.276424][ T6452] alloc_pages_noprof+0x131/0x390 [ 111.276441][ T6452] pte_alloc_one+0x1e/0x3d0 [ 111.276457][ T6452] __pte_alloc+0x6d/0x3f0 [ 111.276469][ T6452] ? __pfx___pte_alloc+0x10/0x10 [ 111.276482][ T6452] ? __lock_acquire+0x436/0x2890 [ 111.276492][ T6452] ? mm_alloc_pmd+0x2c2/0x470 [ 111.276513][ T6452] mfill_atomic_copy+0xeeb/0x1e70 [ 111.276541][ T6452] ? find_held_lock+0x2b/0x80 [ 111.276563][ T6452] ? __might_fault+0xe3/0x190 [ 111.276576][ T6452] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 111.276596][ T6452] userfaultfd_ioctl+0x2436/0x3930 [ 111.276618][ T6452] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 111.276633][ T6452] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 111.276658][ T6452] ? hook_file_ioctl_common+0x144/0x410 [ 111.276688][ T6452] ? selinux_file_ioctl+0x180/0x270 [ 111.276707][ T6452] ? selinux_file_ioctl+0xb4/0x270 [ 111.276724][ T6452] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 111.276740][ T6452] ? __x64_sys_ioctl+0x18e/0x210 [ 111.276750][ T6452] __x64_sys_ioctl+0x18e/0x210 [ 111.276763][ T6452] do_syscall_64+0xcd/0xf80 [ 111.276777][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.276791][ T6452] RIP: 0033:0x7f541318f749 [ 111.276803][ T6452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.276817][ T6452] RSP: 002b:00007f5413f70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.276832][ T6452] RAX: ffffffffffffffda RBX: 00007f54133e5fa0 RCX: 00007f541318f749 [ 111.276841][ T6452] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 111.276849][ T6452] RBP: 00007f5413f70090 R08: 0000000000000000 R09: 0000000000000000 [ 111.276858][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.276866][ T6452] R13: 00007f54133e6038 R14: 00007f54133e5fa0 R15: 00007ffef1da87c8 [ 111.276880][ T6452] [ 112.069213][ T6439] syz.0.139 (6439) used greatest stack depth: 19032 bytes left [ 112.589330][ T6462] process 'syz.1.146' launched './file2' with NULL argv: empty string added [ 112.801889][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.878883][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.081438][ T6014] usbhid 5-1:0.0: can't add hid device: -71 [ 113.293258][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 113.293275][ T30] audit: type=1400 audit(1766086806.418:276): avc: denied { map } for pid=6467 comm="syz.4.147" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.352060][ T5894] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 113.365377][ T6014] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 113.394747][ T6014] usb 5-1: USB disconnect, device number 3 [ 113.479892][ T5818] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 113.489195][ T5818] Bluetooth: hci3: Injecting HCI hardware error event [ 113.497242][ T5830] Bluetooth: hci3: hardware error 0x00 [ 113.529711][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 113.556697][ T5894] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 113.588222][ T5894] usb 3-1: config 0 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 113.611414][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.621965][ T5894] usb 3-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 113.632908][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.645425][ T5894] usb 3-1: config 0 descriptor?? [ 113.694896][ T30] audit: type=1400 audit(1766086806.968:277): avc: denied { create } for pid=6480 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.859462][ T5894] usb 3-1: string descriptor 0 read error: -71 [ 113.859702][ T5954] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.875640][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 113.885226][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 114.023867][ T5894] usb 3-1: USB disconnect, device number 12 [ 114.049756][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 114.057190][ T5954] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 114.075751][ T5954] usb 4-1: config 0 has no interface number 0 [ 114.089086][ T5954] usb 4-1: config 0 interface 29 has no altsetting 0 [ 114.107386][ T5954] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 114.128179][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.145598][ T5954] usb 4-1: Product: syz [ 114.153937][ T5954] usb 4-1: Manufacturer: syz [ 114.163650][ T5954] usb 4-1: SerialNumber: syz [ 114.174527][ T5954] usb 4-1: config 0 descriptor?? [ 114.388625][ T5954] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v169 fw v99.66.208 (2 channels) [ 114.444728][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 114.509272][ T5818] Bluetooth: unknown link type 128 [ 114.516396][ T30] audit: type=1400 audit(1766086807.788:278): avc: denied { read } for pid=6489 comm="syz.2.153" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 114.546053][ T30] audit: type=1400 audit(1766086807.788:279): avc: denied { open } for pid=6489 comm="syz.2.153" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 114.598475][ T5954] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 114.617035][ T5954] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 114.701126][ T5954] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 114.714394][ T5954] usb 4-1: USB disconnect, device number 7 [ 115.165294][ T30] audit: type=1400 audit(1766086808.438:280): avc: denied { create } for pid=6495 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 115.186312][ T30] audit: type=1400 audit(1766086808.458:281): avc: denied { create } for pid=6495 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 115.207963][ T30] audit: type=1400 audit(1766086808.478:282): avc: denied { ioctl } for pid=6495 comm="syz.3.155" path="socket:[11080]" dev="sockfs" ino=11080 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 115.313911][ T6491] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.332757][ T6491] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.352209][ T6491] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.359791][ T6491] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.366600][ T6491] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.373878][ T6491] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.381648][ T6491] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.387695][ T6491] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.395342][ T6491] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.552797][ T30] audit: type=1400 audit(1766086808.828:283): avc: denied { ioctl } for pid=6501 comm="syz.2.157" path="socket:[10002]" dev="sockfs" ino=10002 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.639708][ T5830] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 115.649808][ T6014] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 115.660640][ T5894] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.862291][ T6014] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 115.871869][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.890437][ T5823] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 115.913658][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.921769][ T5894] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 115.932658][ T6014] usb 2-1: config 0 descriptor?? [ 115.939723][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.059700][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 116.074827][ T5894] usb 1-1: config 0 descriptor?? [ 116.491959][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.572545][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.597683][ T5894] zeroplus 0003:0C12:0005.0006: item fetching failed at offset 0/3 [ 116.661210][ T5894] zeroplus 0003:0C12:0005.0006: parse failed [ 116.696746][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.720784][ T5894] zeroplus 0003:0C12:0005.0006: probe with driver zeroplus failed with error -22 [ 116.771464][ T6014] ath6kl: Failed to submit usb control message: -71 [ 116.809599][ T6014] ath6kl: unable to send the bmi data to the device: -71 [ 116.859586][ T5894] usb 1-1: USB disconnect, device number 5 [ 116.871244][ T6014] ath6kl: Unable to send get target info: -71 [ 116.949560][ T6014] ath6kl: Failed to init ath6kl core: -71 [ 117.032170][ T6014] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 117.210271][ T6014] usb 2-1: USB disconnect, device number 9 [ 117.390926][ T5823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.400115][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.401143][ T5823] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 117.406169][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.414288][ T5823] usb 3-1: can't read configurations, error -71 [ 117.762296][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.843050][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.849039][ T30] audit: type=1400 audit(1766086811.118:284): avc: denied { set_context_mgr } for pid=6524 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 118.039736][ T5954] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 118.039797][ T6525] binder: 6524:6525 ioctl 4018620d 0 returned -22 [ 118.049753][ T30] audit: type=1400 audit(1766086811.308:285): avc: denied { map } for pid=6524 comm="syz.3.161" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.253058][ T5954] usb 1-1: device descriptor read/all, error -61 [ 118.389833][ T5954] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 118.449701][ T6078] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 118.554663][ T5954] usb 1-1: device descriptor read/64, error -71 [ 118.740651][ T6078] usb 5-1: config 0 has no interfaces? [ 118.762831][ T6078] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 118.772640][ T6078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.782325][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.841903][ T6078] usb 5-1: config 0 descriptor?? [ 118.869900][ T5954] usb usb1-port1: attempt power cycle [ 119.480235][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.480240][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.502165][ T30] audit: type=1400 audit(1766086812.778:286): avc: denied { bind } for pid=6526 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.700718][ T5954] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 119.801482][ T5954] usb 1-1: device descriptor read/8, error -71 [ 119.858972][ T30] audit: type=1400 audit(1766086813.128:287): avc: denied { setopt } for pid=6568 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.906013][ T6569] [U]  [ 119.912059][ T6569] [U] K{ [ 119.919345][ T6569] [U] T 1ŠFFˊ`GJǘGO/MC [ 119.928602][ T6569] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 119.946828][ T6569] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 119.963375][ T6569] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 120.016925][ T6569] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 120.042970][ T6572] netlink: 'syz.1.172': attribute type 39 has an invalid length. [ 120.062983][ T5954] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 120.085615][ T6569] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 120.098581][ T6569] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 120.099536][ T6264] usb 5-1: USB disconnect, device number 4 [ 120.124747][ T5954] usb 1-1: device descriptor read/8, error -71 [ 120.127251][ T6569] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 120.246754][ T5954] usb usb1-port1: unable to enumerate USB device [ 120.260034][ T6569] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 120.269948][ T6569] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 120.284272][ T6569] [U] 22Ʃ۩X?0;3U [ 120.289085][ T6569] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 120.317488][ T6569] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 120.328203][ T6569] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 120.353635][ T6569] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 120.360813][ T6569] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 120.373567][ T6569] [U] EC [ 120.377190][ T6569] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 120.406262][ T30] audit: type=1400 audit(1766086813.678:288): avc: denied { bind } for pid=6580 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.441602][ T6581] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 120.449298][ T6581] netlink: 224 bytes leftover after parsing attributes in process `syz.3.175'. [ 120.460702][ T30] audit: type=1400 audit(1766086813.678:289): avc: denied { connect } for pid=6580 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.479700][ T5956] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 120.485093][ T6568] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 120.641500][ T5956] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 120.652713][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.684876][ T5956] usb 3-1: config 0 descriptor?? [ 120.700124][ T6589] x_tables: ip_tables: osf match: only valid for protocol 6 [ 120.839937][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.945381][ T6588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6588 comm=syz.1.178 [ 120.958961][ T6588] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.984452][ T6588] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 120.998271][ T6588] batman_adv: batadv0: Adding interface: ip6gretap1 [ 121.006922][ T6588] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.039584][ T30] audit: type=1400 audit(1766086814.248:290): avc: denied { ioctl } for pid=6587 comm="syz.1.178" path="socket:[11328]" dev="sockfs" ino=11328 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.065961][ T6588] batman_adv: batadv0: Interface activated: ip6gretap1 [ 121.139497][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.149916][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.164713][ T5956] ath6kl: Failed to submit usb control message: -71 [ 121.171548][ T5956] ath6kl: unable to send the bmi data to the device: -71 [ 121.178550][ T5956] ath6kl: Unable to send get target info: -71 [ 121.186901][ T5956] ath6kl: Failed to init ath6kl core: -71 [ 121.200635][ T5956] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 121.227420][ T5956] usb 3-1: USB disconnect, device number 15 [ 121.579723][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.585770][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 121.620309][ T6078] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 122.468060][ T6078] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 122.509089][ T6078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 122.553301][ T6078] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 122.699712][ T6078] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 122.708760][ T6078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.745139][ T6078] usb 5-1: config 0 descriptor?? [ 122.753256][ T6619] FAULT_INJECTION: forcing a failure. [ 122.753256][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.787422][ T6600] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.788150][ T6619] CPU: 0 UID: 0 PID: 6619 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) [ 122.788172][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.788179][ T6619] Call Trace: [ 122.788184][ T6619] [ 122.788190][ T6619] dump_stack_lvl+0x16c/0x1f0 [ 122.788212][ T6619] should_fail_ex+0x512/0x640 [ 122.788236][ T6619] __fpu_restore_sig+0xfe/0x1370 [ 122.788260][ T6619] ? __lock_acquire+0x436/0x2890 [ 122.788276][ T6619] ? __pfx___fpu_restore_sig+0x10/0x10 [ 122.788308][ T6619] ? __might_fault+0xe3/0x190 [ 122.788321][ T6619] ? __might_fault+0x13b/0x190 [ 122.788339][ T6619] fpu__restore_sig+0x151/0x190 [ 122.788361][ T6619] restore_sigcontext+0x4c9/0x6a0 [ 122.788381][ T6619] ? __pfx_restore_sigcontext+0x10/0x10 [ 122.788415][ T6619] ? __pfx_restore_altstack+0x10/0x10 [ 122.788432][ T6619] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.788447][ T6619] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.788467][ T6619] __do_sys_rt_sigreturn+0x229/0x2c0 [ 122.788487][ T6619] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 122.788512][ T6619] do_syscall_64+0xcd/0xf80 [ 122.788531][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.788545][ T6619] RIP: 0033:0x7fb71658f747 [ 122.788557][ T6619] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 122.788570][ T6619] RSP: 002b:00007fb7174d2038 EFLAGS: 00000246 [ 122.788581][ T6619] RAX: 0000000000000000 RBX: 00007fb7167e5fa0 RCX: 00007fb71658f749 [ 122.788590][ T6619] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000003 [ 122.788598][ T6619] RBP: 00007fb7174d2090 R08: 0000000000000000 R09: 0000000000000000 [ 122.788606][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.788614][ T6619] R13: 00007fb7167e6038 R14: 00007fb7167e5fa0 R15: 00007ffc0f558f58 [ 122.788634][ T6619] [ 122.815038][ T30] audit: type=1400 audit(1766086816.058:291): avc: denied { setopt } for pid=6613 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.985203][ T6625] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 123.003869][ T5954] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 123.030342][ T6625] netlink: 224 bytes leftover after parsing attributes in process `syz.2.189'. [ 123.184180][ T5954] usb 1-1: config 0 has no interfaces? [ 123.198844][ T5954] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 123.209657][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.234867][ T5954] usb 1-1: config 0 descriptor?? [ 123.322481][ T6078] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 123.332624][ T6078] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 123.340909][ T6078] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 123.348332][ T6078] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 123.358392][ T6078] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 123.388859][ T6078] petalynx 0003:18B1:0037.0007: hidraw0: USB HID v0.05 Device [HID 18b1:0037] on usb-dummy_hcd.4-1/input0 [ 123.830352][ T6014] usb 5-1: USB disconnect, device number 5 [ 124.056500][ T5956] usb 1-1: USB disconnect, device number 10 [ 124.159163][ T6637] FAULT_INJECTION: forcing a failure. [ 124.159163][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 124.200956][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.3.192 Not tainted syzkaller #0 PREEMPT(full) [ 124.200978][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.200986][ T6637] Call Trace: [ 124.200992][ T6637] [ 124.200998][ T6637] dump_stack_lvl+0x16c/0x1f0 [ 124.201022][ T6637] should_fail_ex+0x512/0x640 [ 124.201044][ T6637] ? kmem_cache_alloc_noprof+0x62/0x770 [ 124.201063][ T6637] should_failslab+0xc2/0x120 [ 124.201085][ T6637] kmem_cache_alloc_noprof+0x83/0x770 [ 124.201101][ T6637] ? ptlock_alloc+0x1f/0x70 [ 124.201127][ T6637] ? ptlock_alloc+0x1f/0x70 [ 124.201147][ T6637] ptlock_alloc+0x1f/0x70 [ 124.201170][ T6637] pte_alloc_one+0x84/0x3d0 [ 124.201194][ T6637] __pte_alloc+0x6d/0x3f0 [ 124.201211][ T6637] ? __pfx___pte_alloc+0x10/0x10 [ 124.201229][ T6637] ? __lock_acquire+0x436/0x2890 [ 124.201247][ T6637] ? mm_alloc_pmd+0x2c2/0x470 [ 124.201270][ T6637] mfill_atomic_copy+0xeeb/0x1e70 [ 124.201300][ T6637] ? find_held_lock+0x2b/0x80 [ 124.201324][ T6637] ? __might_fault+0xe3/0x190 [ 124.201338][ T6637] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 124.201370][ T6637] userfaultfd_ioctl+0x2436/0x3930 [ 124.201400][ T6637] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 124.201423][ T6637] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 124.201453][ T6637] ? hook_file_ioctl_common+0x144/0x410 [ 124.201487][ T6637] ? selinux_file_ioctl+0x180/0x270 [ 124.201507][ T6637] ? selinux_file_ioctl+0xb4/0x270 [ 124.201527][ T6637] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 124.201551][ T6637] ? __x64_sys_ioctl+0x18e/0x210 [ 124.201569][ T6637] __x64_sys_ioctl+0x18e/0x210 [ 124.201590][ T6637] do_syscall_64+0xcd/0xf80 [ 124.201613][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.201629][ T6637] RIP: 0033:0x7ff9ebf8f749 [ 124.201643][ T6637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.201658][ T6637] RSP: 002b:00007ff9ecd9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.201674][ T6637] RAX: ffffffffffffffda RBX: 00007ff9ec1e5fa0 RCX: 00007ff9ebf8f749 [ 124.201684][ T6637] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 124.201693][ T6637] RBP: 00007ff9ecd9d090 R08: 0000000000000000 R09: 0000000000000000 [ 124.201702][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.201710][ T6637] R13: 00007ff9ec1e6038 R14: 00007ff9ec1e5fa0 R15: 00007ffc0144ab58 [ 124.201735][ T6637] [ 124.497792][ T6639] sp0: Synchronizing with TNC [ 124.536789][ T30] audit: type=1400 audit(1766086817.808:292): avc: denied { search } for pid=5483 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.580652][ T30] audit: type=1400 audit(1766086817.808:293): avc: denied { search } for pid=5483 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.629771][ T30] audit: type=1400 audit(1766086817.808:294): avc: denied { search } for pid=5483 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.653566][ T30] audit: type=1400 audit(1766086817.808:295): avc: denied { read } for pid=5483 comm="dhcpcd" name="n101" dev="tmpfs" ino=2826 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.675771][ T30] audit: type=1400 audit(1766086817.808:296): avc: denied { open } for pid=5483 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2826 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.699006][ T30] audit: type=1400 audit(1766086817.808:297): avc: denied { getattr } for pid=5483 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2826 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.750310][ T5954] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 125.222336][ T6648] sp0: Found TNC [ 125.459688][ T5954] usb 3-1: Invalid ep0 maxpacket: 32 [ 125.519926][ T6638] [U] ` [ 125.599696][ T5954] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 125.663805][ T30] audit: type=1400 audit(1766086818.938:298): avc: denied { read } for pid=6655 comm="syz.3.199" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 125.664429][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 125.760107][ T30] audit: type=1400 audit(1766086818.938:299): avc: denied { open } for pid=6655 comm="syz.3.199" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 125.789328][ T30] audit: type=1400 audit(1766086819.058:300): avc: denied { read } for pid=6655 comm="syz.3.199" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 125.812292][ T5954] usb 3-1: Invalid ep0 maxpacket: 32 [ 125.823106][ T5954] usb usb3-port1: attempt power cycle [ 126.169786][ T5956] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.169798][ T5954] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 126.254643][ T5954] usb 3-1: Invalid ep0 maxpacket: 32 [ 126.314767][ T6664] capability: warning: `syz.0.202' uses 32-bit capabilities (legacy support in use) [ 126.399722][ T5954] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 126.430322][ T5954] usb 3-1: Invalid ep0 maxpacket: 32 [ 126.432736][ T5956] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 126.435914][ T5954] usb usb3-port1: unable to enumerate USB device [ 126.493004][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.502160][ T5956] usb 5-1: Product: syz [ 126.506438][ T5956] usb 5-1: Manufacturer: syz [ 126.511664][ T5956] usb 5-1: SerialNumber: syz [ 126.589193][ T30] audit: type=1400 audit(1766086819.858:301): avc: denied { read write } for pid=6665 comm="syz.0.204" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 126.625018][ T6264] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 126.642369][ T6264] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.708748][ T6670] fido_id[6670]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.750119][ T5954] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 126.922452][ T5954] usb 4-1: config 0 has no interfaces? [ 126.929042][ T5954] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 126.948882][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.961437][ T5954] usb 4-1: config 0 descriptor?? [ 127.489778][ T5954] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.559133][ T5956] rtl8150 5-1:1.0: couldn't reset the device [ 127.568134][ T5956] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 127.588228][ T5956] usb 5-1: USB disconnect, device number 6 [ 127.680370][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 127.686765][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 127.699946][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.713135][ T5954] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.715521][ T6014] usb 4-1: USB disconnect, device number 8 [ 127.722501][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.746413][ T5954] usb 2-1: Product: syz [ 127.756658][ T5954] usb 2-1: Manufacturer: syz [ 127.766003][ T5954] usb 2-1: SerialNumber: syz [ 128.018429][ T5954] usb 2-1: config 0 descriptor?? [ 128.038032][ T5954] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 128.079608][ T5954] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 128.159744][ T5894] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 128.311029][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.322700][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.332459][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.345973][ T5894] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.355056][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.368995][ T5894] usb 3-1: config 0 descriptor?? [ 128.469717][ T6014] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 128.490421][ T6264] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.621827][ T6014] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.630504][ T6014] usb 1-1: config 4 has an invalid interface number: 109 but max is 0 [ 128.635832][ T5954] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 128.639349][ T6014] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 128.644705][ T6264] usb 4-1: Using ep0 maxpacket: 8 [ 128.654825][ T6014] usb 1-1: config 4 has no interface number 0 [ 128.660925][ T5954] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 128.666593][ T6014] usb 1-1: too many endpoints for config 4 interface 109 altsetting 2: 64, using maximum allowed: 30 [ 128.673313][ T6264] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 128.684375][ T6014] usb 1-1: config 4 interface 109 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 128.692407][ T6264] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.716854][ T6264] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.719763][ T6014] usb 1-1: config 4 interface 109 has no altsetting 0 [ 128.733635][ T6264] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.736332][ T6014] usb 1-1: language id specifier not provided by device, defaulting to English [ 128.752716][ T6264] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.754556][ T6014] usb 1-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=da.49 [ 128.774941][ T6264] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.775253][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.784349][ T6264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.800407][ T6014] usb 1-1: Product: syz [ 128.805722][ T6014] usb 1-1: Manufacturer: syz [ 128.810720][ T5894] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 128.828545][ T6014] usb 1-1: SerialNumber: syz [ 129.004848][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.013592][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.023733][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.032669][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.049449][ T6693] loop4: detected capacity change from 0 to 2560 [ 129.058304][ T6264] usb 4-1: GET_CAPABILITIES returned 0 [ 129.068352][ T6264] usbtmc 4-1:16.0: can't read capabilities [ 129.078423][ T6693] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 129.098145][ T6693] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 129.116512][ T6693] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 129.128449][ T6693] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 129.137235][ T6693] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 129.145945][ T6693] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 129.155094][ T6693] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 129.164481][ T6693] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 129.172928][ T6693] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 129.181396][ T6693] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 129.214696][ T6014] usb 1-1: bad CDC descriptors [ 129.245624][ T6014] usb 1-1: USB disconnect, device number 11 [ 129.294449][ T5954] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 129.363267][ T6264] usb 4-1: USB disconnect, device number 9 [ 129.905005][ T6706] NILFS (loop4): device size too small [ 130.361613][ T5954] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 130.368619][ T5954] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 130.377121][ T5954] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 130.383835][ T5954] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 130.391239][ T5954] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 130.438051][ T5954] usb 2-1: USB disconnect, device number 10 [ 130.512528][ T6711] netlink: 'syz.1.218': attribute type 11 has an invalid length. [ 130.762579][ T6717] x_tables: ip_tables: osf match: only valid for protocol 6 [ 130.895090][ T6719] block device autoloading is deprecated and will be removed. [ 130.985917][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 130.985929][ T30] audit: type=1400 audit(1766086824.258:309): avc: denied { setopt } for pid=6718 comm="syz.1.219" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.023693][ T30] audit: type=1400 audit(1766086824.268:310): avc: denied { read } for pid=6718 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.105695][ T6729] 9p: Bad value for 'rfdno' [ 131.208165][ T5954] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.529684][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 131.551695][ T5954] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.562043][ T5934] usb 3-1: USB disconnect, device number 20 [ 131.578960][ T5954] usb 5-1: config 0 has no interface number 0 [ 131.595815][ T5954] usb 5-1: config 0 interface 1 has no altsetting 0 [ 131.621421][ T5954] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 131.636729][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.665981][ T5954] usb 5-1: Product: syz [ 131.670479][ T5954] usb 5-1: Manufacturer: syz [ 131.675131][ T30] audit: type=1400 audit(1766086824.948:311): avc: denied { write } for pid=6735 comm="syz.3.224" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.698686][ T5954] usb 5-1: SerialNumber: syz [ 131.707031][ T30] audit: type=1400 audit(1766086824.948:312): avc: denied { ioctl } for pid=6735 comm="syz.3.224" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.731981][ T5954] usb 5-1: config 0 descriptor?? [ 131.809718][ T5934] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 131.969671][ T30] audit: type=1404 audit(1766086825.218:313): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 132.138716][ T30] audit: type=1400 audit(1766086825.228:314): avc: denied { read write } for pid=6735 comm="syz.3.224" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 132.173009][ T5954] i2c-cp2615 5-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 132.208462][ T5954] usb 5-1: USB disconnect, device number 7 [ 132.216823][ T30] audit: type=1400 audit(1766086825.248:315): avc: denied { ioctl } for pid=6722 comm="syz.2.220" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 132.296228][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.305569][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.327193][ T30] audit: type=1400 audit(1766086825.248:316): avc: denied { bind } for pid=6722 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 132.350825][ T30] audit: type=1400 audit(1766086825.248:317): avc: denied { create } for pid=6722 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 132.388144][ T30] audit: type=1400 audit(1766086825.248:318): avc: denied { allowed } for pid=6722 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 132.480649][ T5934] usb 3-1: device descriptor read/all, error -71 [ 132.849445][ T6750] netlink: 'syz.4.228': attribute type 4 has an invalid length. [ 133.331971][ T6767] x_tables: ip_tables: osf match: only valid for protocol 6 [ 134.596866][ T6793] FAULT_INJECTION: forcing a failure. [ 134.596866][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 134.629745][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: syz.2.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.629772][ T6793] Tainted: [L]=SOFTLOCKUP [ 134.629778][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.629788][ T6793] Call Trace: [ 134.629794][ T6793] [ 134.629801][ T6793] dump_stack_lvl+0x16c/0x1f0 [ 134.629826][ T6793] should_fail_ex+0x512/0x640 [ 134.629850][ T6793] ? fs_reclaim_acquire+0xae/0x150 [ 134.629875][ T6793] should_failslab+0xc2/0x120 [ 134.629898][ T6793] __kmalloc_noprof+0xeb/0x910 [ 134.629923][ T6793] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 134.629951][ T6793] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 134.629973][ T6793] tomoyo_realpath_from_path+0xc2/0x6e0 [ 134.629998][ T6793] ? tomoyo_profile+0x47/0x60 [ 134.630025][ T6793] tomoyo_path_number_perm+0x245/0x580 [ 134.630042][ T6793] ? tomoyo_path_number_perm+0x237/0x580 [ 134.630064][ T6793] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.630085][ T6793] ? find_held_lock+0x2b/0x80 [ 134.630134][ T6793] ? find_held_lock+0x2b/0x80 [ 134.630157][ T6793] ? hook_file_ioctl_common+0x144/0x410 [ 134.630187][ T6793] ? __fget_files+0x20e/0x3c0 [ 134.630215][ T6793] security_file_ioctl+0x9b/0x240 [ 134.630238][ T6793] __x64_sys_ioctl+0xb7/0x210 [ 134.630260][ T6793] do_syscall_64+0xcd/0xf80 [ 134.630283][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.630300][ T6793] RIP: 0033:0x7f541318f749 [ 134.630314][ T6793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.630330][ T6793] RSP: 002b:00007f54113f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.630346][ T6793] RAX: ffffffffffffffda RBX: 00007f54133e6180 RCX: 00007f541318f749 [ 134.630356][ T6793] RDX: 1000000000000000 RSI: 0000000040086602 RDI: 0000000000000006 [ 134.630367][ T6793] RBP: 00007f54113f6090 R08: 0000000000000000 R09: 0000000000000000 [ 134.630376][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.630386][ T6793] R13: 00007f54133e6218 R14: 00007f54133e6180 R15: 00007ffef1da87c8 [ 134.630410][ T6793] [ 134.630417][ T6793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.858317][ T6815] FAULT_INJECTION: forcing a failure. [ 135.858317][ T6815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.883764][ T6815] CPU: 1 UID: 0 PID: 6815 Comm: syz.2.252 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.883782][ T6815] Tainted: [L]=SOFTLOCKUP [ 135.883785][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.883791][ T6815] Call Trace: [ 135.883795][ T6815] [ 135.883799][ T6815] dump_stack_lvl+0x16c/0x1f0 [ 135.883816][ T6815] should_fail_ex+0x512/0x640 [ 135.883834][ T6815] copy_fpstate_to_sigframe+0x827/0xad0 [ 135.883855][ T6815] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 135.883874][ T6815] ? posixtimer_deliver_signal+0x1c7/0x6b0 [ 135.883890][ T6815] ? x86_task_fpu+0x5f/0x90 [ 135.883905][ T6815] get_sigframe+0x4a8/0x9c0 [ 135.883921][ T6815] ? __pfx_get_sigframe+0x10/0x10 [ 135.883935][ T6815] ? rcu_is_watching+0x12/0xc0 [ 135.883945][ T6815] ? _raw_spin_unlock_irq+0x23/0x50 [ 135.883956][ T6815] ? siginfo_layout+0x177/0x290 [ 135.883973][ T6815] x64_setup_rt_frame+0x129/0xcf0 [ 135.883988][ T6815] ? vfs_read+0x23b/0xcf0 [ 135.884002][ T6815] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 135.884017][ T6815] ? __pfx_vfs_read+0x10/0x10 [ 135.884028][ T6815] ? find_held_lock+0x2b/0x80 [ 135.884045][ T6815] arch_do_signal_or_restart+0x5da/0x7e0 [ 135.884060][ T6815] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 135.884078][ T6815] ? fput+0x70/0xf0 [ 135.884089][ T6815] exit_to_user_mode_loop+0x8c/0x540 [ 135.884106][ T6815] do_syscall_64+0x4ee/0xf80 [ 135.884120][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.884130][ T6815] RIP: 0033:0x7f541318f747 [ 135.884138][ T6815] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 135.884148][ T6815] RSP: 002b:00007f5413f70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.884158][ T6815] RAX: 0000000000000000 RBX: 00007f54133e5fa0 RCX: 00007f541318f749 [ 135.884164][ T6815] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000003 [ 135.884170][ T6815] RBP: 00007f5413f70090 R08: 0000000000000000 R09: 0000000000000000 [ 135.884176][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.884181][ T6815] R13: 00007f54133e6038 R14: 00007f54133e5fa0 R15: 00007ffef1da87c8 [ 135.884194][ T6815] [ 136.130045][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 136.130054][ T30] audit: type=1400 audit(1766086829.408:473): avc: denied { read } for pid=6814 comm="syz.2.252" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 136.379823][ T30] audit: type=1400 audit(1766086829.488:474): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.448900][ T5818] Bluetooth: hci1: unexpected event for opcode 0x7bae [ 136.602012][ T30] audit: type=1400 audit(1766086829.568:475): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.787136][ T30] audit: type=1400 audit(1766086829.568:476): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.887072][ T30] audit: type=1400 audit(1766086829.608:477): avc: denied { prog_load } for pid=6819 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 136.946319][ T30] audit: type=1400 audit(1766086829.608:478): avc: denied { allowed } for pid=6819 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 137.000738][ T30] audit: type=1400 audit(1766086829.618:479): avc: denied { read write } for pid=6819 comm="syz.2.253" name="vbi9" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 137.053632][ T30] audit: type=1400 audit(1766086829.618:480): avc: denied { create } for pid=6819 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=0 [ 137.113632][ T30] audit: type=1400 audit(1766086829.618:481): avc: denied { create } for pid=6819 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 137.303814][ T30] audit: type=1400 audit(1766086829.628:482): avc: denied { read } for pid=6816 comm="syz.3.249" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 138.352404][ T55] libceph: connect (1)[c::]:6789 error -101 [ 138.366007][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 138.390599][ T6885] ceph: No mds server is up or the cluster is laggy [ 138.519749][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 139.468058][ T6933] mac80211_hwsim hwsim9 4: renamed from wlan1 (while UP) [ 139.744963][ T3832] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.759861][ T3832] Bluetooth: hci5: Frame reassembly failed (-84) [ 140.473358][ T6961] FAULT_INJECTION: forcing a failure. [ 140.473358][ T6961] name failslab, interval 1, probability 0, space 0, times 0 [ 140.486252][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.0.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.486277][ T6961] Tainted: [L]=SOFTLOCKUP [ 140.486282][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.486291][ T6961] Call Trace: [ 140.486296][ T6961] [ 140.486302][ T6961] dump_stack_lvl+0x16c/0x1f0 [ 140.486324][ T6961] should_fail_ex+0x512/0x640 [ 140.486352][ T6961] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 140.486370][ T6961] should_failslab+0xc2/0x120 [ 140.486390][ T6961] kmem_cache_alloc_node_noprof+0x86/0x800 [ 140.486406][ T6961] ? __alloc_skb+0x156/0x410 [ 140.486434][ T6961] ? __alloc_skb+0x156/0x410 [ 140.486456][ T6961] __alloc_skb+0x156/0x410 [ 140.486477][ T6961] ? __alloc_skb+0x35d/0x410 [ 140.486500][ T6961] ? __pfx___alloc_skb+0x10/0x10 [ 140.486534][ T6961] inet6_ifmcaddr_notify+0xd6/0x1d0 [ 140.486559][ T6961] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 140.486593][ T6961] __ipv6_dev_mc_dec+0x297/0x340 [ 140.486615][ T6961] ipv6_mc_destroy_dev+0x2cd/0x690 [ 140.486635][ T6961] ? __local_bh_enable_ip+0xa4/0x120 [ 140.486663][ T6961] addrconf_ifdown.isra.0+0x1589/0x1b90 [ 140.486695][ T6961] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 140.486727][ T6961] addrconf_notify+0x89a/0x19f0 [ 140.486751][ T6961] ? ip6mr_device_event+0x1bc/0x230 [ 140.486776][ T6961] notifier_call_chain+0xbc/0x3e0 [ 140.486792][ T6961] ? __pfx_addrconf_notify+0x10/0x10 [ 140.486821][ T6961] call_netdevice_notifiers_info+0xbe/0x110 [ 140.486843][ T6961] netif_set_mtu_ext+0x563/0x7a0 [ 140.486863][ T6961] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 140.486885][ T6961] ? __lock_acquire+0x436/0x2890 [ 140.486909][ T6961] netif_set_mtu+0x98/0x140 [ 140.486924][ T6961] ? __pfx_netif_set_mtu+0x10/0x10 [ 140.486951][ T6961] ? full_name_hash+0xbc/0x110 [ 140.486979][ T6961] dev_set_mtu+0xb2/0x260 [ 140.487000][ T6961] dev_ifsioc+0xd28/0x1f70 [ 140.487019][ T6961] ? __pfx_dev_ifsioc+0x10/0x10 [ 140.487033][ T6961] ? __pfx___mutex_lock+0x10/0x10 [ 140.487066][ T6961] ? dev_load+0x8e/0x240 [ 140.487087][ T6961] dev_ioctl+0x223/0x10e0 [ 140.487105][ T6961] sock_do_ioctl+0x19d/0x280 [ 140.487127][ T6961] ? __pfx_sock_do_ioctl+0x10/0x10 [ 140.487154][ T6961] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 140.487174][ T6961] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 140.487200][ T6961] sock_ioctl+0x227/0x6b0 [ 140.487223][ T6961] ? __pfx_sock_ioctl+0x10/0x10 [ 140.487242][ T6961] ? hook_file_ioctl_common+0x144/0x410 [ 140.487274][ T6961] ? selinux_file_ioctl+0x180/0x270 [ 140.487292][ T6961] ? selinux_file_ioctl+0xb4/0x270 [ 140.487313][ T6961] ? __pfx_sock_ioctl+0x10/0x10 [ 140.487334][ T6961] __x64_sys_ioctl+0x18e/0x210 [ 140.487358][ T6961] do_syscall_64+0xcd/0xf80 [ 140.487381][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.487397][ T6961] RIP: 0033:0x7f913938f749 [ 140.487411][ T6961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.487426][ T6961] RSP: 002b:00007f913a1b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.487443][ T6961] RAX: ffffffffffffffda RBX: 00007f91395e5fa0 RCX: 00007f913938f749 [ 140.487454][ T6961] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000004 [ 140.487464][ T6961] RBP: 00007f913a1b3090 R08: 0000000000000000 R09: 0000000000000000 [ 140.487474][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.487483][ T6961] R13: 00007f91395e6038 R14: 00007f91395e5fa0 R15: 00007ffd27695d28 [ 140.487508][ T6961] [ 141.473064][ T30] kauditd_printk_skb: 258 callbacks suppressed [ 141.473079][ T30] audit: type=1400 audit(1766086834.748:741): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.518451][ T30] audit: type=1400 audit(1766086834.778:742): avc: denied { read write } for pid=6970 comm="syz.0.305" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 141.543855][ T30] audit: type=1400 audit(1766086834.788:743): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.572232][ T30] audit: type=1400 audit(1766086834.788:744): avc: denied { read } for pid=6970 comm="syz.0.305" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 141.595168][ T30] audit: type=1400 audit(1766086834.788:745): avc: denied { create } for pid=6970 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 141.623818][ T30] audit: type=1400 audit(1766086834.788:746): avc: denied { map_create } for pid=6970 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.662863][ T30] audit: type=1400 audit(1766086834.818:747): avc: denied { prog_load } for pid=6970 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.682681][ T30] audit: type=1400 audit(1766086834.868:748): avc: denied { read write } for pid=6972 comm="syz.2.306" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 141.707199][ T30] audit: type=1400 audit(1766086834.888:749): avc: denied { allowed } for pid=6972 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 141.728923][ T30] audit: type=1400 audit(1766086834.888:750): avc: denied { allowed } for pid=6972 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 141.799748][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 141.799940][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 142.886488][ T5818] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 142.975848][ T7012] x_tables: ip_tables: osf match: only valid for protocol 6 [ 143.528788][ T7043] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 143.529561][ T7042] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 143.557010][ T7047] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 143.573960][ T7043] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 145.192802][ T7087] netlink: 204 bytes leftover after parsing attributes in process `syz.1.350'. [ 145.221994][ T7089] x_tables: ip_tables: osf match: only valid for protocol 6 [ 146.335986][ T7134] netlink: 'syz.1.367': attribute type 7 has an invalid length. [ 146.343922][ T7134] netlink: 'syz.1.367': attribute type 8 has an invalid length. [ 146.480391][ T30] kauditd_printk_skb: 329 callbacks suppressed [ 146.480406][ T30] audit: type=1400 audit(1766086839.758:1080): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.542723][ T30] audit: type=1400 audit(1766086839.798:1081): avc: denied { read } for pid=7137 comm="syz.4.369" dev="nsfs" ino=4026533229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 146.564509][ T30] audit: type=1400 audit(1766086839.798:1082): avc: denied { create } for pid=7137 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 146.586695][ T30] audit: type=1400 audit(1766086839.798:1083): avc: denied { map_create } for pid=7137 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.606338][ T30] audit: type=1400 audit(1766086839.798:1084): avc: denied { map_create } for pid=7137 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.626086][ T30] audit: type=1400 audit(1766086839.798:1085): avc: denied { read write } for pid=7137 comm="syz.4.369" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 146.654250][ T30] audit: type=1400 audit(1766086839.808:1086): avc: denied { create } for pid=7137 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 146.675285][ T30] audit: type=1400 audit(1766086839.838:1087): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.756668][ T30] audit: type=1400 audit(1766086839.898:1088): avc: denied { read } for pid=7139 comm="syz.1.370" dev="nsfs" ino=4026532950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 146.820802][ T30] audit: type=1400 audit(1766086839.928:1089): avc: denied { create } for pid=7139 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 147.517254][ T7151] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 147.795654][ T7168] syz.1.380 uses obsolete (PF_INET,SOCK_PACKET) [ 148.010077][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 148.018975][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 149.312733][ T7222] FAULT_INJECTION: forcing a failure. [ 149.312733][ T7222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.342528][ T7222] CPU: 1 UID: 0 PID: 7222 Comm: syz.3.401 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.342556][ T7222] Tainted: [L]=SOFTLOCKUP [ 149.342561][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.342569][ T7222] Call Trace: [ 149.342574][ T7222] [ 149.342580][ T7222] dump_stack_lvl+0x16c/0x1f0 [ 149.342604][ T7222] should_fail_ex+0x512/0x640 [ 149.342631][ T7222] _copy_from_user+0x2e/0xd0 [ 149.342656][ T7222] restore_altstack+0x93/0x170 [ 149.342675][ T7222] ? __pfx_restore_altstack+0x10/0x10 [ 149.342691][ T7222] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.342708][ T7222] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.342726][ T7222] ? _raw_spin_unlock_irq+0x2e/0x50 [ 149.342742][ T7222] ? set_current_blocked+0xdd/0x120 [ 149.342763][ T7222] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 149.342785][ T7222] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 149.342811][ T7222] do_syscall_64+0xcd/0xf80 [ 149.342831][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.342847][ T7222] RIP: 0033:0x7ff9ebf2b829 [ 149.342860][ T7222] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 149.342876][ T7222] RSP: 002b:00007ff9ecd9c340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 149.342892][ T7222] RAX: ffffffffffffffda RBX: 00007ff9ec1e5fa0 RCX: 00007ff9ebf2b829 [ 149.342902][ T7222] RDX: 00007ff9ecd9c340 RSI: 00007ff9ecd9c470 RDI: 0000000000000021 [ 149.342912][ T7222] RBP: 00007ff9ecd9d090 R08: 0000000000000000 R09: 0000000000000000 [ 149.342921][ T7222] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 149.342935][ T7222] R13: 00007ff9ec1e6038 R14: 00007ff9ec1e5fa0 R15: 00007ffc0144ab58 [ 149.342957][ T7222] [ 149.672863][ T7230] xt_l2tp: v2 doesn't support IP mode [ 149.959818][ T7243] bridge_slave_0: left allmulticast mode [ 149.965501][ T7243] bridge_slave_0: left promiscuous mode [ 149.978350][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.000778][ T7252] FAULT_INJECTION: forcing a failure. [ 150.000778][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.015780][ T7252] CPU: 1 UID: 0 PID: 7252 Comm: syz.4.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.015796][ T7252] Tainted: [L]=SOFTLOCKUP [ 150.015800][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.015807][ T7252] Call Trace: [ 150.015810][ T7252] [ 150.015814][ T7252] dump_stack_lvl+0x16c/0x1f0 [ 150.015830][ T7252] should_fail_ex+0x512/0x640 [ 150.015848][ T7252] _copy_to_user+0x32/0xd0 [ 150.015865][ T7252] simple_read_from_buffer+0xcb/0x170 [ 150.015880][ T7252] proc_fail_nth_read+0x197/0x240 [ 150.015892][ T7252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.015909][ T7252] ? rw_verify_area+0xcf/0x6c0 [ 150.015926][ T7252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.015941][ T7252] vfs_read+0x1e4/0xcf0 [ 150.015954][ T7252] ? __pfx___mutex_lock+0x10/0x10 [ 150.015969][ T7252] ? __pfx_vfs_read+0x10/0x10 [ 150.015985][ T7252] ? __fget_files+0x20e/0x3c0 [ 150.016004][ T7252] ksys_read+0x12a/0x250 [ 150.016016][ T7252] ? __pfx_ksys_read+0x10/0x10 [ 150.016028][ T7252] ? syscall_user_dispatch+0x78/0x140 [ 150.016048][ T7252] do_syscall_64+0xcd/0xf80 [ 150.016062][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.016073][ T7252] RIP: 0033:0x7f9a39f8e15c [ 150.016081][ T7252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.016091][ T7252] RSP: 002b:00007f9a3aefe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.016101][ T7252] RAX: ffffffffffffffda RBX: 00007f9a3a1e5fa0 RCX: 00007f9a39f8e15c [ 150.016107][ T7252] RDX: 000000000000000f RSI: 00007f9a3aefe0a0 RDI: 0000000000000003 [ 150.016113][ T7252] RBP: 00007f9a3aefe090 R08: 0000000000000000 R09: 0000000000000000 [ 150.016118][ T7252] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 150.016124][ T7252] R13: 00007f9a3a1e6038 R14: 00007f9a3a1e5fa0 R15: 00007ffc2c9fed48 [ 150.016137][ T7252] [ 150.218869][ T7243] bridge_slave_1: left allmulticast mode [ 150.241365][ T7243] bridge_slave_1: left promiscuous mode [ 150.257237][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.292436][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 150.305554][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 150.380721][ T7243] bond0: (slave bond_slave_0): Releasing backup interface [ 150.416962][ T7243] bond0: (slave bond_slave_1): Releasing backup interface [ 150.472143][ T7243] team0: Port device team_slave_0 removed [ 150.486896][ T7243] team0: Port device team_slave_1 removed [ 150.504516][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.513799][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.528184][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.537304][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.548520][ T7243] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.587195][ T7253] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 150.608162][ T7253] bond1 (unregistering): Released all slaves [ 151.495052][ T30] kauditd_printk_skb: 294 callbacks suppressed [ 151.495067][ T30] audit: type=1400 audit(1766086845.759:1384): avc: denied { create } for pid=7301 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 151.557949][ T30] audit: type=1400 audit(1766086845.789:1385): avc: denied { read write } for pid=7301 comm="syz.2.430" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 152.065929][ T30] audit: type=1400 audit(1766086845.789:1386): avc: denied { allowed } for pid=7301 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 152.133912][ T30] audit: type=1400 audit(1766086845.819:1387): avc: denied { read write } for pid=7303 comm="syz.0.431" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 152.196766][ T30] audit: type=1400 audit(1766086846.109:1388): avc: denied { prog_load } for pid=7300 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 152.221263][ T30] audit: type=1400 audit(1766086846.119:1390): avc: denied { execmem } for pid=7300 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 152.241789][ T30] audit: type=1400 audit(1766086846.119:1389): avc: denied { read } for pid=7303 comm="syz.0.431" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 152.265274][ T30] audit: type=1400 audit(1766086846.119:1391): avc: denied { read } for pid=7300 comm="syz.4.429" dev="nsfs" ino=4026533229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 152.309711][ T30] audit: type=1400 audit(1766086846.119:1392): avc: denied { prog_load } for pid=7300 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 152.368018][ T30] audit: type=1400 audit(1766086846.129:1393): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.626682][ T7372] netlink: 27 bytes leftover after parsing attributes in process `syz.0.456'. [ 153.640821][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 154.608520][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 154.779361][ T7407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.918388][ T7414] x_tables: ip_tables: osf match: only valid for protocol 6 [ 156.039724][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 156.046753][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 156.523479][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 156.523496][ T30] audit: type=1400 audit(1766086850.659:1689): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.569705][ T30] audit: type=1400 audit(1766086850.699:1690): avc: denied { create } for pid=7446 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 156.599682][ T30] audit: type=1400 audit(1766086850.709:1691): avc: denied { read write } for pid=7446 comm="syz.0.484" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 156.630646][ T30] audit: type=1400 audit(1766086850.839:1692): avc: denied { execmem } for pid=7445 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 156.675146][ T30] audit: type=1400 audit(1766086850.929:1693): avc: denied { create } for pid=7445 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 156.752134][ T30] audit: type=1400 audit(1766086851.019:1694): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.827988][ T30] audit: type=1400 audit(1766086851.079:1695): avc: denied { read write } for pid=5827 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 157.033731][ T30] audit: type=1400 audit(1766086851.089:1696): avc: denied { allowed } for pid=7450 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 157.088760][ T30] audit: type=1400 audit(1766086851.089:1697): avc: denied { name_bind } for pid=7450 comm="syz.2.485" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 157.146111][ T30] audit: type=1400 audit(1766086851.179:1698): avc: denied { execmem } for pid=7452 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 263.099598][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 263.106562][ C1] rcu: 0-...!: (0 ticks this GP) idle=5d24/1/0x4000000000000000 softirq=23148/23148 fqs=0 [ 263.117154][ C1] rcu: (detected by 1, t=10505 jiffies, g=17261, q=379 ncpus=2) [ 263.124861][ C1] Sending NMI from CPU 1 to CPUs 0: [ 263.124885][ C0] NMI backtrace for cpu 0 [ 263.124898][ C0] CPU: 0 UID: 0 PID: 7476 Comm: syz.2.494 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.124916][ C0] Tainted: [L]=SOFTLOCKUP [ 263.124921][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.124928][ C0] RIP: 0010:rcu_is_watching+0x12/0xc0 [ 263.124946][ C0] Code: 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 a3 8e 0f 12 e8 ae fd d4 09 <48> c7 c3 e8 d9 b3 93 89 c5 83 f8 07 0f 87 82 00 00 00 48 8d 3c ed [ 263.124957][ C0] RSP: 0018:ffffc90000007cf0 EFLAGS: 00000092 [ 263.124969][ C0] RAX: 0000000000000000 RBX: ffff8880587612c0 RCX: 0000000000000000 [ 263.124977][ C0] RDX: 0000000000000000 RSI: ffffffff8bf2b300 RDI: ffffffff8bf2b340 [ 263.124985][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 263.124992][ C0] R10: 0000000000000000 R11: ffff888031a22ff0 R12: 0000000000000001 [ 263.125001][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.125008][ C0] FS: 00007f5413f706c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 263.125022][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.125030][ C0] CR2: 00002000002e4030 CR3: 0000000075ff3000 CR4: 00000000003526f0 [ 263.125039][ C0] Call Trace: [ 263.125043][ C0] [ 263.125050][ C0] lock_acquire+0x2cd/0x330 [ 263.125064][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 263.125081][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 263.125097][ C0] ? __pfx_advance_sched+0x10/0x10 [ 263.125114][ C0] _raw_spin_lock+0x2e/0x40 [ 263.125126][ C0] ? advance_sched+0xd9/0xc80 [ 263.125142][ C0] advance_sched+0xd9/0xc80 [ 263.125158][ C0] ? find_held_lock+0x2b/0x80 [ 263.125177][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 263.125192][ C0] ? __pfx_advance_sched+0x10/0x10 [ 263.125208][ C0] __hrtimer_run_queues+0x202/0xc40 [ 263.125238][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 263.125255][ C0] ? read_tsc+0x9/0x20 [ 263.125274][ C0] hrtimer_interrupt+0x397/0x8e0 [ 263.125290][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 263.125307][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 263.125322][ C0] [ 263.125326][ C0] [ 263.125330][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.125344][ C0] RIP: 0010:lock_is_held_type+0x107/0x150 [ 263.125360][ C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 5c f0 3a 08 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 2c 03 00 45 31 ed eb [ 263.125371][ C0] RSP: 0018:ffffc9001bd0f968 EFLAGS: 00000282 [ 263.125381][ C0] RAX: 0000000000000046 RBX: 1ffff920037a1f36 RCX: 0000000000000001 [ 263.125388][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7b4b RDI: ffffffff8bf2b380 [ 263.125396][ C0] RBP: ffffffff8e3c95c0 R08: 0000000000000005 R09: 0000000000000000 [ 263.125404][ C0] R10: 0000000000000000 R11: ffff888031a22ff0 R12: ffff888031a224c0 [ 263.125412][ C0] R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000000 [ 263.125426][ C0] __might_resched+0x473/0x5e0 [ 263.125439][ C0] ? __pfx___might_resched+0x10/0x10 [ 263.125451][ C0] ? ____sys_recvmsg+0x35e/0x6b0 [ 263.125466][ C0] __might_fault+0x83/0x190 [ 263.125480][ C0] _copy_from_user+0x29/0xd0 [ 263.125498][ C0] copy_msghdr_from_user+0x98/0x160 [ 263.125510][ C0] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 263.125524][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 263.125541][ C0] ___sys_recvmsg+0xdb/0x1a0 [ 263.125553][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 263.125570][ C0] ? __pfx___might_resched+0x10/0x10 [ 263.125583][ C0] do_recvmmsg+0x2fe/0x750 [ 263.125597][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 263.125611][ C0] ? do_futex+0x122/0x350 [ 263.125648][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 263.125665][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 263.125679][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 263.125695][ C0] do_syscall_64+0xcd/0xf80 [ 263.125711][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.125723][ C0] RIP: 0033:0x7f541318f749 [ 263.125735][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.125746][ C0] RSP: 002b:00007f5413f70038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 263.125757][ C0] RAX: ffffffffffffffda RBX: 00007f54133e5fa0 RCX: 00007f541318f749 [ 263.125765][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 263.125773][ C0] RBP: 00007f5413213f91 R08: 0000000000000000 R09: 0000000000000000 [ 263.125781][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 263.125788][ C0] R13: 00007f54133e6038 R14: 00007f54133e5fa0 R15: 00007ffef1da87c8 [ 263.125802][ C0] [ 263.125879][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g17261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 263.604823][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=6191 [ 263.612606][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g17261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 263.623956][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 263.633906][ C1] rcu: RCU grace-period kthread stack dump: [ 263.639773][ C1] task:rcu_preempt state:I stack:28320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 263.651677][ C1] Call Trace: [ 263.654938][ C1] [ 263.657856][ C1] ? __schedule+0x10b9/0x6150 [ 263.662521][ C1] __schedule+0x1139/0x6150 [ 263.667016][ C1] ? __lock_acquire+0x436/0x2890 [ 263.671946][ C1] ? __mod_timer+0x8f2/0xd30 [ 263.676533][ C1] ? __pfx___schedule+0x10/0x10 [ 263.681372][ C1] ? find_held_lock+0x2b/0x80 [ 263.686042][ C1] ? schedule+0x2d7/0x3a0 [ 263.690362][ C1] schedule+0xe7/0x3a0 [ 263.694420][ C1] schedule_timeout+0x123/0x290 [ 263.699255][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 263.704612][ C1] ? __pfx_process_timeout+0x10/0x10 [ 263.709885][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 263.715678][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 263.721130][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 263.725889][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 263.731162][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.736352][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 263.741274][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 263.746115][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 263.751910][ C1] rcu_gp_kthread+0x26d/0x380 [ 263.756577][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 263.761760][ C1] ? rcu_is_watching+0x12/0xc0 [ 263.766508][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.771700][ C1] ? __kthread_parkme+0x19e/0x250 [ 263.776710][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 263.781897][ C1] kthread+0x3c5/0x780 [ 263.785954][ C1] ? __pfx_kthread+0x10/0x10 [ 263.790532][ C1] ? rcu_is_watching+0x12/0xc0 [ 263.795284][ C1] ? __pfx_kthread+0x10/0x10 [ 263.799861][ C1] ret_from_fork+0x983/0xb10 [ 263.804441][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 263.809538][ C1] ? __switch_to+0x7af/0x10d0 [ 263.814210][ C1] ? __pfx_kthread+0x10/0x10 [ 263.818791][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.823564][ C1]